This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2yEb43VVWcoQJSDBNnDQhYDXAzQ.cer File: 2yEb43VVWcoQJSDBNnDQhYDXAzQ.cer (raw, json) Hash identifier: BcBThc/HsYb1T94QZnOy4h0ytzNHEyLEuSln+4C/8Z0= Subject key identifier: DB:21:1B:E3:75:55:59:CA:10:25:20:C1:36:70:D0:85:80:D7:03:34 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C6E1C5D77542BEAA151C8E78D1DE80 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f3/f17c9b-5767-4edd-907c-87a1941f1be3/1/2yEb43VVWcoQJSDBNnDQhYDXAzQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f3/f17c9b-5767-4edd-907c-87a1941f1be3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:18:01 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 215916 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:e1:c5:d7:75:42:be:aa:15:1c:8e:78:d1:de:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=db211be3755559ca102520c13670d08580d70334 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:3b:6d:68:c5:42:02:be:d2:3f:83:87:2a:ff: a1:c4:5d:1a:a3:10:75:bc:dc:2a:ab:fc:07:97:96: 55:99:14:c9:4e:3d:6d:e7:6c:fb:74:b5:a0:02:5d: fa:91:de:c1:66:84:ec:bd:81:36:27:ec:21:5c:eb: cb:ae:cc:bf:7c:42:aa:a3:88:ea:ba:89:b5:1a:be: cf:3c:54:2a:ea:a8:d4:a3:52:82:c0:85:e5:c3:bd: b2:5b:42:ca:81:77:9a:3d:15:c4:ac:b4:49:dc:a3: f1:ca:86:4d:cf:19:41:29:50:d4:61:6f:1f:45:59: 81:4c:ae:18:02:6f:32:28:e1:f5:69:8b:20:a1:d8: b3:04:ab:a4:6a:ba:d1:d3:0d:c3:bc:75:c0:a3:c4: 53:c6:41:d4:c2:89:a7:3a:0c:fd:71:ac:4e:36:7c: d9:a2:91:07:97:72:36:b9:a9:7d:69:f2:7e:b8:3a: b3:00:ad:23:97:14:5e:6a:63:fd:a3:7f:1d:51:bd: 24:73:06:51:ae:40:de:f0:c9:67:de:e1:20:e4:c8: be:f5:80:c4:58:87:b0:91:61:d1:4c:dc:76:9a:a4: fc:02:48:ce:0a:3f:41:0d:7c:52:f0:77:d1:4b:77: 88:05:0b:4a:c5:6d:6d:6e:8e:08:64:61:15:35:2e: 35:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:21:1B:E3:75:55:59:CA:10:25:20:C1:36:70:D0:85:80:D7:03:34 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f17c9b-5767-4edd-907c-87a1941f1be3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f17c9b-5767-4edd-907c-87a1941f1be3/1/2yEb43VVWcoQJSDBNnDQhYDXAzQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 215916 Signature Algorithm: sha256WithRSAEncryption 55:45:76:3f:79:da:79:a5:3e:8c:58:12:e4:99:f9:1e:bd:79: 47:b3:98:65:e7:59:ff:21:29:e6:4f:23:cd:7f:f5:90:a2:b0: b3:75:e2:1f:b3:45:ee:93:81:94:07:11:9b:99:01:ea:23:42: 1f:f6:bf:a1:fd:18:15:e5:4d:17:70:e7:f6:68:1f:c4:ce:7a: 2c:95:c3:b9:42:a9:c2:45:bd:d2:0b:2c:79:63:47:6e:2e:f1: 00:37:26:6f:d2:12:65:c2:2f:4e:a3:e5:5c:ea:d6:e7:90:0c: d7:b1:12:84:c7:0b:aa:d8:47:2c:2f:c0:7b:b8:af:dd:3c:49: 48:0c:bd:9e:f8:4e:88:9d:00:e9:c4:92:38:b3:31:09:72:18: 64:52:7b:76:44:8c:9c:92:a0:47:86:fd:d3:e3:57:af:f9:9d: b5:3e:11:d7:48:b7:ad:27:41:e6:aa:0a:8a:6f:16:da:4d:4c: 0a:f4:1e:49:e0:df:2f:c1:87:be:35:ec:dd:0e:4b:b4:e2:36: c1:d8:bf:b4:30:ec:6e:e8:8b:8e:ff:9d:67:e1:91:33:4a:a4: d7:fa:76:2e:a5:e1:a3:6c:d1:ea:eb:5d:58:2a:68:8a:3e:c7: 31:de:c5:3d:6c:0e:7f:d3:0c:22:bf:44:9f:a9:86:78:27:53: 00:ff:8d:3e -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt3xuHF13VCvqoVHI540d6AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYjIxMWJlMzc1NTU1OWNhMTAyNTIwYzEzNjcwZDA4NTgwZDcwMzM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDttaMVCAr7SP4OHKv+hxF0aoxB1 vNwqq/wHl5ZVmRTJTj1t52z7dLWgAl36kd7BZoTsvYE2J+whXOvLrsy/fEKqo4jq uom1Gr7PPFQq6qjUo1KCwIXlw72yW0LKgXeaPRXErLRJ3KPxyoZNzxlBKVDUYW8f RVmBTK4YAm8yKOH1aYsgodizBKukarrR0w3DvHXAo8RTxkHUwomnOgz9caxONnzZ opEHl3I2ual9afJ+uDqzAK0jlxReamP9o38dUb0kcwZRrkDe8Mln3uEg5Mi+9YDE WIewkWHRTNx2mqT8AkjOCj9BDXxS8HfRS3eIBQtKxW1tbo4IZGEVNS414wIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFNshG+N1VVnKECUgwTZw0IWA1wM0MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YzL2YxN2M5 Yi01NzY3LTRlZGQtOTA3Yy04N2ExOTQxZjFiZTMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjMvZjE3Yzli LTU3NjctNGVkZC05MDdjLTg3YTE5NDFmMWJlMy8xLzJ5RWI0M1ZWV2NvUUpTREJO bkRRaFlEWEF6US5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNLbDANBgkqhkiG9w0BAQsFAAOCAQEAVUV2P3naeaU+ jFgS5Jn5Hr15R7OYZedZ/yEp5k8jzX/1kKKws3XiH7NF7pOBlAcRm5kB6iNCH/a/ of0YFeVNF3Dn9mgfxM56LJXDuUKpwkW90gsseWNHbi7xADcmb9ISZcIvTqPlXOrW 55AM17EShMcLqthHLC/Ae7iv3TxJSAy9nvhOiJ0A6cSSOLMxCXIYZFJ7dkSMnJKg R4b90+NXr/mdtT4R10i3rSdB5qoKim8W2k1MCvQeSeDfL8GHvjXs3Q5LtOI2wdi/ tDDsbuiLjv+dZ+GRM0qk1/p2LqXho2zR6utdWCpoij7HMd7FPWwOf9MMIr9En6mG eCdTAP+NPg== -----END CERTIFICATE-----Generated at Mon Feb 9 15:06:34 2026 by rpki-client