This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2ilr0AMdba2mxzBzYI89EeRFzkQ.cer File: 2ilr0AMdba2mxzBzYI89EeRFzkQ.cer (raw, json) Hash identifier: cqNHHfa6sX2rIlT8UC+aNh0Su0vfvKkQA54wB9MgsHs= Subject key identifier: DA:29:6B:D0:03:1D:6D:AD:A6:C7:30:73:60:8F:3D:11:E4:45:CE:44 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B783547C59300F3733966E74CA9E25016 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/84/1aafa0-0278-4dd6-8807-5726c2b5148d/1/2ilr0AMdba2mxzBzYI89EeRFzkQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/84/1aafa0-0278-4dd6-8807-5726c2b5148d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:36 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 57536 IP: 91.232.190.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Feb 2026 00:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:47:c5:93:00:f3:73:39:66:e7:4c:a9:e2:50:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=da296bd0031d6dada6c73073608f3d11e445ce44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:11:8d:bb:7f:bb:eb:99:fa:d6:88:ce:1e:4c: d9:af:f1:a0:34:f0:41:6b:6f:95:91:90:78:f7:a6: b6:d9:18:60:b9:93:c0:24:d3:be:89:f9:d1:af:91: 11:61:2b:6a:f3:31:61:44:8d:32:7a:8c:25:aa:8b: f0:e8:31:77:43:bc:c1:f6:5c:08:8d:51:38:f7:1d: fb:de:da:ce:2e:1e:7a:9c:90:b5:05:c2:f9:da:b4: cb:e0:8d:72:90:53:a0:b2:87:a3:d5:cc:cb:62:11: ca:15:ae:c1:08:7c:f3:98:93:2e:61:a3:f8:9c:b2: 59:d2:ba:71:cb:21:8b:95:be:48:7e:86:49:fe:19: a9:56:dd:ad:71:c5:bc:ab:ca:85:58:95:7b:7c:04: 40:e4:7b:a7:9e:de:ce:d2:82:72:79:db:4b:5c:bc: 29:d6:37:2a:31:af:7d:d3:ff:ff:b4:65:ec:99:ec: 23:f1:f4:ac:05:32:d7:32:8b:1b:ba:6c:71:b9:7a: 73:fd:89:c9:3b:09:27:61:04:6c:71:4c:66:1b:ac: dc:f8:0c:cc:b2:46:87:f7:0d:28:5c:36:96:35:9e: 8e:6b:71:4a:33:8d:1c:45:de:21:48:11:89:e1:14: 2a:81:91:10:1b:1f:8b:b7:59:99:60:7b:59:e9:69: d4:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:29:6B:D0:03:1D:6D:AD:A6:C7:30:73:60:8F:3D:11:E4:45:CE:44 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/1aafa0-0278-4dd6-8807-5726c2b5148d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/1aafa0-0278-4dd6-8807-5726c2b5148d/1/2ilr0AMdba2mxzBzYI89EeRFzkQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.232.190.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 57536 Signature Algorithm: sha256WithRSAEncryption 85:bb:23:88:4d:20:95:84:3e:6e:f1:84:65:ce:b4:63:52:ca: 68:b1:1a:34:bb:83:c4:83:ee:c4:79:40:fe:ef:5c:af:68:4c: 0a:56:d7:55:cd:eb:8e:95:5c:7d:6b:be:27:9e:ba:41:03:26: a1:7f:03:19:1e:61:b0:3a:76:1d:51:22:98:7c:51:4f:e7:d2: 1a:42:3f:d7:8a:42:46:68:09:18:03:a0:69:9f:b7:d5:a4:b4: d0:20:c7:35:92:97:b0:17:ee:5f:10:ae:46:be:af:05:94:5c: ba:0e:c4:f1:11:02:1a:70:a3:51:fa:75:0b:e6:e9:05:c1:f7: e4:3f:d3:68:99:9a:43:4e:18:b7:70:6e:ea:82:03:9d:03:8c: 3e:89:5a:b6:44:bd:da:98:a6:b5:91:c9:59:7d:3d:c4:d0:7f: 93:4e:8d:17:ad:58:3f:81:b2:1e:1b:c4:46:c7:3d:00:1b:a3: 85:ce:57:41:3b:7c:8a:5a:9f:2c:15:f9:9c:16:ac:1a:b2:ef: be:fc:95:de:3b:3d:01:f1:0f:da:ca:33:0c:48:e3:8d:25:ab: 04:1c:54:50:0f:87:ec:f5:7a:ee:dd:43:ae:40:90:08:9a:52: ec:fd:d0:fd:5a:8c:e0:a6:3b:7b:31:08:bb:63:2d:4f:a9:19: 71:c8:df:ad -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt4NUfFkwDzczlm50yp4lAWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYTI5NmJkMDAzMWQ2ZGFkYTZjNzMwNzM2MDhmM2QxMWU0NDVjZTQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBGNu3+765n61ojOHkzZr/GgNPBB a2+VkZB496a22RhguZPAJNO+ifnRr5ERYStq8zFhRI0yeowlqovw6DF3Q7zB9lwI jVE49x373trOLh56nJC1BcL52rTL4I1ykFOgsoej1czLYhHKFa7BCHzzmJMuYaP4 nLJZ0rpxyyGLlb5IfoZJ/hmpVt2tccW8q8qFWJV7fARA5Hunnt7O0oJyedtLXLwp 1jcqMa990///tGXsmewj8fSsBTLXMosbumxxuXpz/YnJOwknYQRscUxmG6zc+AzM skaH9w0oXDaWNZ6Oa3FKM40cRd4hSBGJ4RQqgZEQGx+Lt1mZYHtZ6WnUvwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFNopa9ADHW2tpscwc2CPPRHkRc5EMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg0LzFhYWZh MC0wMjc4LTRkZDYtODgwNy01NzI2YzJiNTE0OGQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODQvMWFhZmEw LTAyNzgtNGRkNi04ODA3LTU3MjZjMmI1MTQ4ZC8xLzJpbHIwQU1kYmEybXh6QnpZ STg5RWVSRnprUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQBW+i+MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDgwDANBgkqhkiG9w0BAQsFAAOCAQEAhbsjiE0glYQ+bvGEZc60Y1LKaLEaNLuD xIPuxHlA/u9cr2hMClbXVc3rjpVcfWu+J566QQMmoX8DGR5hsDp2HVEimHxRT+fS GkI/14pCRmgJGAOgaZ+31aS00CDHNZKXsBfuXxCuRr6vBZRcug7E8RECGnCjUfp1 C+bpBcH35D/TaJmaQ04Yt3Bu6oIDnQOMPolatkS92pimtZHJWX09xNB/k06NF61Y P4GyHhvERsc9ABujhc5XQTt8ilqfLBX5nBasGrLvvvyV3js9AfEP2sozDEjjjSWr BBxUUA+H7PV67t1DrkCQCJpS7P3Q/VqM4KY7ezEIu2MtT6kZccjfrQ== -----END CERTIFICATE-----Generated at Sat Feb 7 05:44:49 2026 by rpki-client