This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.cer File: 2AEvr5gnWuTz-Nh_CE7k_4QgxIU.cer (raw, json) Hash identifier: Zj8pi8v4Ptc5po4V/sJescvVm5Slk/7Z026EUP/MW34= Subject key identifier: D8:01:2F:AF:98:27:5A:E4:F3:F8:D8:7F:08:4E:E4:FF:84:20:C4:85 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797F15047B6292386739376F0554BE74 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:50 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.224.3.0/24 IP: 2a01:f4c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:15:04:7b:62:92:38:67:39:37:6f:05:54:be:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d8012faf98275ae4f3f8d87f084ee4ff8420c485 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b7:78:a3:c3:8a:e8:a2:59:3b:27:93:36:ff: e0:91:c4:9f:96:09:43:e2:73:be:7d:3b:18:89:90: dd:f3:c2:17:f6:16:7d:7b:3c:3f:e3:03:ee:c4:25: 1a:cf:de:b1:67:91:96:d4:89:03:a5:8e:15:f0:b8: 36:2e:ea:20:89:f1:aa:9b:b0:43:d1:4c:3f:a7:02: c5:64:0b:7d:a4:32:13:24:1f:26:ba:02:b9:57:2f: cb:bd:e2:9c:b6:d7:07:34:2f:e7:55:9a:da:ee:3f: 1c:7b:a6:c6:07:2c:a9:b8:df:28:79:78:a0:1a:c1: 3f:91:c6:36:55:c8:91:d0:77:b9:40:54:ba:50:17: 03:27:e8:7e:33:eb:49:52:4a:f8:18:8f:6e:20:e7: a5:3e:15:dd:99:61:4a:db:63:a0:84:e1:23:9d:c5: e8:3e:fc:17:2a:11:c7:18:94:15:d3:43:f8:4f:c5: 4b:16:41:74:eb:bd:8f:73:3b:bd:4f:23:a4:67:ab: 4d:e1:85:de:ea:3c:14:7c:00:58:ae:f5:94:60:e2: 54:28:05:d9:65:fc:01:88:38:9e:0f:84:c1:cd:0f: fe:17:33:ef:84:51:99:64:65:08:81:6e:11:7f:b5: 11:a7:ed:00:74:c8:6d:77:a1:af:28:7f:db:e2:1a: 5e:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:01:2F:AF:98:27:5A:E4:F3:F8:D8:7F:08:4E:E4:FF:84:20:C4:85 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.224.3.0/24 IPv6: 2a01:f4c0::/29 Signature Algorithm: sha256WithRSAEncryption 5c:44:64:fc:13:fb:60:61:99:b6:86:b8:ed:88:6b:b5:8c:43: d0:dd:ff:f5:02:be:ae:ea:0a:f5:14:9e:fc:37:3d:5a:66:93: ca:24:a3:68:a4:3f:ca:c6:5b:4c:98:bd:c3:57:5d:3b:16:e6: cb:f7:15:19:c7:02:14:2d:fe:d2:20:7a:76:e7:28:16:a4:cb: 71:dc:5c:7a:e8:4c:15:7c:a1:d4:7b:fb:d0:72:b7:5b:d6:57: f4:11:8a:6b:9d:44:e4:17:60:8d:3b:7b:6b:b8:68:d9:f7:9a: 2b:44:d8:91:e7:7f:03:9e:61:c3:f6:09:8b:a0:7c:85:74:73: 57:46:c5:d3:df:69:ea:60:d5:1f:ee:0d:d1:4d:1d:4d:32:08: b0:d7:22:1f:6c:3e:b0:75:92:a4:fe:2f:53:1d:9a:c5:a8:37: bd:5b:04:32:ae:73:3e:fe:07:65:0b:88:56:93:13:18:de:31: 22:55:be:bf:13:fc:ac:d2:4b:72:0f:16:6f:51:6a:4b:68:6d: 29:7c:ca:34:03:b0:a9:2d:98:78:59:2e:53:b5:85:d8:c1:18: 10:6a:81:35:22:36:7e:a8:5a:60:f9:f7:05:dc:ad:04:3d:b1: d7:1c:af:93:31:4d:68:ab:08:8a:96:e7:0c:02:4f:a9:6d:42: 57:ec:96:ae -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt5fxUEe2KSOGc5N28FVL50MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkODAxMmZhZjk4Mjc1YWU0ZjNmOGQ4N2YwODRlZTRmZjg0MjBjNDg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbd4o8OK6KJZOyeTNv/gkcSflglD 4nO+fTsYiZDd88IX9hZ9ezw/4wPuxCUaz96xZ5GW1IkDpY4V8Lg2LuogifGqm7BD 0Uw/pwLFZAt9pDITJB8mugK5Vy/LveKcttcHNC/nVZra7j8ce6bGByypuN8oeXig GsE/kcY2VciR0He5QFS6UBcDJ+h+M+tJUkr4GI9uIOelPhXdmWFK22OghOEjncXo PvwXKhHHGJQV00P4T8VLFkF0672Pczu9TyOkZ6tN4YXe6jwUfABYrvWUYOJUKAXZ ZfwBiDieD4TBzQ/+FzPvhFGZZGUIgW4Rf7URp+0AdMhtd6GvKH/b4hpevwIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFNgBL6+YJ1rk8/jYfwhO5P+EIMSFMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVkL2Y2N2Fh OC01MWMyLTQzYjItYjAyMi02ZDU2MGRlYmY3YjMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWQvZjY3YWE4 LTUxYzItNDNiMi1iMDIyLTZkNTYwZGViZjdiMy8xLzJBRXZyNWduV3VUei1OaF9D RTdrXzRRZ3hJVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAueADMA0EAgACMAcDBQMqAfTAMA0GCSqGSIb3 DQEBCwUAA4IBAQBcRGT8E/tgYZm2hrjtiGu1jEPQ3f/1Ar6u6gr1FJ78Nz1aZpPK JKNopD/KxltMmL3DV107FubL9xUZxwIULf7SIHp25ygWpMtx3Fx66EwVfKHUe/vQ crdb1lf0EYprnUTkF2CNO3truGjZ95orRNiR538DnmHD9gmLoHyFdHNXRsXT32nq YNUf7g3RTR1NMgiw1yIfbD6wdZKk/i9THZrFqDe9WwQyrnM+/gdlC4hWkxMY3jEi Vb6/E/ys0ktyDxZvUWpLaG0pfMo0A7CpLZh4WS5TtYXYwRgQaoE1IjZ+qFpg+fcF 3K0EPbHXHK+TMU1oqwiKlucMAk+pbUJX7Jau -----END CERTIFICATE-----Generated at Sun Jan 25 23:35:27 2026 by rpki-client