This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2gJLnGPbXBoc9MVYHb5bOBy5UIc.cer File: 2gJLnGPbXBoc9MVYHb5bOBy5UIc.cer (raw, json) Hash identifier: kNh0vn6vvAXfKB8xb52gIjIu8Bs7lafD0MfGTTqFWc0= Subject key identifier: DA:02:4B:9C:63:DB:5C:1A:1C:F4:C5:58:1D:BE:5B:38:1C:B9:50:87 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA6FC91F9F5E4391646531C57F6C1D4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:20:31 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 35703 AS: 39787 IP: 5.44.64.0/21 IP: 77.75.208.0/21 IP: 193.160.156.0/23 IP: 193.227.204.0/23 IP: 195.5.112.0/23 IP: 2a00:e48::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:fc:91:f9:f5:e4:39:16:46:53:1c:57:f6:c1:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:20:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=da024b9c63db5c1a1cf4c5581dbe5b381cb95087 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:1c:a5:37:7d:0c:2b:98:33:f0:e5:6e:f9:fe: 8c:3b:00:e8:66:11:d9:7a:08:69:2d:90:b8:34:77: fe:e3:cc:67:92:5d:50:4c:bd:bd:a7:b0:a2:a8:f9: 50:2b:36:88:49:58:b9:12:09:be:0b:0a:ce:0d:95: c8:f9:4e:76:fe:af:bc:24:49:a9:95:68:4d:9d:1f: df:db:34:98:c5:5e:75:57:83:00:04:61:87:b1:b4: b7:6e:0a:6c:65:78:70:fe:d5:78:6f:25:65:00:cd: 0a:1f:53:1b:a0:bf:bc:09:c5:cb:a3:6a:54:75:d7: 87:67:e1:31:e9:a1:b3:e0:93:5f:e5:1f:8c:43:3a: 7d:2f:8c:a2:e0:eb:26:a8:c9:42:d9:78:83:6f:f8: 4e:ec:67:02:da:8b:fd:a9:31:e7:65:e0:06:9c:d9: bf:23:e6:53:bf:32:9d:07:14:86:46:c2:9c:a1:b2: 21:80:e8:b5:75:76:92:cc:b8:a2:6a:11:e4:9f:f7: 84:3b:36:54:43:d2:8b:f4:9f:1b:a3:54:3a:2d:16: f0:03:73:6d:f5:44:8a:fe:95:d9:e2:a5:81:ca:55: e6:8e:2f:d3:05:1b:90:bb:d3:63:e9:d5:1e:f7:76: ad:61:ba:c9:9c:06:25:6d:a9:2c:f7:43:cd:53:96: 52:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:02:4B:9C:63:DB:5C:1A:1C:F4:C5:58:1D:BE:5B:38:1C:B9:50:87 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.44.64.0/21 77.75.208.0/21 193.160.156.0/23 193.227.204.0/23 195.5.112.0/23 IPv6: 2a00:e48::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 35703 39787 Signature Algorithm: sha256WithRSAEncryption 2b:56:a2:80:04:0a:62:ae:cc:6b:7c:04:6b:b3:3c:79:87:63: 8d:5f:29:d3:f2:47:10:db:af:a7:02:df:7e:3a:f0:3e:e0:36: 97:5b:89:9c:8a:2b:6c:68:c7:35:86:a7:a0:f5:f7:01:94:2a: 04:d8:57:b9:3b:8c:50:c6:29:68:9e:c3:31:5d:45:d0:12:a3: 39:bc:bf:6c:4b:5a:50:2b:0a:97:8f:36:c7:be:4e:b8:77:fd: 0d:8a:58:b4:73:d1:a9:55:74:66:03:64:fa:de:77:e3:51:7a: b1:7f:96:e3:c1:28:0d:81:a5:17:8f:21:41:f3:50:85:aa:30: 27:5c:e6:5b:b2:62:9b:6c:09:dc:c6:8c:a8:7c:96:5a:31:52: de:09:d5:02:22:20:bb:f4:01:b5:a3:17:5c:b4:34:ed:fd:01: e0:de:78:02:76:c9:7c:5b:e2:50:ea:c3:db:cf:bb:3c:c2:4b: db:62:bf:e2:a4:c9:f0:0c:93:6a:a0:57:f4:a1:ab:62:54:06: 98:c0:2f:9e:e2:1d:49:f7:72:56:fc:91:e1:b8:11:fc:f4:43: cf:41:89:e7:ed:fa:8e:b8:2a:fa:09:5d:47:98:93:33:ef:1d: 0f:c9:83:ab:d7:1f:4b:2d:13:79:e7:28:82:07:dd:98:f2:10: 09:df:af:f7 -----BEGIN CERTIFICATE----- MIIFwDCCBKigAwIBAgISAZt+pvyR+fXkORZGUxxX9sHUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIyMDMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYTAyNGI5YzYzZGI1YzFhMWNmNGM1NTgxZGJlNWIzODFjYjk1MDg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxylN30MK5gz8OVu+f6MOwDoZhHZ eghpLZC4NHf+48xnkl1QTL29p7CiqPlQKzaISVi5Egm+CwrODZXI+U52/q+8JEmp lWhNnR/f2zSYxV51V4MABGGHsbS3bgpsZXhw/tV4byVlAM0KH1MboL+8CcXLo2pU ddeHZ+Ex6aGz4JNf5R+MQzp9L4yi4OsmqMlC2XiDb/hO7GcC2ov9qTHnZeAGnNm/ I+ZTvzKdBxSGRsKcobIhgOi1dXaSzLiiahHkn/eEOzZUQ9KL9J8bo1Q6LRbwA3Nt 9USK/pXZ4qWBylXmji/TBRuQu9Nj6dUe93atYbrJnAYlbaks90PNU5ZSxQIDAQAB o4ICzDCCAsgwHQYDVR0OBBYEFNoCS5xj21waHPTFWB2+WzgcuVCHMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMwLzVkN2Nk YS0wYTk4LTQzYWMtOTEzNi03MTJiMWE3OTY4ZTYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzAvNWQ3Y2Rh LTBhOTgtNDNhYy05MTM2LTcxMmIxYTc5NjhlNi8xLzJnSkxuR1BiWEJvYzlNVllI YjViT0J5NVVJYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUF BwEHAQH/BDcwNTAkBAIAATAeAwQDBSxAAwQDTUvQAwQBwaCcAwQBwePMAwQBwwVw MA0EAgACMAcDBQAqAA5IMB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwCLdwIDAJtr MA0GCSqGSIb3DQEBCwUAA4IBAQArVqKABApirsxrfARrszx5h2ONXynT8kcQ26+n At9+OvA+4DaXW4mciitsaMc1hqeg9fcBlCoE2Fe5O4xQxilonsMxXUXQEqM5vL9s S1pQKwqXjzbHvk64d/0Nili0c9GpVXRmA2T63nfjUXqxf5bjwSgNgaUXjyFB81CF qjAnXOZbsmKbbAncxoyofJZaMVLeCdUCIiC79AG1oxdctDTt/QHg3ngCdsl8W+JQ 6sPbz7s8wkvbYr/ipMnwDJNqoFf0oatiVAaYwC+e4h1J93JW/JHhuBH89EPPQYnn 7fqOuCr6CV1HmJMz7x0PyYOr1x9LLRN55yiCB92Y8hAJ36/3 -----END CERTIFICATE-----Generated at Mon Feb 9 15:02:59 2026 by rpki-client