This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2q4t5U2ijHPxmz4E75V06ZBX8aI.cer File: 2q4t5U2ijHPxmz4E75V06ZBX8aI.cer (raw, json) Hash identifier: lagNASX83egGbxWFKGHLR7sqMgORnljt9+28BEABqZE= Subject key identifier: DA:AE:2D:E5:4D:A2:8C:73:F1:9B:3E:04:EF:95:74:E9:90:57:F1:A2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ED43B4ED2410B26FA48EA7C08B702E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9f/e3aeb7-ca10-4326-8b1c-6008e60cd30b/1/2q4t5U2ijHPxmz4E75V06ZBX8aI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9f/e3aeb7-ca10-4326-8b1c-6008e60cd30b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:19:11 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 141.18.0.0/16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:43:b4:ed:24:10:b2:6f:a4:8e:a7:c0:8b:70:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:19:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=daae2de54da28c73f19b3e04ef9574e99057f1a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:35:29:34:8e:7b:6a:9c:91:d7:ba:4d:ca:01: 18:2d:5c:1b:40:7f:40:ec:3a:f7:e9:76:28:cf:45: b7:cf:3d:28:7f:d1:d7:da:20:b2:b1:f1:94:e9:3f: 91:c9:20:de:2c:e5:23:4d:1c:de:7e:2f:2e:2c:5a: 09:cf:17:ee:61:1f:68:75:a1:85:e2:17:b8:0b:b8: c7:50:c2:ed:9c:62:9d:9f:f6:65:d4:8b:9a:99:2c: 06:e2:48:45:cb:10:d0:fe:54:5e:91:d4:a9:60:56: c2:18:44:b9:8a:cb:88:7d:17:b4:c6:c8:a0:22:35: c3:b3:a1:02:f4:1e:33:87:c1:3f:83:a8:a5:2f:be: a4:e5:48:5b:ce:b3:f5:18:b3:71:5e:0c:78:10:e4: ff:0d:b1:31:a1:27:de:45:8a:d8:0b:b1:d4:50:ee: c0:43:29:0f:92:43:bb:e6:db:a9:c5:5a:68:73:40: a6:ae:68:91:1b:99:45:57:90:7f:75:76:ae:c4:7f: ae:57:75:b7:6a:7e:d7:92:74:af:7a:96:3b:80:c5: 68:4f:f6:c2:98:ad:8d:8e:b6:be:eb:a6:52:09:1f: f7:66:22:1f:db:f3:c0:1c:52:a9:d7:01:9f:95:63: e9:3f:de:73:49:18:e8:90:9e:72:f9:0e:b0:9f:66: 49:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:AE:2D:E5:4D:A2:8C:73:F1:9B:3E:04:EF:95:74:E9:90:57:F1:A2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e3aeb7-ca10-4326-8b1c-6008e60cd30b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e3aeb7-ca10-4326-8b1c-6008e60cd30b/1/2q4t5U2ijHPxmz4E75V06ZBX8aI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.18.0.0/16 Signature Algorithm: sha256WithRSAEncryption a9:b3:9b:0f:93:5b:3f:64:2b:05:5f:00:13:5d:42:b1:e8:8b: 5e:eb:48:15:66:5d:f6:30:86:29:d4:80:d7:ce:2e:80:5e:ec: c8:83:b5:f9:7f:44:81:54:05:d9:69:04:1b:ed:74:e4:a5:54: a4:b4:89:dc:84:7a:3c:f2:6a:9b:8b:97:31:ab:66:4b:ce:eb: 53:83:f2:ab:06:7a:eb:bc:f5:e1:80:c2:4c:f2:5b:61:33:ee: bf:c0:3e:a7:99:a2:d8:8a:ed:67:34:35:3b:45:ef:42:4f:cb: 7b:6b:98:01:91:74:d5:10:be:66:ab:c6:c2:84:2a:d0:4b:81: f8:16:10:f8:32:e4:e0:17:38:35:89:5e:9a:81:b7:94:b4:78: 05:07:42:eb:8b:f6:13:a8:f4:c8:72:07:d0:39:c0:c0:f3:0c: 1c:51:b0:77:41:09:c2:2f:11:9a:a4:a1:76:5d:f3:35:2c:b0: c3:da:cf:ac:f2:08:ae:f3:ed:8d:a7:d9:3e:2f:83:a0:e8:ed: e6:17:22:e0:37:2b:1e:6e:e0:36:ea:8e:78:63:ff:ad:5e:22: 22:75:8a:f4:75:9e:65:a9:6e:c3:05:27:ec:62:ee:b1:00:14: 07:d5:cb:0f:af:a6:be:81:8e:cb:0f:8b:e9:b2:81:78:9c:3a: b6:63:39:1c -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgISAZt57UO07SQQsm+kjqfAi3AuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYWFlMmRlNTRkYTI4YzczZjE5YjNlMDRlZjk1NzRlOTkwNTdmMWEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTUpNI57apyR17pNygEYLVwbQH9A 7Dr36XYoz0W3zz0of9HX2iCysfGU6T+RySDeLOUjTRzefi8uLFoJzxfuYR9odaGF 4he4C7jHUMLtnGKdn/Zl1IuamSwG4khFyxDQ/lRekdSpYFbCGES5isuIfRe0xsig IjXDs6EC9B4zh8E/g6ilL76k5UhbzrP1GLNxXgx4EOT/DbExoSfeRYrYC7HUUO7A QykPkkO75tupxVpoc0CmrmiRG5lFV5B/dXauxH+uV3W3an7XknSvepY7gMVoT/bC mK2Njra+66ZSCR/3ZiIf2/PAHFKp1wGflWPpP95zSRjokJ5y+Q6wn2ZJJwIDAQAB o4ICgzCCAn8wHQYDVR0OBBYEFNquLeVNooxz8Zs+BO+VdOmQV/GiMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzlmL2UzYWVi Ny1jYTEwLTQzMjYtOGIxYy02MDA4ZTYwY2QzMGIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWYvZTNhZWI3 LWNhMTAtNDMyNi04YjFjLTYwMDhlNjBjZDMwYi8xLzJxNHQ1VTJpakhQeG16NEU3 NVYwNlpCWDhhSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUF BwEHAQH/BA8wDTALBAIAATAFAwMAjRIwDQYJKoZIhvcNAQELBQADggEBAKmzmw+T Wz9kKwVfABNdQrHoi17rSBVmXfYwhinUgNfOLoBe7MiDtfl/RIFUBdlpBBvtdOSl VKS0idyEejzyapuLlzGrZkvO61OD8qsGeuu89eGAwkzyW2Ez7r/APqeZotiK7Wc0 NTtF70JPy3trmAGRdNUQvmarxsKEKtBLgfgWEPgy5OAXODWJXpqBt5S0eAUHQuuL 9hOo9MhyB9A5wMDzDBxRsHdBCcIvEZqkoXZd8zUssMPaz6zyCK7z7Y2n2T4vg6Do 7eYXIuA3Kx5u4Dbqjnhj/61eIiJ1ivR1nmWpbsMFJ+xi7rEAFAfVyw+vpr6BjssP i+mygXicOrZjORw= -----END CERTIFICATE-----Generated at Mon Feb 2 09:42:55 2026 by rpki-client