This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/n2-3lUF5qWZrTLav40bR4h7DDkU.cer File: n2-3lUF5qWZrTLav40bR4h7DDkU.cer (raw, json) Hash identifier: Jdrt0ndeJQuR3Iq63q/TqohljXinSChbWz3xw3uH7/Y= Subject key identifier: 9F:6F:B7:95:41:79:A9:66:6B:4C:B6:AF:E3:46:D1:E2:1E:C3:0E:45 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA4C8B9F793D1BA4D654A42BE11E918 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:18:07 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 1200 AS: 6777 AS: 41846 AS: 50054 AS: 212928 AS: 213536 IP: 80.249.208.0/21 IP: 91.200.16.0/22 IP: 91.236.189.0/24 IP: 93.187.109.0/24 IP: 185.55.136.0/22 IP: 193.105.101.0/24 IP: 195.60.82.128/26 IP: 195.69.144.0/22 IP: 2001:67c:1a8::/48 IP: 2001:7f8:1::/48 IP: 2001:7f8:86::/48 IP: 2a02:4b60::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:c8:b9:f7:93:d1:ba:4d:65:4a:42:be:11:e9:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9f6fb7954179a9666b4cb6afe346d1e21ec30e45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:a1:b9:13:df:7c:5a:b0:fc:6e:9f:c9:ad:1a: 8b:d7:0f:1f:c6:4c:dd:7f:1a:61:a7:fd:53:a7:c7: 20:e5:b1:2b:1b:3d:d9:7e:fa:64:44:ab:cc:82:fb: 51:ec:c7:11:0f:1d:0d:5e:31:15:55:bd:ab:da:26: 26:29:4a:84:fa:bb:06:fb:45:f1:08:cf:3a:93:aa: 66:00:07:04:97:14:b4:db:57:14:46:ce:59:9e:16: 19:39:8a:b7:9a:a2:11:d0:e1:e8:5f:76:f4:36:49: 78:9c:ac:33:9c:8a:df:aa:2e:94:14:dd:aa:84:c7: cc:eb:8c:a7:00:51:ab:5c:1b:40:25:ad:ab:8d:52: 19:fa:5c:a9:c3:68:77:0f:34:e9:70:de:d7:3e:0f: 4c:98:51:c5:4b:25:d4:a4:38:16:a0:16:64:7b:5d: bf:ab:33:7e:0f:1e:c6:a4:6e:2f:ee:6b:ad:ca:7e: 64:94:91:23:e3:2f:b5:73:bc:0e:15:1f:b4:17:2b: ca:99:ee:38:c1:be:67:5a:92:38:4c:21:61:34:33: 13:a8:6f:6c:18:1a:2e:ac:b7:4a:4d:bc:94:8e:d5: 54:c8:fc:23:57:f1:cf:b8:10:7b:1e:d1:9b:fd:87: 4b:c4:72:1e:93:27:88:3b:b5:e8:c3:a2:b8:f3:23: 42:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:6F:B7:95:41:79:A9:66:6B:4C:B6:AF:E3:46:D1:E2:1E:C3:0E:45 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.249.208.0/21 91.200.16.0/22 91.236.189.0/24 93.187.109.0/24 185.55.136.0/22 193.105.101.0/24 195.60.82.128/26 195.69.144.0/22 IPv6: 2001:67c:1a8::/48 2001:7f8:1::/48 2001:7f8:86::/48 2a02:4b60::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 1200 6777 41846 50054 212928 213536 Signature Algorithm: sha256WithRSAEncryption 5c:d7:bb:9b:9a:82:33:ec:1e:a7:9f:cf:3d:43:9f:27:02:e4: 82:b9:63:8f:c7:19:34:17:da:b9:ba:f2:36:e0:14:1b:cc:0e: f4:45:e9:66:a0:ee:4d:b9:cc:54:e3:9b:b0:4d:74:b1:27:3a: 8c:ca:c6:be:02:91:0d:86:16:12:80:2f:e9:a6:8d:6d:a1:5b: cb:98:05:ca:74:23:bf:0f:15:29:1b:d8:47:ba:d2:a7:2d:05: 0f:bd:5e:5d:61:9c:49:94:ca:84:39:b3:34:c6:17:6b:1e:21: 16:14:78:07:ed:5a:61:ab:cd:da:2a:5b:bc:20:86:a8:eb:07: 38:f1:66:0a:32:0f:13:3e:97:7b:fe:eb:0b:f3:ae:6b:02:b6: 0d:5a:e4:d6:63:dc:63:95:6d:25:11:a5:ec:c2:10:79:81:c8: f2:16:c7:08:0a:9b:2d:fe:60:e9:2e:09:23:df:99:2a:ac:d5: fb:fc:ff:f3:f4:a1:70:f6:8e:86:28:a7:da:0e:01:d0:ab:c4: 1d:00:06:f4:0f:9c:62:e4:84:f3:81:83:b2:d5:ed:16:a6:cc: 89:db:5f:82:36:0f:49:63:67:47:16:a6:b6:2d:9f:d9:b8:9e: 48:bc:24:ea:be:74:ec:a2:f3:68:b1:e3:8f:dd:4d:77:76:fb: d7:29:6a:78 -----BEGIN CERTIFICATE----- MIIGADCCBOigAwIBAgISAZt+pMi595PRuk1lSkK+EekYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZjZmYjc5NTQxNzlhOTY2NmI0Y2I2YWZlMzQ2ZDFlMjFlYzMwZTQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKG5E998WrD8bp/JrRqL1w8fxkzd fxphp/1Tp8cg5bErGz3ZfvpkRKvMgvtR7McRDx0NXjEVVb2r2iYmKUqE+rsG+0Xx CM86k6pmAAcElxS021cURs5ZnhYZOYq3mqIR0OHoX3b0Nkl4nKwznIrfqi6UFN2q hMfM64ynAFGrXBtAJa2rjVIZ+lypw2h3DzTpcN7XPg9MmFHFSyXUpDgWoBZke12/ qzN+Dx7GpG4v7mutyn5klJEj4y+1c7wOFR+0FyvKme44wb5nWpI4TCFhNDMTqG9s GBourLdKTbyUjtVUyPwjV/HPuBB7HtGb/YdLxHIekyeIO7Xow6K48yNCnwIDAQAB o4IDDDCCAwgwHQYDVR0OBBYEFJ9vt5VBealma0y2r+NG0eIeww5FMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzIyLzBhM2Zm Zi0xYTQyLTQwNDQtYWU4Zi03MzU0YTczYmRhN2UvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjIvMGEzZmZm LTFhNDItNDA0NC1hZThmLTczNTRhNzNiZGE3ZS8xL24yLTNsVUY1cVdaclRMYXY0 MGJSNGg3RERrVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMHQGCCsGAQUF BwEHAQH/BGUwYzA3BAIAATAxAwQDUPnQAwQCW8gQAwQAW+y9AwQAXbttAwQCuTeI AwQAwWllAwUGwzxSgAMEAsNFkDAoBAIAAjAiAwcAIAEGfAGoAwcAIAEH+AABAwcA IAEH+ACGAwUAKgJLYDAxBggrBgEFBQcBCAEB/wQiMCCgHjAcAgIEsAICGnkCAwCj dgIDAMOGAgMDP8ACAwNCIDANBgkqhkiG9w0BAQsFAAOCAQEAXNe7m5qCM+wep5/P PUOfJwLkgrljj8cZNBfaubryNuAUG8wO9EXpZqDuTbnMVOObsE10sSc6jMrGvgKR DYYWEoAv6aaNbaFby5gFynQjvw8VKRvYR7rSpy0FD71eXWGcSZTKhDmzNMYXax4h FhR4B+1aYavN2ipbvCCGqOsHOPFmCjIPEz6Xe/7rC/OuawK2DVrk1mPcY5VtJRGl 7MIQeYHI8hbHCAqbLf5g6S4JI9+ZKqzV+/z/8/ShcPaOhiin2g4B0KvEHQAG9A+c YuSE84GDstXtFqbMidtfgjYPSWNnRxamti2f2bieSLwk6r507KLzaLHjj91Nd3b7 1ylqeA== -----END CERTIFICATE-----Generated at Fri Jan 9 00:53:22 2026 by rpki-client