This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2gBH2sju-JRNeMG3omhowD4s5GY.cer File: 2gBH2sju-JRNeMG3omhowD4s5GY.cer (raw, json) Hash identifier: z3jp9Ugth/XC/Paiovt1Ru26VMrcCP4sVtMtvQwbgBU= Subject key identifier: DA:00:47:DA:C8:EE:F8:94:4D:78:C1:B7:A2:68:68:C0:3E:2C:E4:66 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7910166F2FF52C3E03624E22C9E12EFE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:17:36 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 60451 IP: 185.30.180.0/22 IP: 185.135.92.0/22 IP: 2a06:f280::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:16:6f:2f:f5:2c:3e:03:62:4e:22:c9:e1:2e:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=da0047dac8eef8944d78c1b7a26868c03e2ce466 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:0b:e9:d8:98:b8:6a:bf:3e:b1:29:bc:a5:d9: f1:31:cf:85:fd:3b:5f:6d:31:b5:ab:fe:19:d6:c0: c0:de:69:d9:b8:d1:20:a2:cb:f1:79:c0:f8:81:3e: f1:60:a9:2c:73:14:8e:67:d2:46:a0:23:55:49:1e: 42:56:9b:34:bd:bc:cd:3b:bb:3b:b4:0f:5f:e2:5b: 48:1b:f6:c6:ff:7c:d3:31:01:0e:89:71:29:86:1a: 12:dc:88:91:45:38:90:36:56:27:17:1c:08:3f:ae: 8e:47:bc:e4:eb:41:34:57:2a:40:cb:15:fb:32:4c: 62:bf:46:4e:36:e3:b9:4d:40:ff:02:f3:99:de:f7: 7a:2c:f9:3b:5b:0c:b3:7b:4d:16:58:e7:e6:8b:ed: 74:c6:25:37:98:fa:2c:1b:13:2b:7b:e6:94:b1:94: 1c:89:aa:25:36:1a:22:38:44:a5:a8:fa:fd:15:9f: a5:a7:a1:8a:e1:2d:71:d6:5e:b7:93:25:a2:d4:73: 49:98:3a:1f:ba:68:90:5e:56:9e:7e:e2:b4:db:57: be:3b:5e:52:d9:30:75:d1:fb:33:be:30:14:c7:e4: 4e:70:96:c0:61:23:55:3b:01:95:7c:8b:ab:c2:be: c5:9b:30:62:09:d6:82:5e:22:e0:a9:4e:fb:83:9f: 54:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:00:47:DA:C8:EE:F8:94:4D:78:C1:B7:A2:68:68:C0:3E:2C:E4:66 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.30.180.0/22 185.135.92.0/22 IPv6: 2a06:f280::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 60451 Signature Algorithm: sha256WithRSAEncryption 28:c5:70:5d:8f:4f:20:cd:88:ce:28:44:61:ce:45:c5:e6:c6: d5:1d:2b:98:de:93:09:e3:80:6d:40:4d:bb:c0:eb:23:1f:cf: 5e:b9:be:d5:db:58:da:28:a3:a9:c2:21:34:df:c3:a8:c6:e7: 56:7d:bd:af:7a:a3:60:e5:1f:06:fd:da:1c:2d:01:44:3a:29: ef:75:cf:68:09:e4:19:2e:30:aa:87:67:0c:c4:bd:77:23:dd: 06:76:00:ba:c5:aa:6f:23:7d:e4:94:62:3f:c2:08:e0:78:f1: 1b:02:45:73:32:70:29:22:c5:cb:d7:87:2f:98:cc:02:58:48: 55:1e:42:3d:14:cf:aa:59:f5:91:42:9c:34:e1:dc:2b:a4:4d: a5:7a:0e:6c:f2:8d:56:b0:ab:9b:bf:8e:77:2b:53:00:6b:e0: e6:5c:3d:23:57:83:b7:35:39:eb:2e:be:68:0e:60:42:7f:59: 26:ab:5e:65:9c:12:27:02:2a:fd:fe:b5:5e:c6:e9:f5:65:6a: 8d:9f:9b:d8:71:c9:0b:ed:c5:13:3f:be:e0:88:db:2c:8e:82: 42:62:70:43:7a:0b:53:1e:73:8c:da:a8:85:a7:0b:9b:ed:6d: 38:ec:f9:5d:8e:27:b1:0c:23:22:cd:0a:ad:ce:77:79:f0:dd: 85:96:2d:3c -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt5EBZvL/UsPgNiTiLJ4S7+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYTAwNDdkYWM4ZWVmODk0NGQ3OGMxYjdhMjY4NjhjMDNlMmNlNDY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+Avp2Ji4ar8+sSm8pdnxMc+F/Ttf bTG1q/4Z1sDA3mnZuNEgosvxecD4gT7xYKkscxSOZ9JGoCNVSR5CVps0vbzNO7s7 tA9f4ltIG/bG/3zTMQEOiXEphhoS3IiRRTiQNlYnFxwIP66OR7zk60E0VypAyxX7 Mkxiv0ZONuO5TUD/AvOZ3vd6LPk7Wwyze00WWOfmi+10xiU3mPosGxMre+aUsZQc iaolNhoiOESlqPr9FZ+lp6GK4S1x1l63kyWi1HNJmDofumiQXlaefuK021e+O15S 2TB10fszvjAUx+ROcJbAYSNVOwGVfIurwr7FmzBiCdaCXiLgqU77g59UpwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFNoAR9rI7viUTXjBt6JoaMA+LORmMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JjLzc3OTU5 YS00MWRlLTQ2YmUtYTVmMS1hYzljOGE1MGYyNGUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmMvNzc5NTlh LTQxZGUtNDZiZS1hNWYxLWFjOWM4YTUwZjI0ZS8xLzJnQkgyc2p1LUpSTmVNRzNv bWhvd0Q0czVHWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCuR60AwQCuYdcMA0EAgACMAcDBQMqBvKAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwDsIzANBgkqhkiG9w0BAQsFAAOCAQEAKMVw XY9PIM2IzihEYc5FxebG1R0rmN6TCeOAbUBNu8DrIx/PXrm+1dtY2iijqcIhNN/D qMbnVn29r3qjYOUfBv3aHC0BRDop73XPaAnkGS4wqodnDMS9dyPdBnYAusWqbyN9 5JRiP8II4HjxGwJFczJwKSLFy9eHL5jMAlhIVR5CPRTPqln1kUKcNOHcK6RNpXoO bPKNVrCrm7+OdytTAGvg5lw9I1eDtzU56y6+aA5gQn9ZJqteZZwSJwIq/f61Xsbp 9WVqjZ+b2HHJC+3FEz++4IjbLI6CQmJwQ3oLUx5zjNqohacLm+1tOOz5XY4nsQwj Is0Krc53efDdhZYtPA== -----END CERTIFICATE-----Generated at Mon Feb 9 15:04:33 2026 by rpki-client