This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2krNipcsDnNxGs9H4MhFmhz3JgY.cer File: 2krNipcsDnNxGs9H4MhFmhz3JgY.cer (raw, json) Hash identifier: I4+kQo0Nio+CSdL0AtzHyaG5t/NOZBZpoDc144Lv7C4= Subject key identifier: DA:4A:CD:8A:97:2C:0E:73:71:1A:CF:47:E0:C8:45:9A:1C:F7:26:06 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C73DAA13C33E319CDD3480966EC34D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8d/1b132e-b79e-4e58-9380-9e5fd43935b7/1/2krNipcsDnNxGs9H4MhFmhz3JgY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8d/1b132e-b79e-4e58-9380-9e5fd43935b7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:18:24 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 205839 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:3d:aa:13:c3:3e:31:9c:dd:34:80:96:6e:c3:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=da4acd8a972c0e73711acf47e0c8459a1cf72606 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:5e:f5:3e:9b:82:81:28:e9:c4:a5:17:95:e2: d8:a4:c5:bc:77:e5:57:a6:fc:05:bb:b8:73:fd:93: 27:0d:12:09:8f:a0:62:03:f3:67:61:0d:f7:67:c6: 63:5f:c1:86:b5:3f:5c:36:78:d2:ca:72:fb:f9:6a: 01:f0:9d:54:a0:34:f9:29:a2:3b:41:47:ef:25:38: 71:13:df:fa:33:f2:99:09:75:e6:dd:95:f9:bb:d3: 65:4e:b9:c0:24:45:6e:57:dd:35:36:84:cb:f5:85: 0f:ad:a9:10:37:b1:f3:15:28:57:2d:1a:52:0a:80: 56:fc:36:3b:79:1d:a5:d5:bc:eb:ae:97:63:07:2e: 1d:e4:78:be:b5:77:4a:59:b1:14:79:92:91:21:3f: 86:aa:be:1b:88:04:6a:f1:42:da:6a:f0:92:80:21: 29:a9:87:a8:89:7e:98:7d:83:95:cc:bc:ad:40:e1: 6a:c5:a3:7e:66:de:1d:bc:c2:b3:36:6c:e7:b4:a7: 2d:3e:ae:45:1d:1b:9a:e3:e3:1a:9a:ae:f0:6c:38: c7:f2:a2:a6:c2:eb:91:30:67:ec:fa:f0:49:58:d0: f0:e0:ae:e3:64:c8:ff:a5:8d:50:ba:02:5a:ff:ba: 88:77:93:7e:98:3f:f1:0c:22:7f:4f:61:6b:f6:5f: 2d:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:4A:CD:8A:97:2C:0E:73:71:1A:CF:47:E0:C8:45:9A:1C:F7:26:06 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1b132e-b79e-4e58-9380-9e5fd43935b7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1b132e-b79e-4e58-9380-9e5fd43935b7/1/2krNipcsDnNxGs9H4MhFmhz3JgY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 205839 Signature Algorithm: sha256WithRSAEncryption 0f:04:50:8c:1c:a1:d0:ae:07:a5:2a:09:bc:7f:17:35:a1:84: b9:ec:ce:d5:a0:91:12:b0:c1:21:7a:84:7e:90:82:29:49:20: a3:d2:21:19:91:28:3b:e5:21:20:20:88:f4:9c:2a:32:52:d1: 70:70:31:68:67:31:67:4d:99:4d:80:ad:b9:b6:60:cc:f8:f8: 90:4d:ed:82:f4:2f:30:d7:ea:c1:74:bb:db:17:86:40:bb:b9: dc:2d:e5:ec:67:c4:5a:69:78:e8:12:9e:e3:2c:a7:14:9d:93: 42:5e:cd:6d:f7:7d:41:2a:6e:cd:9f:7a:00:2a:b4:09:7c:b4: cb:b8:76:9f:23:b6:97:6e:5a:c3:9b:6f:0d:6a:9c:db:0d:70: 3a:26:5f:7f:3d:3c:23:05:76:53:be:e8:45:4c:d8:b0:f7:16: 20:3a:e4:38:b5:36:4f:a5:45:f8:20:ff:c6:50:00:fd:39:ad: 3a:d4:fa:46:74:ec:03:e6:a8:98:0f:5c:67:0c:fb:30:a8:39: 56:88:b8:96:59:7a:5b:f6:d8:5e:fa:ca:eb:d1:74:9d:7b:5b: 1f:4a:81:92:92:90:2b:4f:9a:e9:03:73:ed:d2:eb:7c:88:45: d8:ed:11:ed:a5:ed:b5:7b:bf:ea:94:8f:3c:cc:8e:f0:01:88: 10:ee:44:94 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt3xz2qE8M+MZzdNICWbsNNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYTRhY2Q4YTk3MmMwZTczNzExYWNmNDdlMGM4NDU5YTFjZjcyNjA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzF71PpuCgSjpxKUXleLYpMW8d+VX pvwFu7hz/ZMnDRIJj6BiA/NnYQ33Z8ZjX8GGtT9cNnjSynL7+WoB8J1UoDT5KaI7 QUfvJThxE9/6M/KZCXXm3ZX5u9NlTrnAJEVuV901NoTL9YUPrakQN7HzFShXLRpS CoBW/DY7eR2l1bzrrpdjBy4d5Hi+tXdKWbEUeZKRIT+Gqr4biARq8ULaavCSgCEp qYeoiX6YfYOVzLytQOFqxaN+Zt4dvMKzNmzntKctPq5FHRua4+Mamq7wbDjH8qKm wuuRMGfs+vBJWNDw4K7jZMj/pY1QugJa/7qId5N+mD/xDCJ/T2Fr9l8t6wIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFNpKzYqXLA5zcRrPR+DIRZoc9yYGMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhkLzFiMTMy ZS1iNzllLTRlNTgtOTM4MC05ZTVmZDQzOTM1YjcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGQvMWIxMzJl LWI3OWUtNGU1OC05MzgwLTllNWZkNDM5MzViNy8xLzJrck5pcGNzRG5OeEdzOUg0 TWhGbWh6M0pnWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMkDzANBgkqhkiG9w0BAQsFAAOCAQEADwRQjByh0K4H pSoJvH8XNaGEuezO1aCRErDBIXqEfpCCKUkgo9IhGZEoO+UhICCI9JwqMlLRcHAx aGcxZ02ZTYCtubZgzPj4kE3tgvQvMNfqwXS72xeGQLu53C3l7GfEWml46BKe4yyn FJ2TQl7Nbfd9QSpuzZ96ACq0CXy0y7h2nyO2l25aw5tvDWqc2w1wOiZffz08IwV2 U77oRUzYsPcWIDrkOLU2T6VF+CD/xlAA/TmtOtT6RnTsA+aomA9cZwz7MKg5Voi4 lll6W/bYXvrK69F0nXtbH0qBkpKQK0+a6QNz7dLrfIhF2O0R7aXttXu/6pSPPMyO 8AGIEO5ElA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:27:43 2026 by rpki-client