This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2lLDjwx_664TXV3d2UjPJr7O87w.cer File: 2lLDjwx_664TXV3d2UjPJr7O87w.cer (raw, json) Hash identifier: TwIpLkbFECe4Lv8MvTvi+O4Vz1OEGdCSEX30nZWLoy8= Subject key identifier: DA:52:C3:8F:0C:7F:EB:AE:13:5D:5D:DD:D9:48:CF:26:BE:CE:F3:BC Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5A0AD8BE9D817D5C0133CA03828C6F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/2lLDjwx_664TXV3d2UjPJr7O87w.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:18:00 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 24879 IP: 193.111.166.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:0a:d8:be:9d:81:7d:5c:01:33:ca:03:82:8c:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=da52c38f0c7febae135d5dddd948cf26becef3bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:7e:b2:3a:61:df:c2:fd:bc:96:e3:1f:b8:d6: 83:56:9c:65:25:10:63:62:e4:bd:3f:9d:22:80:bf: a3:65:c5:9b:b1:a6:dd:07:ee:f6:a8:ab:60:8c:de: 86:17:d8:68:4b:fe:25:20:e8:92:37:f8:0b:ce:77: 49:0f:be:d3:98:12:7b:06:32:f5:3f:fb:36:25:ef: cc:59:1e:82:d5:f0:3e:88:ee:03:38:b7:0a:d2:73: d6:04:06:ee:dd:f9:d7:48:6d:e3:07:c8:87:40:57: 2e:d5:f8:09:9d:df:58:96:22:ee:e0:f5:d8:a6:5a: d3:c9:32:f1:40:c8:fe:5e:1d:37:2b:d1:c3:1d:5d: d9:ee:3d:49:9f:02:cd:98:35:ba:1f:10:6b:6b:4e: a7:b0:c0:b6:e0:21:68:de:f9:a0:7b:ea:1e:7f:c7: 4b:6e:64:c1:d6:99:a0:d8:0a:e7:e3:6f:86:33:e1: 3b:93:ba:e3:58:94:65:52:c9:82:1f:74:78:38:35: bd:0c:d9:a5:4c:0f:3c:6c:1f:27:ce:1c:b6:c3:d2: c3:07:94:5e:86:a1:14:96:b6:12:8f:e3:cd:a1:2e: 2b:4c:9f:d3:0a:99:ba:02:2b:18:c5:2e:5a:3f:11: 6b:1e:29:c0:58:7e:fe:ea:44:61:c5:00:b3:ba:8f: cb:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:52:C3:8F:0C:7F:EB:AE:13:5D:5D:DD:D9:48:CF:26:BE:CE:F3:BC X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/2lLDjwx_664TXV3d2UjPJr7O87w.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.111.166.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 24879 Signature Algorithm: sha256WithRSAEncryption 19:7a:24:ed:ef:c8:3b:fd:15:92:cb:ad:13:90:17:a4:68:34: 23:1b:4d:98:23:6b:6a:1b:38:6f:37:ba:e8:1b:fc:22:1b:33: 7c:55:c7:3c:26:d6:cf:3f:cb:c3:b4:ea:8c:2a:9b:7a:7f:c2: ed:d2:ff:3d:ee:0b:74:59:e2:b8:2c:59:b5:27:65:8a:82:0e: fe:25:f9:78:51:41:b7:74:da:27:f5:9c:5e:ad:e6:24:7d:62: 25:7f:b3:5d:ca:62:12:da:60:f9:13:a1:86:28:6f:3d:8c:62: 8c:55:9d:1b:3a:bf:dd:2d:d4:e7:a2:15:f6:ad:df:bb:75:af: 97:cf:f8:7a:12:88:1d:06:05:ae:10:7b:47:98:53:b3:3b:64: 58:f0:82:40:9f:f5:30:4e:e0:2d:b4:4f:3c:bc:08:6f:e9:c4: 44:60:68:07:93:cc:47:31:e1:f8:35:9e:f1:f0:44:fd:06:cd: 91:b6:28:12:c9:6a:ff:89:37:95:3a:a9:c2:3d:4f:65:30:27: 74:a2:70:70:d5:26:ab:aa:39:3a:32:b5:65:65:df:4c:2a:35: 05:e4:2e:f9:05:bd:bc:0f:f4:82:19:64:b0:c2:e4:ec:fe:e7: 5f:02:cc:52:65:43:b7:20:5e:f4:fe:55:60:b4:db:da:69:10: bf:44:c7:85 -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISAZt6WgrYvp2BfVwBM8oDgoxvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYTUyYzM4ZjBjN2ZlYmFlMTM1ZDVkZGRkOTQ4Y2YyNmJlY2VmM2JjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzX6yOmHfwv28luMfuNaDVpxlJRBj YuS9P50igL+jZcWbsabdB+72qKtgjN6GF9hoS/4lIOiSN/gLzndJD77TmBJ7BjL1 P/s2Je/MWR6C1fA+iO4DOLcK0nPWBAbu3fnXSG3jB8iHQFcu1fgJnd9YliLu4PXY plrTyTLxQMj+Xh03K9HDHV3Z7j1JnwLNmDW6HxBra06nsMC24CFo3vmge+oef8dL bmTB1pmg2Arn42+GM+E7k7rjWJRlUsmCH3R4ODW9DNmlTA88bB8nzhy2w9LDB5Re hqEUlrYSj+PNoS4rTJ/TCpm6AisYxS5aPxFrHinAWH7+6kRhxQCzuo/LtQIDAQAB o4ICnzCCApswHQYDVR0OBBYEFNpSw48Mf+uuE11d3dlIzya+zvO8MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJlL2YzMWJl MC0xMGUwLTQwZWQtYTZkNy00MWVjZGM3YTM2ZjQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmUvZjMxYmUw LTEwZTAtNDBlZC1hNmQ3LTQxZWNkYzdhMzZmNC8xLzJsTERqd3hfNjY0VFhWM2Qy VWpQSnI3Tzg3dy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwW+mMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQC AmEvMA0GCSqGSIb3DQEBCwUAA4IBAQAZeiTt78g7/RWSy60TkBekaDQjG02YI2tq GzhvN7roG/wiGzN8Vcc8JtbPP8vDtOqMKpt6f8Lt0v897gt0WeK4LFm1J2WKgg7+ Jfl4UUG3dNon9ZxereYkfWIlf7NdymIS2mD5E6GGKG89jGKMVZ0bOr/dLdTnohX2 rd+7da+Xz/h6EogdBgWuEHtHmFOzO2RY8IJAn/UwTuAttE88vAhv6cREYGgHk8xH MeH4NZ7x8ET9Bs2RtigSyWr/iTeVOqnCPU9lMCd0onBw1Sarqjk6MrVlZd9MKjUF 5C75Bb28D/SCGWSwwuTs/udfAsxSZUO3IF70/lVgtNvaaRC/RMeF -----END CERTIFICATE-----Generated at Mon Feb 9 16:49:39 2026 by rpki-client