This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.cer File: K2rZC2NkK4-tyQB6o1Ujnt-vNU4.cer (raw, json) Hash identifier: oO4i/lwcKDpv7UG6i4UhGg2ptcGKO3CtFPxNU5dWC0M= Subject key identifier: 2B:6A:D9:0B:63:64:2B:8F:AD:C9:00:7A:A3:55:23:9E:DF:AF:35:4E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ED5FF2943EB8C190A5D0F7CE01167F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:19:18 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.218.120.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:5f:f2:94:3e:b8:c1:90:a5:d0:f7:ce:01:16:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:19:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2b6ad90b63642b8fadc9007aa355239edfaf354e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:95:c8:88:2e:e1:07:9a:c5:11:f5:22:d9:6a: 11:f6:f4:dc:df:98:a2:b7:b5:2d:19:b5:b7:44:22: f0:ab:fc:a1:48:27:6a:c3:e1:9f:d8:ee:b7:d3:df: 73:21:8f:66:98:eb:63:b3:10:f6:5a:3b:0d:6c:e3: 4e:ed:31:40:a4:e9:89:33:a1:e8:6d:46:cb:3d:90: e7:18:04:ac:f0:de:00:c1:5f:b1:e9:64:78:b1:d3: 94:a3:d9:ac:6f:0f:49:ff:10:16:a5:70:3d:16:86: 31:3b:90:21:35:ec:68:c3:33:c3:5c:60:15:bb:b8: 7b:30:de:31:db:cb:6a:6b:5c:a9:6f:51:26:95:c4: ea:85:f7:b0:1e:01:f1:72:ef:c2:5d:d4:1f:2a:4b: 4a:7f:64:a4:d4:1e:09:2f:0e:e8:84:4d:be:de:6c: b9:e5:6a:6f:83:39:67:26:2c:99:39:06:e1:43:05: ff:e4:c5:5c:5f:63:cf:b3:3c:b7:23:4f:98:31:68: 8e:9d:1f:c5:8e:cf:79:02:46:a7:f7:22:f8:be:0e: 17:f1:b2:f4:f2:87:ab:01:b9:d3:1b:b1:a1:36:5d: f1:2d:c6:c6:d1:48:f2:82:19:55:74:e1:6d:64:43: 68:60:75:c8:9c:f8:9f:9f:23:54:c1:c3:0c:8f:de: 41:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:6A:D9:0B:63:64:2B:8F:AD:C9:00:7A:A3:55:23:9E:DF:AF:35:4E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.218.120.0/22 Signature Algorithm: sha256WithRSAEncryption 49:b6:ac:a1:ef:e2:05:d0:40:1a:9d:1f:35:f1:3a:38:da:dd: a4:cb:4e:62:54:27:ec:e4:b1:90:e7:fa:9d:89:64:1e:d8:53: ad:64:88:c2:3d:e3:8f:2c:99:5d:46:cb:c2:a7:f0:36:46:fb: ce:84:fe:c7:41:93:0e:52:43:51:fc:20:8a:44:e6:1c:a7:6f: 68:d9:f8:fc:3a:95:8e:42:40:0e:81:fe:4e:ec:ed:31:fd:1f: 80:a0:eb:f6:cc:08:af:05:c9:7e:cf:b9:68:ef:fd:ac:2d:37: 52:ee:78:ec:b6:13:a7:8d:65:a8:47:b8:e7:74:08:2e:57:bf: 51:de:f6:2c:27:b0:0b:a3:84:9a:a7:98:9b:b1:bc:82:41:18: 44:60:32:2d:22:77:e4:ff:4e:8a:d1:fd:72:01:0a:b8:4f:e9: 40:28:24:36:97:90:8a:84:a2:67:15:56:6e:5a:03:e1:af:0b: b0:a1:00:cb:70:a1:00:e2:b1:a2:f1:a7:bf:dc:ed:f0:f9:0b: 9f:82:b8:c9:28:ea:2f:64:47:7d:41:6a:70:4c:9e:f2:c9:6a: 77:22:4f:11:04:dd:97:06:9a:bf:0d:21:09:f4:51:1f:30:48: 33:a5:17:5b:8e:da:cb:a4:7a:0d:2c:78:88:69:d9:32:a4:66: e0:e1:6d:cf -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt57V/ylD64wZCl0PfOARZ/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxOTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYjZhZDkwYjYzNjQyYjhmYWRjOTAwN2FhMzU1MjM5ZWRmYWYzNTRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5XIiC7hB5rFEfUi2WoR9vTc35ii t7UtGbW3RCLwq/yhSCdqw+Gf2O63099zIY9mmOtjsxD2WjsNbONO7TFApOmJM6Ho bUbLPZDnGASs8N4AwV+x6WR4sdOUo9msbw9J/xAWpXA9FoYxO5AhNexowzPDXGAV u7h7MN4x28tqa1ypb1EmlcTqhfewHgHxcu/CXdQfKktKf2Sk1B4JLw7ohE2+3my5 5WpvgzlnJiyZOQbhQwX/5MVcX2PPszy3I0+YMWiOnR/Fjs95Akan9yL4vg4X8bL0 8oerAbnTG7GhNl3xLcbG0UjyghlVdOFtZENoYHXInPifnyNUwcMMj95BUQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFCtq2QtjZCuPrckAeqNVI57frzVOMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q5L2E2ZGIw Ny1mNTRhLTQ0MWYtOTY0OS1iYzliNDEzYjhlZWQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDkvYTZkYjA3 LWY1NGEtNDQxZi05NjQ5LWJjOWI0MTNiOGVlZC8xL0syclpDMk5rSzQtdHlRQjZv MVVqbnQtdk5VNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCudp4MA0GCSqGSIb3DQEBCwUAA4IBAQBJtqyh 7+IF0EAanR818To42t2ky05iVCfs5LGQ5/qdiWQe2FOtZIjCPeOPLJldRsvCp/A2 RvvOhP7HQZMOUkNR/CCKROYcp29o2fj8OpWOQkAOgf5O7O0x/R+AoOv2zAivBcl+ z7lo7/2sLTdS7njsthOnjWWoR7jndAguV79R3vYsJ7ALo4Sap5ibsbyCQRhEYDIt Infk/06K0f1yAQq4T+lAKCQ2l5CKhKJnFVZuWgPhrwuwoQDLcKEA4rGi8ae/3O3w +QufgrjJKOovZEd9QWpwTJ7yyWp3Ik8RBN2XBpq/DSEJ9FEfMEgzpRdbjtrLpHoN LHiIadkypGbg4W3P -----END CERTIFICATE-----Generated at Mon Feb 9 18:27:48 2026 by rpki-client