This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/G2kwH6jXiOAvfrL6iAIQkHQgbP4.cer File: G2kwH6jXiOAvfrL6iAIQkHQgbP4.cer (raw, json) Hash identifier: KVaksCNzXxA0uvf6IfNi1nw7v3OXnVAmzt+M9lP/LXo= Subject key identifier: 1B:69:30:1F:A8:D7:88:E0:2F:7E:B2:FA:88:02:10:90:74:20:6C:FE Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5D36BBDABD7CDAEADD5E1CB93C1F75 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/51/5d728a-93da-480b-a735-416c28798fe2/1/G2kwH6jXiOAvfrL6iAIQkHQgbP4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/51/5d728a-93da-480b-a735-416c28798fe2/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:20:19 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 213344 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:36:bb:da:bd:7c:da:ea:dd:5e:1c:b9:3c:1f:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:20:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1b69301fa8d788e02f7eb2fa8802109074206cfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:2e:14:09:41:16:3a:01:ee:40:9a:63:fa:aa: 49:61:57:a6:83:0c:7a:47:2d:5a:93:d0:ae:fa:16: b3:20:07:c4:8c:f6:4a:cb:38:14:7a:7b:f5:0b:ca: 69:55:ef:37:26:00:7c:87:13:71:c8:9f:85:d3:66: 26:92:aa:b1:8a:fa:2d:ab:a4:73:68:87:38:b0:c5: de:85:e8:1e:cf:49:4a:b8:cb:a4:c4:0c:9f:77:5b: 78:31:13:a3:b1:ef:91:66:69:45:cc:d1:5c:ab:37: aa:48:59:38:47:01:cb:5a:83:c6:4c:ba:91:23:87: c5:42:28:e1:92:01:2c:3c:d1:cf:16:7d:68:a0:29: e4:05:70:80:73:f2:f5:c8:d3:81:37:c9:37:2f:69: 51:11:44:a3:eb:0e:bc:9c:d1:be:f7:7e:f3:0e:2c: 75:3f:1b:f0:ed:b6:f4:63:c5:1c:08:92:f6:0d:4f: 0b:b4:5a:6c:4d:63:8f:15:cf:45:33:7c:3f:8d:1e: 47:68:de:10:da:b1:4e:03:ad:0f:26:fe:c1:9b:09: 0a:9c:6f:c6:7b:71:cb:35:f2:9b:29:e4:0e:43:c5: b6:38:59:36:57:ad:37:92:58:75:f0:54:e5:7a:76: c8:ff:87:90:53:f4:90:b3:60:b2:c6:ca:c7:86:33: f0:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:69:30:1F:A8:D7:88:E0:2F:7E:B2:FA:88:02:10:90:74:20:6C:FE X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5d728a-93da-480b-a735-416c28798fe2/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5d728a-93da-480b-a735-416c28798fe2/1/G2kwH6jXiOAvfrL6iAIQkHQgbP4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 213344 Signature Algorithm: sha256WithRSAEncryption 0f:41:a4:26:18:d5:4f:f5:90:98:db:aa:ee:1e:c5:57:43:51: 52:f9:6e:31:9d:b1:75:f0:f2:89:f0:bd:42:d6:26:02:19:12: 88:7b:92:ee:2f:3c:e4:cb:e8:74:52:9a:80:ca:23:93:76:09: 0e:59:43:2c:48:32:f6:3f:7b:b1:ee:a5:9f:8a:70:90:61:cf: de:a0:56:02:5c:c6:80:90:42:32:74:64:f3:88:0f:fb:8c:7e: e0:19:28:1b:5c:03:60:e2:c6:75:29:77:fb:77:09:c8:7b:52: e9:4c:67:d4:66:1f:90:9e:19:20:a6:d6:f4:22:42:2b:b6:05: 65:2b:5e:02:74:96:98:db:0c:f7:dc:fa:9d:b2:ec:2e:aa:e6: e3:f2:ff:2a:ee:75:ed:02:cc:a2:6b:b2:78:85:cf:02:17:ba: 69:d4:06:6b:aa:73:d3:99:6b:8e:fe:fc:57:ac:73:6b:16:74: a4:24:ea:7c:a3:ad:cd:41:f6:ca:e5:12:b9:f5:1f:26:b2:6b: c0:fe:6d:43:94:2f:05:19:b7:6b:2a:4c:de:32:d4:c3:4d:25: 8b:30:ef:ab:7c:4d:7b:f5:23:c7:74:d3:b4:99:2c:b9:23:ef: 8c:d6:1e:35:26:f7:c2:3e:ff:23:77:3b:d6:4c:c2:de:ad:f9: 0a:eb:57:c9 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt9XTa72r182urdXhy5PB91MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYyMDE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYjY5MzAxZmE4ZDc4OGUwMmY3ZWIyZmE4ODAyMTA5MDc0MjA2Y2ZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3C4UCUEWOgHuQJpj+qpJYVemgwx6 Ry1ak9Cu+hazIAfEjPZKyzgUenv1C8ppVe83JgB8hxNxyJ+F02Ymkqqxivotq6Rz aIc4sMXehegez0lKuMukxAyfd1t4MROjse+RZmlFzNFcqzeqSFk4RwHLWoPGTLqR I4fFQijhkgEsPNHPFn1ooCnkBXCAc/L1yNOBN8k3L2lREUSj6w68nNG+937zDix1 Pxvw7bb0Y8UcCJL2DU8LtFpsTWOPFc9FM3w/jR5HaN4Q2rFOA60PJv7BmwkKnG/G e3HLNfKbKeQOQ8W2OFk2V603klh18FTlenbI/4eQU/SQs2CyxsrHhjPwqQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFBtpMB+o14jgL36y+ogCEJB0IGz+MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUxLzVkNzI4 YS05M2RhLTQ4MGItYTczNS00MTZjMjg3OThmZTIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTEvNWQ3Mjhh LTkzZGEtNDgwYi1hNzM1LTQxNmMyODc5OGZlMi8xL0cya3dINmpYaU9BdmZyTDZp QUlRa0hRZ2JQNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNBYDANBgkqhkiG9w0BAQsFAAOCAQEAD0GkJhjVT/WQ mNuq7h7FV0NRUvluMZ2xdfDyifC9QtYmAhkSiHuS7i885MvodFKagMojk3YJDllD LEgy9j97se6ln4pwkGHP3qBWAlzGgJBCMnRk84gP+4x+4BkoG1wDYOLGdSl3+3cJ yHtS6Uxn1GYfkJ4ZIKbW9CJCK7YFZSteAnSWmNsM99z6nbLsLqrm4/L/Ku517QLM omuyeIXPAhe6adQGa6pz05lrjv78V6xzaxZ0pCTqfKOtzUH2yuUSufUfJrJrwP5t Q5QvBRm3aypM3jLUw00lizDvq3xNe/Ujx3TTtJksuSPvjNYeNSb3wj7/I3c71kzC 3q35CutXyQ== -----END CERTIFICATE-----Generated at Mon Feb 9 19:50:30 2026 by rpki-client