This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2ggpHPxyjQF2DsQngQlqxrTHSl0.cer File: 2ggpHPxyjQF2DsQngQlqxrTHSl0.cer (raw, json) Hash identifier: uvefvumXb7lYfSH9a2Mn884Ij26A1rNEwgHxvEJhbTs= Subject key identifier: DA:08:29:1C:FC:72:8D:01:76:0E:C4:27:81:09:6A:C6:B4:C7:4A:5D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5C1EFB968323416D56856D2D046324 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d8/44dac0-167a-4993-b9a8-b05cffb187fa/1/2ggpHPxyjQF2DsQngQlqxrTHSl0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d8/44dac0-167a-4993-b9a8-b05cffb187fa/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:19:07 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 25049 IP: 193.5.128.0/20 IP: 193.36.75.0/24 IP: 193.36.87.0/24 IP: 193.36.152.0 -- 193.36.161.255 IP: 193.46.92.0 -- 193.46.99.255 IP: 193.177.152.0/21 IP: 193.188.134.0/26 IP: 194.13.32.0/19 IP: 194.33.144.0 -- 194.33.148.255 IP: 194.34.16.0 -- 194.34.55.255 IP: 194.37.68.0/22 IP: 194.53.96.0/21 IP: 194.104.150.0/23 IP: 2a00:9cc0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:1e:fb:96:83:23:41:6d:56:85:6d:2d:04:63:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=da08291cfc728d01760ec42781096ac6b4c74a5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:fb:14:52:1b:0f:03:3b:49:d8:13:67:7c:cd: 3c:8f:74:5a:5a:16:0c:b8:39:7d:af:29:e8:c7:46: 7c:d4:9d:10:bf:52:2d:f2:4c:79:f7:f2:f5:e0:d8: f1:7b:7b:22:0d:ed:e3:45:d0:64:88:fe:c7:85:1a: 02:2a:e5:db:76:82:a5:79:9f:8e:de:3c:d3:7f:16: 91:97:d7:26:06:a5:94:28:56:2a:f9:76:fb:75:f7: 4f:04:3a:1e:57:33:d0:9f:39:32:40:86:30:a1:cb: 77:fd:53:f1:f2:7b:a6:d5:0d:7a:17:a1:7c:cf:57: 07:75:f7:40:29:12:f7:3a:26:7a:73:bd:6f:c4:51: 28:4b:80:a6:f5:3f:86:9a:2a:fe:20:8a:a6:72:60: 8c:72:01:bc:4e:da:69:45:f4:6f:31:bc:16:0f:6c: 63:cc:73:78:74:56:ee:72:56:a5:cb:ec:c1:77:65: 84:2d:8d:3c:33:6e:93:aa:d8:8d:ad:3e:5e:ba:ca: 1a:51:f7:fc:f0:75:b2:4c:23:71:3b:9f:c8:be:89: 3c:ac:7b:9d:ca:2b:0b:8f:03:16:84:7e:6e:a6:73: 23:d5:de:91:8c:bb:4e:11:e5:ea:37:37:22:dd:10: bc:0e:d9:dd:8d:15:fb:c7:b0:d1:0e:85:82:47:d1: 4d:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:08:29:1C:FC:72:8D:01:76:0E:C4:27:81:09:6A:C6:B4:C7:4A:5D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/44dac0-167a-4993-b9a8-b05cffb187fa/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/44dac0-167a-4993-b9a8-b05cffb187fa/1/2ggpHPxyjQF2DsQngQlqxrTHSl0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.5.128.0/20 193.36.75.0/24 193.36.87.0/24 193.36.152.0-193.36.161.255 193.46.92.0-193.46.99.255 193.177.152.0/21 193.188.134.0/26 194.13.32.0/19 194.33.144.0-194.33.148.255 194.34.16.0-194.34.55.255 194.37.68.0/22 194.53.96.0/21 194.104.150.0/23 IPv6: 2a00:9cc0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 25049 Signature Algorithm: sha256WithRSAEncryption 3f:2a:af:9e:86:28:6c:7a:08:d3:74:95:2f:75:d1:dc:01:ae: d5:54:d3:25:f4:6d:76:4b:7f:64:9b:a2:1c:5e:5e:0d:bf:89: 49:19:75:aa:64:29:e2:e0:0f:a6:33:a7:7a:0b:3d:e8:e7:83: d2:9e:ad:cf:5f:5e:88:48:df:e1:58:30:95:46:35:1f:9d:2d: 2f:38:60:34:b0:3b:42:89:5b:31:76:91:60:f6:b8:2e:a2:30: 54:24:27:f9:42:77:4c:7a:9c:ac:9c:06:db:5b:e5:20:3d:5c: d8:93:f2:97:ac:26:7e:bd:af:ff:c5:82:c2:b4:0a:e3:be:b2: 28:0d:bf:ff:3a:30:a5:04:a6:a5:41:09:83:59:b2:39:fa:22: e1:f8:e6:a4:0a:04:23:bd:81:74:b2:9f:75:bf:c4:f1:3b:fc: 18:9c:23:fc:f1:32:ec:8c:ba:cb:0b:3f:62:35:20:b1:93:7f: 4f:03:2c:2d:8c:40:06:24:4a:26:15:f7:a9:f0:5b:22:da:47: f2:fa:e4:59:3a:05:1a:cd:a9:6b:d9:15:65:6a:58:41:9a:ff: fe:43:76:f9:34:74:2a:b4:b3:5f:ac:fa:8c:cb:ab:1f:fc:0b: 99:41:4c:34:cf:a2:46:75:70:c7:ba:ad:3d:3b:98:0a:cf:e2: d2:9e:43:fd -----BEGIN CERTIFICATE----- MIIGDjCCBPagAwIBAgISAZt9XB77loMjQW1WhW0tBGMkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYTA4MjkxY2ZjNzI4ZDAxNzYwZWM0Mjc4MTA5NmFjNmI0Yzc0YTVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPsUUhsPAztJ2BNnfM08j3RaWhYM uDl9rynox0Z81J0Qv1It8kx59/L14Njxe3siDe3jRdBkiP7HhRoCKuXbdoKleZ+O 3jzTfxaRl9cmBqWUKFYq+Xb7dfdPBDoeVzPQnzkyQIYwoct3/VPx8num1Q16F6F8 z1cHdfdAKRL3OiZ6c71vxFEoS4Cm9T+Gmir+IIqmcmCMcgG8TtppRfRvMbwWD2xj zHN4dFbuclaly+zBd2WELY08M26TqtiNrT5eusoaUff88HWyTCNxO5/Ivok8rHud yisLjwMWhH5upnMj1d6RjLtOEeXqNzci3RC8DtndjRX7x7DRDoWCR9FNBQIDAQAB o4IDGjCCAxYwHQYDVR0OBBYEFNoIKRz8co0Bdg7EJ4EJasa0x0pdMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q4LzQ0ZGFj MC0xNjdhLTQ5OTMtYjlhOC1iMDVjZmZiMTg3ZmEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDgvNDRkYWMw LTE2N2EtNDk5My1iOWE4LWIwNWNmZmIxODdmYS8xLzJnZ3BIUHh5alFGMkRzUW5n UWxxeHJUSFNsMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGZBggrBgEF BQcBBwEB/wSBiTCBhjB1BAIAATBvAwQEwQWAAwQAwSRLAwQAwSRXMAwDBAPBJJgD BAHBJKAwDAMEAsEuXAMEAsEuYAMEA8GxmAMFBsG8hgADBAXCDSAwDAMEBMIhkAME AMIhlDAMAwQEwiIQAwQDwiIwAwQCwiVEAwQDwjVgAwQBwmiWMA0EAgACMAcDBQAq AJzAMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAmHZMA0GCSqGSIb3DQEBCwUAA4IB AQA/Kq+ehihsegjTdJUvddHcAa7VVNMl9G12S39km6IcXl4Nv4lJGXWqZCni4A+m M6d6Cz3o54PSnq3PX16ISN/hWDCVRjUfnS0vOGA0sDtCiVsxdpFg9rguojBUJCf5 QndMepysnAbbW+UgPVzYk/KXrCZ+va//xYLCtArjvrIoDb//OjClBKalQQmDWbI5 +iLh+OakCgQjvYF0sp91v8TxO/wYnCP88TLsjLrLCz9iNSCxk39PAywtjEAGJEom Ffep8Fsi2kfy+uRZOgUazalr2RVlalhBmv/+Q3b5NHQqtLNfrPqMy6sf/AuZQUw0 z6JGdXDHuq09O5gKz+LSnkP9 -----END CERTIFICATE-----Generated at Mon Feb 9 16:51:44 2026 by rpki-client