This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Q2TnsO7yBINcffKon2DAK-HYmt0.cer File: Q2TnsO7yBINcffKon2DAK-HYmt0.cer (raw, json) Hash identifier: X+bcuRmicnVekUArUCfvtirDhZCI1FwAUXTSJnweqAo= Subject key identifier: 43:64:E7:B0:EE:F2:04:83:5C:7D:F2:A8:9F:60:C0:2B:E1:D8:9A:DD Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA51E8BC8620C72BD4A27A93A53D78F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9e/a9a51a-e8e3-497a-aba2-e799c23aac20/1/Q2TnsO7yBINcffKon2DAK-HYmt0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9e/a9a51a-e8e3-497a-aba2-e799c23aac20/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:18:29 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 213500 IP: 94.232.252.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:1e:8b:c8:62:0c:72:bd:4a:27:a9:3a:53:d7:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4364e7b0eef204835c7df2a89f60c02be1d89add Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:bf:ec:97:8b:18:5e:47:c8:de:a7:8b:e8:6d: ff:50:00:05:5b:f1:93:bb:9b:db:07:a2:86:c4:7a: f2:cd:b8:4f:98:13:14:80:5e:85:b5:9c:a9:ed:91: b8:c4:53:78:43:63:00:b4:aa:10:83:b0:57:50:d4: 4a:21:fa:c7:03:20:56:d9:04:e6:a7:93:d6:62:51: 1a:13:39:88:88:c5:58:03:c1:0d:54:94:0f:e2:a4: f3:9d:6b:20:c5:a2:06:4c:ba:45:89:72:6c:70:48: 3b:0d:b2:bb:cd:1d:ef:2d:1e:59:6b:83:99:11:a1: 96:16:9e:84:37:cd:d5:fc:9f:31:c0:9a:52:e8:39: 9a:84:5e:0b:7f:73:53:6b:ae:59:cd:68:aa:47:f2: c1:87:36:8c:eb:1c:9a:c1:a6:55:2e:ff:b4:fd:29: 1e:12:ad:06:d4:83:9a:11:f1:43:81:bc:2e:f9:a7: 58:81:f4:4b:d8:b9:20:ac:c2:0c:b1:64:21:aa:8f: d0:e6:4f:dc:4b:c3:d4:f9:24:33:1c:f7:e1:b7:48: 07:6d:5c:cb:12:b0:41:9a:35:8a:44:93:6a:4f:c9: 61:8f:08:9f:fa:4b:24:4b:27:0a:c7:c7:b3:3b:18: be:1b:96:ef:c0:fd:b9:43:ca:f8:80:eb:ed:37:79: 2e:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:64:E7:B0:EE:F2:04:83:5C:7D:F2:A8:9F:60:C0:2B:E1:D8:9A:DD X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a9a51a-e8e3-497a-aba2-e799c23aac20/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a9a51a-e8e3-497a-aba2-e799c23aac20/1/Q2TnsO7yBINcffKon2DAK-HYmt0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.232.252.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 213500 Signature Algorithm: sha256WithRSAEncryption 8a:e8:bf:c4:df:3e:1e:7f:39:7e:a0:7f:c9:6c:05:e3:da:27: 3f:88:d7:bb:06:06:47:f1:87:40:23:17:52:c7:2c:82:84:57: e6:aa:81:81:ca:d8:eb:43:5a:c8:06:23:3b:25:d8:fa:5f:0b: 1c:92:76:2e:10:2e:ce:7b:3f:4c:1c:e8:69:18:41:02:16:fe: ff:88:93:1f:05:f2:0d:fb:b9:3c:56:bf:e8:db:97:b5:00:09: 19:ca:3d:b2:0f:4e:13:6b:23:bd:07:22:1a:02:dd:5c:c2:21: 80:cb:6f:ba:9f:f8:4f:22:8e:b4:25:9d:ae:54:fc:13:80:0e: f1:f8:88:c0:12:10:cb:89:02:42:c6:a4:a9:7b:f9:a2:47:e9: b3:ca:b6:3b:0e:c2:09:96:1d:47:38:f2:3b:f5:c8:a3:20:a3: ae:61:a2:7c:83:fc:e6:ab:10:d9:41:75:d1:92:f5:ba:02:07: 1a:f7:de:a8:5b:2f:92:a8:ca:64:0c:d5:c2:3b:99:2b:a8:f2: 76:7b:24:86:fd:a1:21:3e:0f:1b:fa:95:6f:59:66:56:ca:b9: 21:60:5e:68:fc:fb:80:81:38:1d:9a:71:51:80:bd:a9:36:98: fc:53:82:b9:b5:1f:1d:00:fe:a3:21:12:19:39:b1:99:f2:5d: 09:08:39:82 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt+pR6LyGIMcr1KJ6k6U9ePMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MzY0ZTdiMGVlZjIwNDgzNWM3ZGYyYTg5ZjYwYzAyYmUxZDg5YWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7/sl4sYXkfI3qeL6G3/UAAFW/GT u5vbB6KGxHryzbhPmBMUgF6FtZyp7ZG4xFN4Q2MAtKoQg7BXUNRKIfrHAyBW2QTm p5PWYlEaEzmIiMVYA8ENVJQP4qTznWsgxaIGTLpFiXJscEg7DbK7zR3vLR5Za4OZ EaGWFp6EN83V/J8xwJpS6DmahF4Lf3NTa65ZzWiqR/LBhzaM6xyawaZVLv+0/Ske Eq0G1IOaEfFDgbwu+adYgfRL2LkgrMIMsWQhqo/Q5k/cS8PU+SQzHPfht0gHbVzL ErBBmjWKRJNqT8lhjwif+kskSycKx8ezOxi+G5bvwP25Q8r4gOvtN3kupwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFENk57Du8gSDXH3yqJ9gwCvh2JrdMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzllL2E5YTUx YS1lOGUzLTQ5N2EtYWJhMi1lNzk5YzIzYWFjMjAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWUvYTlhNTFh LWU4ZTMtNDk3YS1hYmEyLWU3OTljMjNhYWMyMC8xL1EyVG5zTzd5QklOY2ZmS29u MkRBSy1IWW10MC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAXuj8MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwNB/DANBgkqhkiG9w0BAQsFAAOCAQEAiui/xN8+Hn85fqB/yWwF49onP4jXuwYG R/GHQCMXUscsgoRX5qqBgcrY60NayAYjOyXY+l8LHJJ2LhAuzns/TBzoaRhBAhb+ /4iTHwXyDfu5PFa/6NuXtQAJGco9sg9OE2sjvQciGgLdXMIhgMtvup/4TyKOtCWd rlT8E4AO8fiIwBIQy4kCQsakqXv5okfps8q2Ow7CCZYdRzjyO/XIoyCjrmGifIP8 5qsQ2UF10ZL1ugIHGvfeqFsvkqjKZAzVwjuZK6jydnskhv2hIT4PG/qVb1lmVsq5 IWBeaPz7gIE4HZpxUYC9qTaY/FOCubUfHQD+oyESGTmxmfJdCQg5gg== -----END CERTIFICATE-----Generated at Mon Feb 9 15:03:51 2026 by rpki-client