This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2vCjnPrfkQ9rEyrSKOYGVhiHoGw.cer File: 2vCjnPrfkQ9rEyrSKOYGVhiHoGw.cer (raw, json) Hash identifier: iJoKYSqE4fUcb9ZY7mRAWcvPhRDc94iz1/ivjRY4xY0= Subject key identifier: DA:F0:A3:9C:FA:DF:91:0F:6B:13:2A:D2:28:E6:06:56:18:87:A0:6C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78353731128B2AD98B65A4E2E4183B9F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/77/ffa457-34c8-48c2-9ebc-92b207f641b1/1/2vCjnPrfkQ9rEyrSKOYGVhiHoGw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/77/ffa457-34c8-48c2-9ebc-92b207f641b1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 29413 IP: 31.187.80.0/22 IP: 31.187.88.0/22 IP: 37.156.80.0/20 IP: 46.31.216.0/21 IP: 88.133.160.0/20 IP: 88.133.224.0/21 IP: 91.217.176.0/24 IP: 185.31.60.0/22 IP: 185.91.48.0/22 IP: 213.149.80.0/20 IP: 213.178.16.0/20 IP: 217.72.208.0/20 IP: 2a02:2488::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:37:31:12:8b:2a:d9:8b:65:a4:e2:e4:18:3b:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=daf0a39cfadf910f6b132ad228e606561887a06c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:d5:36:d7:87:42:60:71:6a:55:d8:5a:74:fd: 02:51:e0:64:56:89:96:91:cd:be:b8:98:c1:20:e0: bb:cd:19:02:46:8c:ed:ba:86:db:15:2e:57:49:98: f5:e0:af:1d:56:d9:c7:33:e6:a1:df:e1:65:45:78: de:ac:bc:33:80:86:aa:0c:5d:ae:9e:ba:64:4f:56: 7d:c6:25:9d:73:d3:4a:96:3a:2b:df:69:58:a7:66: df:52:63:20:de:84:eb:ab:fd:50:de:d4:4a:1b:46: 72:95:7a:7d:b8:23:4a:92:d1:22:9a:74:74:02:79: d6:20:2a:53:6c:3a:5b:30:ed:5a:a9:17:e9:a3:11: bc:b4:6e:7b:15:1d:0d:c1:5a:02:e4:1a:7b:7e:1b: c1:5c:42:bd:a1:c2:fb:af:ef:12:e8:79:82:64:3f: 1e:11:03:d4:f5:e0:25:52:c7:c7:75:97:ac:5e:0d: bd:72:f0:35:7e:da:c7:cf:44:8e:03:59:f5:3c:f6: 5b:bd:0a:ce:b9:37:43:71:4d:93:6f:47:ac:db:a3: c1:88:7f:fb:fa:b9:76:8b:15:47:0f:cf:98:bb:db: e3:6c:a9:4f:2b:b7:8c:07:6d:81:4c:9e:15:ac:7d: 35:ae:94:82:cc:9c:ef:f5:9f:b0:3f:bd:a3:ee:3c: 47:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:F0:A3:9C:FA:DF:91:0F:6B:13:2A:D2:28:E6:06:56:18:87:A0:6C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ffa457-34c8-48c2-9ebc-92b207f641b1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ffa457-34c8-48c2-9ebc-92b207f641b1/1/2vCjnPrfkQ9rEyrSKOYGVhiHoGw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.187.80.0/22 31.187.88.0/22 37.156.80.0/20 46.31.216.0/21 88.133.160.0/20 88.133.224.0/21 91.217.176.0/24 185.31.60.0/22 185.91.48.0/22 213.149.80.0/20 213.178.16.0/20 217.72.208.0/20 IPv6: 2a02:2488::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 29413 Signature Algorithm: sha256WithRSAEncryption 1f:01:67:2b:e3:e4:db:02:ac:b5:d8:60:8e:04:17:86:74:26: df:c5:0c:dd:ab:8b:07:b3:0b:66:20:82:e8:cc:2e:2e:35:d6: 97:95:41:47:5b:0f:52:79:2c:c1:4f:09:4e:92:89:2d:87:44: 66:88:54:b7:22:cf:b5:d9:b3:fc:c8:42:60:7c:63:a6:4e:5e: 9a:d8:3c:af:19:5c:b5:38:62:64:b6:58:bf:b6:33:d6:2e:18: 4e:57:81:9f:cf:ef:d5:b2:82:ae:54:39:e8:bc:ff:cc:0e:8b: 42:f3:55:64:2d:0f:d6:87:31:0f:9a:95:43:1c:73:ea:3f:c8: 6a:33:1e:fb:be:b8:84:95:ac:2a:bf:48:ec:0a:f2:71:25:b2: 09:12:17:d0:15:6a:ad:23:08:80:2d:51:be:bd:f6:ec:4c:15: 77:d6:28:f4:36:da:f7:90:0b:f8:23:cc:83:e9:f9:a0:8f:df: 55:06:fa:b0:59:2b:f4:d8:8b:76:cf:69:04:2d:7c:2b:7b:32: 86:18:a5:e1:ba:be:35:c6:d9:9b:f5:14:17:94:73:77:d6:6b: d7:9e:92:0f:ac:30:ad:3d:2c:eb:e6:bd:46:65:8b:0a:32:2a: d6:30:b4:95:28:86:05:f1:95:1d:e5:93:87:09:99:73:08:b4: ba:73:23:c1 -----BEGIN CERTIFICATE----- MIIF5DCCBMygAwIBAgISAZt4NTcxEosq2YtlpOLkGDufMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYWYwYTM5Y2ZhZGY5MTBmNmIxMzJhZDIyOGU2MDY1NjE4ODdhMDZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNU214dCYHFqVdhadP0CUeBkVomW kc2+uJjBIOC7zRkCRoztuobbFS5XSZj14K8dVtnHM+ah3+FlRXjerLwzgIaqDF2u nrpkT1Z9xiWdc9NKljor32lYp2bfUmMg3oTrq/1Q3tRKG0ZylXp9uCNKktEimnR0 AnnWICpTbDpbMO1aqRfpoxG8tG57FR0NwVoC5Bp7fhvBXEK9ocL7r+8S6HmCZD8e EQPU9eAlUsfHdZesXg29cvA1ftrHz0SOA1n1PPZbvQrOuTdDcU2Tb0es26PBiH/7 +rl2ixVHD8+Yu9vjbKlPK7eMB22BTJ4VrH01rpSCzJzv9Z+wP72j7jxHxQIDAQAB o4IC8DCCAuwwHQYDVR0OBBYEFNrwo5z635EPaxMq0ijmBlYYh6BsMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc3L2ZmYTQ1 Ny0zNGM4LTQ4YzItOWViYy05MmIyMDdmNjQxYjEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzcvZmZhNDU3 LTM0YzgtNDhjMi05ZWJjLTkyYjIwN2Y2NDFiMS8xLzJ2Q2puUHJma1E5ckV5clNL T1lHVmhpSG9Hdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMHAGCCsGAQUF BwEHAQH/BGEwXzBOBAIAATBIAwQCH7tQAwQCH7tYAwQEJZxQAwQDLh/YAwQEWIWg AwQDWIXgAwQAW9mwAwQCuR88AwQCuVswAwQE1ZVQAwQE1bIQAwQE2UjQMA0EAgAC MAcDBQAqAiSIMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAnLlMA0GCSqGSIb3DQEB CwUAA4IBAQAfAWcr4+TbAqy12GCOBBeGdCbfxQzdq4sHswtmIILozC4uNdaXlUFH Ww9SeSzBTwlOkokth0RmiFS3Is+12bP8yEJgfGOmTl6a2DyvGVy1OGJktli/tjPW LhhOV4Gfz+/VsoKuVDnovP/MDotC81VkLQ/WhzEPmpVDHHPqP8hqMx77vriElawq v0jsCvJxJbIJEhfQFWqtIwiALVG+vfbsTBV31ij0Ntr3kAv4I8yD6fmgj99VBvqw WSv02It2z2kELXwrezKGGKXhur41xtmb9RQXlHN31mvXnpIPrDCtPSzr5r1GZYsK MirWMLSVKIYF8ZUd5ZOHCZlzCLS6cyPB -----END CERTIFICATE-----Generated at Mon Feb 9 19:56:14 2026 by rpki-client