This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2fwL7GDQus4YiWd72buQGQzE_SI.cer File: 2fwL7GDQus4YiWd72buQGQzE_SI.cer (raw, json) Hash identifier: 8gedFkjz8bp4BeiKc32jvPJxMvMJOilrRA2i1C/WV6A= Subject key identifier: D9:FC:0B:EC:60:D0:BA:CE:18:89:67:7B:D9:BB:90:19:0C:C4:FD:22 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F8354855F6271563C0FB99D2F2EF6AB Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:21:11 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 25091 AS: 50327 AS: 51530 AS: 58326 IP: 5.144.32.0/21 IP: 46.20.240.0/20 IP: 85.8.128.0/24 IP: 91.106.208.0/21 IP: 91.247.176.0/24 IP: 185.1.205.0/24 IP: 185.60.52.0/22 IP: 185.66.160.0/22 IP: 185.177.88.0/22 IP: 212.102.126.0/24 IP: 2001:7f8:111::/48 IP: 2a01:80c0::/32 IP: 2a02:2528::/29 IP: 2a0c:c600::/29 IP: 2a0f:c740::/29 IP: 2a11:cac0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:54:85:5f:62:71:56:3c:0f:b9:9d:2f:2e:f6:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:21:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d9fc0bec60d0bace1889677bd9bb90190cc4fd22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:1d:45:86:b3:33:88:db:75:13:86:bc:8f:29: 10:d8:f1:2a:82:b9:4a:5c:42:7b:a1:33:49:f8:a4: bb:49:16:b3:f5:13:94:53:41:7e:69:04:ac:25:d7: aa:48:17:fa:4f:ae:28:f7:8b:a2:64:57:ba:0d:16: 35:43:f1:b4:41:8d:68:40:c4:9b:4b:7c:70:df:b2: a6:62:cf:f9:f2:f1:3a:87:4b:c1:67:45:b1:a3:26: 93:e5:bc:51:03:64:bf:75:5f:84:af:71:d5:f3:d1: ab:89:09:10:f7:0c:3e:b8:91:d6:13:c5:89:21:d2: df:97:c2:ec:38:f0:72:3d:18:93:3c:13:c6:eb:e6: 70:85:8e:99:ac:87:a8:9e:d2:9a:22:64:4a:67:d8: 85:d6:09:4e:3a:b8:c5:87:70:94:33:36:2d:da:f5: 74:45:f9:69:91:56:61:ed:96:b3:21:72:7d:0b:41: 67:6a:00:29:5a:86:d3:17:3e:ef:93:d4:a6:5b:bf: dd:a3:c3:3d:1e:ba:4b:e7:14:12:1e:16:a5:3c:9e: 51:23:36:42:d5:e9:e6:31:6e:d7:a3:55:78:5b:1a: c9:ed:d0:7d:51:45:a0:a5:2d:03:5f:67:59:20:67: 10:be:2b:fc:16:44:6f:7a:5a:d6:fc:e5:4d:b8:53: 2c:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:FC:0B:EC:60:D0:BA:CE:18:89:67:7B:D9:BB:90:19:0C:C4:FD:22 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.144.32.0/21 46.20.240.0/20 85.8.128.0/24 91.106.208.0/21 91.247.176.0/24 185.1.205.0/24 185.60.52.0/22 185.66.160.0/22 185.177.88.0/22 212.102.126.0/24 IPv6: 2001:7f8:111::/48 2a01:80c0::/32 2a02:2528::/29 2a0c:c600::/29 2a0f:c740::/29 2a11:cac0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 25091 50327 51530 58326 Signature Algorithm: sha256WithRSAEncryption 2f:fe:53:34:90:d6:a8:af:9e:40:17:8e:a9:76:a1:a8:b6:63: 22:99:f2:b4:ca:39:02:39:29:64:c4:c6:0d:d5:e7:61:e0:16: e7:82:14:03:34:39:e0:6f:83:72:8f:48:c2:70:3d:a4:f6:8f: 70:43:c9:83:81:06:09:96:30:af:c2:7a:a9:49:ee:59:4a:30: 50:75:2c:88:5f:81:5b:53:99:8e:54:eb:13:12:9c:0a:d3:eb: 25:59:1e:c2:ce:ce:af:01:19:43:8f:a0:f5:82:b2:8a:02:90: 62:ee:97:bf:41:dc:02:17:ef:99:fb:da:e9:59:85:cb:21:5e: 1a:56:d7:22:c7:bc:9b:f1:11:b6:c9:df:31:17:77:3f:78:76: 2c:7b:76:69:34:c7:89:36:28:da:66:4b:00:4b:be:58:2a:ed: c5:38:b3:41:e5:a3:aa:32:5c:4d:d4:88:60:0d:35:15:f8:a7: 93:0e:38:c1:90:bf:76:0b:f7:9d:01:78:db:03:b6:81:4c:5e: 20:03:49:b5:35:e0:5d:84:94:65:a8:fb:42:ac:d2:5d:aa:6d: 37:30:d2:88:9a:3a:36:c7:da:0d:f8:4a:fd:e9:d1:9c:a4:86: 24:e1:c5:0f:9b:83:9b:ef:02:00:2c:1c:0b:c2:13:bc:81:e5: da:ae:75:c9 -----BEGIN CERTIFICATE----- MIIGDTCCBPWgAwIBAgISAZt/g1SFX2JxVjwPuZ0vLvarMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOWZjMGJlYzYwZDBiYWNlMTg4OTY3N2JkOWJiOTAxOTBjYzRmZDIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApB1FhrMziNt1E4a8jykQ2PEqgrlK XEJ7oTNJ+KS7SRaz9ROUU0F+aQSsJdeqSBf6T64o94uiZFe6DRY1Q/G0QY1oQMSb S3xw37KmYs/58vE6h0vBZ0WxoyaT5bxRA2S/dV+Er3HV89GriQkQ9ww+uJHWE8WJ IdLfl8LsOPByPRiTPBPG6+ZwhY6ZrIeontKaImRKZ9iF1glOOrjFh3CUMzYt2vV0 RflpkVZh7ZazIXJ9C0FnagApWobTFz7vk9SmW7/do8M9HrpL5xQSHhalPJ5RIzZC 1enmMW7Xo1V4WxrJ7dB9UUWgpS0DX2dZIGcQviv8FkRvelrW/OVNuFMsDQIDAQAB o4IDGTCCAxUwHQYDVR0OBBYEFNn8C+xg0LrOGIlne9m7kBkMxP0iMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VhL2IwZDZl Ni0yZWQ3LTQ5MjgtYWQ2OS0zNDY5MDM0ZmE0NDEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWEvYjBkNmU2 LTJlZDctNDkyOC1hZDY5LTM0NjkwMzRmYTQ0MS8xLzJmd0w3R0RRdXM0WWlXZDcy YnVRR1F6RV9TSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGJBggrBgEF BQcBBwEB/wR6MHgwQgQCAAEwPAMEAwWQIAMEBC4U8AMEAFUIgAMEA1tq0AMEAFv3 sAMEALkBzQMEArk8NAMEArlCoAMEArmxWAMEANRmfjAyBAIAAjAsAwcAIAEH+AER AwUAKgGAwAMFAyoCJSgDBQMqDMYAAwUDKg/HQAMFAyoRysAwKAYIKwYBBQUHAQgB Af8EGTAXoBUwEwICYgMCAwDElwIDAMlKAgMA49YwDQYJKoZIhvcNAQELBQADggEB AC/+UzSQ1qivnkAXjql2oai2YyKZ8rTKOQI5KWTExg3V52HgFueCFAM0OeBvg3KP SMJwPaT2j3BDyYOBBgmWMK/CeqlJ7llKMFB1LIhfgVtTmY5U6xMSnArT6yVZHsLO zq8BGUOPoPWCsooCkGLul79B3AIX75n72ulZhcshXhpW1yLHvJvxEbbJ3zEXdz94 dix7dmk0x4k2KNpmSwBLvlgq7cU4s0Hlo6oyXE3UiGANNRX4p5MOOMGQv3YL950B eNsDtoFMXiADSbU14F2ElGWo+0Ks0l2qbTcw0oiaOjbH2g34Sv3p0ZykhiThxQ+b g5vvAgAsHAvCE7yB5dqudck= -----END CERTIFICATE-----Generated at Sat Jan 10 06:55:57 2026 by rpki-client