This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2xhkIiednYtOaOabEpblMtTaDD8.cer File: 2xhkIiednYtOaOabEpblMtTaDD8.cer (raw, json) Hash identifier: 1KxKfY+z+gABtvy5wqzHiEywT5vTMPmw4kKeifZCXpQ= Subject key identifier: DB:18:64:22:27:9D:9D:8B:4E:68:E6:9B:12:96:E5:32:D4:DA:0C:3F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79110C905D692CE1062D30711BF9447D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/2xhkIiednYtOaOabEpblMtTaDD8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:39 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 203441 IP: 185.132.224.0/22 IP: 193.105.103.0/24 IP: 2a03:a660::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:0c:90:5d:69:2c:e1:06:2d:30:71:1b:f9:44:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=db186422279d9d8b4e68e69b1296e532d4da0c3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:87:c5:99:e2:f4:99:ce:f8:9c:15:84:5c:e9: fc:d7:63:a4:d5:da:d9:ec:c9:d6:4b:4b:67:02:85: a8:40:54:ba:79:ed:53:95:70:93:df:2b:ef:20:17: d6:e4:da:b8:ea:a8:58:66:b6:a4:23:b8:a0:2b:7e: 21:d0:3f:38:ad:28:c6:6f:f3:92:4c:f5:ed:27:a9: ae:0f:a9:8e:08:53:87:44:e8:15:0f:5d:2e:88:73: 8a:97:99:98:4e:08:d2:fe:43:bf:af:75:6e:e7:d3: 45:65:1d:48:c5:65:03:10:4a:30:75:d9:d9:18:cb: 75:78:19:5d:72:6a:cd:ab:59:b2:2c:5e:27:8e:26: aa:29:ed:ac:09:91:01:2d:ec:76:8d:b8:34:c6:3d: 4e:21:94:f1:4f:d5:19:6c:59:95:a5:7f:55:58:d9: 06:cf:a6:25:02:ce:c9:12:76:05:cc:b6:a3:a9:70: bf:00:3b:9e:55:88:c9:3f:b7:08:86:c9:43:00:eb: 17:37:61:67:c5:36:1c:7e:53:b5:87:2d:6f:75:44: 16:a3:d1:31:e2:da:03:5f:3a:e6:40:ad:a1:15:49: 89:38:65:08:ab:7a:d0:00:67:89:f0:ba:96:9e:51: 6f:11:aa:93:0f:b8:7a:7c:67:22:0b:50:df:52:8f: 28:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:18:64:22:27:9D:9D:8B:4E:68:E6:9B:12:96:E5:32:D4:DA:0C:3F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/2xhkIiednYtOaOabEpblMtTaDD8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.132.224.0/22 193.105.103.0/24 IPv6: 2a03:a660::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 203441 Signature Algorithm: sha256WithRSAEncryption 4c:bb:80:8b:5a:26:4f:48:e2:dc:a7:61:1f:3f:81:f8:28:ab: a5:62:5d:2f:2f:2c:7b:cf:a3:da:57:42:b3:57:ba:7f:36:d9: 2b:d2:f8:03:c7:f3:d6:9c:98:58:2c:d0:e0:5a:4b:9b:e4:5e: 52:8b:c9:d9:0d:00:f3:c6:bf:b6:2d:fa:32:fe:25:93:5f:7e: 49:40:96:65:e3:fc:af:1a:9f:fe:0b:8b:a2:74:33:12:c5:f8: 1c:09:9b:44:5f:50:e5:fd:77:1a:61:42:13:6d:80:0e:3b:5e: df:e9:15:da:8c:d4:4e:ff:06:5a:fa:c1:27:3d:75:f0:50:a9: 6c:39:7d:99:52:45:6d:c8:82:6b:10:d5:35:00:f8:f0:a3:1f: 3a:53:52:e9:a7:9a:4b:64:4e:65:f3:5c:ed:7b:f7:3a:46:bf: c8:54:22:15:84:2f:72:8a:1e:8e:66:33:da:cf:7b:0d:29:f5: 90:ff:3d:60:04:06:d5:48:c1:48:b0:78:9c:27:36:24:2c:9b: 0d:8f:10:81:b0:9b:b0:91:b9:3e:a9:52:c5:02:f5:c9:ff:dd: 9c:dc:a7:d0:52:a9:63:e8:2e:88:c5:fa:93:b8:f5:dc:a8:cb: d6:d4:b2:8d:0b:88:0f:d0:58:22:2e:c1:02:dc:0a:d9:a0:06: 6d:7c:27:68 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt5EQyQXWks4QYtMHEb+UR9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYjE4NjQyMjI3OWQ5ZDhiNGU2OGU2OWIxMjk2ZTUzMmQ0ZGEwYzNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2YfFmeL0mc74nBWEXOn812Ok1drZ 7MnWS0tnAoWoQFS6ee1TlXCT3yvvIBfW5Nq46qhYZrakI7igK34h0D84rSjGb/OS TPXtJ6muD6mOCFOHROgVD10uiHOKl5mYTgjS/kO/r3Vu59NFZR1IxWUDEEowddnZ GMt1eBldcmrNq1myLF4njiaqKe2sCZEBLex2jbg0xj1OIZTxT9UZbFmVpX9VWNkG z6YlAs7JEnYFzLajqXC/ADueVYjJP7cIhslDAOsXN2FnxTYcflO1hy1vdUQWo9Ex 4toDXzrmQK2hFUmJOGUIq3rQAGeJ8LqWnlFvEaqTD7h6fGciC1DfUo8oMQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFNsYZCInnZ2LTmjmmxKW5TLU2gw/MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhkLzBjMDFj NS0xNTdkLTQwYTctOGZjYy01Yzc3MjM0NjAyMjMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGQvMGMwMWM1 LTE1N2QtNDBhNy04ZmNjLTVjNzcyMzQ2MDIyMy8xLzJ4aGtJaWVkbll0T2FPYWJF cGJsTXRUYUREOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCuYTgAwQAwWlnMA0EAgACMAcDBQAqA6ZgMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMasTANBgkqhkiG9w0BAQsFAAOCAQEATLuA i1omT0ji3KdhHz+B+CirpWJdLy8se8+j2ldCs1e6fzbZK9L4A8fz1pyYWCzQ4FpL m+ReUovJ2Q0A88a/ti36Mv4lk19+SUCWZeP8rxqf/guLonQzEsX4HAmbRF9Q5f13 GmFCE22ADjte3+kV2ozUTv8GWvrBJz118FCpbDl9mVJFbciCaxDVNQD48KMfOlNS 6aeaS2ROZfNc7Xv3Oka/yFQiFYQvcooejmYz2s97DSn1kP89YAQG1UjBSLB4nCc2 JCybDY8QgbCbsJG5PqlSxQL1yf/dnNyn0FKpY+guiMX6k7j13KjL1tSyjQuID9BY Ii7BAtwK2aAGbXwnaA== -----END CERTIFICATE-----Generated at Tue Feb 10 00:11:45 2026 by rpki-client