This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/R2hKfr-d4pSDGiwD4bWgEkIKzZc.cer File: R2hKfr-d4pSDGiwD4bWgEkIKzZc.cer (raw, json) Hash identifier: uQ9xnF903FvLZ5+uH0GG+aRSGABPOf7+4wgUSlqI+aE= Subject key identifier: 47:68:4A:7E:BF:9D:E2:94:83:1A:2C:03:E1:B5:A0:12:42:0A:CD:97 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E37AD78C93A552BB8FF0DA4502DA8EC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:18:56 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 199532 IP: 91.217.195.0/24 IP: 2a12:b640::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:ad:78:c9:3a:55:2b:b8:ff:0d:a4:50:2d:a8:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=47684a7ebf9de294831a2c03e1b5a012420acd97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ad:8d:10:3d:c3:d7:18:90:5e:5c:ca:7f:73: 2b:71:ef:03:a2:26:1a:e5:d3:31:7e:ca:1a:be:98: 29:b6:b2:82:12:86:89:f2:d4:8b:ba:73:c0:84:ce: 18:32:18:1d:2f:8c:3e:8f:04:88:6a:36:45:d5:c2: d2:d2:bc:e8:28:45:f6:e8:b7:9a:ca:3e:8b:51:d7: 4a:22:37:4f:fb:45:d2:78:3e:f3:89:1b:9c:71:d0: ca:10:11:1d:82:0d:16:73:5f:e2:c7:49:1a:61:9e: b6:d9:6c:72:63:a6:91:e4:e9:7a:5d:cb:9f:2a:a8: e3:76:87:07:b8:02:5d:e1:5c:7e:e0:75:a8:89:4a: cf:ee:f5:41:fd:9a:94:8f:c4:0f:78:c9:cc:0a:f2: 2c:ce:49:f1:a3:72:9f:ce:2d:d6:11:df:4b:52:d9: 47:a0:a7:bc:12:91:de:61:03:56:3b:dc:96:b5:62: 97:c1:98:d2:f1:48:a5:16:e5:25:2e:9f:99:de:f9: 96:3d:44:ca:a1:e4:51:e9:93:ac:86:65:fa:0a:5c: b7:6b:40:ac:cd:e3:bc:b5:ea:38:97:aa:bf:25:8d: 7e:e0:51:03:99:4a:61:8a:90:26:eb:ef:6b:cb:c6: 9d:50:e5:8e:84:99:87:f5:5f:f7:d3:66:54:a4:03: b8:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:68:4A:7E:BF:9D:E2:94:83:1A:2C:03:E1:B5:A0:12:42:0A:CD:97 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.217.195.0/24 IPv6: 2a12:b640::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 199532 Signature Algorithm: sha256WithRSAEncryption 3c:ff:04:81:26:84:d7:fd:02:12:0b:fb:71:da:4c:ec:d5:b4: b6:94:2c:52:2b:ce:32:d9:61:cd:cd:f0:67:76:24:9e:65:e7: 34:e0:16:93:19:1c:3a:ba:19:b3:29:de:fb:a8:8a:cc:3d:09: 1c:f3:08:92:49:6f:6e:65:07:d8:69:79:ac:a8:e3:b1:bc:f1: 14:6c:22:07:64:f0:84:39:39:2a:99:6b:00:ce:45:90:28:fa: 13:ec:75:32:54:46:e2:cd:18:27:46:a1:d7:41:f1:4f:a3:d7: 67:3c:73:25:e7:5d:c2:5e:5a:3d:8e:3a:c4:54:09:f4:1d:c0: a7:4d:27:ad:82:4b:fc:e5:b8:6d:ef:b0:23:de:e0:2e:56:7d: df:3f:4b:e7:4e:d4:4b:ab:38:21:57:53:3f:6e:e2:da:67:6d: d3:53:0f:1e:00:a8:b9:b8:59:b9:df:8d:ac:49:56:ff:ff:42: fc:ca:7d:3b:09:58:a9:f7:5a:0e:d6:19:b9:c3:b6:d8:44:78: ca:34:fa:8c:f8:96:64:33:40:3f:a0:00:01:8b:6d:3b:b8:24: 92:e2:7e:56:e9:93:c9:a6:0b:01:cb:58:26:55:51:b7:f2:a9: e0:f1:08:c0:b7:c0:eb:ab:b4:6a:1c:f8:19:74:7e:9e:a1:bf: b0:c6:a3:3d -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt+N614yTpVK7j/DaRQLajsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NzY4NGE3ZWJmOWRlMjk0ODMxYTJjMDNlMWI1YTAxMjQyMGFjZDk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2K2NED3D1xiQXlzKf3Mrce8DoiYa 5dMxfsoavpgptrKCEoaJ8tSLunPAhM4YMhgdL4w+jwSIajZF1cLS0rzoKEX26Lea yj6LUddKIjdP+0XSeD7ziRuccdDKEBEdgg0Wc1/ix0kaYZ622WxyY6aR5Ol6Xcuf KqjjdocHuAJd4Vx+4HWoiUrP7vVB/ZqUj8QPeMnMCvIszknxo3Kfzi3WEd9LUtlH oKe8EpHeYQNWO9yWtWKXwZjS8UilFuUlLp+Z3vmWPUTKoeRR6ZOshmX6Cly3a0Cs zeO8teo4l6q/JY1+4FEDmUphipAm6+9ry8adUOWOhJmH9V/302ZUpAO4eQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFEdoSn6/neKUgxosA+G1oBJCCs2XMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJjLzA5ODc3 Mi1kYmI2LTRkYmItYjU5NS1iMjZmNzBlMDNkNzYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmMvMDk4Nzcy LWRiYjYtNGRiYi1iNTk1LWIyNmY3MGUwM2Q3Ni8xL1IyaEtmci1kNHBTREdpd0Q0 YldnRWtJS3paYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAW9nDMA0EAgACMAcDBQMqErZAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMLbDANBgkqhkiG9w0BAQsFAAOCAQEAPP8EgSaE1/0C Egv7cdpM7NW0tpQsUivOMtlhzc3wZ3YknmXnNOAWkxkcOroZsyne+6iKzD0JHPMI kklvbmUH2Gl5rKjjsbzxFGwiB2TwhDk5KplrAM5FkCj6E+x1MlRG4s0YJ0ah10Hx T6PXZzxzJeddwl5aPY46xFQJ9B3Ap00nrYJL/OW4be+wI97gLlZ93z9L507US6s4 IVdTP27i2mdt01MPHgCoubhZud+NrElW//9C/Mp9OwlYqfdaDtYZucO22ER4yjT6 jPiWZDNAP6AAAYttO7gkkuJ+VumTyaYLActYJlVRt/Kp4PEIwLfA66u0ahz4GXR+ nqG/sMajPQ== -----END CERTIFICATE-----Generated at Mon Feb 9 15:07:38 2026 by rpki-client