This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2nVBcltyi1qJ87-vIPh2VWPC8_s.cer File: 2nVBcltyi1qJ87-vIPh2VWPC8_s.cer (raw, json) Hash identifier: czOn3/RBLx+KOMqsges+j1Pp3yTBi6lvdFL50P+rjWg= Subject key identifier: DA:75:41:72:5B:72:8B:5A:89:F3:BF:AF:20:F8:76:55:63:C2:F3:FB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA6CBC8B16A4331BF722052F148822B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:20:19 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 41962 IP: 94.46.141.0 -- 94.46.142.255 IP: 94.46.251.0/24 IP: 185.79.224.0/22 IP: 188.214.159.0/24 IP: 188.214.192.0/24 IP: 195.88.104.0/23 IP: 2a05:7800::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:cb:c8:b1:6a:43:31:bf:72:20:52:f1:48:82:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:20:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=da7541725b728b5a89f3bfaf20f8765563c2f3fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:1a:f8:43:88:b3:a3:64:ab:ea:57:57:47:4f: 19:a7:68:3e:6a:12:fb:53:38:93:bf:95:2e:15:38: a0:30:06:2d:2f:2a:ae:c3:2c:9e:7d:0c:fe:49:1f: 4a:88:cb:a2:19:59:e3:5f:96:8c:69:ee:d1:dd:f2: 9d:15:39:7f:41:c5:43:9d:80:4b:f9:40:ee:c7:74: f2:fe:d5:c8:24:c9:41:ae:4f:f1:66:5b:24:2c:2b: f1:24:09:b9:19:00:86:76:9e:c3:0a:0c:2e:b3:98: 34:b9:57:f7:09:b3:28:bb:48:64:aa:83:83:b3:14: 5c:1c:8c:bb:d1:ec:0f:87:0e:47:c3:c9:79:e2:cb: 1e:32:3e:05:01:ae:dd:a3:a4:8d:50:fe:bf:b0:ad: 91:a2:8f:dc:61:0b:ef:92:24:c4:a7:ed:58:46:86: 03:b0:5d:a6:01:84:f5:98:0a:18:18:cf:c8:44:2f: 98:81:ff:3c:56:5d:fe:bd:f5:9f:96:aa:bd:8c:81: d8:33:6f:4f:94:6f:e4:5a:16:f0:d2:d7:6a:7d:3f: b1:70:9a:23:0e:8b:98:f9:1f:b0:5e:a7:79:d3:b5: 4a:b0:45:7c:78:96:63:9f:66:d0:b9:bb:27:db:8b: e3:52:fe:c5:38:e2:cb:fb:65:10:70:12:c3:9c:0b: 17:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:75:41:72:5B:72:8B:5A:89:F3:BF:AF:20:F8:76:55:63:C2:F3:FB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.46.141.0-94.46.142.255 94.46.251.0/24 185.79.224.0/22 188.214.159.0/24 188.214.192.0/24 195.88.104.0/23 IPv6: 2a05:7800::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 41962 Signature Algorithm: sha256WithRSAEncryption 5d:74:be:03:2a:05:a9:14:70:eb:45:fe:4c:d0:1a:7e:66:30: 7a:29:8c:b4:26:74:2d:cb:bc:f1:c8:f9:7b:1d:85:8d:5f:6d: 80:0f:0b:37:11:e2:d9:89:b8:27:85:3f:79:51:a0:4b:1c:a8: 4f:5a:6a:aa:c1:be:8d:69:e8:f7:96:e4:e6:a6:ff:46:1c:d0: 67:10:d3:81:f5:14:6a:9b:82:08:2f:a6:4f:80:9e:ee:51:88: 85:e3:83:34:12:ff:26:fd:fe:ae:59:88:a2:b9:18:d7:d2:5f: b5:47:bb:25:30:f0:b9:fb:c2:4c:95:14:51:aa:b2:ca:b4:72: d3:45:a8:fb:a7:9e:43:8c:ab:95:5b:b4:69:93:e7:60:9b:a7: 0d:ac:21:cb:bf:09:9e:9c:1f:2e:73:23:74:f3:7b:37:3d:92: 0f:ce:de:16:ca:e2:76:db:30:cd:a9:03:79:ea:74:9d:ad:44: 66:7d:23:af:92:5a:32:50:87:a4:86:86:2a:69:a6:71:74:49: f1:cc:10:66:d9:26:36:aa:32:49:74:9a:8e:37:ab:55:49:3b: 0c:65:4b:f5:c3:35:9e:39:87:73:2e:a5:83:09:de:80:e6:47: b6:a8:13:04:31:58:72:1a:b5:15:ff:34:96:60:2f:78:68:79: 81:ed:84:10 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgISAZt+psvIsWpDMb9yIFLxSIIrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIyMDE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYTc1NDE3MjViNzI4YjVhODlmM2JmYWYyMGY4NzY1NTYzYzJmM2ZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRr4Q4izo2Sr6ldXR08Zp2g+ahL7 UziTv5UuFTigMAYtLyquwyyefQz+SR9KiMuiGVnjX5aMae7R3fKdFTl/QcVDnYBL +UDux3Ty/tXIJMlBrk/xZlskLCvxJAm5GQCGdp7DCgwus5g0uVf3CbMou0hkqoOD sxRcHIy70ewPhw5Hw8l54sseMj4FAa7do6SNUP6/sK2Roo/cYQvvkiTEp+1YRoYD sF2mAYT1mAoYGM/IRC+Ygf88Vl3+vfWflqq9jIHYM29PlG/kWhbw0tdqfT+xcJoj DouY+R+wXqd507VKsEV8eJZjn2bQubsn24vjUv7FOOLL+2UQcBLDnAsXNQIDAQAB o4IC1TCCAtEwHQYDVR0OBBYEFNp1QXJbcotaifO/ryD4dlVjwvP7MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU3LzRkMzli MS1mYzlhLTQ0NzYtYTc5Yy1kYjhmZDUwN2QxYjYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTcvNGQzOWIx LWZjOWEtNDQ3Ni1hNzljLWRiOGZkNTA3ZDFiNi8xLzJuVkJjbHR5aTFxSjg3LXZJ UGgyVldQQzhfcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFQGCCsGAQUF BwEHAQH/BEUwQzAyBAIAATAsMAwDBABeLo0DBABeLo4DBABeLvsDBAK5T+ADBAC8 1p8DBAC81sADBAHDWGgwDQQCAAIwBwMFAyoFeAAwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAKPqMA0GCSqGSIb3DQEBCwUAA4IBAQBddL4DKgWpFHDrRf5M0Bp+ZjB6 KYy0JnQty7zxyPl7HYWNX22ADws3EeLZibgnhT95UaBLHKhPWmqqwb6Naej3luTm pv9GHNBnENOB9RRqm4IIL6ZPgJ7uUYiF44M0Ev8m/f6uWYiiuRjX0l+1R7slMPC5 +8JMlRRRqrLKtHLTRaj7p55DjKuVW7Rpk+dgm6cNrCHLvwmenB8ucyN083s3PZIP zt4WyuJ22zDNqQN56nSdrURmfSOvkloyUIekhoYqaaZxdEnxzBBm2SY2qjJJdJqO N6tVSTsMZUv1wzWeOYdzLqWDCd6A5ke2qBMEMVhyGrUV/zSWYC94aHmB7YQQ -----END CERTIFICATE-----Generated at Mon Feb 9 18:25:22 2026 by rpki-client