This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cTm2kHj5bKuvcYo5u1hniurBzMI.cer File: cTm2kHj5bKuvcYo5u1hniurBzMI.cer (raw, json) Hash identifier: 2GVQD6orRuuSb2oX8SkinLckWI+D2dcFmo2TYf3xeWc= Subject key identifier: 71:39:B6:90:78:F9:6C:AB:AF:71:8A:39:BB:58:67:8A:EA:C1:CC:C2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCB46FA5319929B9D80E2EB04B44E72 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ed/cab149-d567-48fc-ac9b-20b024c6fc2f/1/cTm2kHj5bKuvcYo5u1hniurBzMI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ed/cab149-d567-48fc-ac9b-20b024c6fc2f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:20:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 42871 AS: 197999 IP: 31.217.216.0/21 IP: 193.33.216.0/23 IP: 2a03:1a80::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:46:fa:53:19:92:9b:9d:80:e2:eb:04:b4:4e:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:20:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7139b69078f96cabaf718a39bb58678aeac1ccc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f6:17:cd:ee:41:4c:c2:b3:39:dc:ca:66:71: 40:10:8a:ac:99:e3:57:01:34:08:a8:d2:1e:22:fd: 9f:83:3f:02:7d:33:41:c5:a3:19:3c:ed:45:a9:44: 20:e4:e4:61:5f:ee:b3:7e:a0:32:24:3a:e3:d2:11: 42:a2:72:df:0f:62:94:eb:01:36:3d:3a:95:b6:df: fd:d5:f0:eb:01:dc:4a:a8:a0:9a:8c:46:81:81:2e: 33:51:cf:00:4b:f7:de:09:e9:11:f9:0a:38:ba:93: 13:94:b4:6b:ae:9b:c2:05:5f:c8:e0:6f:08:61:1f: d9:f6:48:d9:47:08:47:86:22:b0:09:a2:71:86:f5: e1:f4:ee:33:74:71:63:d9:43:21:2b:5a:34:17:91: 83:86:fe:de:d0:98:63:a9:e1:0e:50:45:4c:21:c9: 77:b0:f1:b3:68:7e:46:db:6c:5d:5a:34:24:ee:be: 33:2b:89:38:dc:58:16:da:a1:e8:75:ef:81:34:e4: 2e:f4:cb:40:f2:2a:02:11:f5:38:7c:a5:de:b4:c6: 84:2e:ce:c7:2b:ca:23:a5:94:33:24:55:db:84:22: c5:f5:dc:f1:79:2b:12:a5:57:bf:cd:32:b9:49:6d: d9:e1:da:5d:29:67:9a:88:28:97:63:f1:a1:9d:40: 63:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:39:B6:90:78:F9:6C:AB:AF:71:8A:39:BB:58:67:8A:EA:C1:CC:C2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/cab149-d567-48fc-ac9b-20b024c6fc2f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/cab149-d567-48fc-ac9b-20b024c6fc2f/1/cTm2kHj5bKuvcYo5u1hniurBzMI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.217.216.0/21 193.33.216.0/23 IPv6: 2a03:1a80::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 42871 197999 Signature Algorithm: sha256WithRSAEncryption 28:6a:db:d5:40:05:c4:b9:45:5b:ea:55:35:3a:46:fe:a7:57: 71:93:73:28:a3:88:7c:5c:e2:36:c7:d1:21:a2:a2:bb:0d:20: 56:bc:7e:ea:c9:2d:d1:af:ae:37:e3:5e:2d:50:29:b3:b0:4d: 12:80:6c:3d:da:fd:bf:65:2b:bf:00:c4:5f:ab:c9:3b:39:ba: aa:9d:3a:79:01:20:6c:71:ce:0a:e7:fb:55:81:f8:da:86:bd: 61:4f:35:a6:cb:f2:cf:9b:bf:17:19:ea:f5:5e:8d:cb:14:12: fb:d4:97:46:a7:57:87:cd:17:b9:41:b9:62:a5:8a:cb:3e:86: f8:56:c9:6d:29:cf:e3:e4:07:3a:40:14:ff:f4:b7:fb:5c:da: 9a:79:a7:06:e6:8d:61:73:d4:bc:1b:95:76:6d:a4:c5:cc:8d: 46:59:b3:32:3b:64:94:e4:b0:68:dc:02:ee:87:0e:88:95:40: a8:8b:31:d6:83:2d:76:dd:20:5c:80:84:44:1d:0d:25:4c:6f: e7:47:f4:8b:ec:b2:ee:66:ad:24:b9:b1:5b:93:c4:f8:f0:29: c5:4f:6a:92:14:d5:c8:86:a9:91:83:a7:1b:1a:97:2d:3f:cb: fa:38:a7:25:e4:05:4d:8f:63:61:1d:75:ab:e1:ec:ca:30:f1: ae:21:9c:b2 -----BEGIN CERTIFICATE----- MIIFrjCCBJagAwIBAgISAZt9y0b6UxmSm52A4usEtE5yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgyMDMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MTM5YjY5MDc4Zjk2Y2FiYWY3MThhMzliYjU4Njc4YWVhYzFjY2MyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPYXze5BTMKzOdzKZnFAEIqsmeNX ATQIqNIeIv2fgz8CfTNBxaMZPO1FqUQg5ORhX+6zfqAyJDrj0hFConLfD2KU6wE2 PTqVtt/91fDrAdxKqKCajEaBgS4zUc8AS/feCekR+Qo4upMTlLRrrpvCBV/I4G8I YR/Z9kjZRwhHhiKwCaJxhvXh9O4zdHFj2UMhK1o0F5GDhv7e0JhjqeEOUEVMIcl3 sPGzaH5G22xdWjQk7r4zK4k43FgW2qHode+BNOQu9MtA8ioCEfU4fKXetMaELs7H K8ojpZQzJFXbhCLF9dzxeSsSpVe/zTK5SW3Z4dpdKWeaiCiXY/GhnUBj4wIDAQAB o4ICujCCArYwHQYDVR0OBBYEFHE5tpB4+Wyrr3GKObtYZ4rqwczCMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VkL2NhYjE0 OS1kNTY3LTQ4ZmMtYWM5Yi0yMGIwMjRjNmZjMmYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWQvY2FiMTQ5 LWQ1NjctNDhmYy1hYzliLTIwYjAyNGM2ZmMyZi8xL2NUbTJrSGo1Ykt1dmNZbzV1 MWhuaXVyQnpNSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQDH9nYAwQBwSHYMA0EAgACMAcDBQAqAxqAMB8G CCsGAQUFBwEIAQH/BBAwDqAMMAoCAwCndwIDAwVvMA0GCSqGSIb3DQEBCwUAA4IB AQAoatvVQAXEuUVb6lU1Okb+p1dxk3Moo4h8XOI2x9EhoqK7DSBWvH7qyS3Rr643 414tUCmzsE0SgGw92v2/ZSu/AMRfq8k7ObqqnTp5ASBscc4K5/tVgfjahr1hTzWm y/LPm78XGer1Xo3LFBL71JdGp1eHzRe5QblipYrLPob4VsltKc/j5Ac6QBT/9Lf7 XNqaeacG5o1hc9S8G5V2baTFzI1GWbMyO2SU5LBo3ALuhw6IlUCoizHWgy123SBc gIREHQ0lTG/nR/SL7LLuZq0kubFbk8T48CnFT2qSFNXIhqmRg6cbGpctP8v6OKcl 5AVNj2NhHXWr4ezKMPGuIZyy -----END CERTIFICATE-----Generated at Mon Feb 9 16:52:59 2026 by rpki-client