This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2JDU7gf8IcER1jUoTaf7Gf1wbOI.cer File: 2JDU7gf8IcER1jUoTaf7Gf1wbOI.cer (raw, json) Hash identifier: 9CX/mH1lHC9qwCJIY47OUx9yPIbLk1pscWPEsIK3Q2Y= Subject key identifier: D8:90:D4:EE:07:FC:21:C1:11:D6:35:28:4D:A7:FB:19:FD:70:6C:E2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCA5B49E11697EC60E25D34C3FE96BD Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:19:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.157.92.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:5b:49:e1:16:97:ec:60:e2:5d:34:c3:fe:96:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:19:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d890d4ee07fc21c111d635284da7fb19fd706ce2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:bb:ea:5d:70:a7:09:03:a1:ae:a8:e6:e5:d9: 99:f4:87:55:08:6d:49:6f:fc:f7:93:82:65:9e:cc: 61:01:a2:a0:46:5d:92:e7:c8:a9:bc:e8:02:56:8b: f4:23:b6:61:c6:eb:0f:b3:30:df:43:dc:a5:e1:e1: 2f:29:40:0f:82:c1:d7:50:90:0e:68:5b:39:be:2f: 0b:59:61:14:46:e1:05:b1:7d:40:1a:d0:99:f7:22: 25:5b:d5:6e:66:8b:e8:69:a8:05:df:55:49:f2:11: 33:7c:21:4a:c5:fb:e5:2e:16:7a:44:77:f3:05:b1: 5f:e9:5a:a6:79:92:16:d7:89:71:96:53:43:98:62: 1b:d8:62:14:99:5d:30:cf:5e:0e:cd:3e:db:13:88: 10:77:3c:53:88:b2:73:fb:4e:90:d4:88:2e:7c:73: 5e:01:17:99:59:a8:42:7e:12:b2:00:af:a2:09:5a: c0:cb:29:62:d3:8e:a7:38:d8:38:3e:3d:24:75:1a: 81:47:f1:c7:a6:ae:8f:91:48:e2:43:fb:2f:33:29: 7c:dc:8c:c9:d5:a6:5a:74:88:3a:71:3e:b5:b0:ba: 60:2a:0d:35:0a:a8:46:d5:88:b9:1d:76:a4:07:36: ee:18:ca:cd:7b:dc:a4:c1:13:76:05:76:16:72:56: 78:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:90:D4:EE:07:FC:21:C1:11:D6:35:28:4D:A7:FB:19:FD:70:6C:E2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.157.92.0/22 Signature Algorithm: sha256WithRSAEncryption 67:6c:4b:53:b1:5a:ef:f0:bb:35:f4:68:28:bc:4e:1d:57:12: 98:ce:74:d6:aa:26:f9:28:72:b9:0a:76:8a:a8:81:25:44:31: d5:35:46:26:81:ae:c8:48:3d:62:55:a5:44:b7:28:72:97:83: 44:01:b9:ce:4f:da:a0:47:91:65:ee:29:2d:ae:86:75:db:02: 93:29:0a:f2:ba:73:1d:49:94:a0:ab:d8:e2:29:39:ca:5a:a8: ed:06:bc:f5:a5:03:5c:7d:d6:7f:91:ad:61:17:be:7c:90:d7: 49:a0:8e:43:f6:6d:eb:76:f3:01:76:7c:8b:79:fa:01:0f:f4: 7f:ca:3f:b2:bb:80:7b:33:71:e7:d9:66:69:f1:57:23:e9:3c: 25:d6:db:5c:4a:b7:57:e7:79:43:12:93:5b:cc:cb:a8:ff:e9: f1:ea:a1:8a:5a:cc:ea:31:1a:83:0e:70:36:eb:70:57:11:08: d8:2c:3e:11:88:1f:0d:52:60:fc:00:8a:c6:e7:40:4f:91:ac: 83:b2:e5:e2:ea:a1:f9:e4:18:4b:a2:81:ac:79:cd:f1:3e:6a: ff:79:34:bd:a7:66:81:fa:f8:a6:af:e1:5e:3d:3a:fe:01:5f: 30:72:67:89:00:14:3b:56:6c:a8:5e:ae:0b:23:5f:0c:6a:ed: f4:2a:a1:90 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt9yltJ4RaX7GDiXTTD/pa9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxOTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkODkwZDRlZTA3ZmMyMWMxMTFkNjM1Mjg0ZGE3ZmIxOWZkNzA2Y2UyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7vqXXCnCQOhrqjm5dmZ9IdVCG1J b/z3k4JlnsxhAaKgRl2S58ipvOgCVov0I7ZhxusPszDfQ9yl4eEvKUAPgsHXUJAO aFs5vi8LWWEURuEFsX1AGtCZ9yIlW9VuZovoaagF31VJ8hEzfCFKxfvlLhZ6RHfz BbFf6VqmeZIW14lxllNDmGIb2GIUmV0wz14OzT7bE4gQdzxTiLJz+06Q1IgufHNe AReZWahCfhKyAK+iCVrAyyli046nONg4Pj0kdRqBR/HHpq6PkUjiQ/svMyl83IzJ 1aZadIg6cT61sLpgKg01CqhG1Yi5HXakBzbuGMrNe9ykwRN2BXYWclZ4owIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFNiQ1O4H/CHBEdY1KE2n+xn9cGziMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJlLzNlYzI0 YS1iMTkxLTQzNGEtYmRjMi0wNmE4MTBhZjhkMzQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmUvM2VjMjRh LWIxOTEtNDM0YS1iZGMyLTA2YTgxMGFmOGQzNC8xLzJKRFU3Z2Y4SWNFUjFqVW9U YWY3R2Yxd2JPSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCuZ1cMA0GCSqGSIb3DQEBCwUAA4IBAQBnbEtT sVrv8Ls19GgovE4dVxKYznTWqib5KHK5CnaKqIElRDHVNUYmga7ISD1iVaVEtyhy l4NEAbnOT9qgR5Fl7iktroZ12wKTKQryunMdSZSgq9jiKTnKWqjtBrz1pQNcfdZ/ ka1hF758kNdJoI5D9m3rdvMBdnyLefoBD/R/yj+yu4B7M3Hn2WZp8Vcj6Twl1ttc SrdX53lDEpNbzMuo/+nx6qGKWszqMRqDDnA263BXEQjYLD4RiB8NUmD8AIrG50BP kayDsuXi6qH55BhLooGsec3xPmr/eTS9p2aB+vimr+FePTr+AV8wcmeJABQ7Vmyo Xq4LI18Mau30KqGQ -----END CERTIFICATE-----Generated at Sun Jan 25 14:42:59 2026 by rpki-client