This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/my2tSBy6VIO6qw16DM3BregyrRY.cer File: my2tSBy6VIO6qw16DM3BregyrRY.cer (raw, json) Hash identifier: TLNfnuVD5gBjUOicxgcDNcmP4IQBEjmkrEEdJYf5CQQ= Subject key identifier: 9B:2D:AD:48:1C:BA:54:83:BA:AB:0D:7A:0C:CD:C1:AD:E8:32:AD:16 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C6B705A517C6358623BD027BB8F3EE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c6/64bab8-89b7-4f68-afc3-85a2aeb0798d/1/my2tSBy6VIO6qw16DM3BregyrRY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c6/64bab8-89b7-4f68-afc3-85a2aeb0798d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:17:50 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 197435 IP: 194.0.179.0/24 IP: 2a0a:a300::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:b7:05:a5:17:c6:35:86:23:bd:02:7b:b8:f3:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9b2dad481cba5483baab0d7a0ccdc1ade832ad16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:69:34:03:7d:71:be:71:8e:b7:d3:45:53:ad: 6b:22:e1:f6:3f:eb:76:13:33:a5:4c:d6:12:dc:36: 5e:9f:2f:0c:44:8b:f5:23:7b:15:7b:61:eb:86:88: 87:8d:33:f6:50:6b:af:32:82:ff:9e:dd:31:91:c5: 2d:64:af:32:ae:0d:5e:41:5b:c4:99:5e:7e:49:50: 9f:fe:f3:1e:78:f2:29:38:fc:b3:dc:8c:fb:d4:dc: 67:c6:7f:42:22:9f:a0:30:5c:8a:ff:1e:98:c1:bc: 55:47:52:a2:39:df:a2:ee:cf:29:2e:24:2e:b8:2b: 90:e5:25:6b:38:eb:52:97:07:3e:65:5d:c9:b7:27: a2:14:49:24:c9:a0:48:26:8b:02:78:ef:8e:0f:f8: cd:c9:f3:12:22:27:13:d4:dd:be:ed:eb:fc:32:9a: ed:cc:15:be:49:92:9a:4e:01:27:46:be:06:6b:67: a0:b7:40:a5:17:39:d7:7f:1e:46:a2:71:b3:28:9a: 14:39:d3:b5:23:f5:3e:a1:6a:2a:8c:a6:c0:92:d9: 31:a6:c9:60:93:9c:b4:4e:67:46:6a:7d:b6:c3:da: 36:79:c6:a6:b7:8b:3c:c0:b8:39:53:db:0d:69:8f: 84:51:5e:67:a3:2c:ea:72:d4:3d:e5:18:96:59:de: 34:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:2D:AD:48:1C:BA:54:83:BA:AB:0D:7A:0C:CD:C1:AD:E8:32:AD:16 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/64bab8-89b7-4f68-afc3-85a2aeb0798d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/64bab8-89b7-4f68-afc3-85a2aeb0798d/1/my2tSBy6VIO6qw16DM3BregyrRY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.0.179.0/24 IPv6: 2a0a:a300::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 197435 Signature Algorithm: sha256WithRSAEncryption ab:24:3e:5e:47:7b:41:79:69:d8:2e:0c:7f:ac:53:07:44:e2: 9d:18:d0:7b:a5:02:14:93:fd:ec:f4:ea:34:b1:5d:d9:c9:4f: 33:de:a3:83:b5:17:76:7b:c0:fa:e5:d5:14:c1:51:fb:ce:c3: bd:40:8d:84:e7:88:8f:05:9f:75:c3:0c:bb:b2:5a:00:65:cd: eb:f3:db:68:d7:cb:b3:bd:b2:4e:44:00:c8:e3:3d:a2:95:85: 96:da:bb:ef:8b:29:ff:28:ae:2b:9e:3a:4e:e3:10:e8:5a:d6: 60:70:2a:eb:1f:85:7e:c3:21:51:e9:8b:22:2e:4b:7f:9b:1c: fe:4c:ba:44:fa:e0:5c:be:10:e5:19:c5:de:97:15:54:8d:a2: f4:34:cc:53:68:6c:1d:5c:76:29:7d:58:4f:b1:15:01:4e:0e: fc:84:48:1e:78:22:2f:2c:11:af:80:a4:d2:95:91:59:e2:c6: c8:e2:33:90:d8:4a:68:8a:f0:d2:ce:e4:6a:f1:f1:25:f0:8b: 7e:1b:42:d4:8a:53:63:48:15:6c:7b:92:60:5a:08:10:7b:96: cc:b0:ee:7a:9f:2a:bd:0c:6f:e7:db:21:66:0b:4e:e7:98:55: 51:23:0b:df:8e:8a:3a:40:c5:8a:e0:7e:1c:9f:32:e0:d6:a3: f1:87:e5:cc -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt3xrcFpRfGNYYjvQJ7uPPuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YjJkYWQ0ODFjYmE1NDgzYmFhYjBkN2EwY2NkYzFhZGU4MzJhZDE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Wk0A31xvnGOt9NFU61rIuH2P+t2 EzOlTNYS3DZeny8MRIv1I3sVe2HrhoiHjTP2UGuvMoL/nt0xkcUtZK8yrg1eQVvE mV5+SVCf/vMeePIpOPyz3Iz71Nxnxn9CIp+gMFyK/x6YwbxVR1KiOd+i7s8pLiQu uCuQ5SVrOOtSlwc+ZV3JtyeiFEkkyaBIJosCeO+OD/jNyfMSIicT1N2+7ev8Mprt zBW+SZKaTgEnRr4Ga2egt0ClFznXfx5GonGzKJoUOdO1I/U+oWoqjKbAktkxpslg k5y0TmdGan22w9o2ecamt4s8wLg5U9sNaY+EUV5noyzqctQ95RiWWd409wIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFJstrUgculSDuqsNegzNwa3oMq0WMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M2LzY0YmFi OC04OWI3LTRmNjgtYWZjMy04NWEyYWViMDc5OGQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzYvNjRiYWI4 LTg5YjctNGY2OC1hZmMzLTg1YTJhZWIwNzk4ZC8xL215MnRTQnk2VklPNnF3MTZE TTNCcmVneXJSWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAwgCzMA0EAgACMAcDBQMqCqMAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMDOzANBgkqhkiG9w0BAQsFAAOCAQEAqyQ+Xkd7QXlp 2C4Mf6xTB0TinRjQe6UCFJP97PTqNLFd2clPM96jg7UXdnvA+uXVFMFR+87DvUCN hOeIjwWfdcMMu7JaAGXN6/PbaNfLs72yTkQAyOM9opWFltq774sp/yiuK546TuMQ 6FrWYHAq6x+FfsMhUemLIi5Lf5sc/ky6RPrgXL4Q5RnF3pcVVI2i9DTMU2hsHVx2 KX1YT7EVAU4O/IRIHngiLywRr4Ck0pWRWeLGyOIzkNhKaIrw0s7kavHxJfCLfhtC 1IpTY0gVbHuSYFoIEHuWzLDuep8qvQxv59shZgtO55hVUSML346KOkDFiuB+HJ8y 4Naj8YflzA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:42:02 2026 by rpki-client