This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/R2Bl1x8emPmnynjmFOz19G1aZDw.cer File: R2Bl1x8emPmnynjmFOz19G1aZDw.cer (raw, json) Hash identifier: 9O765qjewevp34jAliZjZ0jBY+FKvObmirbNZx57YI4= Subject key identifier: 47:60:65:D7:1F:1E:98:F9:A7:CA:78:E6:14:EC:F5:F4:6D:5A:64:3C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B362E76C71F9260E610FAE943DAF6A9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b5/526f3e-8924-48bd-a772-b51953037993/1/R2Bl1x8emPmnynjmFOz19G1aZDw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b5/526f3e-8924-48bd-a772-b51953037993/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:27 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 5523 IP: 81.13.0.0/17 IP: 194.67.128.0/18 IP: 194.67.224.0/19 IP: 213.252.64.0/18 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:2e:76:c7:1f:92:60:e6:10:fa:e9:43:da:f6:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=476065d71f1e98f9a7ca78e614ecf5f46d5a643c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:41:51:6f:87:ae:32:92:9f:85:eb:67:8b:50: 92:41:05:11:05:b0:41:ad:4b:9d:0b:fa:c0:d0:ab: 74:1a:32:80:84:a8:69:dc:a0:2d:2e:ba:7f:5c:32: 61:51:31:0e:18:a4:8b:4d:f1:47:18:24:3b:de:02: 46:a8:5e:ec:73:7e:9a:1f:02:66:ac:e2:77:91:45: 8f:bd:2a:ed:fa:1d:7b:ad:f5:7f:78:ca:79:e1:e3: e8:03:9b:d0:92:52:5f:1f:68:1b:21:95:1d:dd:8c: 0a:c5:64:7f:14:b6:e8:6b:bc:9f:b3:e3:e7:62:f4: 10:49:b9:6d:a3:f2:e5:d2:60:ab:f3:3a:ae:ed:7a: d0:b8:5d:07:35:41:eb:ef:b5:b5:36:20:90:8b:07: 0e:f1:36:a4:24:f6:71:88:21:4d:84:17:72:4f:2b: 5b:3e:fe:2a:1f:20:4e:7a:a6:9e:2a:93:5a:be:8c: 30:d6:ca:59:62:82:22:32:aa:38:9d:50:8e:d3:16: 05:3e:15:32:9a:f4:44:f6:cd:3c:31:90:fe:63:9b: a7:bc:f0:3f:1e:b2:a2:88:e0:dd:d2:94:22:91:1d: 72:90:91:8b:4f:0f:57:ce:9a:44:63:cd:8b:0f:e8: 0d:9b:33:8d:1b:be:db:cc:ec:0a:79:d9:d2:cd:98: 60:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:60:65:D7:1F:1E:98:F9:A7:CA:78:E6:14:EC:F5:F4:6D:5A:64:3C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/526f3e-8924-48bd-a772-b51953037993/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/526f3e-8924-48bd-a772-b51953037993/1/R2Bl1x8emPmnynjmFOz19G1aZDw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.13.0.0/17 194.67.128.0/18 194.67.224.0/19 213.252.64.0/18 sbgp-autonomousSysNum: critical Autonomous System Numbers: 5523 Signature Algorithm: sha256WithRSAEncryption 3e:7f:97:d5:29:ac:22:44:bb:96:af:c9:52:45:36:01:92:2a: 84:3d:64:2d:59:b9:b4:20:ba:da:19:c4:81:cb:e4:24:4d:2d: 9e:0d:45:9b:5f:ff:79:43:eb:e2:55:11:46:76:a4:ad:4a:0c: e0:e2:87:f2:37:b8:75:50:e3:4d:dd:06:31:00:e0:08:74:9c: a8:13:87:90:65:bc:4e:21:95:81:a1:49:6c:79:04:7c:cf:49: 93:87:a7:6d:fa:fd:6f:65:f3:76:23:73:8e:74:45:ae:83:65: 3e:43:ce:a7:9f:3e:02:bf:1e:45:c1:e9:0e:26:86:ea:55:59: 19:2d:b6:00:fb:2b:ac:29:aa:63:ab:1c:9c:9d:af:6b:4b:28: 61:37:1f:98:30:32:0a:3b:ef:3f:73:55:19:8f:fb:e8:77:7b: 45:59:4f:48:0e:f8:5d:92:1e:46:91:e9:25:e2:e1:63:05:33: 4c:25:e8:a7:44:93:8a:98:02:4f:0b:dd:29:1f:c3:d9:08:d6: 05:b0:31:45:91:8a:0e:ac:0d:af:af:74:c1:b4:c5:b2:ce:b0: 14:f6:df:35:8d:b2:1c:d5:9f:37:cd:25:fd:98:42:c4:da:8d: 85:bf:61:24:0e:d2:b1:96:d2:51:43:3e:95:29:45:5a:fe:f4: 8f:64:b4:c6 -----BEGIN CERTIFICATE----- MIIFpTCCBI2gAwIBAgISAZt7Ni52xx+SYOYQ+ulD2vapMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NzYwNjVkNzFmMWU5OGY5YTdjYTc4ZTYxNGVjZjVmNDZkNWE2NDNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkEFRb4euMpKfhetni1CSQQURBbBB rUudC/rA0Kt0GjKAhKhp3KAtLrp/XDJhUTEOGKSLTfFHGCQ73gJGqF7sc36aHwJm rOJ3kUWPvSrt+h17rfV/eMp54ePoA5vQklJfH2gbIZUd3YwKxWR/FLboa7yfs+Pn YvQQSblto/Ll0mCr8zqu7XrQuF0HNUHr77W1NiCQiwcO8TakJPZxiCFNhBdyTytb Pv4qHyBOeqaeKpNavoww1spZYoIiMqo4nVCO0xYFPhUymvRE9s08MZD+Y5unvPA/ HrKiiODd0pQikR1ykJGLTw9XzppEY82LD+gNmzONG77bzOwKednSzZhghwIDAQAB o4ICsTCCAq0wHQYDVR0OBBYEFEdgZdcfHpj5p8p45hTs9fRtWmQ8MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I1LzUyNmYz ZS04OTI0LTQ4YmQtYTc3Mi1iNTE5NTMwMzc5OTMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjUvNTI2ZjNl LTg5MjQtNDhiZC1hNzcyLWI1MTk1MzAzNzk5My8xL1IyQmwxeDhlbVBtbnluam1G T3oxOUcxYVpEdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDEGCCsGAQUF BwEHAQH/BCIwIDAeBAIAATAYAwQHUQ0AAwQGwkOAAwQFwkPgAwQG1fxAMBkGCCsG AQUFBwEIAQH/BAowCKAGMAQCAhWTMA0GCSqGSIb3DQEBCwUAA4IBAQA+f5fVKawi RLuWr8lSRTYBkiqEPWQtWbm0ILraGcSBy+QkTS2eDUWbX/95Q+viVRFGdqStSgzg 4ofyN7h1UONN3QYxAOAIdJyoE4eQZbxOIZWBoUlseQR8z0mTh6dt+v1vZfN2I3OO dEWug2U+Q86nnz4Cvx5FwekOJobqVVkZLbYA+yusKapjqxycna9rSyhhNx+YMDIK O+8/c1UZj/vod3tFWU9IDvhdkh5Gkekl4uFjBTNMJeinRJOKmAJPC90pH8PZCNYF sDFFkYoOrA2vr3TBtMWyzrAU9t81jbIc1Z83zSX9mELE2o2Fv2EkDtKxltJRQz6V KUVa/vSPZLTG -----END CERTIFICATE-----Generated at Mon Feb 9 15:07:28 2026 by rpki-client