This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2spT5ZdrWQPnjU784-a8RkUeeo.cer File: c2spT5ZdrWQPnjU784-a8RkUeeo.cer (raw, json) Hash identifier: cWkrya3uHXUuVFJpfTgx9x3R50+i/iiQFtzLzeOSYBY= Subject key identifier: 73:6B:29:4F:96:5D:AD:64:0F:9E:35:3B:F3:8F:9A:F1:19:14:79:EA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B35CBACB7C67905099AC0B31DD20FC5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ed/a71a5c-1746-43c4-a67f-a8f76bd26a27/1/c2spT5ZdrWQPnjU784-a8RkUeeo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ed/a71a5c-1746-43c4-a67f-a8f76bd26a27/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:01 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 209900 IP: 45.65.88.0/22 IP: 2a09:fe00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:cb:ac:b7:c6:79:05:09:9a:c0:b3:1d:d2:0f:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=736b294f965dad640f9e353bf38f9af1191479ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ef:40:c1:2d:f8:28:3e:77:93:d7:67:7a:52: b6:10:92:e8:4f:9e:39:9f:e5:d3:8c:d6:bc:c3:bf: 9b:e6:a4:40:52:a3:0b:95:b0:35:0e:b8:9a:62:49: 8a:e3:0d:9d:15:a3:53:13:56:6a:15:d6:29:e7:28: e0:51:e5:bf:45:a7:d6:82:40:64:38:7e:fd:e1:43: a7:d3:27:65:8a:af:58:5b:84:1d:d2:b0:e5:a7:95: af:99:48:a6:23:ff:e6:25:10:8e:59:17:83:3b:b8: 8e:f1:a1:5d:8a:9e:32:10:db:21:4e:6e:b5:4b:f3: 39:0e:6c:73:97:9d:5d:7e:98:30:5b:92:55:52:c2: 5f:2c:62:0d:4b:44:3e:04:9d:6f:a1:42:6d:b6:48: 92:fe:34:eb:83:c8:86:75:79:02:fc:6c:f9:60:9a: 0e:e5:1e:7e:57:da:00:8b:95:0a:99:51:98:cc:cb: f2:cf:fe:a6:92:b6:0d:4f:a8:e8:87:0e:cb:5a:b1: 0c:22:1d:88:ef:0d:2c:93:e1:c1:b4:d6:26:8a:5f: 13:9c:3d:86:1c:ef:80:78:fa:c1:df:72:ce:80:5c: 1b:7e:cd:e3:df:08:f5:30:b9:b7:53:1f:9f:24:a0: 2c:6b:aa:76:4f:66:ac:1c:a0:85:fd:89:63:bb:c7: 01:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:6B:29:4F:96:5D:AD:64:0F:9E:35:3B:F3:8F:9A:F1:19:14:79:EA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a71a5c-1746-43c4-a67f-a8f76bd26a27/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a71a5c-1746-43c4-a67f-a8f76bd26a27/1/c2spT5ZdrWQPnjU784-a8RkUeeo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.65.88.0/22 IPv6: 2a09:fe00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 209900 Signature Algorithm: sha256WithRSAEncryption 46:b4:4c:2c:ff:e0:3a:b6:f4:13:21:e1:65:a6:50:97:57:fb: ae:f3:9a:05:fc:9a:5d:b3:bb:19:16:10:46:17:30:01:73:da: 19:9c:af:c5:06:5d:66:53:08:d5:53:6e:25:7c:05:0c:57:cd: b2:14:51:17:8e:14:8c:27:b3:a2:f5:07:4e:7d:c2:e5:20:ed: c9:17:85:11:33:2c:8d:55:ae:6a:64:fa:8a:3d:8c:93:7b:da: 21:73:57:a7:80:5c:db:92:71:e8:30:d7:4d:da:ed:91:69:49: 79:1f:63:a0:0d:9e:4d:5c:c0:06:08:b0:ec:3e:02:67:33:4d: c1:59:8a:05:2a:ce:4c:b9:57:fa:4e:bb:89:77:65:48:42:40: ba:3e:2e:f5:86:a6:46:d5:4d:7b:65:d7:71:74:18:44:e4:ad: f6:8a:a7:8f:02:5f:12:91:87:75:6d:17:cf:c1:4d:59:e9:c8: bc:46:da:af:9b:c5:3c:d6:ff:72:4e:b1:f2:e3:14:2c:cf:e6: 49:17:e9:a8:5f:2f:55:60:d6:b2:a6:ac:8a:bf:ee:82:2c:6a: ff:34:1e:23:93:32:6b:86:46:6d:e8:2c:c7:f1:02:03:bc:be: 5f:43:54:bf:4e:be:5e:f6:b5:85:7d:71:cb:67:b1:2f:55:98: 78:e6:e4:6b -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt7Ncust8Z5BQmawLMd0g/FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MzZiMjk0Zjk2NWRhZDY0MGY5ZTM1M2JmMzhmOWFmMTE5MTQ3OWVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzO9AwS34KD53k9dnelK2EJLoT545 n+XTjNa8w7+b5qRAUqMLlbA1DriaYkmK4w2dFaNTE1ZqFdYp5yjgUeW/RafWgkBk OH794UOn0ydliq9YW4Qd0rDlp5WvmUimI//mJRCOWReDO7iO8aFdip4yENshTm61 S/M5Dmxzl51dfpgwW5JVUsJfLGINS0Q+BJ1voUJttkiS/jTrg8iGdXkC/Gz5YJoO 5R5+V9oAi5UKmVGYzMvyz/6mkrYNT6johw7LWrEMIh2I7w0sk+HBtNYmil8TnD2G HO+AePrB33LOgFwbfs3j3wj1MLm3Ux+fJKAsa6p2T2asHKCF/Ylju8cBbwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFHNrKU+WXa1kD541O/OPmvEZFHnqMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VkL2E3MWE1 Yy0xNzQ2LTQzYzQtYTY3Zi1hOGY3NmJkMjZhMjcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWQvYTcxYTVj LTE3NDYtNDNjNC1hNjdmLWE4Zjc2YmQyNmEyNy8xL2Myc3BUNVpkcldRUG5qVTc4 NC1hOFJrVWVlby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCLUFYMA0EAgACMAcDBQMqCf4AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMz7DANBgkqhkiG9w0BAQsFAAOCAQEARrRMLP/gOrb0 EyHhZaZQl1f7rvOaBfyaXbO7GRYQRhcwAXPaGZyvxQZdZlMI1VNuJXwFDFfNshRR F44UjCezovUHTn3C5SDtyReFETMsjVWuamT6ij2Mk3vaIXNXp4Bc25Jx6DDXTdrt kWlJeR9joA2eTVzABgiw7D4CZzNNwVmKBSrOTLlX+k67iXdlSEJAuj4u9YamRtVN e2XXcXQYROSt9oqnjwJfEpGHdW0Xz8FNWenIvEbar5vFPNb/ck6x8uMULM/mSRfp qF8vVWDWsqasir/ugixq/zQeI5Mya4ZGbegsx/ECA7y+X0NUv06+Xva1hX1xy2ex L1WYeObkaw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:42:25 2026 by rpki-client