This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mk2qT2rA5rwQK2iECirGu1QbQPw.cer File: mk2qT2rA5rwQK2iECirGu1QbQPw.cer (raw, json) Hash identifier: wN0HbvC67fUqPA0/OkJFbxJzb/+Q02LgDd8gK9/Q9WM= Subject key identifier: 9A:4D:AA:4F:6A:C0:E6:BC:10:2B:68:84:0A:2A:C6:BB:54:1B:40:FC Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797EF89CD127D50786DD50033B1FE115 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/47/cd4624-620a-4cb2-a416-6be92b1aa8b3/1/mk2qT2rA5rwQK2iECirGu1QbQPw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/47/cd4624-620a-4cb2-a416-6be92b1aa8b3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:42 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 215805 IP: 2001:67c:2404::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:f8:9c:d1:27:d5:07:86:dd:50:03:3b:1f:e1:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9a4daa4f6ac0e6bc102b68840a2ac6bb541b40fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:3c:37:2d:cb:e0:b0:bf:c2:46:9f:fa:da:62: 37:13:1f:46:3f:2f:be:62:b6:3d:b9:0a:5f:e8:6a: 80:71:0a:88:6f:fa:34:d9:e3:20:de:f9:e4:b7:ab: 08:f5:c9:76:5d:62:9d:58:a8:19:ba:77:83:1c:89: ca:b0:f3:7c:4a:dc:a3:c3:4e:b0:3a:e9:62:a8:c1: 82:4e:fd:f9:63:31:44:03:c0:ea:52:f5:f6:6f:a9: e9:5f:cf:2d:6d:16:d1:3c:78:9e:36:91:46:65:12: 3f:4e:0a:ae:97:27:18:f2:c7:9f:66:f7:20:a3:7f: bf:25:cb:92:e8:f3:f0:e4:bc:b4:b8:64:1c:50:68: 74:7c:b0:e6:24:a7:bc:58:51:33:e6:42:1f:63:e6: 78:60:23:30:cf:67:28:4f:14:0f:fe:4b:79:56:96: ca:b3:0b:f0:02:93:4f:f1:eb:21:57:31:39:73:4e: 04:fb:75:4b:77:57:b7:d0:25:36:ae:d2:3e:6d:94: f7:cf:8b:7b:26:02:bd:f7:18:34:1d:a2:03:71:1c: c8:a6:64:10:04:5c:27:07:fc:8f:78:80:1d:75:df: 01:29:e3:ed:c5:e5:24:93:a2:ee:f0:79:c0:26:02: 74:0c:b2:cc:b7:a4:0c:e2:16:28:3e:ec:9f:45:10: 87:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:4D:AA:4F:6A:C0:E6:BC:10:2B:68:84:0A:2A:C6:BB:54:1B:40:FC X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/cd4624-620a-4cb2-a416-6be92b1aa8b3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/cd4624-620a-4cb2-a416-6be92b1aa8b3/1/mk2qT2rA5rwQK2iECirGu1QbQPw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:2404::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 215805 Signature Algorithm: sha256WithRSAEncryption 2c:58:2d:03:93:01:03:a3:f6:7a:5c:8d:24:79:1e:3e:e7:f2: dd:e6:b6:39:d1:29:99:26:c8:8a:f5:66:a3:25:5e:13:bf:83: dd:c2:11:d4:cf:2f:d7:9c:a8:60:80:a2:34:b1:b6:6d:ef:cf: 99:45:ca:99:8e:55:92:48:f0:bc:97:cd:02:9b:0e:31:35:66: 71:d3:16:7a:ce:ab:7f:19:41:f4:4c:ea:01:cd:16:34:00:1c: 54:67:df:ec:16:fc:65:d1:be:f0:a8:17:f7:78:dd:24:60:91: 06:22:d6:d7:c4:05:40:79:f8:15:aa:1c:95:34:f0:7b:f5:1a: 33:a3:43:3a:e6:e8:69:99:fb:ff:ea:40:0a:fc:de:77:3f:14: 75:30:2e:36:9f:71:b4:96:89:82:4d:50:95:ce:38:67:7a:22: 42:44:46:58:6c:74:96:d2:77:47:ee:cb:d5:0d:ed:f6:1e:9c: 01:a2:24:0a:a3:53:5d:8c:7a:fa:f8:7a:ef:fe:81:4f:c2:bf: c4:b3:86:fd:d6:c9:2f:da:35:a8:23:80:56:7c:cf:c5:20:68: 6c:78:22:29:c3:9d:fb:d2:27:15:04:7d:4e:4e:4c:9b:ad:9d: bf:5c:1c:98:7b:73:b5:eb:de:a1:5b:15:b7:5f:32:52:8b:4a: 89:77:27:6b -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZt5fvic0SfVB4bdUAM7H+EVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YTRkYWE0ZjZhYzBlNmJjMTAyYjY4ODQwYTJhYzZiYjU0MWI0MGZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTw3LcvgsL/CRp/62mI3Ex9GPy++ YrY9uQpf6GqAcQqIb/o02eMg3vnkt6sI9cl2XWKdWKgZuneDHInKsPN8Styjw06w OuliqMGCTv35YzFEA8DqUvX2b6npX88tbRbRPHieNpFGZRI/TgqulycY8sefZvcg o3+/JcuS6PPw5Ly0uGQcUGh0fLDmJKe8WFEz5kIfY+Z4YCMwz2coTxQP/kt5VpbK swvwApNP8eshVzE5c04E+3VLd1e30CU2rtI+bZT3z4t7JgK99xg0HaIDcRzIpmQQ BFwnB/yPeIAddd8BKePtxeUkk6Lu8HnAJgJ0DLLMt6QM4hYoPuyfRRCHVQIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFJpNqk9qwOa8ECtohAoqxrtUG0D8MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ3L2NkNDYy NC02MjBhLTRjYjItYTQxNi02YmU5MmIxYWE4YjMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDcvY2Q0NjI0 LTYyMGEtNGNiMi1hNDE2LTZiZTkyYjFhYThiMy8xL21rMnFUMnJBNXJ3UUsyaUVD aXJHdTFRYlFQdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfCQEMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwNK/TANBgkqhkiG9w0BAQsFAAOCAQEALFgtA5MBA6P2elyNJHkePufy3ea2 OdEpmSbIivVmoyVeE7+D3cIR1M8v15yoYICiNLG2be/PmUXKmY5VkkjwvJfNApsO MTVmcdMWes6rfxlB9EzqAc0WNAAcVGff7Bb8ZdG+8KgX93jdJGCRBiLW18QFQHn4 FaoclTTwe/UaM6NDOuboaZn7/+pACvzedz8UdTAuNp9xtJaJgk1Qlc44Z3oiQkRG WGx0ltJ3R+7L1Q3t9h6cAaIkCqNTXYx6+vh67/6BT8K/xLOG/dbJL9o1qCOAVnzP xSBobHgiKcOd+9InFQR9Tk5Mm62dv1wcmHtzteveoVsVt18yUotKiXcnaw== -----END CERTIFICATE-----Generated at Mon Feb 9 15:03:49 2026 by rpki-client