This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2sMmMqqRVCU8bc0jMemtaSC2vcw.cer File: 2sMmMqqRVCU8bc0jMemtaSC2vcw.cer (raw, json) Hash identifier: IyyhtFVt3sjD4osrsippMOXEiGS6jpjH1jlTda1xrbg= Subject key identifier: DA:C3:26:32:AA:91:54:25:3C:6D:CD:23:31:E9:AD:69:20:B6:BD:CC Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA379D02A9644B98DE4CF1B3387763D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:17:49 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 212.46.57.0/24 IP: 2a12:fc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 19:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:79:d0:2a:96:44:b9:8d:e4:cf:1b:33:87:76:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dac32632aa9154253c6dcd2331e9ad6920b6bdcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:24:55:ad:2c:7d:64:4b:3e:a8:bc:55:24:e7: 91:15:e6:fd:d6:73:92:55:c6:63:f9:14:a6:e4:ae: 44:87:62:d7:73:c5:74:35:b1:22:89:2b:c6:0e:78: c7:f4:5c:1b:49:dc:84:62:8a:55:b6:05:ce:f8:0f: 5a:82:ee:27:37:13:33:b3:a0:93:c8:e9:13:62:d7: 56:f4:93:99:05:cf:4a:d3:9a:6e:90:fb:54:4e:0b: c3:0d:8a:8e:9c:8c:f9:6b:af:4e:5b:a0:34:7e:22: d0:1b:98:c5:77:cc:70:a9:a3:22:ca:9c:22:9b:67: f7:b1:37:54:99:7f:98:f8:98:ff:cc:c8:62:9c:87: f3:a3:33:28:4c:3d:bd:aa:4e:87:b8:35:23:8b:d3: 70:bd:49:83:76:49:68:af:40:8e:04:9f:67:98:86: 3d:97:8b:0f:bb:e7:ff:3d:48:6e:58:9d:d4:a3:7b: ce:b5:c6:a6:ae:42:12:d4:c6:ab:d4:2b:d8:e3:eb: c3:aa:61:b1:0b:0f:83:ef:33:d2:83:4f:b3:fc:05: 2e:8f:c3:82:65:30:c0:cd:8f:27:44:87:90:53:7b: fc:8c:91:90:5a:ec:d2:6c:71:06:ca:5a:b2:c9:42: 4d:28:22:0f:bc:ef:a3:a9:eb:9d:5e:2a:14:9c:8b: 4f:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:C3:26:32:AA:91:54:25:3C:6D:CD:23:31:E9:AD:69:20:B6:BD:CC X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.46.57.0/24 IPv6: 2a12:fc0::/29 Signature Algorithm: sha256WithRSAEncryption 9d:e3:a7:2e:63:11:92:0f:90:18:03:8c:ed:80:e2:67:02:ea: f7:f6:13:ad:4f:c3:76:fa:a4:95:cb:97:c3:6d:c4:07:ee:0d: 61:dd:50:80:c4:66:9a:46:c9:03:23:fb:18:9c:d7:1a:80:0c: 2c:07:75:3d:db:28:a6:a8:4d:71:fb:90:4f:2f:d7:20:87:10: 5e:a7:62:77:90:09:48:4d:29:d4:f6:b0:f4:61:dc:e3:c6:95: 43:42:d3:5a:e1:95:e7:77:08:42:83:8a:b7:58:b1:12:84:c8: 6f:a4:be:16:30:89:30:79:d0:78:63:c7:01:36:03:d5:ff:b0: 7e:3a:59:b0:be:0b:a3:fc:ce:b9:09:63:45:9b:98:d3:bd:ef: f9:3c:fb:68:8f:7a:df:31:bc:a4:3b:01:ad:25:5b:e7:3b:76: b2:f6:92:34:70:aa:05:cb:d5:16:38:16:ca:7d:c5:85:b9:75: 38:51:62:4b:8c:2b:db:30:4a:be:56:ae:97:47:2a:71:e1:73: a2:b4:9d:d8:62:90:1e:b5:b5:d5:c9:f6:1b:ff:7c:86:f3:8c: 8a:79:30:dd:00:59:56:4a:b8:85:96:dc:c6:e1:ed:c7:e2:60: f8:5c:cc:ac:07:6d:c7:58:15:82:f4:a9:b5:c1:72:23:40:c8: d9:35:4d:67 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt7o3nQKpZEuY3kzxszh3Y9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYWMzMjYzMmFhOTE1NDI1M2M2ZGNkMjMzMWU5YWQ2OTIwYjZiZGNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3yRVrSx9ZEs+qLxVJOeRFeb91nOS VcZj+RSm5K5Eh2LXc8V0NbEiiSvGDnjH9FwbSdyEYopVtgXO+A9agu4nNxMzs6CT yOkTYtdW9JOZBc9K05pukPtUTgvDDYqOnIz5a69OW6A0fiLQG5jFd8xwqaMiypwi m2f3sTdUmX+Y+Jj/zMhinIfzozMoTD29qk6HuDUji9NwvUmDdklor0COBJ9nmIY9 l4sPu+f/PUhuWJ3Uo3vOtcamrkIS1Mar1CvY4+vDqmGxCw+D7zPSg0+z/AUuj8OC ZTDAzY8nRIeQU3v8jJGQWuzSbHEGylqyyUJNKCIPvO+jqeudXioUnItPoQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFNrDJjKqkVQlPG3NIzHprWkgtr3MMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZmLzQ5NDI0 YS1hYTVmLTRiOWYtYTYyNy0yNDY1NGU5NDFjMTIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmYvNDk0MjRh LWFhNWYtNGI5Zi1hNjI3LTI0NjU0ZTk0MWMxMi8xLzJzTW1NcXFSVkNVOGJjMGpN ZW10YVNDMnZjdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQA1C45MA0EAgACMAcDBQMqEg/AMA0GCSqGSIb3 DQEBCwUAA4IBAQCd46cuYxGSD5AYA4ztgOJnAur39hOtT8N2+qSVy5fDbcQH7g1h 3VCAxGaaRskDI/sYnNcagAwsB3U92yimqE1x+5BPL9cghxBep2J3kAlITSnU9rD0 YdzjxpVDQtNa4ZXndwhCg4q3WLEShMhvpL4WMIkwedB4Y8cBNgPV/7B+Olmwvguj /M65CWNFm5jTve/5PPtoj3rfMbykOwGtJVvnO3ay9pI0cKoFy9UWOBbKfcWFuXU4 UWJLjCvbMEq+Vq6XRypx4XOitJ3YYpAetbXVyfYb/3yG84yKeTDdAFlWSriFltzG 4e3H4mD4XMysB23HWBWC9Km1wXIjQMjZNU1n -----END CERTIFICATE-----Generated at Fri Jan 2 23:51:59 2026 by rpki-client