This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2g_9vJMxeNehu_mWCOOpXU3uiuY.cer File: 2g_9vJMxeNehu_mWCOOpXU3uiuY.cer (raw, json) Hash identifier: p3yor7xsBRxSmjd3XD+eyfJeVBbMZBEMWsTfjeZafnI= Subject key identifier: DA:0F:FD:BC:93:31:78:D7:A1:BB:F9:96:08:E3:A9:5D:4D:EE:8A:E6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA542CA0064E622F1C4A88F03192DBD Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:18:38 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 47803 IP: 185.130.192.0/24 IP: 2a12:47c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:42:ca:00:64:e6:22:f1:c4:a8:8f:03:19:2d:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=da0ffdbc933178d7a1bbf99608e3a95d4dee8ae6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:19:31:20:27:7c:ab:1e:61:20:5e:b8:e3:8d: 0b:1f:51:4e:15:e6:52:b4:48:e0:56:07:8a:cc:13: ec:05:03:94:60:dc:b3:1a:66:ee:43:e6:b4:d7:eb: 1d:2d:6e:c6:5f:6d:3d:6f:9b:8b:a9:18:84:48:d6: f7:1b:27:c2:4c:50:4b:34:a8:e2:46:d5:d1:8a:43: 86:15:1a:f6:47:ae:0d:ee:a5:12:54:02:4a:6a:1a: 10:b4:18:e8:cd:87:37:ca:ac:ff:8c:e3:c5:e2:7b: 74:4f:d9:94:88:ca:52:fa:9b:fa:50:ff:16:48:ca: 28:91:ab:38:a6:5d:13:c5:73:e8:f8:69:a4:50:7c: 4f:fa:a4:26:99:16:6b:fb:11:1a:2f:ea:b1:12:5c: a4:57:d9:e8:9b:03:b9:3d:b9:6d:00:41:bd:0e:81: f7:f0:ba:e3:ef:09:af:26:eb:39:21:f7:c9:b0:95: 1d:69:4f:3b:b3:1b:55:9a:74:71:f2:a9:1c:9f:e6: 77:c5:74:78:55:fc:cc:8d:9c:9b:80:fd:37:67:5b: a9:63:e1:e4:e2:aa:c4:10:ba:df:b8:66:0f:5f:09: d9:2d:9e:18:a7:3e:08:2f:0b:e0:d6:35:1a:5e:e5: 0d:18:e3:aa:34:f8:e2:fe:8f:9a:c3:2a:a2:b6:d1: e6:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:0F:FD:BC:93:31:78:D7:A1:BB:F9:96:08:E3:A9:5D:4D:EE:8A:E6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.130.192.0/24 IPv6: 2a12:47c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 47803 Signature Algorithm: sha256WithRSAEncryption 82:cf:ad:d4:f7:59:ef:1a:88:5f:9b:0c:a7:f7:f1:ba:92:8d: f9:46:46:06:fe:f3:62:8a:61:0b:55:7e:65:a7:10:f3:98:c9: 67:c4:9d:21:84:62:93:d8:9c:f3:c6:3c:ac:74:e3:7f:77:92: 73:83:6f:98:2d:81:8c:3e:9d:3b:89:63:50:77:fe:86:2d:f8: d4:b5:30:5a:17:27:fc:22:01:90:fd:1b:37:42:38:2b:38:9b: ad:2b:51:f1:bf:eb:6f:49:8d:2f:3c:cf:8e:bc:19:b2:ce:76: 3b:ea:c1:fb:c8:6b:96:22:a2:a9:7b:3c:9e:41:27:bc:07:7e: 78:88:cc:7d:68:aa:80:47:b1:3b:fd:83:e4:94:8a:cf:fe:4a: ae:c3:ef:e2:37:c4:9c:cc:90:35:35:b6:08:45:70:ed:95:37: a2:4f:5e:76:a1:4b:57:f1:67:09:a4:cd:e5:4a:a1:f3:8b:59: 60:5e:43:30:68:5d:1a:5c:74:f0:35:af:32:c5:2f:f0:2a:3c: ad:cf:e9:32:d1:23:3f:86:00:d5:80:a3:3f:e9:49:7f:99:6b: bc:07:ad:ae:a5:98:96:90:3c:5d:72:b0:4d:e3:6f:5d:ed:ad: d9:04:3f:bd:c9:87:e0:fc:d4:42:22:17:a9:9c:bc:5b:6b:0c: 41:30:a4:97 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt+pULKAGTmIvHEqI8DGS29MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYTBmZmRiYzkzMzE3OGQ3YTFiYmY5OTYwOGUzYTk1ZDRkZWU4YWU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhkxICd8qx5hIF64440LH1FOFeZS tEjgVgeKzBPsBQOUYNyzGmbuQ+a01+sdLW7GX209b5uLqRiESNb3GyfCTFBLNKji RtXRikOGFRr2R64N7qUSVAJKahoQtBjozYc3yqz/jOPF4nt0T9mUiMpS+pv6UP8W SMookas4pl0TxXPo+GmkUHxP+qQmmRZr+xEaL+qxElykV9nomwO5PbltAEG9DoH3 8Lrj7wmvJus5IffJsJUdaU87sxtVmnRx8qkcn+Z3xXR4VfzMjZybgP03Z1upY+Hk 4qrEELrfuGYPXwnZLZ4Ypz4ILwvg1jUaXuUNGOOqNPji/o+awyqittHmFQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFNoP/byTMXjXobv5lgjjqV1N7ormMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQxL2VmYmVk OC05ZmYwLTQ0NTUtYTA3ZS0zY2FkMzcwNjc0MDUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDEvZWZiZWQ4 LTlmZjAtNDQ1NS1hMDdlLTNjYWQzNzA2NzQwNS8xLzJnXzl2Sk14ZU5laHVfbVdD T09wWFUzdWl1WS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAuYLAMA0EAgACMAcDBQMqEkfAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwC6uzANBgkqhkiG9w0BAQsFAAOCAQEAgs+t1PdZ7xqI X5sMp/fxupKN+UZGBv7zYophC1V+ZacQ85jJZ8SdIYRik9ic88Y8rHTjf3eSc4Nv mC2BjD6dO4ljUHf+hi341LUwWhcn/CIBkP0bN0I4KzibrStR8b/rb0mNLzzPjrwZ ss52O+rB+8hrliKiqXs8nkEnvAd+eIjMfWiqgEexO/2D5JSKz/5KrsPv4jfEnMyQ NTW2CEVw7ZU3ok9edqFLV/FnCaTN5Uqh84tZYF5DMGhdGlx08DWvMsUv8Co8rc/p MtEjP4YA1YCjP+lJf5lrvAetrqWYlpA8XXKwTeNvXe2t2QQ/vcmH4PzUQiIXqZy8 W2sMQTCklw== -----END CERTIFICATE-----Generated at Mon Jan 26 22:12:13 2026 by rpki-client