This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2huf6PGjORf-5-Tb6fq5JeuGJak.cer File: 2huf6PGjORf-5-Tb6fq5JeuGJak.cer (raw, json) Hash identifier: 5fZD3bEU/kH0QK8+ONyNojpTarTH+j2onhtYPMpUK0Y= Subject key identifier: DA:1B:9F:E8:F1:A3:39:17:FE:E7:E4:DB:E9:FA:B9:25:EB:86:25:A9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77588ACE9A118DF07110D4A17C4CDB57 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/2huf6PGjORf-5-Tb6fq5JeuGJak.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:17:30 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.211.86.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:8a:ce:9a:11:8d:f0:71:10:d4:a1:7c:4c:db:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=da1b9fe8f1a33917fee7e4dbe9fab925eb8625a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:e1:82:7b:e0:d2:6d:4d:bc:bb:0c:3c:1b:7e: 08:a0:fa:82:48:4b:4d:b0:10:c6:65:ac:03:4e:16: b9:cd:f0:5d:77:85:55:1f:f9:ca:cd:b0:b5:1b:15: 01:c1:d6:ba:d3:21:a4:89:02:82:42:c8:7c:33:f2: 0d:89:23:ad:ab:75:ea:0f:d8:f1:32:84:45:b7:35: 0b:26:82:0b:5d:74:05:c7:13:4a:35:e9:2f:29:10: 19:22:df:d5:a0:38:76:ed:98:43:ee:f2:bd:d8:82: 35:94:01:b9:93:14:99:d8:49:7f:d5:02:81:54:37: 32:25:0d:e4:95:76:ac:41:f5:bf:d2:67:bb:a7:4f: a3:cd:f7:19:7c:de:52:b6:72:db:de:f2:64:e5:e5: 73:b5:1e:00:dc:d5:5b:2f:f6:03:46:bb:74:52:fd: 5d:25:21:9e:6c:02:f2:ce:41:6e:af:68:8b:ec:e9: 03:8f:68:fe:ae:14:53:58:fa:4a:be:d5:f5:10:e8: bb:5a:b0:5a:22:91:97:5a:10:eb:5a:c1:18:c7:ac: 17:05:53:d4:ab:60:5d:86:82:1a:03:47:5f:39:15: b3:25:a3:0b:c2:62:bb:18:c1:98:32:ac:29:3b:c5: c2:5e:71:a4:bd:6a:4b:02:14:98:ad:09:80:a6:07: c2:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:1B:9F:E8:F1:A3:39:17:FE:E7:E4:DB:E9:FA:B9:25:EB:86:25:A9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/2huf6PGjORf-5-Tb6fq5JeuGJak.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.211.86.0/24 Signature Algorithm: sha256WithRSAEncryption 26:eb:e1:e3:f6:c6:09:d5:56:d3:a8:57:92:a5:27:3a:60:1b: b1:0d:a1:00:ea:ce:fb:0c:00:7a:63:ce:e1:94:9c:10:b6:14: 5a:a1:23:22:57:58:38:30:9c:e4:08:c9:3b:5a:54:ab:37:b4: d6:7d:66:2d:27:07:1f:60:38:d1:38:fb:06:62:25:04:bf:1b: b6:e4:8c:9e:a3:a3:ef:9e:57:98:81:42:68:b2:69:cc:a9:39: 35:ed:46:56:e8:e8:53:36:5f:8a:f6:f2:ac:27:23:a4:30:c6: 0f:d1:7c:1e:9e:e6:7e:53:a6:ef:16:35:a1:f2:e7:b9:ef:0d: c8:29:d3:04:11:84:f0:5a:c8:85:52:aa:13:c4:ca:44:26:eb: 42:3a:35:b7:dc:35:88:8e:39:43:0d:40:87:88:39:74:60:e3: a5:27:2c:fa:9a:ee:c3:52:49:3a:b6:aa:77:8d:c2:e1:b6:ca: 7f:3d:ab:f9:f3:89:b5:34:dd:e4:45:af:03:85:cf:a9:eb:eb: 74:bd:fa:05:95:83:df:4d:75:58:a0:cc:77:59:3f:0d:47:89: 30:26:f1:6b:4e:a8:c8:75:e5:70:21:e3:92:83:87:78:65:36: 98:71:79:cb:ce:ba:c1:d7:f5:ff:83:a1:c8:94:da:91:c9:60: 42:57:7d:7c -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt3WIrOmhGN8HEQ1KF8TNtXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYTFiOWZlOGYxYTMzOTE3ZmVlN2U0ZGJlOWZhYjkyNWViODYyNWE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmeGCe+DSbU28uww8G34IoPqCSEtN sBDGZawDTha5zfBdd4VVH/nKzbC1GxUBwda60yGkiQKCQsh8M/INiSOtq3XqD9jx MoRFtzULJoILXXQFxxNKNekvKRAZIt/VoDh27ZhD7vK92II1lAG5kxSZ2El/1QKB VDcyJQ3klXasQfW/0me7p0+jzfcZfN5StnLb3vJk5eVztR4A3NVbL/YDRrt0Uv1d JSGebALyzkFur2iL7OkDj2j+rhRTWPpKvtX1EOi7WrBaIpGXWhDrWsEYx6wXBVPU q2BdhoIaA0dfORWzJaMLwmK7GMGYMqwpO8XCXnGkvWpLAhSYrQmApgfCDwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFNobn+jxozkX/ufk2+n6uSXrhiWpMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFjLzQyYTE2 Ni04YTg2LTQ4ZGEtYmI5Ni03OWZkNTAyM2RlMzYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWMvNDJhMTY2 LThhODYtNDhkYS1iYjk2LTc5ZmQ1MDIzZGUzNi8xLzJodWY2UEdqT1JmLTUtVGI2 ZnE1SmV1R0phay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW9NWMA0GCSqGSIb3DQEBCwUAA4IBAQAm6+Hj 9sYJ1VbTqFeSpSc6YBuxDaEA6s77DAB6Y87hlJwQthRaoSMiV1g4MJzkCMk7WlSr N7TWfWYtJwcfYDjROPsGYiUEvxu25Iyeo6PvnleYgUJosmnMqTk17UZW6OhTNl+K 9vKsJyOkMMYP0XwenuZ+U6bvFjWh8ue57w3IKdMEEYTwWsiFUqoTxMpEJutCOjW3 3DWIjjlDDUCHiDl0YOOlJyz6mu7DUkk6tqp3jcLhtsp/Pav584m1NN3kRa8Dhc+p 6+t0vfoFlYPfTXVYoMx3WT8NR4kwJvFrTqjIdeVwIeOSg4d4ZTaYcXnLzrrB1/X/ g6HIlNqRyWBCV318 -----END CERTIFICATE-----Generated at Mon Feb 9 16:51:27 2026 by rpki-client