This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2GchBXUrmCF00QQMEDgXVwuNNNY.cer File: 2GchBXUrmCF00QQMEDgXVwuNNNY.cer (raw, json) Hash identifier: IcreZfgAq8T5UpZ06lnTox2XgsKEIufj+khBjwMQryA= Subject key identifier: D8:67:21:05:75:2B:98:21:74:D1:04:0C:10:38:17:57:0B:8D:34:D6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCB63F7B85B76BC7073C96733D5189A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/2GchBXUrmCF00QQMEDgXVwuNNNY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:20:40 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 50489 IP: 91.240.47.0/24 IP: 185.35.68.0/22 IP: 192.153.60.0/22 IP: 2a0c:c640::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:63:f7:b8:5b:76:bc:70:73:c9:67:33:d5:18:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:20:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d8672105752b982174d1040c103817570b8d34d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:5e:a6:e6:f5:98:6c:a8:21:32:94:34:0c:43: 37:6a:25:48:cd:06:7d:30:cb:ed:94:2a:30:4d:18: 29:d9:c6:63:77:d0:0b:ee:00:dc:0a:57:96:ca:41: 47:43:cb:86:02:95:ee:bb:dd:45:b0:3a:ae:60:ff: ee:0b:df:6a:10:d5:49:0b:34:80:e2:c1:c2:f2:76: 41:b1:b7:48:a2:75:d2:f3:17:ba:aa:37:a4:d2:05: ed:d5:ad:1d:a1:29:ae:c6:41:63:56:70:b7:86:6c: e4:67:a7:1a:43:58:b1:6b:63:30:57:47:72:c8:95: ed:f1:d0:68:c6:6f:0f:bc:a0:24:f2:0d:a0:bf:4e: 42:6e:ec:f1:c4:db:a6:f3:80:65:89:c2:a9:f3:8a: 20:20:96:1c:b1:e5:df:73:ec:6d:d6:f7:47:36:33: ea:6a:32:25:37:24:96:50:a8:b2:3a:14:04:31:0c: 7e:c8:46:3b:bb:85:3b:8e:6a:84:5d:14:4f:46:77: c6:df:e5:b4:63:38:be:26:a4:04:66:0f:83:24:95: 1f:95:b2:37:ca:53:54:d0:72:08:64:97:cb:19:0d: 0f:d9:a7:2d:70:38:dc:7d:b1:2a:4f:66:37:3c:e1: 4f:7f:5e:7e:61:48:6d:c9:8e:c1:fa:26:c4:38:bb: a1:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:67:21:05:75:2B:98:21:74:D1:04:0C:10:38:17:57:0B:8D:34:D6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/2GchBXUrmCF00QQMEDgXVwuNNNY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.240.47.0/24 185.35.68.0/22 192.153.60.0/22 IPv6: 2a0c:c640::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 50489 Signature Algorithm: sha256WithRSAEncryption 6b:ae:16:c4:6d:dc:ea:de:18:67:af:21:ec:34:f8:79:16:6c: 81:18:74:9f:ad:e9:f8:42:97:4c:77:e8:91:e1:cc:bf:ac:73: 37:fd:39:34:9e:f9:36:51:05:f6:a9:96:de:24:52:0b:a6:c4: 64:95:27:74:c8:e5:11:22:5f:ea:5f:01:8e:0e:c8:0a:14:cb: e1:87:53:4e:2e:ac:54:13:24:03:d9:66:cb:7d:1e:08:cf:9b: e5:f0:cc:73:b9:09:d2:3b:3e:f3:1a:42:83:e6:6d:38:9a:3f: cd:4c:7b:61:b6:95:6c:be:49:68:80:ea:87:38:91:83:fb:d6: 02:15:e4:77:b1:b4:38:55:45:45:fb:bd:33:f2:c9:f3:e9:28: 9f:3c:b2:3b:ab:b4:f5:94:4c:e3:04:59:13:66:98:5d:39:3e: 35:17:20:b2:98:fd:68:7f:2b:2d:e9:cd:d0:8a:86:a1:3a:2b: 21:63:0f:46:e6:26:d6:da:f5:51:1c:d6:e3:c8:7c:0d:b6:ac: 7f:95:e8:38:fa:bb:1a:37:00:ad:0e:a3:a5:b2:4d:70:b2:82: 53:38:45:72:3c:b8:83:27:11:95:59:8b:78:5c:eb:75:87:90: 93:16:5f:c7:44:55:0b:d5:82:1a:bf:0a:a6:49:70:9e:bf:fc: be:aa:9a:66 -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISAZt9y2P3uFt2vHBzyWcz1RiaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgyMDQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkODY3MjEwNTc1MmI5ODIxNzRkMTA0MGMxMDM4MTc1NzBiOGQzNGQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmV6m5vWYbKghMpQ0DEM3aiVIzQZ9 MMvtlCowTRgp2cZjd9AL7gDcCleWykFHQ8uGApXuu91FsDquYP/uC99qENVJCzSA 4sHC8nZBsbdIonXS8xe6qjek0gXt1a0doSmuxkFjVnC3hmzkZ6caQ1ixa2MwV0dy yJXt8dBoxm8PvKAk8g2gv05CbuzxxNum84BlicKp84ogIJYcseXfc+xt1vdHNjPq ajIlNySWUKiyOhQEMQx+yEY7u4U7jmqEXRRPRnfG3+W0Yzi+JqQEZg+DJJUflbI3 ylNU0HIIZJfLGQ0P2actcDjcfbEqT2Y3POFPf15+YUhtyY7B+ibEOLuhaQIDAQAB o4ICuzCCArcwHQYDVR0OBBYEFNhnIQV1K5ghdNEEDBA4F1cLjTTWMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkzL2U3MzJm NC1iZTg0LTQyOWItYTE4ZS0xNTE4YTczM2Y5NzAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTMvZTczMmY0 LWJlODQtNDI5Yi1hMThlLTE1MThhNzMzZjk3MC8xLzJHY2hCWFVybUNGMDBRUU1F RGdYVnd1Tk5OWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQAW/AvAwQCuSNEAwQCwJk8MA0EAgACMAcDBQMq DMZAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDFOTANBgkqhkiG9w0BAQsFAAOC AQEAa64WxG3c6t4YZ68h7DT4eRZsgRh0n63p+EKXTHfokeHMv6xzN/05NJ75NlEF 9qmW3iRSC6bEZJUndMjlESJf6l8Bjg7IChTL4YdTTi6sVBMkA9lmy30eCM+b5fDM c7kJ0js+8xpCg+ZtOJo/zUx7YbaVbL5JaIDqhziRg/vWAhXkd7G0OFVFRfu9M/LJ 8+konzyyO6u09ZRM4wRZE2aYXTk+NRcgspj9aH8rLenN0IqGoTorIWMPRuYm1tr1 URzW48h8Dbasf5XoOPq7GjcArQ6jpbJNcLKCUzhFcjy4gycRlVmLeFzrdYeQkxZf x0RVC9WCGr8Kpklwnr/8vqqaZg== -----END CERTIFICATE-----Generated at Mon Jan 26 04:46:00 2026 by rpki-client