This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/g2elJH2fTpT3vVcc8T01q0iwHSQ.cer File: g2elJH2fTpT3vVcc8T01q0iwHSQ.cer (raw, json) Hash identifier: g3KwSE7QUOSxTlJkUH9Kp9h8HjnZ2kah9G4OKfIbl40= Subject key identifier: 83:67:A5:24:7D:9F:4E:94:F7:BD:57:1C:F1:3D:35:AB:48:B0:1D:24 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ECE56FFB1830692788B69CF8144B1F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2d/f8be9b-58f0-4544-b23f-6354ef0771c9/1/g2elJH2fTpT3vVcc8T01q0iwHSQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2d/f8be9b-58f0-4544-b23f-6354ef0771c9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:47 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 215541 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:e5:6f:fb:18:30:69:27:88:b6:9c:f8:14:4b:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8367a5247d9f4e94f7bd571cf13d35ab48b01d24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ca:07:2b:4e:bc:dc:8e:58:f9:cc:73:e5:88: 73:08:8a:1c:f7:7e:9d:12:f9:ac:30:d8:d1:7f:ba: 6e:38:8c:bb:b9:47:6a:b7:c5:80:a7:3b:43:e4:88: 4a:ef:a6:81:c5:18:bf:07:5d:44:36:d1:00:d5:2b: 3b:6a:5b:b4:94:86:d9:7d:45:c9:c0:e7:c6:fa:2f: 17:8c:81:54:e3:4a:20:95:4e:ed:87:d0:c8:4e:df: c9:a9:ca:90:66:5e:de:b1:4d:e1:24:d7:84:9d:9e: 4f:95:bc:1f:d0:78:14:44:3a:a8:04:a2:52:7e:4c: d3:0d:2c:22:6b:6d:e4:4b:24:06:82:92:67:61:73: bf:f7:c8:c5:47:22:52:f4:6c:ad:8b:64:2e:14:92: b7:d9:97:8e:46:ac:85:aa:1f:2a:28:54:a9:dd:c8: d7:7c:08:75:d5:db:1f:be:54:f1:3a:bb:41:2c:83: f5:7d:88:46:f8:7d:94:a8:b7:6b:0c:c1:58:ba:e9: c8:21:c2:aa:57:07:1b:55:42:29:5e:eb:7b:95:77: 80:1e:db:98:cc:29:16:6b:c2:c5:d7:6e:ba:1e:9f: 98:97:a3:b1:43:b6:90:9e:67:62:4d:da:43:95:e3: da:08:0c:1f:56:15:86:78:83:77:ae:ee:f4:e2:e5: 02:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:67:A5:24:7D:9F:4E:94:F7:BD:57:1C:F1:3D:35:AB:48:B0:1D:24 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f8be9b-58f0-4544-b23f-6354ef0771c9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f8be9b-58f0-4544-b23f-6354ef0771c9/1/g2elJH2fTpT3vVcc8T01q0iwHSQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 215541 Signature Algorithm: sha256WithRSAEncryption 1c:cd:b5:f0:1b:a1:53:7b:79:9b:3a:4b:a7:d6:5b:01:04:0d: 6d:d1:5d:6f:09:1b:8d:b9:f8:0c:ff:e4:af:b5:8e:b4:66:ee: ab:65:e2:e7:1e:e4:55:e8:79:0d:9a:66:ae:f8:ad:f2:99:aa: 37:4c:a9:ce:b4:2e:3f:fc:bc:a6:4d:50:8e:5c:59:05:2a:23: aa:ef:5f:fd:07:87:cb:a6:10:ea:d3:8e:17:43:49:da:e2:12: a2:ad:52:31:0f:27:b5:f1:0f:01:a4:95:59:27:1b:de:70:be: d1:3c:39:5d:1b:2e:b0:4e:e0:70:33:ae:db:b0:3e:b1:e1:2d: 48:8f:00:f8:9c:86:b1:8d:30:bf:7d:a5:ed:62:39:82:78:0d: 1e:d2:f6:eb:b6:d2:d1:86:45:f1:a3:b2:3f:2e:e0:e8:cb:7e: b6:f3:f0:ca:1f:3d:92:c5:6f:46:67:07:16:52:51:12:ec:28: 42:34:6d:f5:ba:bd:21:c5:38:d4:06:d4:79:f6:cc:c9:e9:da: f9:f6:cf:22:83:bf:64:27:55:f2:25:7b:6a:aa:c1:3b:97:89: 77:e2:6e:3a:55:71:af:5b:28:a1:49:79:57:d7:37:50:a7:dd: 2d:6c:64:4e:7f:44:a2:0d:cc:56:e8:ec:88:56:f9:97:8e:cc: 9b:4c:15:89 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt57OVv+xgwaSeItpz4FEsfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MzY3YTUyNDdkOWY0ZTk0ZjdiZDU3MWNmMTNkMzVhYjQ4YjAxZDI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1MoHK0683I5Y+cxz5YhzCIoc936d EvmsMNjRf7puOIy7uUdqt8WApztD5IhK76aBxRi/B11ENtEA1Ss7alu0lIbZfUXJ wOfG+i8XjIFU40oglU7th9DITt/JqcqQZl7esU3hJNeEnZ5Plbwf0HgURDqoBKJS fkzTDSwia23kSyQGgpJnYXO/98jFRyJS9Gyti2QuFJK32ZeORqyFqh8qKFSp3cjX fAh11dsfvlTxOrtBLIP1fYhG+H2UqLdrDMFYuunIIcKqVwcbVUIpXut7lXeAHtuY zCkWa8LF1266Hp+Yl6OxQ7aQnmdiTdpDlePaCAwfVhWGeIN3ru704uUCZwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFINnpSR9n06U971XHPE9NatIsB0kMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJkL2Y4YmU5 Yi01OGYwLTQ1NDQtYjIzZi02MzU0ZWYwNzcxYzkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmQvZjhiZTli LTU4ZjAtNDU0NC1iMjNmLTYzNTRlZjA3NzFjOS8xL2cyZWxKSDJmVHBUM3ZWY2M4 VDAxcTBpd0hTUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNJ9TANBgkqhkiG9w0BAQsFAAOCAQEAHM218BuhU3t5 mzpLp9ZbAQQNbdFdbwkbjbn4DP/kr7WOtGbuq2Xi5x7kVeh5DZpmrvit8pmqN0yp zrQuP/y8pk1QjlxZBSojqu9f/QeHy6YQ6tOOF0NJ2uISoq1SMQ8ntfEPAaSVWScb 3nC+0Tw5XRsusE7gcDOu27A+seEtSI8A+JyGsY0wv32l7WI5gngNHtL267bS0YZF 8aOyPy7g6Mt+tvPwyh89ksVvRmcHFlJREuwoQjRt9bq9IcU41AbUefbMyena+fbP IoO/ZCdV8iV7aqrBO5eJd+JuOlVxr1sooUl5V9c3UKfdLWxkTn9Eog3MVujsiFb5 l47Mm0wViQ== -----END CERTIFICATE-----Generated at Mon Feb 9 19:42:23 2026 by rpki-client