This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.cer File: Ks2NFoLmYiwcCSN7xBqlFmaWcrc.cer (raw, json) Hash identifier: Z2jGrwmXKcgv9XpCqV/e5jX/Kfu9QFBeFV++NDkzBZU= Subject key identifier: 2A:CD:8D:16:82:E6:62:2C:1C:09:23:7B:C4:1A:A5:16:66:96:72:B7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA7506BA95103D7A0433913CBE8819B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:20:52 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 80.81.128.0/20 IP: 185.23.248.0/22 IP: 2a04:28c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:50:6b:a9:51:03:d7:a0:43:39:13:cb:e8:81:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:20:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2acd8d1682e6622c1c09237bc41aa516669672b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:af:44:4f:63:34:b6:ff:e1:91:34:68:cd:3c: fe:69:b6:bf:ef:be:82:a5:d8:56:f9:09:bd:70:83: d1:f9:ee:73:cf:00:bb:ed:86:3f:17:ae:45:24:06: be:fc:63:ab:a0:eb:24:1d:10:e5:28:a9:0e:3a:31: 73:6b:51:d2:47:a9:9c:1f:a9:d0:3d:7a:0c:ed:a9: 6c:3f:0f:ff:e8:1e:4a:80:43:f9:a9:15:ad:84:f8: 2a:fb:93:5a:6a:8c:f5:02:51:7f:ab:56:44:f5:60: fc:a9:01:dd:75:f9:ad:61:ec:20:16:c7:7f:a8:4d: 79:f9:d3:63:88:1b:e8:c4:bc:f8:ca:98:d4:55:e1: 36:b0:40:6c:df:36:af:d9:bf:4c:e6:7d:94:18:9a: ff:13:ed:40:50:16:3b:22:d6:14:57:b8:df:4e:5b: b2:2d:e2:7f:dd:21:80:be:69:30:2a:25:cb:b5:9c: d0:d9:c8:ce:a4:4f:0f:81:40:53:5a:07:2f:3d:50: 44:4d:10:18:b3:02:c0:be:58:68:75:34:6c:3d:a0: 67:22:35:91:c4:8a:73:44:c8:c2:32:fd:c8:c6:d7: ee:2a:51:f2:53:1e:0b:6c:69:c8:e5:9c:06:87:f4: 30:7a:d6:f1:b6:7a:54:58:b1:a2:88:60:ae:90:e8: cb:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:CD:8D:16:82:E6:62:2C:1C:09:23:7B:C4:1A:A5:16:66:96:72:B7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.81.128.0/20 185.23.248.0/22 IPv6: 2a04:28c0::/29 Signature Algorithm: sha256WithRSAEncryption 0a:6e:b8:87:4d:83:8e:18:17:a8:66:16:40:56:b1:4c:90:2a: 42:4c:2c:be:8a:15:e8:e0:31:4c:d9:ab:86:b6:64:22:b4:89: cd:70:02:7a:bd:13:ae:ba:85:40:47:eb:00:b8:e5:e3:5b:54: c6:ff:ce:c0:b8:49:c8:0b:ee:2b:5e:1a:55:4f:85:02:b5:0f: d8:92:c6:78:ee:cc:71:80:64:e1:f6:ac:56:5e:7c:c0:b6:35: dd:3f:d7:43:34:3b:db:31:40:a4:a0:05:4d:af:00:c3:65:9e: e1:62:c6:bf:66:08:05:fd:e6:de:34:cc:a4:dd:b3:9f:c5:9d: 76:bb:08:90:48:18:c1:fa:77:4c:b8:f0:d4:72:8e:30:e5:ab: 72:7e:51:d7:52:d0:84:72:7b:33:e0:6f:a9:32:78:7b:d8:89: f2:24:2a:58:cd:a0:a7:6d:a4:e5:e3:c4:23:7a:f8:65:fd:6a: fd:35:75:85:5d:b4:27:3c:a9:7a:61:5f:d1:11:5d:0a:41:76: 9c:63:5f:bb:2b:c6:dd:66:6e:9a:4c:d3:82:f6:b0:c7:54:46: af:bf:9b:b5:08:b6:1b:fb:01:6a:ef:de:13:50:c4:b9:9d:e7: cc:77:67:6d:23:38:7d:a8:22:81:af:10:36:e4:d0:0d:ca:3f: ba:fb:07:98 -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgISAZt+p1BrqVED16BDORPL6IGbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIyMDUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYWNkOGQxNjgyZTY2MjJjMWMwOTIzN2JjNDFhYTUxNjY2OTY3MmI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs69ET2M0tv/hkTRozTz+aba/776C pdhW+Qm9cIPR+e5zzwC77YY/F65FJAa+/GOroOskHRDlKKkOOjFza1HSR6mcH6nQ PXoM7alsPw//6B5KgEP5qRWthPgq+5Naaoz1AlF/q1ZE9WD8qQHddfmtYewgFsd/ qE15+dNjiBvoxLz4ypjUVeE2sEBs3zav2b9M5n2UGJr/E+1AUBY7ItYUV7jfTluy LeJ/3SGAvmkwKiXLtZzQ2cjOpE8PgUBTWgcvPVBETRAYswLAvlhodTRsPaBnIjWR xIpzRMjCMv3IxtfuKlHyUx4LbGnI5ZwGh/QwetbxtnpUWLGiiGCukOjLWwIDAQAB o4ICmTCCApUwHQYDVR0OBBYEFCrNjRaC5mIsHAkje8QapRZmlnK3MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU1Lzk1ZGJj ZS1kNGU5LTQxZjEtODJkYy1lODRjYjFkYTIxYmQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTUvOTVkYmNl LWQ0ZTktNDFmMS04MmRjLWU4NGNiMWRhMjFiZC8xL0tzMk5Gb0xtWWl3Y0NTTjd4 QnFsRm1hV2NyYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQEUFGAAwQCuRf4MA0EAgACMAcDBQMqBCjAMA0G CSqGSIb3DQEBCwUAA4IBAQAKbriHTYOOGBeoZhZAVrFMkCpCTCy+ihXo4DFM2auG tmQitInNcAJ6vROuuoVAR+sAuOXjW1TG/87AuEnIC+4rXhpVT4UCtQ/YksZ47sxx gGTh9qxWXnzAtjXdP9dDNDvbMUCkoAVNrwDDZZ7hYsa/ZggF/ebeNMyk3bOfxZ12 uwiQSBjB+ndMuPDUco4w5atyflHXUtCEcnsz4G+pMnh72InyJCpYzaCnbaTl48Qj evhl/Wr9NXWFXbQnPKl6YV/REV0KQXacY1+7K8bdZm6aTNOC9rDHVEavv5u1CLYb +wFq794TUMS5nefMd2dtIzh9qCKBrxA25NANyj+6+weY -----END CERTIFICATE-----Generated at Mon Feb 9 19:39:35 2026 by rpki-client