This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f-H9S43t2bsv0s_nLJlWN0wiCA.cer File: 2f-H9S43t2bsv0s_nLJlWN0wiCA.cer (raw, json) Hash identifier: 5woslDZ9xKrzp5djHRV/3AH2OpTQzsG0A2xmVWMg7Fw= Subject key identifier: D9:FF:87:F5:2E:37:B7:66:EC:BF:4B:3F:9C:B2:65:58:DD:30:88:20 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CECF2C089D30298231BA8BCE177EBBD Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/32/e2aad8-e212-4828-a5fc-1e7300ccda36/1/2f-H9S43t2bsv0s_nLJlWN0wiCA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/32/e2aad8-e212-4828-a5fc-1e7300ccda36/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:17:42 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 57535 IP: 91.232.210.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:f2:c0:89:d3:02:98:23:1b:a8:bc:e1:77:eb:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d9ff87f52e37b766ecbf4b3f9cb26558dd308820 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:0d:b6:f5:7e:78:15:a6:ac:96:5a:4a:1a:e7: 2e:a8:0a:d4:3d:a5:61:d5:9d:a7:70:30:cb:c9:8e: 16:2a:b0:f7:a6:c4:14:d1:a4:6b:0a:18:8e:9a:8f: ef:3b:fa:29:30:b9:48:05:85:e6:e3:9a:1f:44:77: 83:34:77:de:0d:af:22:69:a9:bb:40:e7:88:b1:50: b8:b0:7a:5a:eb:0e:7c:63:89:ef:39:a8:4a:4e:73: 06:d6:1e:1b:38:d0:70:1d:26:2c:4b:90:11:01:c9: 09:76:e8:28:3d:8d:4a:ba:b7:4d:fa:93:11:0c:bd: 8d:a1:4e:a7:47:1d:ca:30:89:65:87:c4:56:2d:19: 91:1b:ef:b7:f8:50:85:a4:17:77:dc:a9:70:b6:1a: e3:73:a3:da:b9:f7:01:63:4c:5b:25:8c:74:18:0d: 95:50:eb:4f:48:72:9f:1f:40:da:7f:85:4c:ad:be: 6d:90:61:33:85:e7:fc:e5:33:d7:32:8c:f2:58:2c: 23:05:21:ee:7e:b0:1a:91:ae:d4:56:db:e4:ea:48: ce:cb:a0:f3:0e:10:1c:77:7e:ab:a4:f2:ab:2c:69: c8:32:5c:23:2f:8c:99:dd:0c:e1:08:6d:c6:63:45: 93:b4:3a:43:cf:f7:e3:8b:c8:cf:b6:bb:32:87:96: e3:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:FF:87:F5:2E:37:B7:66:EC:BF:4B:3F:9C:B2:65:58:DD:30:88:20 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/e2aad8-e212-4828-a5fc-1e7300ccda36/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/e2aad8-e212-4828-a5fc-1e7300ccda36/1/2f-H9S43t2bsv0s_nLJlWN0wiCA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.232.210.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 57535 Signature Algorithm: sha256WithRSAEncryption 6f:64:91:ad:7d:71:92:c8:5d:d5:f2:1d:7f:05:0a:23:7f:3d: 3b:00:e6:6d:8c:a2:27:19:92:14:76:69:83:19:3e:37:e1:40: 58:0f:42:55:4d:03:d2:50:5e:08:9c:6d:82:20:a1:14:88:58: e9:c0:d3:be:47:22:b7:be:2e:2c:3b:2e:01:de:1b:c0:a4:41: 02:11:69:74:e7:9b:b1:e7:e3:5e:bd:8e:69:2f:bb:dd:23:be: 82:51:46:2c:2b:ea:f3:f0:83:1c:2e:7f:e4:df:78:ff:1e:e8: ba:bb:8f:c5:e1:53:cd:bb:be:06:7a:b0:04:6b:bf:24:5f:fd: 63:9c:4b:4d:30:db:0c:dc:7a:88:6d:76:93:e5:f9:d9:af:3e: 18:88:a8:46:67:b6:7d:2b:0f:9d:e2:66:28:14:39:af:55:c5: 6e:06:80:0b:a2:3d:fe:6b:85:85:fd:0b:50:6d:72:80:cb:24: 60:27:61:2b:66:de:c8:af:75:78:fc:6a:e8:5d:97:67:cb:f7: f0:dd:c7:b3:0f:76:66:5b:b5:ac:c3:c8:8f:0c:76:04:4e:c1: a6:78:49:2b:3d:75:cf:98:7b:11:53:10:69:40:aa:b4:c1:99: bf:29:cf:04:8a:8a:50:b8:ed:5e:bd:59:d0:71:91:99:65:e8: ea:72:ae:27 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt87PLAidMCmCMbqLzhd+u9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOWZmODdmNTJlMzdiNzY2ZWNiZjRiM2Y5Y2IyNjU1OGRkMzA4ODIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtw229X54FaasllpKGucuqArUPaVh 1Z2ncDDLyY4WKrD3psQU0aRrChiOmo/vO/opMLlIBYXm45ofRHeDNHfeDa8iaam7 QOeIsVC4sHpa6w58Y4nvOahKTnMG1h4bONBwHSYsS5ARAckJdugoPY1KurdN+pMR DL2NoU6nRx3KMIllh8RWLRmRG++3+FCFpBd33Klwthrjc6PaufcBY0xbJYx0GA2V UOtPSHKfH0Daf4VMrb5tkGEzhef85TPXMozyWCwjBSHufrAaka7UVtvk6kjOy6Dz DhAcd36rpPKrLGnIMlwjL4yZ3QzhCG3GY0WTtDpDz/fji8jPtrsyh5bjcQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFNn/h/UuN7dm7L9LP5yyZVjdMIggMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMyL2UyYWFk OC1lMjEyLTQ4MjgtYTVmYy0xZTczMDBjY2RhMzYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzIvZTJhYWQ4 LWUyMTItNDgyOC1hNWZjLTFlNzMwMGNjZGEzNi8xLzJmLUg5UzQzdDJic3Ywc19u TEpsV04wd2lDQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQBW+jSMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDgvzANBgkqhkiG9w0BAQsFAAOCAQEAb2SRrX1xkshd1fIdfwUKI389OwDmbYyi JxmSFHZpgxk+N+FAWA9CVU0D0lBeCJxtgiChFIhY6cDTvkcit74uLDsuAd4bwKRB AhFpdOebsefjXr2OaS+73SO+glFGLCvq8/CDHC5/5N94/x7ouruPxeFTzbu+Bnqw BGu/JF/9Y5xLTTDbDNx6iG12k+X52a8+GIioRme2fSsPneJmKBQ5r1XFbgaAC6I9 /muFhf0LUG1ygMskYCdhK2beyK91ePxq6F2XZ8v38N3Hsw92Zlu1rMPIjwx2BE7B pnhJKz11z5h7EVMQaUCqtMGZvynPBIqKULjtXr1Z0HGRmWXo6nKuJw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:25:41 2026 by rpki-client