This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2CbKXVPBtTCOLJx5HGMKDyIzeUM.cer File: 2CbKXVPBtTCOLJx5HGMKDyIzeUM.cer (raw, json) Hash identifier: eAnqZYr3q+q0e9iXl9QhRlIGut+r4j6trA/5kK4Jc14= Subject key identifier: D8:26:CA:5D:53:C1:B5:30:8E:2C:9C:79:1C:63:0A:0F:22:33:79:43 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C7F2CBE3FCBDED2CE373A4245C6D808 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:17:47 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 109.68.64.0/21 IP: 2a13:e7c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:2c:be:3f:cb:de:d2:ce:37:3a:42:45:c6:d8:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d826ca5d53c1b5308e2c9c791c630a0f22337943 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:74:d3:c4:3b:53:e5:88:65:9f:04:08:8a:8d: c7:21:3f:de:69:cf:5e:95:b1:1e:1d:5b:9c:d0:56: 46:be:3e:45:78:46:f4:9d:4e:45:01:9e:35:32:97: d7:ee:4b:23:15:88:0f:05:9e:62:08:cc:c7:dd:60: b7:76:4d:bb:93:ac:89:59:80:5c:12:d2:e2:a1:50: 07:5c:7e:33:98:6a:43:69:a3:f7:32:3b:57:5e:ee: 75:7b:06:06:87:14:cf:90:fb:ad:1b:c3:b8:0f:15: e2:e6:f4:42:48:ee:bd:28:83:ae:a5:9b:a3:62:2c: fd:4e:d9:1f:16:a3:73:3f:69:9f:93:5d:78:d6:da: 3a:c8:e0:8f:19:97:2d:89:0a:50:cc:0e:c6:18:c7: f0:a2:77:8e:9b:12:9b:ba:3e:41:fa:64:80:8e:54: 73:50:10:bc:8f:e9:1d:99:5b:95:d0:b3:d9:de:e7: 31:a8:27:7a:71:b6:e5:ff:1f:30:ac:b3:32:24:3f: b0:e9:66:01:4f:d3:e8:0c:ee:eb:c1:46:c9:19:5d: d5:70:37:4f:82:6e:f1:1e:b1:cd:9d:16:7b:d7:b8: b2:04:9f:f9:4d:b3:13:b4:bf:bd:18:56:63:47:b0: 7c:59:27:15:b6:da:6c:7a:cd:6e:1d:5a:dc:c7:a5: 64:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:26:CA:5D:53:C1:B5:30:8E:2C:9C:79:1C:63:0A:0F:22:33:79:43 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.68.64.0/21 IPv6: 2a13:e7c0::/29 Signature Algorithm: sha256WithRSAEncryption ae:87:14:aa:a2:4a:95:61:22:cd:1c:23:be:83:48:8e:b3:ac: 31:b5:5b:55:3e:71:41:ff:f1:18:04:70:c1:51:e5:d6:83:d5: 9b:c1:68:7f:cd:61:4c:21:b3:7a:c1:8e:2b:7b:55:24:11:03: 69:5f:41:8e:09:9c:be:e3:15:99:3e:24:5e:6d:f5:63:e2:78: 61:e3:91:50:43:6e:a3:e1:1f:fe:a5:6a:d3:27:d8:13:94:02: f5:37:13:31:cc:7a:75:29:50:a8:25:4e:2f:00:3b:89:60:19: 5d:c7:6d:92:6e:3b:40:77:02:78:42:38:55:62:8d:41:93:c4: 1c:be:09:bb:e4:d3:55:a1:45:a2:b5:fc:5d:a9:af:70:66:a2: 80:08:29:5b:37:c1:ff:25:ec:d5:c0:9d:0f:97:23:e5:bf:96: 0b:7b:c8:3a:26:5c:a8:b9:81:1e:6d:09:9e:4a:1b:d7:6c:35: 2c:1e:4a:68:0f:71:69:2f:de:06:77:8f:cd:41:f1:be:24:13: 4c:9d:ff:ef:b3:18:4d:d9:e1:7d:0c:1b:66:4a:e6:c0:9b:aa: 11:f1:fa:4e:79:94:d1:4c:7f:6a:66:92:13:19:3e:90:64:9e: 40:ad:45:35:a9:0f:06:b2:43:e6:37:61:c6:7f:86:75:9a:a2: 8d:49:32:89 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt8fyy+P8ve0s43OkJFxtgIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkODI2Y2E1ZDUzYzFiNTMwOGUyYzljNzkxYzYzMGEwZjIyMzM3OTQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknTTxDtT5YhlnwQIio3HIT/eac9e lbEeHVuc0FZGvj5FeEb0nU5FAZ41MpfX7ksjFYgPBZ5iCMzH3WC3dk27k6yJWYBc EtLioVAHXH4zmGpDaaP3MjtXXu51ewYGhxTPkPutG8O4DxXi5vRCSO69KIOupZuj Yiz9TtkfFqNzP2mfk1141to6yOCPGZctiQpQzA7GGMfwoneOmxKbuj5B+mSAjlRz UBC8j+kdmVuV0LPZ3ucxqCd6cbbl/x8wrLMyJD+w6WYBT9PoDO7rwUbJGV3VcDdP gm7xHrHNnRZ717iyBJ/5TbMTtL+9GFZjR7B8WScVttpses1uHVrcx6VkDwIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFNgmyl1TwbUwjiyceRxjCg8iM3lDMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZlLzRiNTQ0 ZS02NTM1LTRhZjgtYmJkYi01OGQyZWU5ODI4NzkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmUvNGI1NDRl LTY1MzUtNGFmOC1iYmRiLTU4ZDJlZTk4Mjg3OS8xLzJDYktYVlBCdFRDT0xKeDVI R01LRHlJemVVTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQDbURAMA0EAgACMAcDBQMqE+fAMA0GCSqGSIb3 DQEBCwUAA4IBAQCuhxSqokqVYSLNHCO+g0iOs6wxtVtVPnFB//EYBHDBUeXWg9Wb wWh/zWFMIbN6wY4re1UkEQNpX0GOCZy+4xWZPiRebfVj4nhh45FQQ26j4R/+pWrT J9gTlAL1NxMxzHp1KVCoJU4vADuJYBldx22SbjtAdwJ4QjhVYo1Bk8Qcvgm75NNV oUWitfxdqa9wZqKACClbN8H/JezVwJ0PlyPlv5YLe8g6JlyouYEebQmeShvXbDUs HkpoD3FpL94Gd4/NQfG+JBNMnf/vsxhN2eF9DBtmSubAm6oR8fpOeZTRTH9qZpIT GT6QZJ5ArUU1qQ8GskPmN2HGf4Z1mqKNSTKJ -----END CERTIFICATE-----Generated at Sun Jan 25 07:28:47 2026 by rpki-client