This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.cer File: x2MZXVz8e5UnNQZAb6kJHCL2xCQ.cer (raw, json) Hash identifier: O+kFpyu6KJ56Px0StiX5p0fSyxbmAX5i4hM6FT0ErpU= Subject key identifier: C7:63:19:5D:5C:FC:7B:95:27:35:06:40:6F:A9:09:1C:22:F6:C4:24 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797EF24F52F8891FB5F4D9CE7B64CD31 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/59/dfec2d-b119-46c6-b58e-349bdcff4420/1/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/59/dfec2d-b119-46c6-b58e-349bdcff4420/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:41 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 206717 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:f2:4f:52:f8:89:1f:b5:f4:d9:ce:7b:64:cd:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c763195d5cfc7b95273506406fa9091c22f6c424 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:21:1b:8c:7c:f7:92:55:fa:7b:49:7d:a2:91: d1:38:4f:45:df:a7:46:99:fd:36:6a:57:b4:bd:81: 90:74:b7:75:86:42:ab:6a:dd:4a:e3:ad:66:2c:bd: 5a:00:26:aa:3d:3a:24:7d:ae:7b:23:f3:a0:e4:0f: 65:09:d0:b6:4d:ed:cb:e2:f4:5e:16:55:62:0c:8d: 54:f2:10:65:1e:e1:34:c7:1f:f8:e1:b2:c4:c2:09: cd:df:e0:1e:a7:de:ee:c9:53:ef:1c:89:aa:a6:77: 18:4c:f1:f4:1c:75:06:ca:ba:11:41:88:8b:54:37: fe:71:a6:dd:6a:86:a1:8c:3c:f3:cb:e4:35:12:13: 58:2d:bb:52:a6:3c:9d:f7:bf:88:2f:b6:ce:8a:ab: ca:9f:8e:1e:56:8d:fa:44:fe:05:88:bd:5b:b6:33: 63:aa:40:81:e2:36:59:ed:eb:8b:ce:9c:72:5c:61: 03:3f:54:ce:2f:3d:81:87:fe:50:52:26:c5:f5:eb: 53:33:0e:b8:3c:7c:01:98:e0:58:9e:a1:53:eb:2c: 05:30:44:02:f5:52:26:e6:3d:e1:3f:45:4d:b5:8d: 49:64:86:1a:1c:cc:10:d6:a2:78:d3:63:2e:3b:15: a1:07:e6:b4:1b:51:11:e2:81:fa:dd:71:f4:be:1c: c4:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:63:19:5D:5C:FC:7B:95:27:35:06:40:6F:A9:09:1C:22:F6:C4:24 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dfec2d-b119-46c6-b58e-349bdcff4420/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dfec2d-b119-46c6-b58e-349bdcff4420/1/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 206717 Signature Algorithm: sha256WithRSAEncryption 1c:2e:65:01:18:e2:0c:5b:26:9a:97:13:32:e9:44:74:d7:0b: f7:28:f6:38:1c:15:67:8d:b2:2d:87:f9:53:af:0f:15:ab:8e: 96:37:c0:0a:03:9d:ba:1d:3e:b0:0b:b3:31:b9:5f:07:52:c8: ee:c2:41:4c:51:b3:3d:f4:eb:23:34:84:5d:c6:98:c1:2b:2a: f1:2b:1b:60:38:5b:f8:94:c2:66:e4:34:ef:86:47:3e:0f:b4: 55:79:51:4c:98:34:20:e8:06:99:3c:2d:a0:f2:f3:7f:7d:30: 83:17:95:bf:8a:9e:68:ce:8f:fa:05:e7:97:9c:de:ba:ac:7d: 99:a8:66:06:fb:df:0e:ff:0f:92:93:cf:d9:8c:e3:96:2b:68: ba:f7:af:4e:a7:2e:35:51:5e:ce:85:32:17:7d:08:bf:7d:80: 0c:ed:00:6f:66:ff:6b:75:a4:6d:e1:29:0b:ea:8e:a9:9f:54: 29:4c:fc:b2:9c:72:10:3f:10:d3:52:2e:0b:73:d8:b7:6c:c3: 29:31:48:61:09:6c:e8:f1:e2:65:f3:44:8c:32:05:78:5e:f1: 58:4e:8c:f1:4a:1c:78:d6:fd:cb:72:59:0e:22:cc:22:fc:fb: 5a:6c:76:e2:32:ac:fc:6d:f4:35:0b:b2:7a:7f:39:b1:1b:e4: 5a:49:0c:0f -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt5fvJPUviJH7X02c57ZM0xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNzYzMTk1ZDVjZmM3Yjk1MjczNTA2NDA2ZmE5MDkxYzIyZjZjNDI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyEbjHz3klX6e0l9opHROE9F36dG mf02ale0vYGQdLd1hkKrat1K461mLL1aACaqPTokfa57I/Og5A9lCdC2Te3L4vRe FlViDI1U8hBlHuE0xx/44bLEwgnN3+Aep97uyVPvHImqpncYTPH0HHUGyroRQYiL VDf+cabdaoahjDzzy+Q1EhNYLbtSpjyd97+IL7bOiqvKn44eVo36RP4FiL1btjNj qkCB4jZZ7euLzpxyXGEDP1TOLz2Bh/5QUibF9etTMw64PHwBmOBYnqFT6ywFMEQC 9VIm5j3hP0VNtY1JZIYaHMwQ1qJ402MuOxWhB+a0G1ER4oH63XH0vhzElQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFMdjGV1c/HuVJzUGQG+pCRwi9sQkMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU5L2RmZWMy ZC1iMTE5LTQ2YzYtYjU4ZS0zNDliZGNmZjQ0MjAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTkvZGZlYzJk LWIxMTktNDZjNi1iNThlLTM0OWJkY2ZmNDQyMC8xL3gyTVpYVno4ZTVVbk5RWkFi NmtKSENMMnhDUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMnfTANBgkqhkiG9w0BAQsFAAOCAQEAHC5lARjiDFsm mpcTMulEdNcL9yj2OBwVZ42yLYf5U68PFauOljfACgOduh0+sAuzMblfB1LI7sJB TFGzPfTrIzSEXcaYwSsq8SsbYDhb+JTCZuQ074ZHPg+0VXlRTJg0IOgGmTwtoPLz f30wgxeVv4qeaM6P+gXnl5zeuqx9mahmBvvfDv8PkpPP2YzjlitouvevTqcuNVFe zoUyF30Iv32ADO0Ab2b/a3WkbeEpC+qOqZ9UKUz8spxyED8Q01IuC3PYt2zDKTFI YQls6PHiZfNEjDIFeF7xWE6M8UoceNb9y3JZDiLMIvz7Wmx24jKs/G30NQuyen85 sRvkWkkMDw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:42:51 2026 by rpki-client