This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2sTLURUIAqQBjMJWrSn1RyBnXtU.cer File: 2sTLURUIAqQBjMJWrSn1RyBnXtU.cer (raw, json) Hash identifier: J0f5gIzDzK702nySvhE+/ijoe2GP6yFDP1dbOycKR2I= Subject key identifier: DA:C4:CB:51:15:08:02:A4:01:8C:C2:56:AD:29:F5:47:20:67:5E:D5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DC8A0C8E0A3DD6E1D0BAB5830D0A9AC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4e/36e838-1bbf-4cc0-b5da-4180f9e30945/1/2sTLURUIAqQBjMJWrSn1RyBnXtU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4e/36e838-1bbf-4cc0-b5da-4180f9e30945/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:17:39 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 211457 IP: 185.218.105.0/24 IP: 2a10:d3c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c8:a0:c8:e0:a3:dd:6e:1d:0b:ab:58:30:d0:a9:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dac4cb51150802a4018cc256ad29f54720675ed5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:0f:6a:c1:ca:d6:ae:20:a4:b3:80:2f:69:9f: 1b:1a:57:f8:bb:8b:cb:01:75:a3:69:93:a5:74:ae: 91:60:2e:77:e1:06:7f:12:f6:56:0a:db:d4:bc:38: aa:fb:12:29:38:e1:0a:93:20:8f:df:17:7f:9c:97: 1b:7d:16:4a:6b:de:38:54:e8:ef:25:c4:52:a1:66: 11:23:db:45:e9:6e:e7:6d:66:be:5a:c0:f5:37:fe: 9d:9f:04:fd:54:55:68:bd:1f:4b:55:d1:d0:ab:0d: 02:12:54:44:90:65:88:af:d4:7e:89:fa:d1:5a:ce: fd:63:87:2f:d0:b7:8f:df:62:ef:ad:79:dc:c3:93: df:44:ff:01:8e:c7:d7:35:d9:a8:0c:30:9a:86:e3: 9b:dc:f8:d1:6e:81:10:ba:c6:07:be:b5:1a:90:90: 9b:92:2c:67:25:d2:8c:28:9f:e6:f9:1a:0e:6a:c0: 02:da:1b:7d:1c:32:5b:ff:fe:a7:a6:9f:ff:2b:a6: 9d:e4:ea:86:b5:dc:77:1a:e7:6f:30:1a:4c:ef:ad: fb:01:f2:d2:af:9b:d9:fc:31:6b:be:f0:85:ec:58: 8f:3b:5f:72:21:d0:ff:63:08:17:1d:72:96:9b:4b: 45:60:b4:2d:a0:a4:7b:b6:e3:bd:6e:44:b6:3f:e5: e3:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:C4:CB:51:15:08:02:A4:01:8C:C2:56:AD:29:F5:47:20:67:5E:D5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/36e838-1bbf-4cc0-b5da-4180f9e30945/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/36e838-1bbf-4cc0-b5da-4180f9e30945/1/2sTLURUIAqQBjMJWrSn1RyBnXtU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.218.105.0/24 IPv6: 2a10:d3c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 211457 Signature Algorithm: sha256WithRSAEncryption 40:57:79:c2:74:4e:bb:30:cc:14:a9:8c:0f:1d:f9:f1:9a:28: 1f:38:62:e9:50:ef:5a:33:0a:0a:23:97:cb:79:df:94:5b:c3: ac:87:90:69:6a:33:eb:68:82:cd:1c:31:24:35:a1:8d:d7:6b: 0b:1e:ff:8d:01:14:1a:65:de:fe:7a:6b:bd:60:32:97:80:c7: c8:ee:06:89:25:c7:20:0b:cc:da:ca:55:c6:56:49:ee:98:e2: b4:78:86:0c:c2:b9:85:b3:bb:95:1d:3a:0b:36:63:10:dc:a2: 82:d6:8f:be:dd:ef:74:da:84:be:ef:9a:9c:6f:47:77:ee:ca: da:fa:2e:28:69:c0:af:1e:4c:47:d1:2e:1e:b6:54:3d:55:9c: 2c:01:cf:49:da:cb:c7:57:cc:14:35:16:77:c0:62:e7:63:44: bd:c2:99:82:22:2b:e0:64:2e:1c:64:36:e0:c1:1b:6c:08:3d: dd:b5:01:9c:73:40:0c:22:72:8e:ef:93:7e:c1:a3:1d:aa:f0: af:6a:c3:07:1b:4d:74:ab:34:17:a4:bd:8a:52:5b:48:a3:c8: ec:aa:9c:59:41:f6:50:bb:af:f6:c4:1e:6c:e6:d8:be:58:30: d9:41:5b:7d:9f:95:40:2a:53:eb:59:7c:b8:c5:46:f8:c3:38: 44:43:d4:df -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt9yKDI4KPdbh0Lq1gw0KmsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYWM0Y2I1MTE1MDgwMmE0MDE4Y2MyNTZhZDI5ZjU0NzIwNjc1ZWQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwg9qwcrWriCks4AvaZ8bGlf4u4vL AXWjaZOldK6RYC534QZ/EvZWCtvUvDiq+xIpOOEKkyCP3xd/nJcbfRZKa944VOjv JcRSoWYRI9tF6W7nbWa+WsD1N/6dnwT9VFVovR9LVdHQqw0CElREkGWIr9R+ifrR Ws79Y4cv0LeP32LvrXncw5PfRP8BjsfXNdmoDDCahuOb3PjRboEQusYHvrUakJCb kixnJdKMKJ/m+RoOasAC2ht9HDJb//6npp//K6ad5OqGtdx3GudvMBpM7637AfLS r5vZ/DFrvvCF7FiPO19yIdD/YwgXHXKWm0tFYLQtoKR7tuO9bkS2P+XjLwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFNrEy1EVCAKkAYzCVq0p9UcgZ17VMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRlLzM2ZTgz OC0xYmJmLTRjYzAtYjVkYS00MTgwZjllMzA5NDUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGUvMzZlODM4 LTFiYmYtNGNjMC1iNWRhLTQxODBmOWUzMDk0NS8xLzJzVExVUlVJQXFRQmpNSldy U24xUnlCblh0VS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAudppMA0EAgACMAcDBQMqENPAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM6ATANBgkqhkiG9w0BAQsFAAOCAQEAQFd5wnROuzDM FKmMDx358ZooHzhi6VDvWjMKCiOXy3nflFvDrIeQaWoz62iCzRwxJDWhjddrCx7/ jQEUGmXe/nprvWAyl4DHyO4GiSXHIAvM2spVxlZJ7pjitHiGDMK5hbO7lR06CzZj ENyigtaPvt3vdNqEvu+anG9Hd+7K2vouKGnArx5MR9EuHrZUPVWcLAHPSdrLx1fM FDUWd8Bi52NEvcKZgiIr4GQuHGQ24MEbbAg93bUBnHNADCJyju+TfsGjHarwr2rD BxtNdKs0F6S9ilJbSKPI7KqcWUH2ULuv9sQebObYvlgw2UFbfZ+VQCpT61l8uMVG +MM4REPU3w== -----END CERTIFICATE-----Generated at Mon Feb 9 18:26:55 2026 by rpki-client