This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2qUj1biTySXsOoJgH5J0WCzvxvA.cer File: 2qUj1biTySXsOoJgH5J0WCzvxvA.cer (raw, json) Hash identifier: m5ZsmUaDl8p3jQp0Lg9mJANPUwPxSBIgrikGLzV+VZ0= Subject key identifier: DA:A5:23:D5:B8:93:C9:25:EC:3A:82:60:1F:92:74:58:2C:EF:C6:F0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB9229D61EE1A88C8EC3A73EFDB603 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:28 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 216105 IP: 2001:67c:d4c::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:92:29:d6:1e:e1:a8:8c:8e:c3:a7:3e:fd:b6:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=daa523d5b893c925ec3a82601f9274582cefc6f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:55:0f:41:e7:b8:88:5d:e7:39:25:ac:23:74: f7:38:53:25:b1:e9:99:4e:97:12:50:fb:2f:66:d3: c0:cb:69:79:4d:eb:7a:64:e3:03:82:55:55:04:2e: 68:18:10:f7:37:02:9e:e1:61:f3:d5:b6:de:20:8b: b1:64:76:b4:c4:ff:ba:e4:f0:23:bb:a2:8e:a4:ae: b0:9e:f2:cf:43:56:db:54:7c:b6:dd:9e:aa:b1:23: 01:c3:42:ef:c3:f5:9a:f2:2b:7f:ef:62:71:cc:7f: 64:97:23:f6:8c:23:eb:e9:d7:c7:cc:04:04:35:fe: 18:e4:44:0e:63:e5:62:84:ef:f8:09:f1:5b:3a:1e: ea:7c:87:24:d1:a6:64:ee:ad:96:a7:b3:8c:f5:bd: 36:d7:f7:5b:8d:e6:90:ca:a9:b2:c6:6a:8b:23:c4: 62:1a:97:73:69:11:e3:7d:23:c6:1d:e3:ff:a3:86: e2:20:40:46:55:a9:d1:0a:1f:b8:67:95:97:7a:d6: ea:f7:31:40:a8:3e:f4:0d:ce:d9:af:b5:28:d6:88: 65:9f:a6:92:a4:2a:35:32:57:f2:db:72:6e:72:34: 80:06:c2:26:b1:2e:4c:b0:e6:11:99:d1:d6:6c:34: a9:10:fb:cb:9f:f9:29:82:f6:87:c0:31:2f:6b:e5: ec:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:A5:23:D5:B8:93:C9:25:EC:3A:82:60:1F:92:74:58:2C:EF:C6:F0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:d4c::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 216105 Signature Algorithm: sha256WithRSAEncryption 17:a5:ea:07:58:e4:a7:40:29:fa:78:77:1b:ca:9c:36:ca:f9: 00:ad:14:c7:54:a1:e6:d4:81:7b:72:a6:6f:56:77:8e:a5:02: f2:d5:ca:8c:6f:fb:e9:91:f2:ae:be:e4:f8:78:9f:dc:10:af: 8a:40:0e:c3:6b:95:77:67:23:29:77:cc:01:65:30:94:29:67: ca:3e:8b:73:88:ac:de:2d:06:96:30:e6:67:d5:40:74:e0:87: 99:b1:7d:87:8b:56:5f:ca:68:66:3b:93:17:66:ab:57:d7:a5: 56:f4:ea:97:23:4f:ea:1e:66:c9:b7:db:28:d0:09:b6:3b:27: 07:c6:91:9b:d1:45:5c:31:94:ec:96:d3:75:63:47:a5:ec:10: 21:70:36:a8:b6:99:a5:7d:77:1c:6c:86:81:53:9a:96:60:f9: 80:ff:10:3d:54:99:b1:4e:12:cb:ed:e4:fe:cc:71:99:e4:29: a7:ba:a8:62:ac:20:40:ae:ef:f8:7e:c9:44:69:db:ab:72:e6: e0:6b:5c:93:d2:e9:8a:81:90:0a:5a:5f:9f:3e:1f:7f:86:2a: d1:2d:0f:c6:82:5a:ac:e4:66:0a:46:11:3e:1e:c3:bb:3a:7b: d3:7c:15:04:45:19:92:1b:5c:ba:23:f1:87:3f:32:a3:5d:2e: 42:6f:ce:a6 -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZt265Ip1h7hqIyOw6c+/bYDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYWE1MjNkNWI4OTNjOTI1ZWMzYTgyNjAxZjkyNzQ1ODJjZWZjNmYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVUPQee4iF3nOSWsI3T3OFMlsemZ TpcSUPsvZtPAy2l5Tet6ZOMDglVVBC5oGBD3NwKe4WHz1bbeIIuxZHa0xP+65PAj u6KOpK6wnvLPQ1bbVHy23Z6qsSMBw0Lvw/Wa8it/72JxzH9klyP2jCPr6dfHzAQE Nf4Y5EQOY+VihO/4CfFbOh7qfIck0aZk7q2Wp7OM9b021/dbjeaQyqmyxmqLI8Ri GpdzaRHjfSPGHeP/o4biIEBGVanRCh+4Z5WXetbq9zFAqD70Dc7Zr7Uo1ohln6aS pCo1Mlfy23JucjSABsImsS5MsOYRmdHWbDSpEPvLn/kpgvaHwDEva+XsCwIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFNqlI9W4k8kl7DqCYB+SdFgs78bwMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBmLzdlN2Vi NC02ZTU2LTRjYWYtOGVkYi1hNDUwMjk1YTQ5MGQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGYvN2U3ZWI0 LTZlNTYtNGNhZi04ZWRiLWE0NTAyOTVhNDkwZC8xLzJxVWoxYmlUeVNYc09vSmdI NUowV0N6dnh2QS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfA1MMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwNMKTANBgkqhkiG9w0BAQsFAAOCAQEAF6XqB1jkp0Ap+nh3G8qcNsr5AK0U x1Sh5tSBe3Kmb1Z3jqUC8tXKjG/76ZHyrr7k+Hif3BCvikAOw2uVd2cjKXfMAWUw lClnyj6Lc4is3i0GljDmZ9VAdOCHmbF9h4tWX8poZjuTF2arV9elVvTqlyNP6h5m ybfbKNAJtjsnB8aRm9FFXDGU7JbTdWNHpewQIXA2qLaZpX13HGyGgVOalmD5gP8Q PVSZsU4Sy+3k/sxxmeQpp7qoYqwgQK7v+H7JRGnbq3Lm4Gtck9LpioGQClpfnz4f f4Yq0S0PxoJarORmCkYRPh7Duzp703wVBEUZkhtcuiPxhz8yo10uQm/Opg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:29:17 2026 by rpki-client