This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2qZ8WLSm_iEvwg-3VpSa3cGppiw.cer File: 2qZ8WLSm_iEvwg-3VpSa3cGppiw.cer (raw, json) Hash identifier: d5HCVhZ99HXSVslBf82Ez9umUuL/47KaLfyOyeLOGMw= Subject key identifier: DA:A6:7C:58:B4:A6:FE:21:2F:C2:0F:B7:56:94:9A:DD:C1:A9:A6:2C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F8585765F30ADE114D4B52C33BBFD8C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0c/f295ce-826d-4f54-970f-50f34f435f03/1/2qZ8WLSm_iEvwg-3VpSa3cGppiw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0c/f295ce-826d-4f54-970f-50f34f435f03/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:23:35 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 209012 IP: 2.57.216.0/22 IP: 91.237.51.0/24 IP: 91.247.64.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:85:76:5f:30:ad:e1:14:d4:b5:2c:33:bb:fd:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:23:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=daa67c58b4a6fe212fc20fb756949addc1a9a62c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:b9:95:60:81:97:69:1c:ad:35:44:e1:60:78: 82:21:4c:97:85:69:af:4f:ac:6d:42:24:f0:cd:7e: 44:5a:1b:00:46:e6:88:b5:fe:9c:72:5b:07:a2:9e: 10:74:48:f3:eb:64:2d:a2:bc:54:aa:ef:47:ad:6d: 80:1b:f0:3a:ee:1b:47:b6:95:d8:f7:d1:a7:a9:b2: 36:73:73:19:7a:a8:b7:4f:4e:35:10:97:14:50:ce: 22:cb:77:7e:a7:83:6b:c4:7a:20:18:41:ca:11:44: 36:1f:a2:27:0e:b6:aa:4b:16:d5:15:95:c8:38:2d: 69:37:4c:9a:dc:7d:fc:8c:66:a1:02:a5:12:f1:64: 25:66:b5:c9:d1:48:09:27:8a:bc:7b:bf:e0:ce:45: a7:70:3a:27:e6:12:7c:e6:ad:cd:d5:46:ae:17:94: 83:2a:41:4e:f1:28:55:58:cc:29:2b:a5:5a:28:87: b6:5a:b1:64:21:61:03:a4:4b:44:9a:a1:c4:20:f7: 76:4c:5d:cb:8f:35:2f:b2:e8:8b:60:87:2b:69:30: 5e:92:fe:0f:2b:27:51:c3:88:71:88:50:b1:b3:ab: b5:45:f4:da:f1:b0:c7:b9:59:26:e2:0a:49:5e:0f: 0a:72:07:ee:7f:e2:aa:0d:63:26:4c:15:f4:61:9c: 15:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:A6:7C:58:B4:A6:FE:21:2F:C2:0F:B7:56:94:9A:DD:C1:A9:A6:2C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f295ce-826d-4f54-970f-50f34f435f03/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f295ce-826d-4f54-970f-50f34f435f03/1/2qZ8WLSm_iEvwg-3VpSa3cGppiw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.57.216.0/22 91.237.51.0/24 91.247.64.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 209012 Signature Algorithm: sha256WithRSAEncryption 11:5e:3d:21:b5:40:c2:99:4e:3d:15:ca:1a:29:b0:36:6c:0e: db:0a:99:79:23:79:f0:49:be:bd:cc:4e:9a:91:d9:a7:f3:9e: 43:dd:25:e9:9f:5d:0d:aa:5d:c2:e1:b7:9c:1e:8c:f0:8f:7f: b3:f1:d4:15:09:b4:b9:1a:98:73:6b:cf:09:cf:5d:c5:cf:8a: dc:f1:47:59:2d:8e:e8:dd:6b:35:84:c7:37:75:4a:b9:ce:a2: 71:a6:82:11:c9:b3:cd:f9:6f:12:4a:31:36:d2:6a:f2:15:89: 4c:0e:61:6e:f1:58:e1:28:5c:bb:5d:2c:cf:d9:29:1c:11:16: 64:cf:e9:45:c0:7c:5a:58:cf:df:26:a1:f7:63:ac:ea:c7:ec: 0d:26:75:e1:7f:68:80:dd:66:b3:36:1a:66:36:80:9e:da:b5: 14:6f:3b:09:f3:f9:12:c8:5a:b4:a5:49:d0:a6:98:55:1a:cb: 21:6d:27:de:01:72:cb:2b:d9:96:04:92:38:9e:e2:98:92:17: de:d2:ef:da:d9:b8:3b:de:32:94:f8:82:c7:04:3a:cf:34:93: 70:8c:8f:4a:e6:03:79:87:f6:4d:a7:f6:af:dc:0a:b7:98:c0: 11:cb:cb:c8:0a:dc:d0:89:ac:b8:29:97:5c:b3:ae:f0:aa:ab: d5:45:c2:7f -----BEGIN CERTIFICATE----- MIIFoDCCBIigAwIBAgISAZt/hYV2XzCt4RTUtSwzu/2MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYWE2N2M1OGI0YTZmZTIxMmZjMjBmYjc1Njk0OWFkZGMxYTlhNjJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLmVYIGXaRytNUThYHiCIUyXhWmv T6xtQiTwzX5EWhsARuaItf6cclsHop4QdEjz62QtorxUqu9HrW2AG/A67htHtpXY 99GnqbI2c3MZeqi3T041EJcUUM4iy3d+p4NrxHogGEHKEUQ2H6InDraqSxbVFZXI OC1pN0ya3H38jGahAqUS8WQlZrXJ0UgJJ4q8e7/gzkWncDon5hJ85q3N1UauF5SD KkFO8ShVWMwpK6VaKIe2WrFkIWEDpEtEmqHEIPd2TF3LjzUvsuiLYIcraTBekv4P KydRw4hxiFCxs6u1RfTa8bDHuVkm4gpJXg8Kcgfuf+KqDWMmTBX0YZwVtQIDAQAB o4ICrDCCAqgwHQYDVR0OBBYEFNqmfFi0pv4hL8IPt1aUmt3BqaYsMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBjL2YyOTVj ZS04MjZkLTRmNTQtOTcwZi01MGYzNGY0MzVmMDMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGMvZjI5NWNl LTgyNmQtNGY1NC05NzBmLTUwZjM0ZjQzNWYwMy8xLzJxWjhXTFNtX2lFdndnLTNW cFNhM2NHcHBpdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUF BwEHAQH/BBwwGjAYBAIAATASAwQCAjnYAwQAW+0zAwQBW/dAMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwMwdDANBgkqhkiG9w0BAQsFAAOCAQEAEV49IbVAwplOPRXK GimwNmwO2wqZeSN58Em+vcxOmpHZp/OeQ90l6Z9dDapdwuG3nB6M8I9/s/HUFQm0 uRqYc2vPCc9dxc+K3PFHWS2O6N1rNYTHN3VKuc6icaaCEcmzzflvEkoxNtJq8hWJ TA5hbvFY4Shcu10sz9kpHBEWZM/pRcB8WljP3yah92Os6sfsDSZ14X9ogN1mszYa ZjaAntq1FG87CfP5EshatKVJ0KaYVRrLIW0n3gFyyyvZlgSSOJ7imJIX3tLv2tm4 O94ylPiCxwQ6zzSTcIyPSuYDeYf2Taf2r9wKt5jAEcvLyArc0ImsuCmXXLOu8Kqr 1UXCfw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:43:39 2026 by rpki-client