This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2gqeca1dVkIzqUTR9HmFGNGDH30.cer File: 2gqeca1dVkIzqUTR9HmFGNGDH30.cer (raw, json) Hash identifier: r18g0KKDp2yYrfE7dYeHjcAwOVcaNa3+axz+hR1BxDA= Subject key identifier: DA:0A:9E:71:AD:5D:56:42:33:A9:44:D1:F4:79:85:18:D1:83:1F:7D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F15BD1262A32E737C49937C196C25A6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:29 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 209759 AS: 209938 IP: 78.40.220.0 -- 78.40.222.255 IP: 178.218.156.0/22 IP: 193.56.30.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 12:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:bd:12:62:a3:2e:73:7c:49:93:7c:19:6c:25:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=da0a9e71ad5d564233a944d1f4798518d1831f7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:f9:19:8c:28:1a:20:fb:ca:9a:3e:d9:5e:f0: cc:f6:39:2b:0a:91:1e:11:05:91:d4:9f:2e:09:23: 07:11:15:cf:f7:9c:e6:53:a7:fb:a7:3b:cb:28:0b: 6c:6a:f5:56:24:c3:18:26:82:52:ba:db:4c:76:ae: 51:97:b1:a5:3c:c7:e1:bf:34:e2:02:98:d5:af:65: 9a:01:1b:f3:c7:b1:68:3a:15:3a:b0:28:11:42:69: c5:d2:8e:00:88:31:a0:e2:5f:2b:e7:ea:48:43:3b: b9:4f:a9:94:92:00:10:f5:e8:4e:b9:71:af:99:c3: 49:1a:a8:79:63:d6:e3:67:30:51:ac:ff:d9:a0:f0: 16:52:57:02:7b:11:4a:98:8b:f3:66:d1:82:dd:51: 36:01:41:c9:26:73:72:53:e4:a2:10:a6:d4:8f:5e: 5f:e9:88:f9:b2:dd:18:93:72:a7:fb:3a:ba:9d:23: e3:13:c3:04:78:7e:66:42:94:f0:79:5b:e9:fc:1e: 05:c7:72:a5:54:89:48:4f:03:25:d8:30:7b:a0:48: 69:25:24:09:57:d6:99:72:dc:52:32:ce:46:d4:13: f4:eb:12:56:dc:9a:09:73:5b:31:2f:6c:bc:53:ff: 1b:09:f9:4d:67:66:d8:9e:8d:c5:87:8e:fe:e3:cb: d9:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:0A:9E:71:AD:5D:56:42:33:A9:44:D1:F4:79:85:18:D1:83:1F:7D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.40.220.0-78.40.222.255 178.218.156.0/22 193.56.30.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 209759 209938 Signature Algorithm: sha256WithRSAEncryption 8a:a7:19:e9:f0:43:7d:e6:a3:14:38:4f:cf:02:25:38:9f:b7: 1d:f5:24:64:72:e4:4b:a7:ea:22:43:b3:14:b9:9e:3c:86:4d: ca:e2:40:2b:f6:90:e2:e5:08:c4:19:18:16:94:87:8b:83:d4: 89:06:3a:92:e9:ac:be:7d:c6:ea:93:e8:01:4e:29:69:00:c2: 92:dd:b2:da:84:67:d7:65:d1:3d:f7:23:8c:75:3d:1b:2e:66: ca:fd:29:3a:79:71:fc:62:7b:37:6d:bd:e8:b5:d7:1c:2a:9a: 9d:d9:f7:95:ce:b4:ff:a5:9d:6c:01:64:7b:c6:0f:8a:85:a5: 38:d1:44:df:e9:a7:58:01:16:1c:56:d8:bf:3b:bd:d1:35:f9: 3a:fa:e5:2a:1f:b3:3c:cc:d0:bd:5a:76:75:6b:05:ca:a1:19: 29:07:2d:b0:96:cd:4b:8a:66:9f:ef:f6:1b:81:ed:d0:ea:e3: 6e:9d:dd:63:06:37:68:ee:41:65:73:d1:4e:a8:75:4a:be:f6: 2a:10:81:52:5c:d1:c0:d3:87:cf:27:fa:96:6a:dd:03:d5:c0: 1e:3d:9e:6e:48:2f:6f:8b:62:6b:26:a0:6d:9e:19:c1:eb:29: 34:24:fc:98:b6:f9:da:cd:6c:4b:3f:13:8d:a7:39:f3:58:d6: 0f:d6:a3:0d -----BEGIN CERTIFICATE----- MIIFrTCCBJWgAwIBAgISAZt/Fb0SYqMuc3xJk3wZbCWmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYTBhOWU3MWFkNWQ1NjQyMzNhOTQ0ZDFmNDc5ODUxOGQxODMxZjdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1fkZjCgaIPvKmj7ZXvDM9jkrCpEe EQWR1J8uCSMHERXP95zmU6f7pzvLKAtsavVWJMMYJoJSuttMdq5Rl7GlPMfhvzTi ApjVr2WaARvzx7FoOhU6sCgRQmnF0o4AiDGg4l8r5+pIQzu5T6mUkgAQ9ehOuXGv mcNJGqh5Y9bjZzBRrP/ZoPAWUlcCexFKmIvzZtGC3VE2AUHJJnNyU+SiEKbUj15f 6Yj5st0Yk3Kn+zq6nSPjE8MEeH5mQpTweVvp/B4Fx3KlVIlITwMl2DB7oEhpJSQJ V9aZctxSMs5G1BP06xJW3JoJc1sxL2y8U/8bCflNZ2bYno3Fh47+48vZxwIDAQAB o4ICuTCCArUwHQYDVR0OBBYEFNoKnnGtXVZCM6lE0fR5hRjRgx99MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzIyLzZkMTRk ZS02MTVmLTQ3Y2UtYTdlYi1hMzdiM2YzMjE3MDMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjIvNmQxNGRl LTYxNWYtNDdjZS1hN2ViLWEzN2IzZjMyMTcwMy8xLzJncWVjYTFkVmtJenFVVFI5 SG1GR05HREgzMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDMGCCsGAQUF BwEHAQH/BCQwIjAgBAIAATAaMAwDBAJOKNwDBABOKN4DBAKy2pwDBADBOB4wHwYI KwYBBQUHAQgBAf8EEDAOoAwwCgIDAzNfAgMDNBIwDQYJKoZIhvcNAQELBQADggEB AIqnGenwQ33moxQ4T88CJTiftx31JGRy5Eun6iJDsxS5njyGTcriQCv2kOLlCMQZ GBaUh4uD1IkGOpLprL59xuqT6AFOKWkAwpLdstqEZ9dl0T33I4x1PRsuZsr9KTp5 cfxiezdtvei11xwqmp3Z95XOtP+lnWwBZHvGD4qFpTjRRN/pp1gBFhxW2L87vdE1 +Tr65SofszzM0L1adnVrBcqhGSkHLbCWzUuKZp/v9huB7dDq426d3WMGN2juQWVz 0U6odUq+9ioQgVJc0cDTh88n+pZq3QPVwB49nm5IL2+LYmsmoG2eGcHrKTQk/Ji2 +drNbEs/E42nOfNY1g/Wow0= -----END CERTIFICATE-----Generated at Tue Jan 20 15:37:23 2026 by rpki-client