This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f-eF7m0GYipJZnLyroDkf-2GiA.cer File: 2f-eF7m0GYipJZnLyroDkf-2GiA.cer (raw, json) Hash identifier: eFvQVvnicrypyUsgjgV31zg/XQy/mlf0wPhOQkQxL/E= Subject key identifier: D9:FF:9E:17:B9:B4:19:88:A9:25:99:CB:CA:BA:03:91:FF:B6:1A:20 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019C23EE1CECD246FB4351AC5A75EA3E654D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/07/49d859-610a-4242-8ddf-37a0e474ab15/1/2f-eF7m0GYipJZnLyroDkf-2GiA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/07/49d859-610a-4242-8ddf-37a0e474ab15/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Tue 03 Feb 2026 14:35:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 195.234.64.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:23:ee:1c:ec:d2:46:fb:43:51:ac:5a:75:ea:3e:65:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Feb 3 14:35:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d9ff9e17b9b41988a92599cbcaba0391ffb61a20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:90:5f:8b:8d:24:19:4b:cc:f9:a4:c9:a3:3a: fb:0e:17:e2:20:7e:1b:ee:db:75:d8:e9:ff:b4:68: 31:a7:97:d0:1c:64:5e:23:99:c1:9f:8a:c1:62:12: 88:49:64:c5:60:bc:e4:73:82:c4:04:3e:b0:39:ad: ac:52:8e:71:b5:87:b2:79:68:5a:0b:98:6f:5a:42: 26:97:0c:62:4d:82:cf:6f:3f:5b:88:6c:91:66:0e: 70:5a:ab:a6:7d:a9:99:dc:2f:39:bb:bd:4c:d2:7a: fe:fb:53:2f:ae:9f:05:81:72:9c:3d:69:d1:66:32: 27:6e:69:dd:2a:dc:e9:dc:93:e4:57:33:f3:48:70: fc:0c:b0:1e:63:f3:d4:f1:6f:83:46:e8:0a:ef:a2: f4:7c:12:85:39:4d:4a:8e:38:bb:e1:9f:59:4c:86: 43:1a:8c:bf:c8:33:96:52:5e:a0:b9:71:6f:d6:6b: 19:b2:1a:70:fa:b6:59:66:8f:40:de:41:47:32:5a: f8:ce:82:42:68:1c:28:bb:ec:b9:5d:e8:dc:ce:50: c2:72:9d:e5:25:74:0c:d8:11:86:31:ac:95:62:aa: f6:91:81:bf:61:15:b2:1d:2a:e6:4e:a6:2f:75:b5: 07:79:1f:94:ad:d0:0b:e4:4a:f3:04:62:5a:23:2e: aa:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:FF:9E:17:B9:B4:19:88:A9:25:99:CB:CA:BA:03:91:FF:B6:1A:20 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/49d859-610a-4242-8ddf-37a0e474ab15/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/49d859-610a-4242-8ddf-37a0e474ab15/1/2f-eF7m0GYipJZnLyroDkf-2GiA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.234.64.0/22 Signature Algorithm: sha256WithRSAEncryption 53:fb:e8:9b:51:52:71:ba:cb:2b:87:69:f3:19:8f:f8:54:39: 4a:fa:87:7d:da:37:6e:06:88:c7:38:43:30:d1:a0:4b:dd:23: 5e:8a:2f:da:17:4f:04:1b:5a:aa:a5:12:66:3f:e2:58:83:b9: 8f:25:d0:a9:87:13:7f:b3:a9:ae:71:46:00:ba:52:ec:15:a5: fb:92:04:91:10:94:ef:18:23:5b:3c:10:cf:cb:d6:47:27:43: 8b:30:c2:5d:5c:4c:b1:02:db:2c:a4:af:f8:74:b5:b4:d3:ed: a8:23:da:0f:98:ba:ec:92:f8:fe:98:f5:9e:3a:d3:69:e7:94: 1e:94:88:89:6a:04:74:04:c2:64:e1:8a:89:69:10:91:19:4a: 5d:61:0c:43:12:ed:1d:42:75:8a:76:b2:f7:62:88:e0:aa:dc: b1:c8:db:d3:39:fd:e0:c0:48:57:5a:37:7b:78:4b:5f:2f:55: 2b:32:38:6f:b9:89:a6:b0:c6:72:16:11:68:78:9a:9c:bc:58: 74:59:18:9d:93:22:b1:f7:06:72:99:03:3f:96:24:43:fe:28: f6:0e:55:f6:b3:d6:94:d3:3f:d8:79:a8:93:44:19:87:67:55: 6a:4c:fb:2d:4a:0f:48:fe:4f:73:88:00:3c:fe:60:08:bc:60: b1:3f:8a:c8 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZwj7hzs0kb7Q1GsWnXqPmVNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMjAzMTQzNTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOWZmOWUxN2I5YjQxOTg4YTkyNTk5Y2JjYWJhMDM5MWZmYjYxYTIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA35Bfi40kGUvM+aTJozr7DhfiIH4b 7tt12On/tGgxp5fQHGReI5nBn4rBYhKISWTFYLzkc4LEBD6wOa2sUo5xtYeyeWha C5hvWkImlwxiTYLPbz9biGyRZg5wWqumfamZ3C85u71M0nr++1Mvrp8FgXKcPWnR ZjInbmndKtzp3JPkVzPzSHD8DLAeY/PU8W+DRugK76L0fBKFOU1Kjji74Z9ZTIZD Goy/yDOWUl6guXFv1msZshpw+rZZZo9A3kFHMlr4zoJCaBwou+y5XejczlDCcp3l JXQM2BGGMayVYqr2kYG/YRWyHSrmTqYvdbUHeR+UrdAL5ErzBGJaIy6q8wIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFNn/nhe5tBmIqSWZy8q6A5H/thogMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA3LzQ5ZDg1 OS02MTBhLTQyNDItOGRkZi0zN2EwZTQ3NGFiMTUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDcvNDlkODU5 LTYxMGEtNDI0Mi04ZGRmLTM3YTBlNDc0YWIxNS8xLzJmLWVGN20wR1lpcEpabkx5 cm9Ea2YtMkdpQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCw+pAMA0GCSqGSIb3DQEBCwUAA4IBAQBT++ib UVJxussrh2nzGY/4VDlK+od92jduBojHOEMw0aBL3SNeii/aF08EG1qqpRJmP+JY g7mPJdCphxN/s6mucUYAulLsFaX7kgSREJTvGCNbPBDPy9ZHJ0OLMMJdXEyxAtss pK/4dLW00+2oI9oPmLrskvj+mPWeOtNp55QelIiJagR0BMJk4YqJaRCRGUpdYQxD Eu0dQnWKdrL3YojgqtyxyNvTOf3gwEhXWjd7eEtfL1UrMjhvuYmmsMZyFhFoeJqc vFh0WRidkyKx9wZymQM/liRD/ij2DlX2s9aU0z/YeaiTRBmHZ1VqTPstSg9I/k9z iAA8/mAIvGCxP4rI -----END CERTIFICATE-----Generated at Tue Feb 10 00:29:55 2026 by rpki-client