This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2gszzdt5m3vPXT3OAE_bqMPoZP8.cer File: 2gszzdt5m3vPXT3OAE_bqMPoZP8.cer (raw, json) Hash identifier: 5OkHqb7RnyxgyrNVxKkJIXYe3sPqLp7F2O6fjDOM9EM= Subject key identifier: DA:0B:33:CD:DB:79:9B:7B:CF:5D:3D:CE:00:4F:DB:A8:C3:E8:64:FF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79EC567F018F0072B09A30E36FDFB612 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fe/032d8b-4881-46fa-b674-7733bd888e28/1/2gszzdt5m3vPXT3OAE_bqMPoZP8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fe/032d8b-4881-46fa-b674-7733bd888e28/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:10 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 25176 IP: 80.88.96.0/19 IP: 81.8.128.0/17 IP: 85.194.128.0/18 IP: 2a01:4040::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:56:7f:01:8f:00:72:b0:9a:30:e3:6f:df:b6:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=da0b33cddb799b7bcf5d3dce004fdba8c3e864ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:96:9c:cd:40:8f:52:da:b5:79:6f:62:ca:5d: 5c:bc:96:0b:ef:2b:05:a3:53:2a:5b:47:b8:2e:aa: 48:6b:af:fb:3f:78:52:52:5e:45:de:75:07:99:b7: d9:42:46:ec:97:a4:04:ea:1a:eb:ee:78:86:c8:78: 37:a4:83:ac:3d:aa:c7:85:93:00:8c:28:a2:21:3b: 64:87:98:b5:bc:6b:3d:df:db:2e:32:67:6d:ca:95: 15:ab:6b:e3:f9:53:f3:37:db:ea:38:b3:33:69:ea: 0a:51:f4:f6:34:07:cb:a3:d9:81:22:a3:1f:12:60: 04:87:1f:d7:2f:d6:c4:71:d6:18:2c:ec:85:5e:ad: 9d:cd:52:89:fa:0a:97:99:48:25:2a:4e:66:75:c1: c6:ed:b8:dd:f7:63:fb:16:91:fd:d4:2b:68:b9:e2: 1c:a3:7a:b2:23:49:1b:b6:d2:8a:36:f9:62:a0:2d: 16:ac:a8:4d:83:84:71:ec:d0:2a:0b:49:86:d1:ec: d3:d2:58:9a:c7:18:4f:62:f1:ff:89:d8:1c:32:d2: 3f:ff:5b:89:e0:7e:5a:3b:e1:48:98:75:92:12:9d: ef:1a:47:6e:f6:29:dd:8c:6b:60:9d:59:a6:0c:21: 37:1e:d3:f6:86:e9:00:bc:08:91:e7:7b:37:c4:b9: 72:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:0B:33:CD:DB:79:9B:7B:CF:5D:3D:CE:00:4F:DB:A8:C3:E8:64:FF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/032d8b-4881-46fa-b674-7733bd888e28/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/032d8b-4881-46fa-b674-7733bd888e28/1/2gszzdt5m3vPXT3OAE_bqMPoZP8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.88.96.0/19 81.8.128.0/17 85.194.128.0/18 IPv6: 2a01:4040::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 25176 Signature Algorithm: sha256WithRSAEncryption 4f:eb:3f:94:f0:72:3b:b7:15:0c:ec:b4:ba:84:39:03:f6:94: 50:d8:8c:ac:49:91:a5:ac:51:b5:9a:f4:cd:0c:b9:59:19:b7: 4f:cd:c8:9a:f5:85:60:48:3b:34:ca:0e:d5:48:99:cf:12:35: fa:25:b9:91:ce:99:2e:66:a0:d1:78:6d:cd:93:d1:40:b8:9a: 08:ac:93:6c:4c:cf:44:91:c0:54:1d:c5:66:92:cf:c2:55:81: 03:a2:19:c4:ce:2b:84:3d:7f:5e:5f:20:8f:9e:57:ee:ff:18: 79:49:d9:9f:7c:13:d4:26:92:f0:8b:58:e3:a2:32:8b:85:01: 77:68:32:74:2f:26:9f:be:02:32:d9:f3:fc:5e:96:cb:b1:9f: fd:76:81:0e:0e:c5:26:24:9e:22:5d:77:81:ad:b5:52:06:04: 01:bb:ae:41:4f:22:f8:a4:1d:77:0a:00:a7:db:b2:44:d3:6e: a0:3c:89:95:d0:2f:db:8e:29:d5:45:fe:d9:92:cf:02:2b:fa: 9f:7a:58:16:14:30:48:ba:47:fa:ff:2c:ea:af:c1:5a:db:cc: 8a:c5:a0:c0:fc:d7:08:f2:b1:48:b9:dd:22:9f:b3:d0:44:17: 89:87:60:bb:f6:e7:cc:41:32:ef:31:0f:27:bc:69:e2:c1:ff: e7:bd:c5:6a -----BEGIN CERTIFICATE----- MIIFrjCCBJagAwIBAgISAZt57FZ/AY8AcrCaMONv37YSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYTBiMzNjZGRiNzk5YjdiY2Y1ZDNkY2UwMDRmZGJhOGMzZTg2NGZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZaczUCPUtq1eW9iyl1cvJYL7ysF o1MqW0e4LqpIa6/7P3hSUl5F3nUHmbfZQkbsl6QE6hrr7niGyHg3pIOsParHhZMA jCiiITtkh5i1vGs939suMmdtypUVq2vj+VPzN9vqOLMzaeoKUfT2NAfLo9mBIqMf EmAEhx/XL9bEcdYYLOyFXq2dzVKJ+gqXmUglKk5mdcHG7bjd92P7FpH91CtoueIc o3qyI0kbttKKNvlioC0WrKhNg4Rx7NAqC0mG0ezT0liaxxhPYvH/idgcMtI//1uJ 4H5aO+FImHWSEp3vGkdu9indjGtgnVmmDCE3HtP2hukAvAiR53s3xLlyPQIDAQAB o4ICujCCArYwHQYDVR0OBBYEFNoLM83beZt7z109zgBP26jD6GT/MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZlLzAzMmQ4 Yi00ODgxLTQ2ZmEtYjY3NC03NzMzYmQ4ODhlMjgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmUvMDMyZDhi LTQ4ODEtNDZmYS1iNjc0LTc3MzNiZDg4OGUyOC8xLzJnc3p6ZHQ1bTN2UFhUM09B RV9icU1Qb1pQOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQFUFhgAwQHUQiAAwQGVcKAMA0EAgACMAcDBQAq AUBAMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAmJYMA0GCSqGSIb3DQEBCwUAA4IB AQBP6z+U8HI7txUM7LS6hDkD9pRQ2IysSZGlrFG1mvTNDLlZGbdPzcia9YVgSDs0 yg7VSJnPEjX6JbmRzpkuZqDReG3Nk9FAuJoIrJNsTM9EkcBUHcVmks/CVYEDohnE ziuEPX9eXyCPnlfu/xh5SdmffBPUJpLwi1jjojKLhQF3aDJ0LyafvgIy2fP8XpbL sZ/9doEODsUmJJ4iXXeBrbVSBgQBu65BTyL4pB13CgCn27JE026gPImV0C/bjinV Rf7Zks8CK/qfelgWFDBIukf6/yzqr8Fa28yKxaDA/NcI8rFIud0in7PQRBeJh2C7 9ufMQTLvMQ8nvGniwf/nvcVq -----END CERTIFICATE-----Generated at Mon Feb 9 18:25:06 2026 by rpki-client