This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2KqsBZlqW0YUxu7a_-f49fmivGc.cer File: 2KqsBZlqW0YUxu7a_-f49fmivGc.cer (raw, json) Hash identifier: mQs/npbNvs5x4y7WpV+HBM04lqA2wtUZ/W+gfZgTGqk= Subject key identifier: D8:AA:AC:05:99:6A:5B:46:14:C6:EE:DA:FF:E7:F8:F5:F9:A2:BC:67 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B13D635CC9CD7D6BFEA9D2A4B2443 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:07 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 192.124.201.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:13:d6:35:cc:9c:d7:d6:bf:ea:9d:2a:4b:24:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d8aaac05996a5b4614c6eedaffe7f8f5f9a2bc67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d0:bb:4d:3f:bc:dd:a0:01:19:fe:bb:6d:c7: 29:cf:e9:84:ff:67:5a:83:c2:66:50:c5:24:d8:cf: 6b:b6:8c:77:62:41:32:7c:01:87:b7:22:b3:f2:c5: 1e:28:e0:59:32:d5:46:63:ba:a5:8e:18:6d:c2:31: 5b:8f:f4:08:97:b7:4c:8e:65:96:3f:dd:72:af:b8: 6c:d1:fe:43:49:1c:5a:86:94:0e:16:d0:c0:20:a7: 4c:a4:0e:1b:e4:c2:fb:56:14:9a:f1:2f:a4:59:e1: f8:e8:4b:79:e4:76:0c:fb:4f:96:7c:61:b0:5a:bf: 70:28:49:f9:c3:ac:32:8b:d5:76:e2:b6:56:2a:e3: 32:d3:ec:87:27:b1:43:db:dd:94:e4:3e:c9:47:62: 0f:80:77:24:6d:eb:62:32:09:b3:60:98:97:1a:ef: ba:a5:5d:25:06:40:2e:e7:5d:57:b8:0d:c7:aa:b7: 2b:34:f0:2b:cc:f6:31:94:44:3e:48:96:34:86:7c: f5:e5:8a:d4:cf:4f:34:4b:99:73:e2:40:e5:f2:64: 7e:4e:42:78:55:53:01:d8:d7:d1:89:36:2f:7a:0f: 38:c0:bf:fd:3a:67:f0:43:5a:70:57:0a:01:eb:b9: 6f:0c:4a:92:29:5e:36:a0:b6:44:9c:be:ad:60:a1: ae:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:AA:AC:05:99:6A:5B:46:14:C6:EE:DA:FF:E7:F8:F5:F9:A2:BC:67 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.124.201.0/24 Signature Algorithm: sha256WithRSAEncryption 4d:bd:10:5c:a4:a9:2f:84:20:e7:ef:b6:66:a0:0e:bd:f2:41: b4:95:00:df:d6:78:d5:89:53:a7:a2:f8:9d:5a:a6:83:47:4c: a0:ac:a9:8c:ce:49:46:84:98:38:d2:23:8d:ca:09:51:8a:a3: a8:41:91:71:55:5c:42:b5:9e:97:6a:33:f0:b1:13:66:68:b6: 15:08:ec:7d:19:4b:45:02:40:02:29:03:0a:89:57:f3:20:f3: c4:8a:24:10:c7:29:eb:ce:42:b4:69:99:18:b1:a5:f8:27:6f: b2:73:64:b9:78:86:d8:3f:df:89:ac:93:8c:94:6d:f9:07:33: e7:a1:24:19:cf:53:ea:d8:72:5a:6d:da:b7:ce:11:ef:ea:13: dc:82:88:05:1f:4f:d8:b6:9e:40:53:69:4a:d6:37:17:94:c1: f5:64:70:f1:25:3a:84:06:da:d9:e5:65:b9:64:44:51:9e:8d: ad:01:79:63:96:9a:45:07:3d:53:51:76:c0:43:ec:02:80:d7: 0b:e9:8d:09:fa:e2:d6:d9:2b:16:a4:9b:10:e3:a4:92:9f:7b: 35:36:c3:2d:f6:ed:eb:18:5b:2e:e4:b6:ff:36:41:2b:96:7e: 60:bd:d4:3d:52:9a:be:eb:9d:a0:09:7c:5f:2a:ba:f1:a4:76: d8:b4:62:4d -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt6WxPWNcyc19a/6p0qSyRDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOGFhYWMwNTk5NmE1YjQ2MTRjNmVlZGFmZmU3ZjhmNWY5YTJiYzY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttC7TT+83aABGf67bccpz+mE/2da g8JmUMUk2M9rtox3YkEyfAGHtyKz8sUeKOBZMtVGY7qljhhtwjFbj/QIl7dMjmWW P91yr7hs0f5DSRxahpQOFtDAIKdMpA4b5ML7VhSa8S+kWeH46Et55HYM+0+WfGGw Wr9wKEn5w6wyi9V24rZWKuMy0+yHJ7FD292U5D7JR2IPgHckbetiMgmzYJiXGu+6 pV0lBkAu511XuA3HqrcrNPArzPYxlEQ+SJY0hnz15YrUz080S5lz4kDl8mR+TkJ4 VVMB2NfRiTYveg84wL/9OmfwQ1pwVwoB67lvDEqSKV42oLZEnL6tYKGuEwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFNiqrAWZaltGFMbu2v/n+PX5orxnMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEzLzkzODQz MC0wN2I0LTQ1YjMtOTQ5Ni1mNTNlZTMyZWQ4MTYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTMvOTM4NDMw LTA3YjQtNDViMy05NDk2LWY1M2VlMzJlZDgxNi8xLzJLcXNCWmxxVzBZVXh1N2Ff LWY0OWZtaXZHYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwHzJMA0GCSqGSIb3DQEBCwUAA4IBAQBNvRBc pKkvhCDn77ZmoA698kG0lQDf1njViVOnovidWqaDR0ygrKmMzklGhJg40iONyglR iqOoQZFxVVxCtZ6XajPwsRNmaLYVCOx9GUtFAkACKQMKiVfzIPPEiiQQxynrzkK0 aZkYsaX4J2+yc2S5eIbYP9+JrJOMlG35BzPnoSQZz1Pq2HJabdq3zhHv6hPcgogF H0/Ytp5AU2lK1jcXlMH1ZHDxJTqEBtrZ5WW5ZERRno2tAXljlppFBz1TUXbAQ+wC gNcL6Y0J+uLW2SsWpJsQ46SSn3s1NsMt9u3rGFsu5Lb/NkErln5gvdQ9Upq+652g CXxfKrrxpHbYtGJN -----END CERTIFICATE-----Generated at Mon Jan 26 07:44:43 2026 by rpki-client