This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/x2oNsIMDONLSlh5Mj_sKtaA__l8.cer File: x2oNsIMDONLSlh5Mj_sKtaA__l8.cer (raw, json) Hash identifier: FX6hbnw7+g/bwTMNw28KO5DYt6UfrDdmynl+l/zZ4ds= Subject key identifier: C7:6A:0D:B0:83:03:38:D2:D2:96:1E:4C:8F:FB:0A:B5:A0:3F:FE:5F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B36A494A470390B73E994520F40BCA9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/93/f7189f-9d3b-4fa9-b2c1-5217df3691ab/1/x2oNsIMDONLSlh5Mj_sKtaA__l8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/93/f7189f-9d3b-4fa9-b2c1-5217df3691ab/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:57 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 42970 IP: 91.213.25.0/24 IP: 185.140.196.0/22 IP: 193.200.182.0/24 IP: 2a07:1fc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:a4:94:a4:70:39:0b:73:e9:94:52:0f:40:bc:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c76a0db0830338d2d2961e4c8ffb0ab5a03ffe5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:60:d1:03:92:0b:53:19:f0:08:6e:a0:e6:87: 9e:28:ce:4e:1a:22:b7:70:43:54:4f:c3:65:e1:97: 49:18:2d:28:ad:47:00:7a:12:ec:b2:13:10:f9:13: 6e:d5:f3:bd:ba:fc:1f:af:81:b5:fd:6b:de:6c:c7: 1a:cf:5f:37:85:e4:ab:80:35:5d:c3:b0:fb:13:14: c5:fe:68:ff:a9:9d:59:32:7c:14:8c:a3:98:2d:99: c4:b2:fc:58:08:73:58:18:c1:0f:75:10:7a:4f:bc: de:5d:fc:d0:4d:24:50:64:1a:ba:8b:45:65:e4:9a: a9:ed:46:9d:7c:05:09:b5:0f:d0:8b:9b:ea:20:d7: e3:55:fb:64:03:32:36:b5:99:1a:c0:21:cc:b8:b6: 59:bd:6d:0a:21:1d:90:aa:45:3a:b2:28:d9:15:4c: cb:23:f2:37:02:7c:5c:8e:1b:76:cf:ea:95:f1:d3: 93:b2:b1:5e:d6:32:7e:8e:33:9c:b4:cd:fd:1a:d4: cd:4f:77:f1:f5:2d:2f:51:e9:40:29:83:bd:ab:00: 70:b4:fd:0a:85:a8:68:41:6c:d3:61:c2:1b:80:fe: 55:21:76:c0:9f:5b:b7:63:88:65:d4:54:b7:50:63: 0c:57:42:3e:8e:c5:c2:81:20:95:51:ac:61:43:b8: 85:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:6A:0D:B0:83:03:38:D2:D2:96:1E:4C:8F:FB:0A:B5:A0:3F:FE:5F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f7189f-9d3b-4fa9-b2c1-5217df3691ab/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f7189f-9d3b-4fa9-b2c1-5217df3691ab/1/x2oNsIMDONLSlh5Mj_sKtaA__l8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.213.25.0/24 185.140.196.0/22 193.200.182.0/24 IPv6: 2a07:1fc0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 42970 Signature Algorithm: sha256WithRSAEncryption 38:ba:c3:22:06:fc:c4:82:4a:07:35:1c:55:6c:32:21:8c:59: c3:41:db:4b:b0:98:30:f9:4f:68:df:cb:1b:a0:9a:dc:b7:1f: 14:6b:78:c9:00:8b:1d:64:2c:b2:2d:44:27:80:00:da:9f:2d: 10:7f:b2:cc:1f:84:44:3a:97:66:09:58:ea:76:4c:1c:32:3b: 37:3c:b7:c6:b7:1f:9a:8a:ee:d3:70:1b:d6:0b:7b:71:55:fc: 0b:22:e9:55:f7:a1:95:d9:c2:22:03:1a:d7:9d:6b:d2:67:c5: 9d:35:2b:4f:6b:7b:7e:d1:18:b9:5a:d7:27:73:3f:41:e9:ef: 50:b3:77:28:50:8c:1b:11:a5:32:26:c5:5d:15:ad:41:b1:f2: 30:ab:dd:13:e8:b5:78:80:86:48:90:37:58:62:87:bb:6f:19: 84:49:ea:0e:45:10:bb:40:55:c2:37:c8:25:b5:12:0f:54:57: 1f:69:5c:ea:e3:47:d3:c6:08:d8:4e:74:f9:b4:69:fb:09:24: 2e:89:35:7a:ba:9e:dc:ff:8b:42:b2:e4:b5:86:73:00:6e:74: 14:b2:9e:66:e4:41:ce:b9:ca:0e:8f:ff:16:a4:c6:76:d1:8d: 59:7c:f5:df:09:4d:55:48:2c:46:f4:f2:d2:4f:d3:a5:c8:ba: bf:43:7c:70 -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISAZt7NqSUpHA5C3PplFIPQLypMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNzZhMGRiMDgzMDMzOGQyZDI5NjFlNGM4ZmZiMGFiNWEwM2ZmZTVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4GDRA5ILUxnwCG6g5oeeKM5OGiK3 cENUT8Nl4ZdJGC0orUcAehLsshMQ+RNu1fO9uvwfr4G1/WvebMcaz183heSrgDVd w7D7ExTF/mj/qZ1ZMnwUjKOYLZnEsvxYCHNYGMEPdRB6T7zeXfzQTSRQZBq6i0Vl 5Jqp7UadfAUJtQ/Qi5vqINfjVftkAzI2tZkawCHMuLZZvW0KIR2QqkU6sijZFUzL I/I3Anxcjht2z+qV8dOTsrFe1jJ+jjOctM39GtTNT3fx9S0vUelAKYO9qwBwtP0K hahoQWzTYcIbgP5VIXbAn1u3Y4hl1FS3UGMMV0I+jsXCgSCVUaxhQ7iF3QIDAQAB o4ICuzCCArcwHQYDVR0OBBYEFMdqDbCDAzjS0pYeTI/7CrWgP/5fMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkzL2Y3MTg5 Zi05ZDNiLTRmYTktYjJjMS01MjE3ZGYzNjkxYWIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTMvZjcxODlm LTlkM2ItNGZhOS1iMmMxLTUyMTdkZjM2OTFhYi8xL3gyb05zSU1ET05MU2xoNU1q X3NLdGFBX19sOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQAW9UZAwQCuYzEAwQAwci2MA0EAgACMAcDBQMq Bx/AMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCn2jANBgkqhkiG9w0BAQsFAAOC AQEAOLrDIgb8xIJKBzUcVWwyIYxZw0HbS7CYMPlPaN/LG6Ca3LcfFGt4yQCLHWQs si1EJ4AA2p8tEH+yzB+ERDqXZglY6nZMHDI7Nzy3xrcfmoru03Ab1gt7cVX8CyLp VfehldnCIgMa151r0mfFnTUrT2t7ftEYuVrXJ3M/QenvULN3KFCMGxGlMibFXRWt QbHyMKvdE+i1eICGSJA3WGKHu28ZhEnqDkUQu0BVwjfIJbUSD1RXH2lc6uNH08YI 2E50+bRp+wkkLok1erqe3P+LQrLktYZzAG50FLKeZuRBzrnKDo//FqTGdtGNWXz1 3wlNVUgsRvTy0k/Tpci6v0N8cA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:25:02 2026 by rpki-client