This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2t3Rtjb-PfHfPYEfZEWDMSplEzc.cer File: 2t3Rtjb-PfHfPYEfZEWDMSplEzc.cer (raw, json) Hash identifier: yhfQsmkA/M7lNnkWV03SToLsnhaePTc5ailvQo+yKSw= Subject key identifier: DA:DD:D1:B6:36:FE:3D:F1:DF:3D:81:1F:64:45:83:31:2A:65:13:37 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797EFD507CCF620E1D10F9FD8A27352C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b2/4643d7-37d7-4b3c-a1a5-632ce67c085a/1/2t3Rtjb-PfHfPYEfZEWDMSplEzc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b2/4643d7-37d7-4b3c-a1a5-632ce67c085a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:44 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.162.102.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:fd:50:7c:cf:62:0e:1d:10:f9:fd:8a:27:35:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=daddd1b636fe3df1df3d811f644583312a651337 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:19:bf:c5:e3:26:8c:16:6f:9f:1f:29:b7:e1: 54:14:8a:6b:e6:c6:cc:a8:98:90:8b:cd:4b:2f:2a: 48:1f:73:75:5e:e7:90:d5:e1:1b:c1:e1:93:85:b7: e7:bf:3e:30:12:5f:9d:56:5d:65:65:13:d8:23:ea: 06:38:38:0d:08:a7:c1:a2:13:59:5c:16:0d:04:31: 34:dc:3b:8f:ba:af:bd:9e:a1:0b:8f:c6:da:0d:e3: 2b:7b:2d:4e:6e:12:5a:42:10:e5:e3:37:01:78:99: 3d:e2:af:0f:30:8d:72:7f:dc:ac:29:09:ee:af:c9: e7:0d:f4:e6:0b:29:4c:5a:14:de:f7:8c:72:ff:6f: 73:52:2e:3f:5d:ba:28:e1:e4:f3:22:2d:ed:90:de: 38:90:c0:b3:c2:c0:d2:19:d1:f1:9a:2d:30:77:ba: 9d:82:78:18:12:ea:02:23:8f:0f:dc:51:a2:11:98: 39:26:60:35:52:b8:1c:eb:3d:56:55:9f:a1:22:9f: 85:59:c5:d1:a6:58:10:da:84:3b:fd:b5:20:eb:1c: 3a:3d:c3:d6:4b:2e:05:e1:8e:de:12:2c:b6:29:1d: 38:3c:80:0b:4f:8a:e5:a7:1f:49:2a:7c:32:0e:eb: c0:ca:61:c5:2e:e4:a8:a5:07:61:87:58:2a:b6:0f: c7:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:DD:D1:B6:36:FE:3D:F1:DF:3D:81:1F:64:45:83:31:2A:65:13:37 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4643d7-37d7-4b3c-a1a5-632ce67c085a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4643d7-37d7-4b3c-a1a5-632ce67c085a/1/2t3Rtjb-PfHfPYEfZEWDMSplEzc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.162.102.0/24 Signature Algorithm: sha256WithRSAEncryption 86:74:7a:24:65:3a:2f:15:fb:76:b2:02:4f:7d:a3:8e:14:77: 1e:99:60:cc:2a:f7:75:fc:90:f7:07:4f:70:fb:81:b8:c3:b5: a3:20:45:de:62:53:97:3d:16:5c:52:ba:c1:22:22:74:be:e5: c8:de:93:1e:8d:75:b9:78:89:96:b4:97:f4:46:ce:ca:f7:f3: 84:f1:93:16:1b:9f:d9:40:da:a8:fc:f7:f6:1a:03:af:11:58: fa:65:e5:de:b7:0d:0e:a9:b5:79:42:cb:9e:07:97:1c:73:e4: b8:8b:09:6a:a3:11:8e:ac:f1:58:c4:c0:e5:94:a6:d6:aa:0e: 93:d3:6d:29:3f:25:1e:49:af:d8:0d:94:4f:5e:ea:9d:c9:9e: 27:40:66:95:69:75:c1:d4:83:6b:01:7a:77:45:09:5f:29:56: ba:b6:3d:4e:46:e0:d9:eb:fe:28:87:f2:28:b9:d8:d7:91:a3: 16:ca:83:8d:99:18:a9:fe:c3:b0:0e:a6:58:ca:2b:f7:56:ac: c6:f1:4b:10:8b:6b:7e:fc:8d:af:ea:7a:09:7a:98:e0:bf:0b: 69:5c:0f:88:71:a9:09:69:2e:75:c6:00:7d:b2:36:83:f5:3c: 42:74:80:35:73:94:c6:7a:0f:16:7e:49:b6:4d:00:48:ce:8f: ea:47:91:6c -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt5fv1QfM9iDh0Q+f2KJzUsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYWRkZDFiNjM2ZmUzZGYxZGYzZDgxMWY2NDQ1ODMzMTJhNjUxMzM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRm/xeMmjBZvnx8pt+FUFIpr5sbM qJiQi81LLypIH3N1XueQ1eEbweGThbfnvz4wEl+dVl1lZRPYI+oGODgNCKfBohNZ XBYNBDE03DuPuq+9nqELj8baDeMrey1ObhJaQhDl4zcBeJk94q8PMI1yf9ysKQnu r8nnDfTmCylMWhTe94xy/29zUi4/Xboo4eTzIi3tkN44kMCzwsDSGdHxmi0wd7qd gngYEuoCI48P3FGiEZg5JmA1Urgc6z1WVZ+hIp+FWcXRplgQ2oQ7/bUg6xw6PcPW Sy4F4Y7eEiy2KR04PIALT4rlpx9JKnwyDuvAymHFLuSopQdhh1gqtg/H3QIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFNrd0bY2/j3x3z2BH2RFgzEqZRM3MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2IyLzQ2NDNk Ny0zN2Q3LTRiM2MtYTFhNS02MzJjZTY3YzA4NWEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjIvNDY0M2Q3 LTM3ZDctNGIzYy1hMWE1LTYzMmNlNjdjMDg1YS8xLzJ0M1J0amItUGZIZlBZRWZa RVdETVNwbEV6Yy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwaJmMA0GCSqGSIb3DQEBCwUAA4IBAQCGdHok ZTovFft2sgJPfaOOFHcemWDMKvd1/JD3B09w+4G4w7WjIEXeYlOXPRZcUrrBIiJ0 vuXI3pMejXW5eImWtJf0Rs7K9/OE8ZMWG5/ZQNqo/Pf2GgOvEVj6ZeXetw0OqbV5 QsueB5ccc+S4iwlqoxGOrPFYxMDllKbWqg6T020pPyUeSa/YDZRPXuqdyZ4nQGaV aXXB1INrAXp3RQlfKVa6tj1ORuDZ6/4oh/IoudjXkaMWyoONmRip/sOwDqZYyiv3 VqzG8UsQi2t+/I2v6noJepjgvwtpXA+IcakJaS51xgB9sjaD9TxCdIA1c5TGeg8W fkm2TQBIzo/qR5Fs -----END CERTIFICATE-----Generated at Mon Feb 9 15:04:50 2026 by rpki-client