This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2rHAMIjr_lU4ErMVR8A8kKJdh3E.cer File: 2rHAMIjr_lU4ErMVR8A8kKJdh3E.cer (raw, json) Hash identifier: 0FqmWYOD7kPJdpSh2sv9VpD314w20tcm9QUy7INhyYk= Subject key identifier: DA:B1:C0:30:88:EB:FE:55:38:12:B3:15:47:C0:3C:90:A2:5D:87:71 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB87C9CB5F55AA941E0D6414B28248 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:25 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 58130 IP: 176.116.96.0 -- 176.116.115.255 IP: 185.165.140.0/22 IP: 2001:67c:1050::/48 IP: 2a0a:1a00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:87:c9:cb:5f:55:aa:94:1e:0d:64:14:b2:82:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dab1c03088ebfe553812b31547c03c90a25d8771 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:7c:bb:da:f9:fa:de:c6:9e:3b:b8:38:9d:19: a4:96:fc:95:8c:b3:94:c0:4f:d4:b9:bb:32:9b:7c: 81:bf:ee:96:ba:a1:bd:9d:5a:e7:d3:26:4a:e6:aa: 62:b0:d0:9d:4c:e4:8c:66:e7:ba:fc:bd:cb:71:92: 80:d0:72:5b:69:19:e8:b0:ef:35:df:59:4f:21:8f: 5b:f8:25:0d:c9:2c:5a:c0:88:4f:a3:96:02:72:78: 66:6c:2b:83:0f:65:b7:2c:47:87:f1:8f:d4:40:70: 55:33:ab:af:5b:56:66:9a:dd:bd:2b:17:56:8a:5d: 78:ac:fa:ed:b3:a9:fc:e1:f6:7c:69:2a:a5:a3:b5: bc:1a:c5:2b:18:c2:8e:64:49:17:dc:de:73:17:42: c1:8f:6d:43:89:27:f2:5b:a5:89:0b:6b:9e:96:1b: 33:a4:0a:f3:60:28:05:15:65:27:ad:e7:97:01:1c: 0b:6d:22:72:42:7b:00:22:37:c5:2a:3c:c2:97:e8: 51:f1:b6:c2:9d:5c:67:ab:95:44:80:86:09:01:04: b2:3b:7e:ed:bf:aa:4b:8f:4c:7e:23:53:f8:75:71: c5:c3:72:56:32:ea:9c:3e:2b:dc:a4:ba:16:fd:97: dd:a9:f8:a0:48:7b:64:8d:3b:f0:3f:d5:02:52:87: 00:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:B1:C0:30:88:EB:FE:55:38:12:B3:15:47:C0:3C:90:A2:5D:87:71 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.116.96.0-176.116.115.255 185.165.140.0/22 IPv6: 2001:67c:1050::/48 2a0a:1a00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 58130 Signature Algorithm: sha256WithRSAEncryption 60:89:34:45:9f:51:ff:6e:b8:81:61:60:23:73:09:1c:4f:6e: f0:41:7b:8b:3e:3f:7c:41:48:19:88:0a:67:21:4a:b1:56:f1: 1d:a0:cc:f1:d0:75:15:3e:80:23:17:4b:6d:56:96:4c:d1:f5: a6:b0:12:0d:ac:d2:4a:fb:4e:35:f4:85:e0:99:1e:44:b9:52: ea:98:a3:52:82:f1:a1:82:70:80:08:0d:a2:b1:cb:50:2e:43: 33:ce:73:15:d0:b4:85:a4:79:1c:0c:47:40:b7:ec:55:07:4a: df:28:1c:e3:1f:7b:1e:1d:a1:7a:d4:bd:4c:f4:b7:8f:69:9a: 94:aa:1d:56:5a:c5:cf:88:63:56:f5:a1:7d:6c:79:6a:95:16: 2b:2a:f1:e1:12:05:3c:20:49:81:79:2b:d1:db:36:94:49:c9: 87:48:24:47:5c:45:a2:a2:ee:a8:19:64:ed:cc:c5:58:93:8c: 4a:04:fe:2d:05:b6:02:01:dc:d2:d4:42:47:73:cf:94:bc:2d: d9:54:0a:7f:1f:e9:21:1c:97:b4:e1:f0:fc:64:66:4b:fc:42: 2c:ff:35:a5:ff:0a:56:82:34:d9:cd:2f:c5:12:31:ea:2a:af: d8:b3:b2:8e:ca:c4:01:c8:8e:e4:5c:a8:01:eb:fc:97:36:fd: 4a:82:c8:88 -----BEGIN CERTIFICATE----- MIIFujCCBKKgAwIBAgISAZt264fJy19VqpQeDWQUsoJIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYWIxYzAzMDg4ZWJmZTU1MzgxMmIzMTU0N2MwM2M5MGEyNWQ4NzcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA23y72vn63saeO7g4nRmklvyVjLOU wE/Uubsym3yBv+6WuqG9nVrn0yZK5qpisNCdTOSMZue6/L3LcZKA0HJbaRnosO81 31lPIY9b+CUNySxawIhPo5YCcnhmbCuDD2W3LEeH8Y/UQHBVM6uvW1Zmmt29KxdW il14rPrts6n84fZ8aSqlo7W8GsUrGMKOZEkX3N5zF0LBj21DiSfyW6WJC2uelhsz pArzYCgFFWUnreeXARwLbSJyQnsAIjfFKjzCl+hR8bbCnVxnq5VEgIYJAQSyO37t v6pLj0x+I1P4dXHFw3JWMuqcPivcpLoW/ZfdqfigSHtkjTvwP9UCUocAVQIDAQAB o4ICxjCCAsIwHQYDVR0OBBYEFNqxwDCI6/5VOBKzFUfAPJCiXYdxMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NlLzM2YzJh YS0yZTI0LTQ0ZmItOWUwYS1iNzIzOTgwNzA4MjMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2UvMzZjMmFh LTJlMjQtNDRmYi05ZTBhLWI3MjM5ODA3MDgyMy8xLzJySEFNSWpyX2xVNEVyTVZS OEE4a0tKZGgzRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEUGCCsGAQUF BwEHAQH/BDYwNDAaBAIAATAUMAwDBAWwdGADBAKwdHADBAK5pYwwFgQCAAIwEAMH ACABBnwQUAMFAyoKGgAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAOMSMA0GCSqG SIb3DQEBCwUAA4IBAQBgiTRFn1H/briBYWAjcwkcT27wQXuLPj98QUgZiApnIUqx VvEdoMzx0HUVPoAjF0ttVpZM0fWmsBINrNJK+0419IXgmR5EuVLqmKNSgvGhgnCA CA2isctQLkMzznMV0LSFpHkcDEdAt+xVB0rfKBzjH3seHaF61L1M9LePaZqUqh1W WsXPiGNW9aF9bHlqlRYrKvHhEgU8IEmBeSvR2zaUScmHSCRHXEWiou6oGWTtzMVY k4xKBP4tBbYCAdzS1EJHc8+UvC3ZVAp/H+khHJe04fD8ZGZL/EIs/zWl/wpWgjTZ zS/FEjHqKq/Ys7KOysQByI7kXKgB6/yXNv1KgsiI -----END CERTIFICATE-----Generated at Mon Feb 9 19:49:35 2026 by rpki-client