This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2scQMP4IHgK6tII9BWj_sqMyZeE.cer File: 2scQMP4IHgK6tII9BWj_sqMyZeE.cer (raw, json) Hash identifier: HU1UysAW8UPpe/HupOqsFxeEvxJEyDVGio3d0iwwwuU= Subject key identifier: DA:C7:10:30:FE:08:1E:02:BA:B4:82:3D:05:68:FF:B2:A3:32:65:E1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA327359F549821FBCDF32FB94E74B9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:17:28 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 205285 IP: 45.11.224.0/22 IP: 45.14.136.0/22 IP: 45.81.108.0/22 IP: 45.84.76.0/22 IP: 185.223.4.0/22 IP: 194.110.140.0/23 IP: 194.110.148.0/23 IP: 2a0a:6f00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:27:35:9f:54:98:21:fb:cd:f3:2f:b9:4e:74:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dac71030fe081e02bab4823d0568ffb2a33265e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b1:6b:98:2a:30:2b:12:cc:0c:67:ae:83:d7: 7a:39:88:84:98:49:4a:f8:6d:4f:08:b7:0d:24:5a: af:74:d2:ba:07:10:93:3c:1e:8a:6e:18:ae:0c:87: 68:b5:e9:f5:a4:5e:21:b8:20:19:d6:ce:29:f3:da: 74:3a:6f:b8:48:d0:f0:fa:3d:4b:ed:0d:fe:9b:55: 4d:24:ea:b7:03:1d:01:7b:48:aa:a0:e2:76:df:4d: 01:3d:c8:cc:56:42:0d:0b:9f:41:92:e3:cb:94:cf: 9c:ef:72:b0:09:2f:5c:8d:b8:12:a6:8c:39:9e:a3: ac:c7:45:e3:c4:3e:9e:40:60:1f:fa:27:76:b7:f2: d7:d2:03:95:72:d6:49:50:3d:25:96:00:64:14:49: 70:61:75:b6:ff:0e:7c:61:92:50:18:53:bf:8f:83: 5e:42:b0:3c:f9:62:ca:4c:0e:9e:2e:76:0f:3b:ad: 5f:66:16:fe:80:d3:8b:28:4e:bf:5d:c7:32:54:e3: de:bb:24:18:04:7f:e8:f7:2c:31:99:00:21:1d:38: c5:ea:57:ac:1c:40:cc:81:2b:7a:0d:95:de:da:01: 17:85:56:a0:63:27:6e:4f:cc:2b:af:ed:8d:d6:5c: 12:f4:5a:1a:6a:ed:f5:62:c6:bc:8c:91:50:6f:33: b0:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:C7:10:30:FE:08:1E:02:BA:B4:82:3D:05:68:FF:B2:A3:32:65:E1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.11.224.0/22 45.14.136.0/22 45.81.108.0/22 45.84.76.0/22 185.223.4.0/22 194.110.140.0/23 194.110.148.0/23 IPv6: 2a0a:6f00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 205285 Signature Algorithm: sha256WithRSAEncryption 63:1a:cb:01:a3:b0:26:af:26:0e:ee:4c:8f:56:cb:c2:a7:af: df:0e:06:43:06:e3:fe:ff:71:a8:4b:63:0a:ca:88:49:29:59: 9b:23:48:a6:57:d4:bd:7e:4c:ec:33:04:0e:7a:0e:1b:77:a3: bd:1e:e1:14:e4:85:76:2e:03:f1:47:ee:9e:c0:27:71:b5:03: 34:6c:7a:80:37:ff:3a:04:32:93:ec:c7:82:26:33:cf:d3:76: 28:6e:9f:db:bd:4f:20:35:4c:3e:bd:11:1d:d4:d7:9b:fd:0b: c1:99:d6:05:a3:a8:1e:ea:3a:65:61:37:55:d2:82:93:08:19: ad:e4:7e:48:19:56:aa:4b:54:cf:a8:9c:df:9d:8a:7e:da:c1: 86:54:2c:c0:2f:c4:3a:9c:58:e0:44:00:5d:51:4f:9b:9d:05: e6:e7:54:6c:07:8c:c9:07:dc:c4:cd:9c:1d:df:43:b9:09:92: 82:12:e5:b9:20:2a:c7:a1:0e:cb:c4:2d:49:79:5d:b8:5a:18: 1e:0f:3f:e5:1b:c7:d4:9b:fb:aa:44:6d:4c:20:e4:74:bb:62: b2:a4:15:ea:8c:81:96:65:28:67:19:41:eb:24:56:fd:92:ad: c7:dd:a7:97:1a:56:50:8b:b1:ed:3a:4c:41:a3:5b:de:09:4a: b5:12:16:7a -----BEGIN CERTIFICATE----- MIIFxzCCBK+gAwIBAgISAZt7oyc1n1SYIfvN8y+5TnS5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYWM3MTAzMGZlMDgxZTAyYmFiNDgyM2QwNTY4ZmZiMmEzMzI2NWUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbFrmCowKxLMDGeug9d6OYiEmElK +G1PCLcNJFqvdNK6BxCTPB6KbhiuDIdoten1pF4huCAZ1s4p89p0Om+4SNDw+j1L 7Q3+m1VNJOq3Ax0Be0iqoOJ2300BPcjMVkINC59BkuPLlM+c73KwCS9cjbgSpow5 nqOsx0XjxD6eQGAf+id2t/LX0gOVctZJUD0llgBkFElwYXW2/w58YZJQGFO/j4Ne QrA8+WLKTA6eLnYPO61fZhb+gNOLKE6/XccyVOPeuyQYBH/o9ywxmQAhHTjF6les HEDMgSt6DZXe2gEXhVagYyduT8wrr+2N1lwS9Foaau31Ysa8jJFQbzOwEwIDAQAB o4IC0zCCAs8wHQYDVR0OBBYEFNrHEDD+CB4CurSCPQVo/7KjMmXhMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M3LzI1ZTZk OC00ZTcyLTRhYzItYjZlNS1jODIwMWI5MWFlYzMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzcvMjVlNmQ4 LTRlNzItNGFjMi1iNmU1LWM4MjAxYjkxYWVjMy8xLzJzY1FNUDRJSGdLNnRJSTlC V2pfc3FNeVplRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFIGCCsGAQUF BwEHAQH/BEMwQTAwBAIAATAqAwQCLQvgAwQCLQ6IAwQCLVFsAwQCLVRMAwQCud8E AwQBwm6MAwQBwm6UMA0EAgACMAcDBQMqCm8AMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwMh5TANBgkqhkiG9w0BAQsFAAOCAQEAYxrLAaOwJq8mDu5Mj1bLwqev3w4G Qwbj/v9xqEtjCsqISSlZmyNIplfUvX5M7DMEDnoOG3ejvR7hFOSFdi4D8UfunsAn cbUDNGx6gDf/OgQyk+zHgiYzz9N2KG6f271PIDVMPr0RHdTXm/0LwZnWBaOoHuo6 ZWE3VdKCkwgZreR+SBlWqktUz6ic352KftrBhlQswC/EOpxY4EQAXVFPm50F5udU bAeMyQfcxM2cHd9DuQmSghLluSAqx6EOy8QtSXlduFoYHg8/5RvH1Jv7qkRtTCDk dLtisqQV6oyBlmUoZxlB6yRW/ZKtx92nlxpWUIux7TpMQaNb3glKtRIWeg== -----END CERTIFICATE-----Generated at Mon Feb 9 20:50:37 2026 by rpki-client