This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_x2DMuEYqaIYfqtYhCedZYDxGfc.cer File: _x2DMuEYqaIYfqtYhCedZYDxGfc.cer (raw, json) Hash identifier: A65T5OPyPr4YZK4HSF+aDLUHnuPazB9ZAeeXJciiods= Subject key identifier: FF:1D:83:32:E1:18:A9:A2:18:7E:AB:58:84:27:9D:65:80:F1:19:F7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E38A0FB18F637C3559F761462AC653E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0d/aac6be-1855-484b-8025-dea30ecb736d/1/_x2DMuEYqaIYfqtYhCedZYDxGfc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0d/aac6be-1855-484b-8025-dea30ecb736d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:59 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 204507 IP: 185.149.96.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:a0:fb:18:f6:37:c3:55:9f:76:14:62:ac:65:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ff1d8332e118a9a2187eab5884279d6580f119f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:5b:71:3d:df:0d:97:a7:f2:fb:70:d0:3b:4b: 5e:27:ca:d2:26:15:e1:00:78:e7:2e:d4:72:8b:01: 51:89:5c:d6:12:e4:29:8f:8a:ab:97:c8:8f:22:5b: 3e:57:0f:6d:d9:8f:65:ef:2a:dd:a7:bd:b2:22:9c: b0:57:e2:5f:4b:2b:77:38:c6:75:d1:4a:43:f1:82: 20:6f:34:3a:ce:3a:96:2b:ba:06:df:a3:8f:e6:fb: 58:8a:b6:06:e8:eb:ca:3d:fd:ad:7f:82:f7:c7:6e: 3c:4f:64:e2:87:fd:ca:f3:56:70:9a:b0:5b:08:5d: fc:b6:d4:3d:7d:73:ea:6b:18:55:56:80:d3:ae:b1: 89:9f:b7:07:a7:f5:90:f9:3b:d7:fd:23:ae:ae:74: 7d:64:54:c3:db:2e:0c:e2:24:a8:e8:ad:a3:63:87: 01:72:ec:17:b2:70:a3:d0:95:e9:06:17:3d:32:07: 37:81:b8:65:85:15:ad:33:dd:11:d1:7f:64:f3:a6: 0e:4a:16:98:1a:cf:92:1c:bc:5c:3f:3e:59:36:e5: 66:ef:54:f5:c4:f9:75:78:eb:2e:93:01:48:dd:d0: 9e:75:31:11:a6:4b:f4:8f:9e:5a:c1:45:09:8a:09: 0c:d7:cc:16:04:b1:f4:e4:19:3c:54:41:53:69:b2: 28:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:1D:83:32:E1:18:A9:A2:18:7E:AB:58:84:27:9D:65:80:F1:19:F7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/aac6be-1855-484b-8025-dea30ecb736d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/aac6be-1855-484b-8025-dea30ecb736d/1/_x2DMuEYqaIYfqtYhCedZYDxGfc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.149.96.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 204507 Signature Algorithm: sha256WithRSAEncryption 75:aa:db:e9:72:1d:86:28:5f:3e:43:22:29:b8:c5:d6:14:08: 6b:b0:ee:32:85:82:53:b2:9a:63:e0:fd:cc:c3:18:2b:39:43: 85:ec:3a:a8:97:53:e4:10:f9:1b:42:3b:dc:de:1d:b7:c3:d6: 7c:28:da:89:9a:08:18:f9:d4:6a:f8:46:f9:e4:5f:23:0c:49: 65:04:ea:db:85:aa:77:60:28:1d:fd:23:76:b7:dc:ff:6d:97: 33:ca:81:0c:5e:e0:1e:a7:ce:3b:b6:b6:e0:d7:9b:80:d1:f8: 25:ce:3b:55:db:f6:a6:ba:b3:c9:5e:a2:7d:82:82:93:19:4b: 4d:a1:b9:a8:92:5d:6b:d9:7a:5a:e5:57:0b:bb:b1:a8:cd:9d: 06:52:f8:af:1b:ff:a5:47:29:d8:27:30:3b:f5:a0:f6:73:7f: 47:24:74:d3:66:59:8e:5f:14:78:0d:d9:ad:82:a6:de:6a:31: 57:14:d4:15:69:76:7a:c5:47:1d:78:d8:95:3b:8d:3a:22:58: a0:5d:4c:64:a0:ae:3f:4a:a7:56:0e:8f:6d:c6:64:6e:9d:6f: 4f:ed:f4:e9:bd:8c:7e:5c:79:e9:37:ba:e2:1a:6a:7a:f3:e7: f0:29:1b:bb:bd:c4:4b:58:a5:3b:12:33:19:e5:54:72:39:9c: b7:76:5a:57 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt+OKD7GPY3w1WfdhRirGU+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZjFkODMzMmUxMThhOWEyMTg3ZWFiNTg4NDI3OWQ2NTgwZjExOWY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqltxPd8Nl6fy+3DQO0teJ8rSJhXh AHjnLtRyiwFRiVzWEuQpj4qrl8iPIls+Vw9t2Y9l7yrdp72yIpywV+JfSyt3OMZ1 0UpD8YIgbzQ6zjqWK7oG36OP5vtYirYG6OvKPf2tf4L3x248T2Tih/3K81ZwmrBb CF38ttQ9fXPqaxhVVoDTrrGJn7cHp/WQ+TvX/SOurnR9ZFTD2y4M4iSo6K2jY4cB cuwXsnCj0JXpBhc9Mgc3gbhlhRWtM90R0X9k86YOShaYGs+SHLxcPz5ZNuVm71T1 xPl1eOsukwFI3dCedTERpkv0j55awUUJigkM18wWBLH05Bk8VEFTabIozQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFP8dgzLhGKmiGH6rWIQnnWWA8Rn3MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBkL2FhYzZi ZS0xODU1LTQ4NGItODAyNS1kZWEzMGVjYjczNmQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGQvYWFjNmJl LTE4NTUtNDg0Yi04MDI1LWRlYTMwZWNiNzM2ZC8xL194MkRNdUVZcWFJWWZxdFlo Q2VkWllEeEdmYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCuZVgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMe2zANBgkqhkiG9w0BAQsFAAOCAQEAdarb6XIdhihfPkMiKbjF1hQIa7DuMoWC U7KaY+D9zMMYKzlDhew6qJdT5BD5G0I73N4dt8PWfCjaiZoIGPnUavhG+eRfIwxJ ZQTq24Wqd2AoHf0jdrfc/22XM8qBDF7gHqfOO7a24NebgNH4Jc47Vdv2prqzyV6i fYKCkxlLTaG5qJJda9l6WuVXC7uxqM2dBlL4rxv/pUcp2CcwO/Wg9nN/RyR002ZZ jl8UeA3ZrYKm3moxVxTUFWl2esVHHXjYlTuNOiJYoF1MZKCuP0qnVg6PbcZkbp1v T+306b2Mflx56Te64hpqevPn8Ckbu73ES1ilOxIzGeVUcjmct3ZaVw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:52 2026 by rpki-client