This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2GeflcqbZWt8oiG-brJPleMosBA.cer File: 2GeflcqbZWt8oiG-brJPleMosBA.cer (raw, json) Hash identifier: 4DbGomQz0wY/i/CTy+uqrAjfx8gCMH4OmuglqbvGbDA= Subject key identifier: D8:67:9F:95:CA:9B:65:6B:7C:A2:21:BE:6E:B2:4F:95:E3:28:B0:10 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BE003AC67FA109400D9DD60565D42E07D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/2GeflcqbZWt8oiG-brJPleMosBA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Wed 21 Jan 2026 10:04:55 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 194.238.56.0/22 IP: 2a0f:100::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e0:03:ac:67:fa:10:94:00:d9:dd:60:56:5d:42:e0:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 21 10:04:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d8679f95ca9b656b7ca221be6eb24f95e328b010 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:1c:55:03:fc:26:18:93:c9:90:f9:e8:4b:2b: 79:7a:d2:43:89:e4:ea:9c:fe:7f:3c:96:f4:29:58: 67:8a:1b:49:8e:78:da:18:21:36:00:20:d4:8f:46: 37:a8:3a:40:97:d5:80:d0:29:63:2d:a1:92:c4:56: 06:cd:54:67:ea:4b:f7:84:02:a1:7c:ad:af:35:37: 18:a0:d2:46:62:e4:cd:6b:f5:cb:6a:1d:4f:6c:fc: db:c0:80:2e:6d:47:6f:d5:3b:2b:c5:20:2c:3b:cf: 7c:10:32:a6:e5:9e:2f:37:29:36:f2:2b:17:60:ca: b4:a4:9d:0c:08:8e:b3:27:e8:de:26:5f:44:fe:0e: 05:f0:5c:d2:5a:4d:10:3c:8e:fe:9f:a9:5d:bf:01: 8e:ea:7f:e6:13:32:02:ca:cc:14:d3:ab:70:dd:41: 38:0c:99:75:e4:f1:53:0d:4c:02:75:92:3b:7a:19: 4d:16:f2:ff:fa:18:ad:a2:b6:f7:93:b6:03:b9:e7: 43:58:7c:c1:d7:fe:97:dd:25:bc:48:e8:5a:91:18: 0c:28:da:81:ef:67:58:46:aa:c6:25:c3:87:e1:10: a0:0e:71:cd:c3:80:3a:4f:c2:d8:c8:a8:6d:5a:37: 51:77:a7:ed:1d:04:f0:c8:2e:bb:a9:57:8e:cc:6c: d3:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:67:9F:95:CA:9B:65:6B:7C:A2:21:BE:6E:B2:4F:95:E3:28:B0:10 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/2GeflcqbZWt8oiG-brJPleMosBA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.238.56.0/22 IPv6: 2a0f:100::/29 Signature Algorithm: sha256WithRSAEncryption 47:1e:a4:1c:4d:d2:e0:97:da:7e:d3:7f:12:2e:a9:ee:a4:2d: 24:b8:dc:e8:90:91:39:29:fa:46:92:71:0a:45:98:0b:91:44: 51:69:e9:bb:68:6f:fa:5e:eb:a7:d5:fb:38:c8:e0:6d:e3:96: 71:ca:72:96:40:13:e3:06:59:49:f8:7d:43:c5:29:0e:90:9c: 74:18:d7:75:1d:75:fe:4a:79:40:e7:2e:63:8c:df:22:b1:92: 57:43:94:ca:8e:13:38:73:4c:6c:fa:18:c8:dd:f3:bd:eb:1d: b1:54:b3:83:8d:f9:7d:dd:6a:1f:39:07:5a:b4:c5:25:4a:75: 0c:6a:93:86:f2:ff:5a:d8:6e:f5:5c:46:ac:7b:01:c2:af:5a: d0:55:c9:97:b0:df:91:f1:b6:6c:01:4b:95:c6:84:77:71:14: 3e:2c:da:99:0c:59:70:85:75:0c:bd:d8:94:e9:ec:55:df:43: bc:69:9e:79:9e:2e:8c:19:10:d6:6c:53:f6:28:88:0d:e1:c0: d3:d5:01:68:61:0a:29:db:56:21:39:7d:11:be:7f:92:7a:a4: 42:1d:05:57:41:f1:8d:25:b2:af:ca:c0:8a:15:20:ae:cc:cc: ac:b9:53:12:df:2e:98:82:1a:21:c2:dd:d6:dd:fe:f0:2e:f1: 3f:d8:a7:72 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZvgA6xn+hCUANndYFZdQuB9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTIxMTAwNDU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkODY3OWY5NWNhOWI2NTZiN2NhMjIxYmU2ZWIyNGY5NWUzMjhiMDEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRxVA/wmGJPJkPnoSyt5etJDieTq nP5/PJb0KVhnihtJjnjaGCE2ACDUj0Y3qDpAl9WA0CljLaGSxFYGzVRn6kv3hAKh fK2vNTcYoNJGYuTNa/XLah1PbPzbwIAubUdv1TsrxSAsO898EDKm5Z4vNyk28isX YMq0pJ0MCI6zJ+jeJl9E/g4F8FzSWk0QPI7+n6ldvwGO6n/mEzICyswU06tw3UE4 DJl15PFTDUwCdZI7ehlNFvL/+hitorb3k7YDuedDWHzB1/6X3SW8SOhakRgMKNqB 72dYRqrGJcOH4RCgDnHNw4A6T8LYyKhtWjdRd6ftHQTwyC67qVeOzGzT1QIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFNhnn5XKm2VrfKIhvm6yT5XjKLAQMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc2L2M0ZDA1 Zi0xMGQ1LTRmOGYtOWEzNy1lNTIyOWFkNTIxNGUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzYvYzRkMDVm LTEwZDUtNGY4Zi05YTM3LWU1MjI5YWQ1MjE0ZS8xLzJHZWZsY3FiWld0OG9pRy1i ckpQbGVNb3NCQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCwu44MA0EAgACMAcDBQMqDwEAMA0GCSqGSIb3 DQEBCwUAA4IBAQBHHqQcTdLgl9p+038SLqnupC0kuNzokJE5KfpGknEKRZgLkURR aem7aG/6Xuun1fs4yOBt45ZxynKWQBPjBllJ+H1DxSkOkJx0GNd1HXX+SnlA5y5j jN8isZJXQ5TKjhM4c0xs+hjI3fO96x2xVLODjfl93WofOQdatMUlSnUMapOG8v9a 2G71XEasewHCr1rQVcmXsN+R8bZsAUuVxoR3cRQ+LNqZDFlwhXUMvdiU6exV30O8 aZ55ni6MGRDWbFP2KIgN4cDT1QFoYQop21YhOX0Rvn+SeqRCHQVXQfGNJbKvysCK FSCuzMysuVMS3y6Yghohwt3W3f7wLvE/2Kdy -----END CERTIFICATE-----Generated at Mon Jan 26 03:02:00 2026 by rpki-client