This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2yMD6WgDeTw8SM2lIHpB505Qy3w.cer File: 2yMD6WgDeTw8SM2lIHpB505Qy3w.cer (raw, json) Hash identifier: 7tkj/kR/9v2LRYL2dmq6Rae7cADgAQGZXO1StEA8isU= Subject key identifier: DB:23:03:E9:68:03:79:3C:3C:48:CD:A5:20:7A:41:E7:4E:50:CB:7C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BFE7C8EE292FA6D028706639BDC5840D9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c7/d5f804-a193-4b3f-a652-45f2afc91d2d/1/2yMD6WgDeTw8SM2lIHpB505Qy3w.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c7/d5f804-a193-4b3f-a652-45f2afc91d2d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Tue 27 Jan 2026 08:05:34 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 202732 IP: 213.239.140.0/22 IP: 2001:3ac0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fe:7c:8e:e2:92:fa:6d:02:87:06:63:9b:dc:58:40:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 27 08:05:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=db2303e96803793c3c48cda5207a41e74e50cb7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e2:b1:f7:4c:ef:e9:d9:60:cd:f7:e0:f9:d3: 07:04:d0:4b:8a:be:f6:9e:1d:3f:9c:e3:d7:9f:f0: dc:d4:0f:b1:21:78:02:5c:c9:c6:c7:29:4b:d3:78: 38:de:b6:a0:64:80:ed:78:dd:06:41:54:bc:07:e0: cd:83:8e:bf:88:bd:13:58:82:b2:f0:c4:51:d2:de: 44:51:ff:04:c4:36:d3:4a:08:33:c9:f8:e5:65:a1: 02:8e:ed:59:ec:38:9a:21:33:66:b3:55:12:d5:48: 5f:83:9f:ad:32:71:28:f3:9e:15:ac:c8:13:78:fb: b3:e8:5c:ff:46:7c:e9:8a:d1:db:36:8b:d8:75:6a: ba:33:b8:6a:29:60:8b:75:16:61:a9:08:37:a5:6e: 61:b6:48:e4:ce:c9:85:96:5c:1b:b6:24:49:2c:b7: fb:69:d0:18:e4:2c:7c:e5:34:22:6b:6c:74:79:c2: a0:6f:bf:e4:c1:6c:d3:75:83:a3:72:b2:fe:27:5a: b2:ee:9a:07:34:01:22:c3:ec:23:20:6e:43:04:9c: 4c:99:bf:a3:4d:cc:0d:68:a9:c6:73:76:1e:4d:02: 25:e5:02:83:cd:2b:bb:59:af:00:34:3a:e1:54:c5: a0:dc:16:c4:61:91:d4:b3:0e:e8:50:a8:02:57:67: 48:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:23:03:E9:68:03:79:3C:3C:48:CD:A5:20:7A:41:E7:4E:50:CB:7C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/d5f804-a193-4b3f-a652-45f2afc91d2d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/d5f804-a193-4b3f-a652-45f2afc91d2d/1/2yMD6WgDeTw8SM2lIHpB505Qy3w.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.239.140.0/22 IPv6: 2001:3ac0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 202732 Signature Algorithm: sha256WithRSAEncryption 0e:5e:0b:89:26:4f:3d:b7:c6:e7:7e:4d:50:06:3f:88:9f:42: 7f:b4:77:03:c1:e4:e5:16:a9:31:55:3c:24:01:4c:84:35:ac: de:d0:cf:4a:22:36:b5:da:14:18:cb:76:ba:5b:01:64:1f:72: 36:35:54:b9:bf:03:c9:a3:85:26:74:f2:f5:7b:58:5c:34:0f: 3b:b3:7b:86:ba:34:00:38:81:af:c0:7b:32:74:7d:32:92:f9: ca:99:35:5a:82:86:39:de:a2:6f:0d:5d:8d:40:85:65:cc:22: 59:2b:99:8d:c7:bc:28:ae:a5:e1:7b:b4:c2:5d:21:bc:ba:44: e0:7a:7e:af:77:11:d5:14:c3:f3:3b:53:a3:05:11:b1:e9:f6: 83:5c:b0:75:46:05:1a:f3:c7:1c:51:47:8b:8c:86:1c:5b:85: ae:83:78:9a:e0:d7:c3:a0:d0:6d:f3:94:7d:1c:42:81:d7:16: 26:76:e0:0e:f7:41:eb:76:a8:57:e0:54:f7:15:26:36:04:80: b0:ef:fa:ac:e3:09:87:2a:f2:31:72:d3:d5:75:12:c9:08:a0: 92:28:3f:c9:d1:77:45:ca:89:40:a9:7c:57:33:ac:18:87:a9: 68:72:20:0d:9a:0e:d0:85:29:81:0d:38:3b:7d:ef:68:cd:ca: fa:58:fa:41 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZv+fI7ikvptAocGY5vcWEDZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTI3MDgwNTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYjIzMDNlOTY4MDM3OTNjM2M0OGNkYTUyMDdhNDFlNzRlNTBjYjdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquKx90zv6dlgzffg+dMHBNBLir72 nh0/nOPXn/Dc1A+xIXgCXMnGxylL03g43ragZIDteN0GQVS8B+DNg46/iL0TWIKy 8MRR0t5EUf8ExDbTSggzyfjlZaECju1Z7DiaITNms1US1Uhfg5+tMnEo854VrMgT ePuz6Fz/RnzpitHbNovYdWq6M7hqKWCLdRZhqQg3pW5htkjkzsmFllwbtiRJLLf7 adAY5Cx85TQia2x0ecKgb7/kwWzTdYOjcrL+J1qy7poHNAEiw+wjIG5DBJxMmb+j TcwNaKnGc3YeTQIl5QKDzSu7Wa8ANDrhVMWg3BbEYZHUsw7oUKgCV2dICwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFNsjA+loA3k8PEjNpSB6QedOUMt8MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M3L2Q1Zjgw NC1hMTkzLTRiM2YtYTY1Mi00NWYyYWZjOTFkMmQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzcvZDVmODA0 LWExOTMtNGIzZi1hNjUyLTQ1ZjJhZmM5MWQyZC8xLzJ5TUQ2V2dEZVR3OFNNMmxJ SHBCNTA1UXkzdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQC1e+MMA0EAgACMAcDBQMgATrAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMX7DANBgkqhkiG9w0BAQsFAAOCAQEADl4LiSZPPbfG 535NUAY/iJ9Cf7R3A8Hk5RapMVU8JAFMhDWs3tDPSiI2tdoUGMt2ulsBZB9yNjVU ub8DyaOFJnTy9XtYXDQPO7N7hro0ADiBr8B7MnR9MpL5ypk1WoKGOd6ibw1djUCF ZcwiWSuZjce8KK6l4Xu0wl0hvLpE4Hp+r3cR1RTD8ztTowURsen2g1ywdUYFGvPH HFFHi4yGHFuFroN4muDXw6DQbfOUfRxCgdcWJnbgDvdB63aoV+BU9xUmNgSAsO/6 rOMJhyryMXLT1XUSyQigkig/ydF3RcqJQKl8VzOsGIepaHIgDZoO0IUpgQ04O33v aM3K+lj6QQ== -----END CERTIFICATE-----Generated at Mon Feb 2 08:06:46 2026 by rpki-client