This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2Na428t9PaNPlcqMT4aGKogt1c.cer File: c2Na428t9PaNPlcqMT4aGKogt1c.cer (raw, json) Hash identifier: nSiC3rxn5Tzs8ppDL6SuAVqYfXV9mDFfaLIaMv6Mzoc= Subject key identifier: 73:63:5A:E3:6F:2D:F4:F6:8D:3E:57:2A:31:3E:1A:18:AA:20:B7:57 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A2815A75EE90ED497133ABBA5F5518 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ff/c0d281-d40d-40e0-93ea-5bae375cf85a/1/c2Na428t9PaNPlcqMT4aGKogt1c.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ff/c0d281-d40d-40e0-93ea-5bae375cf85a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:17:54 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 49278 IP: 144.84.0.0/16 IP: 158.112.0.0/16 IP: 185.155.24.0/22 IP: 2a02:27b8::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:81:5a:75:ee:90:ed:49:71:33:ab:ba:5f:55:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=73635ae36f2df4f68d3e572a313e1a18aa20b757 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:6b:be:3d:2f:25:fd:70:1d:53:1c:eb:98:0d: 35:8a:4e:05:cf:40:2d:72:6b:8f:42:22:5a:f7:8e: eb:af:ca:2b:d0:37:80:64:26:89:d9:6e:77:06:bd: cf:73:28:33:06:3f:b2:22:09:fb:94:c8:0c:77:56: fd:3e:13:0e:83:86:e2:0b:4f:bc:00:a7:6d:25:26: ec:1c:35:f7:ef:8c:09:7d:16:2e:88:b8:f3:c8:36: 6b:bb:17:25:94:e4:b9:41:e6:ee:99:76:80:a0:89: e0:eb:e3:e9:76:8e:46:4a:cd:cb:83:d0:d2:44:39: e4:c6:7f:8e:bf:e6:6f:36:a1:97:f8:0f:06:22:a0: 9a:32:34:7e:aa:60:a1:3e:4a:d9:c3:47:d5:e7:c3: 6b:4c:c6:a8:79:2d:be:3f:8c:96:8b:b5:dc:80:62: 27:72:58:bb:89:c5:25:58:54:f4:1f:9b:73:81:21: 60:9f:ee:88:51:a1:4d:89:37:25:59:e3:d5:61:4a: c2:32:2a:fe:bc:a7:9e:0d:64:18:3a:ad:99:84:e3: 2c:0e:17:60:3e:54:c2:1c:52:5d:d8:35:01:cb:e2: c9:8e:eb:ab:60:fa:fb:07:6b:ee:f0:75:34:66:e7: 87:4e:e5:03:e0:26:5b:7e:59:af:3d:01:ae:55:b6: 27:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:63:5A:E3:6F:2D:F4:F6:8D:3E:57:2A:31:3E:1A:18:AA:20:B7:57 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/c0d281-d40d-40e0-93ea-5bae375cf85a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/c0d281-d40d-40e0-93ea-5bae375cf85a/1/c2Na428t9PaNPlcqMT4aGKogt1c.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.84.0.0/16 158.112.0.0/16 185.155.24.0/22 IPv6: 2a02:27b8::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 49278 Signature Algorithm: sha256WithRSAEncryption 17:b4:77:a5:8e:66:59:83:91:16:18:24:96:fe:95:cc:be:79: b5:7a:29:51:4a:ad:3f:1f:bd:7d:82:ec:0d:ed:91:a3:25:2c: 68:3f:7b:8b:bf:0b:1b:12:3f:e1:54:f2:76:bf:61:44:d1:07: 35:a6:5c:1e:0b:96:1c:ab:3f:35:75:75:d6:ed:77:27:68:38: 7a:55:46:43:fa:eb:eb:84:e9:51:98:24:08:30:92:b6:78:c2: ea:f3:be:56:be:bf:0a:21:ed:79:b3:41:41:7f:cf:16:b5:fd: fa:c4:d3:0a:5e:11:6e:1d:6b:d4:24:5a:ee:fa:11:3e:c7:5c: bf:5b:09:b1:c0:e6:46:0b:77:4a:2b:88:3d:ca:03:6c:3c:68: 2c:3d:b8:11:5e:04:f6:95:f9:be:74:d8:24:3e:3d:c4:fa:99: 9c:d7:9c:fb:3d:4f:a7:08:a6:21:d9:2e:a8:f5:29:b7:ec:5c: c5:a7:12:ae:89:75:e1:fb:c1:ef:05:18:ed:28:c6:31:f3:2f: f0:0a:ff:89:0b:8f:a9:57:89:23:5f:c2:94:68:10:ae:5b:85: 1c:6d:9d:4d:20:69:d7:90:da:67:80:79:d7:4d:85:a4:27:a7: dc:5c:db:3a:e7:82:d3:47:a8:36:dd:8a:58:ce:59:e8:02:d7: 74:f9:87:e1 -----BEGIN CERTIFICATE----- MIIFrTCCBJWgAwIBAgISAZt4ooFade6Q7UlxM6u6X1UYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MzYzNWFlMzZmMmRmNGY2OGQzZTU3MmEzMTNlMWExOGFhMjBiNzU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmu+PS8l/XAdUxzrmA01ik4Fz0At cmuPQiJa947rr8or0DeAZCaJ2W53Br3PcygzBj+yIgn7lMgMd1b9PhMOg4biC0+8 AKdtJSbsHDX374wJfRYuiLjzyDZruxcllOS5QebumXaAoIng6+Ppdo5GSs3Lg9DS RDnkxn+Ov+ZvNqGX+A8GIqCaMjR+qmChPkrZw0fV58NrTMaoeS2+P4yWi7XcgGIn cli7icUlWFT0H5tzgSFgn+6IUaFNiTclWePVYUrCMir+vKeeDWQYOq2ZhOMsDhdg PlTCHFJd2DUBy+LJjuurYPr7B2vu8HU0ZueHTuUD4CZbflmvPQGuVbYn5wIDAQAB o4ICuTCCArUwHQYDVR0OBBYEFHNjWuNvLfT2jT5XKjE+GhiqILdXMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZmL2MwZDI4 MS1kNDBkLTQwZTAtOTNlYS01YmFlMzc1Y2Y4NWEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmYvYzBkMjgx LWQ0MGQtNDBlMC05M2VhLTViYWUzNzVjZjg1YS8xL2MyTmE0Mjh0OVBhTlBsY3FN VDRhR0tvZ3QxYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDgGCCsGAQUF BwEHAQH/BCkwJzAWBAIAATAQAwMAkFQDAwCecAMEArmbGDANBAIAAjAHAwUDKgIn uDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMAwH4wDQYJKoZIhvcNAQELBQADggEB ABe0d6WOZlmDkRYYJJb+lcy+ebV6KVFKrT8fvX2C7A3tkaMlLGg/e4u/CxsSP+FU 8na/YUTRBzWmXB4LlhyrPzV1ddbtdydoOHpVRkP66+uE6VGYJAgwkrZ4wurzvla+ vwoh7XmzQUF/zxa1/frE0wpeEW4da9QkWu76ET7HXL9bCbHA5kYLd0oriD3KA2w8 aCw9uBFeBPaV+b502CQ+PcT6mZzXnPs9T6cIpiHZLqj1KbfsXMWnEq6JdeH7we8F GO0oxjHzL/AK/4kLj6lXiSNfwpRoEK5bhRxtnU0gadeQ2meAeddNhaQnp9xc2zrn gtNHqDbdiljOWegC13T5h+E= -----END CERTIFICATE-----Generated at Mon Feb 9 19:51:38 2026 by rpki-client