This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/T2L75L_BSBjG6c5mewVq1x_vKsM.cer File: T2L75L_BSBjG6c5mewVq1x_vKsM.cer (raw, json) Hash identifier: Qdn7xMU605gSENy4gr9hpbQmYsxoFol0WCWeLiIr5Xk= Subject key identifier: 4F:62:FB:E4:BF:C1:48:18:C6:E9:CE:66:7B:05:6A:D7:1F:EF:2A:C3 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B791115FD300F56FAD70D248478A68EBC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ec/4ea9c3-2800-4667-a44c-afaf7fdd8dfd/1/T2L75L_BSBjG6c5mewVq1x_vKsM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ec/4ea9c3-2800-4667-a44c-afaf7fdd8dfd/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:41 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 213729 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:15:fd:30:0f:56:fa:d7:0d:24:84:78:a6:8e:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4f62fbe4bfc14818c6e9ce667b056ad71fef2ac3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b3:bc:1e:36:8c:be:1e:66:43:76:43:80:d8: eb:73:bc:9f:c2:b9:ca:76:b0:40:b9:c2:f2:f9:c9: f9:20:65:da:db:42:29:3d:18:a7:69:a4:07:f2:b4: a3:12:04:6f:7c:79:65:11:b4:84:a3:a4:4e:30:0d: 7c:12:73:b8:3a:de:86:be:b4:13:9e:ed:58:7b:4b: 47:d5:06:b4:93:8c:2a:ba:9a:c3:fd:b4:6a:d0:a9: b6:4e:1d:c1:6b:4b:8c:be:8b:b4:24:08:8e:8f:10: e0:9d:a0:c1:7e:d0:a0:75:37:c4:22:3f:eb:01:ab: 5a:90:c6:c3:e9:ed:6f:0c:f8:97:b3:0d:1a:d5:1d: d9:dc:cf:fa:e2:0e:11:2b:c4:7d:0a:52:92:70:f5: 5c:d6:1b:62:38:23:40:33:ff:a4:ee:4b:ea:c1:de: 7b:9e:e9:76:2e:9a:74:8c:8a:a1:41:05:49:ae:1a: e0:8e:f5:a3:eb:64:57:4e:c2:47:ea:5d:2a:66:53: 06:9b:2e:c6:5c:02:cc:43:c5:0f:60:db:30:39:07: 3c:95:a7:4b:ee:f6:60:b7:90:f3:aa:d4:cf:49:63: a1:82:4d:99:7c:4c:43:43:3b:ec:72:28:8b:e9:10: 09:44:68:3f:40:62:65:6d:7c:e5:35:76:27:73:d8: c8:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:62:FB:E4:BF:C1:48:18:C6:E9:CE:66:7B:05:6A:D7:1F:EF:2A:C3 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/4ea9c3-2800-4667-a44c-afaf7fdd8dfd/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/4ea9c3-2800-4667-a44c-afaf7fdd8dfd/1/T2L75L_BSBjG6c5mewVq1x_vKsM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 213729 Signature Algorithm: sha256WithRSAEncryption 60:fd:ae:4d:e1:33:87:04:68:38:97:47:43:b0:30:37:1c:71: 15:f4:d8:3b:c8:35:d6:95:a5:48:5e:c0:9d:60:bb:b0:53:96: e0:c5:8b:4b:b1:e5:60:59:71:41:3a:6a:98:68:9b:74:17:3b: b2:9e:37:a8:d0:2e:6f:ea:a2:e6:cf:4c:aa:65:17:06:ea:ca: 54:a7:fb:fa:20:7f:2e:2f:ea:75:87:05:75:02:85:92:33:d0: d2:2d:d5:1e:aa:96:1f:b5:1b:16:aa:9a:ca:9d:81:c5:c2:f9: d0:ad:3e:a1:d0:ba:c5:65:01:7d:b0:e5:e3:18:8d:3c:91:26: a8:cb:19:58:be:76:ce:81:84:c5:e6:f0:bb:ee:2b:d5:29:38: 99:ef:30:19:cc:90:ba:68:33:e5:0c:39:0a:ef:a5:13:29:4f: 51:51:15:fd:a6:da:65:60:ff:e4:1d:ef:41:74:04:c5:e2:9e: 9d:96:61:55:ff:81:87:47:6b:1e:cd:a3:0c:61:02:34:74:5b: bc:2d:16:bd:7e:77:b3:08:74:51:3d:02:d1:f5:6f:d7:2a:99: b0:55:65:e1:39:ce:a6:9f:fd:fc:ca:14:90:d0:4c:f5:55:9d: ca:dc:4c:63:6d:30:af:ed:99:f1:09:e0:75:81:00:2c:af:fc: c3:5c:c2:6c -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt5ERX9MA9W+tcNJIR4po68MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZjYyZmJlNGJmYzE0ODE4YzZlOWNlNjY3YjA1NmFkNzFmZWYyYWMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrO8HjaMvh5mQ3ZDgNjrc7yfwrnK drBAucLy+cn5IGXa20IpPRinaaQH8rSjEgRvfHllEbSEo6ROMA18EnO4Ot6GvrQT nu1Ye0tH1Qa0k4wquprD/bRq0Km2Th3Ba0uMvou0JAiOjxDgnaDBftCgdTfEIj/r AatakMbD6e1vDPiXsw0a1R3Z3M/64g4RK8R9ClKScPVc1htiOCNAM/+k7kvqwd57 nul2Lpp0jIqhQQVJrhrgjvWj62RXTsJH6l0qZlMGmy7GXALMQ8UPYNswOQc8ladL 7vZgt5DzqtTPSWOhgk2ZfExDQzvsciiL6RAJRGg/QGJlbXzlNXYnc9jIfQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFE9i++S/wUgYxunOZnsFatcf7yrDMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VjLzRlYTlj My0yODAwLTQ2NjctYTQ0Yy1hZmFmN2ZkZDhkZmQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWMvNGVhOWMz LTI4MDAtNDY2Ny1hNDRjLWFmYWY3ZmRkOGRmZC8xL1QyTDc1TF9CU0JqRzZjNW1l d1ZxMXhfdktzTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNC4TANBgkqhkiG9w0BAQsFAAOCAQEAYP2uTeEzhwRo OJdHQ7AwNxxxFfTYO8g11pWlSF7AnWC7sFOW4MWLS7HlYFlxQTpqmGibdBc7sp43 qNAub+qi5s9MqmUXBurKVKf7+iB/Li/qdYcFdQKFkjPQ0i3VHqqWH7UbFqqayp2B xcL50K0+odC6xWUBfbDl4xiNPJEmqMsZWL52zoGExebwu+4r1Sk4me8wGcyQumgz 5Qw5Cu+lEylPUVEV/abaZWD/5B3vQXQExeKenZZhVf+Bh0drHs2jDGECNHRbvC0W vX53swh0UT0C0fVv1yqZsFVl4TnOpp/9/MoUkNBM9VWdytxMY20wr+2Z8QngdYEA LK/8w1zCbA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:52:19 2026 by rpki-client