This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/t2EV0TpYato9nMXfmuA-W6tPTcA.cer File: t2EV0TpYato9nMXfmuA-W6tPTcA.cer (raw, json) Hash identifier: t0eZTsB0Su4x4FcojK5lwUE6G2SuA+rh+dOb6tB8Rmc= Subject key identifier: B7:61:15:D1:3A:58:6A:DA:3D:9C:C5:DF:9A:E0:3E:5B:AB:4F:4D:C0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7910CF83E50275D6AD35C78DF8E3AD35 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:23 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 195.140.252.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:cf:83:e5:02:75:d6:ad:35:c7:8d:f8:e3:ad:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b76115d13a586ada3d9cc5df9ae03e5bab4f4dc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c6:a8:cb:22:d5:42:0c:1b:90:90:a4:f7:2f: 96:a8:11:be:f1:1e:c7:4c:db:69:84:90:3c:98:f8: 7f:8a:9e:d7:82:c9:17:91:ad:d8:07:2c:a7:ac:0b: 31:ed:df:0c:f1:27:1c:86:34:8f:82:73:dc:a4:8c: a2:95:76:92:7d:cf:b3:7a:dd:82:a6:4d:22:68:fd: 1f:09:dc:91:8d:7e:4f:4b:a3:92:0c:4f:b7:12:98: 18:c9:ce:8d:6e:ed:cb:a0:de:b1:23:3c:bf:be:08: 9e:6f:a4:52:fd:9f:c4:2a:20:58:6a:f9:c8:7c:3e: 67:bb:ed:60:01:9d:b3:f8:83:97:97:dd:6d:0b:5e: 4f:d3:f1:9d:b2:25:d6:ea:e7:5b:69:28:7a:e1:f6: 20:35:53:30:8e:bb:45:cd:37:cf:d8:7f:62:25:b6: b3:fd:51:a0:49:b1:56:ce:18:57:9c:49:8b:76:0f: 87:33:a4:86:2e:fb:ea:90:70:e8:50:39:77:d2:37: e3:86:ec:68:ab:0a:03:51:2a:e1:20:47:75:8f:17: 44:4f:d9:ac:77:2e:fc:ca:87:1e:27:a6:f0:80:38: ec:51:7f:50:b9:1d:25:58:91:28:1c:10:52:d6:0c: e9:77:4f:5b:84:e2:24:68:d3:be:ba:67:71:7a:0d: 89:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:61:15:D1:3A:58:6A:DA:3D:9C:C5:DF:9A:E0:3E:5B:AB:4F:4D:C0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.140.252.0/22 Signature Algorithm: sha256WithRSAEncryption 53:07:6c:d0:eb:1d:03:98:70:7f:a2:01:d5:a6:c8:a8:6d:34: a0:5c:c8:59:55:e7:9d:bc:f4:dc:f2:cb:7c:72:15:5b:80:53: 42:9f:42:5d:81:fc:b9:10:17:3c:8b:e0:43:8f:c1:ba:43:1f: d4:71:8c:e3:17:60:0b:b7:95:bf:c8:5c:0c:fd:93:9d:b6:40: 70:30:84:0a:56:f3:07:06:cf:eb:95:9a:8c:f7:7e:a7:4e:be: 9f:99:c3:26:de:c4:6c:52:b9:8e:44:b5:67:82:5b:03:2b:61: d0:fc:a9:fc:a5:67:1d:ef:f9:fb:e1:9c:9f:44:40:a7:66:9f: 95:86:70:78:39:d5:ef:b7:60:ae:49:7e:27:07:c2:b4:62:ca: 5e:63:e0:ec:c0:8d:db:12:79:a2:8a:53:47:57:6a:c0:05:e2: f9:d2:71:5f:c1:65:43:01:e1:a2:fe:c5:64:fd:55:6a:e6:48: 36:8b:c0:4a:a4:a3:ef:bb:a6:8e:ac:58:3e:05:8e:b5:93:10: 96:66:f7:46:f8:77:cc:eb:d6:1d:2d:2f:5b:e5:8a:eb:01:4d: 94:ad:78:83:55:f3:45:6b:af:9a:99:ec:9c:5f:b5:6c:2c:01: a5:93:7d:d6:ea:f0:de:0f:bf:4a:07:34:ed:38:aa:00:3a:45: c3:7c:67:ca -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt5EM+D5QJ11q01x4344601MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNzYxMTVkMTNhNTg2YWRhM2Q5Y2M1ZGY5YWUwM2U1YmFiNGY0ZGMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMaoyyLVQgwbkJCk9y+WqBG+8R7H TNtphJA8mPh/ip7XgskXka3YByynrAsx7d8M8ScchjSPgnPcpIyilXaSfc+zet2C pk0iaP0fCdyRjX5PS6OSDE+3EpgYyc6Nbu3LoN6xIzy/vgieb6RS/Z/EKiBYavnI fD5nu+1gAZ2z+IOXl91tC15P0/GdsiXW6udbaSh64fYgNVMwjrtFzTfP2H9iJbaz /VGgSbFWzhhXnEmLdg+HM6SGLvvqkHDoUDl30jfjhuxoqwoDUSrhIEd1jxdET9ms dy78yoceJ6bwgDjsUX9QuR0lWJEoHBBS1gzpd09bhOIkaNO+umdxeg2JgwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFLdhFdE6WGraPZzF35rgPlurT03AMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q2LzNhNDVl ZC1iMGI4LTRhMTYtOWVlYy0yMjNmNTIyMGE3ZDMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDYvM2E0NWVk LWIwYjgtNGExNi05ZWVjLTIyM2Y1MjIwYTdkMy8xL3QyRVYwVHBZYXRvOW5NWGZt dUEtVzZ0UFRjQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCw4z8MA0GCSqGSIb3DQEBCwUAA4IBAQBTB2zQ 6x0DmHB/ogHVpsiobTSgXMhZVeedvPTc8st8chVbgFNCn0Jdgfy5EBc8i+BDj8G6 Qx/UcYzjF2ALt5W/yFwM/ZOdtkBwMIQKVvMHBs/rlZqM936nTr6fmcMm3sRsUrmO RLVnglsDK2HQ/Kn8pWcd7/n74ZyfRECnZp+VhnB4OdXvt2CuSX4nB8K0YspeY+Ds wI3bEnmiilNHV2rABeL50nFfwWVDAeGi/sVk/VVq5kg2i8BKpKPvu6aOrFg+BY61 kxCWZvdG+HfM69YdLS9b5YrrAU2UrXiDVfNFa6+ameycX7VsLAGlk33W6vDeD79K BzTtOKoAOkXDfGfK -----END CERTIFICATE-----Generated at Tue Jan 27 03:58:27 2026 by rpki-client