This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/s2DwCXvkgcIbsdUchdRPZXQViqk.cer File: s2DwCXvkgcIbsdUchdRPZXQViqk.cer (raw, json) Hash identifier: f+h9/BuVkmx7QtE7XTuGtJCTNgIZTfHzcgYFrkOt1c4= Subject key identifier: B3:60:F0:09:7B:E4:81:C2:1B:B1:D5:1C:85:D4:4F:65:74:15:8A:A9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F84616B7A2D7F9387036A627CC3AC39 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:22:20 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 2a14:2a00::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:61:6b:7a:2d:7f:93:87:03:6a:62:7c:c3:ac:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:22:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b360f0097be481c21bb1d51c85d44f6574158aa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:10:78:5d:f4:41:04:f7:8c:cb:53:34:5d:4b: 44:65:42:46:ab:8a:42:28:87:5f:73:37:c9:7f:93: 1b:46:f8:b1:56:3e:78:a6:8d:3e:72:8b:cb:3e:a3: 8a:f0:03:6e:e6:61:23:af:ef:e8:6b:14:d0:a2:c7: f0:9b:70:dd:9e:de:e0:5f:d1:2b:56:f8:7e:18:b8: 53:c9:ba:70:66:2d:3b:19:f6:cc:dd:79:58:e5:9e: 3c:15:44:92:a9:ab:e8:43:8c:22:6e:3f:f1:45:4c: 33:56:09:bb:56:12:0d:be:f1:d4:fa:8d:2f:d7:9c: 52:bf:97:63:0b:0c:75:38:0f:db:1e:cb:43:25:08: 85:05:92:7e:c3:8c:ec:fb:5d:32:82:74:5c:b0:db: d5:bc:b1:dd:71:df:4d:90:7c:02:6f:c6:a9:66:e0: 4e:96:9c:dc:9d:c6:9f:2c:10:ff:26:48:44:05:b1: 67:ba:84:72:f8:ff:a6:6a:29:16:63:89:15:0b:ea: 44:b8:e5:71:a1:d8:91:1a:c3:dc:22:27:91:15:a2: cb:2a:ba:7b:4a:72:7a:d3:a8:ad:ea:c2:89:b8:63: a0:fd:45:d7:ea:4e:31:68:96:78:01:f6:b1:86:59: c8:8e:5b:9a:8d:8a:01:90:38:c2:02:d7:66:19:bc: 75:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:60:F0:09:7B:E4:81:C2:1B:B1:D5:1C:85:D4:4F:65:74:15:8A:A9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:2a00::/32 Signature Algorithm: sha256WithRSAEncryption 29:8b:ed:04:e2:0e:68:5f:2f:8f:f2:13:2c:9c:b7:3e:3d:cd: fe:10:55:c5:7b:0e:49:9b:7c:e1:e3:6d:ea:51:9a:c7:f6:4d: 97:3a:1c:b6:60:c6:d2:11:6e:59:90:b1:1c:69:70:a7:2a:79: c8:e8:90:0e:c1:e7:f7:42:ab:6f:97:57:2d:a4:15:21:62:ef: 79:c0:c1:93:d9:ea:1b:8e:31:3d:bb:2d:c1:fb:77:1e:ce:c9: ba:4b:3b:93:7f:4c:51:ba:a0:db:c6:55:e1:8f:48:79:16:29: 5b:66:d4:8b:37:99:8a:e7:59:d3:99:88:6f:ce:d4:66:b3:ea: 19:9e:9d:be:e7:db:23:4f:2c:72:5b:b9:96:86:f5:1b:bc:81: 4c:36:85:dd:d3:8a:24:53:ff:37:a2:84:3d:a4:e3:82:a4:d7: db:dc:e8:a6:08:75:be:b1:95:cc:9f:ad:13:8b:18:53:a1:81: 19:2e:00:51:92:52:f2:62:ef:63:5b:ee:23:61:ae:42:4d:d6: d3:0f:b6:cb:70:da:81:d4:aa:99:4c:30:3c:76:18:34:46:f3: 84:63:5f:19:14:98:13:86:3c:a1:9e:bd:f8:ad:1d:27:8a:09: 9e:c7:81:8e:d7:ca:ba:d4:60:f5:31:85:39:a5:39:0a:b2:39: 8d:8e:e5:db -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgISAZt/hGFrei1/k4cDamJ8w6w5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMjIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMzYwZjAwOTdiZTQ4MWMyMWJiMWQ1MWM4NWQ0NGY2NTc0MTU4YWE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohB4XfRBBPeMy1M0XUtEZUJGq4pC KIdfczfJf5MbRvixVj54po0+covLPqOK8ANu5mEjr+/oaxTQosfwm3Ddnt7gX9Er Vvh+GLhTybpwZi07GfbM3XlY5Z48FUSSqavoQ4wibj/xRUwzVgm7VhINvvHU+o0v 15xSv5djCwx1OA/bHstDJQiFBZJ+w4zs+10ygnRcsNvVvLHdcd9NkHwCb8apZuBO lpzcncafLBD/JkhEBbFnuoRy+P+maikWY4kVC+pEuOVxodiRGsPcIieRFaLLKrp7 SnJ606it6sKJuGOg/UXX6k4xaJZ4AfaxhlnIjluajYoBkDjCAtdmGbx1YwIDAQAB o4IChTCCAoEwHQYDVR0OBBYEFLNg8Al75IHCG7HVHIXUT2V0FYqpMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdiLzRhYTVh Ny04YmVjLTQyNDctYTE1Zi01YTM2MTIzNTJiMzcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2IvNGFhNWE3 LThiZWMtNDI0Ny1hMTVmLTVhMzYxMjM1MmIzNy8xL3MyRHdDWHZrZ2NJYnNkVWNo ZFJQWlhRVmlxay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF BwEHAQH/BBEwDzANBAIAAjAHAwUAKhQqADANBgkqhkiG9w0BAQsFAAOCAQEAKYvt BOIOaF8vj/ITLJy3Pj3N/hBVxXsOSZt84eNt6lGax/ZNlzoctmDG0hFuWZCxHGlw pyp5yOiQDsHn90Krb5dXLaQVIWLvecDBk9nqG44xPbstwft3Hs7Juks7k39MUbqg 28ZV4Y9IeRYpW2bUizeZiudZ05mIb87UZrPqGZ6dvufbI08sclu5lob1G7yBTDaF 3dOKJFP/N6KEPaTjgqTX29zopgh1vrGVzJ+tE4sYU6GBGS4AUZJS8mLvY1vuI2Gu Qk3W0w+2y3DagdSqmUwwPHYYNEbzhGNfGRSYE4Y8oZ69+K0dJ4oJnseBjtfKutRg 9TGFOaU5CrI5jY7l2w== -----END CERTIFICATE-----Generated at Mon Feb 9 19:46:38 2026 by rpki-client