This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer File: 2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer (raw, json) Hash identifier: LFlmKAbHJCS4Nn4k++4z6/7hGSexbebE6D+KN1K3mlU= Subject key identifier: D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C806D40CF96452ACB642537975BB64C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:19:10 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 43179 AS: 60588 IP: 77.74.224.0/21 IP: 109.105.192.0/20 IP: 2a02:21c0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:6d:40:cf:96:45:2a:cb:64:25:37:97:5b:b6:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f1:b5:a5:4a:ff:2a:75:c5:64:13:63:dd:2a: 5b:3e:80:98:85:71:3c:b5:2a:aa:78:8b:90:1e:05: 12:20:a6:f3:14:b6:76:2e:42:78:d4:60:a6:45:0e: f5:21:d8:1e:ce:68:45:23:30:a7:c3:e8:d5:84:ab: f7:dd:66:76:11:96:7f:53:f8:98:48:7d:2a:b3:be: 19:8c:34:07:0a:55:48:b1:bd:f3:dc:07:90:7f:9c: 9e:c9:4a:84:fa:58:94:9f:01:82:b1:7d:f7:f7:3d: 42:09:15:18:bd:ea:18:3a:ca:25:90:97:2f:37:82: bb:0f:88:6b:79:72:22:5b:6c:18:d2:d6:cf:49:03: 20:84:f6:42:8b:44:b5:a0:8a:81:c8:11:d1:11:06: 97:c2:88:d7:a3:18:9c:81:0a:9b:16:0d:87:3f:fe: 22:19:22:a7:9b:54:b6:9e:f4:e7:f5:08:27:8b:e8: b7:46:56:45:95:3d:81:12:74:18:c7:4c:19:d4:40: c7:cb:dc:50:e1:db:f5:62:59:b1:f2:2d:84:f0:17: bf:70:15:e1:82:99:25:b1:ce:7f:98:e1:e8:3d:2a: 07:88:ab:0b:d3:98:2a:de:b0:d8:8f:28:a6:fa:54: 7e:55:f5:04:95:dc:aa:4a:6c:04:2d:26:10:78:a6: 0f:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.74.224.0/21 109.105.192.0/20 IPv6: 2a02:21c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 43179 60588 Signature Algorithm: sha256WithRSAEncryption a5:4c:3c:af:75:dd:f1:22:69:32:e1:72:26:a9:51:d3:c2:83: 7e:ca:c6:10:9f:f9:c8:44:83:ea:2a:c7:c8:e0:43:e2:c7:8d: 0a:79:50:73:7b:2f:67:59:93:d3:5d:8b:aa:cc:6e:5a:11:57: 4f:48:b8:3f:68:f1:fc:40:4b:0a:7d:0d:5d:24:b0:fb:bc:c2: 9b:a8:ae:0b:4f:a2:6b:df:a2:83:f4:04:1b:87:60:4a:d4:5e: 2e:b6:74:0b:7e:38:63:57:a0:ea:7a:06:87:d7:ba:bf:f5:b7: 69:8c:6e:b1:bb:e9:e6:87:15:a0:46:60:c9:0e:b3:a5:5c:48: 61:23:74:0a:82:46:c5:76:a1:67:36:2c:37:81:76:cc:97:bc: da:0e:2f:44:a2:90:c7:50:76:e9:18:42:8d:56:7e:17:ab:f0: 24:f3:2d:cf:cc:31:63:19:7a:8e:94:62:c9:28:5a:84:da:06: 86:cf:23:79:c8:7b:4d:f9:7f:8a:2d:4d:aa:ce:08:1e:c7:1a: c3:7e:25:05:34:65:4f:ce:72:05:9a:7f:0c:f2:76:1e:24:7f: 76:c2:fe:81:64:55:a3:da:87:06:74:45:2d:d7:a3:b0:83:93: 47:0e:35:4d:fb:3d:30:04:b1:f6:66:f3:d2:a7:ba:73:50:20: ff:99:da:fa -----BEGIN CERTIFICATE----- MIIFrjCCBJagAwIBAgISAZt8gG1Az5ZFKstkJTeXW7ZMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOGM2MGEwZDJkNzBhOTMzN2QwYmRhNTZkMWFkNTk2YWMxZjY5Y2RhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovG1pUr/KnXFZBNj3SpbPoCYhXE8 tSqqeIuQHgUSIKbzFLZ2LkJ41GCmRQ71IdgezmhFIzCnw+jVhKv33WZ2EZZ/U/iY SH0qs74ZjDQHClVIsb3z3AeQf5yeyUqE+liUnwGCsX339z1CCRUYveoYOsolkJcv N4K7D4hreXIiW2wY0tbPSQMghPZCi0S1oIqByBHREQaXwojXoxicgQqbFg2HP/4i GSKnm1S2nvTn9Qgni+i3RlZFlT2BEnQYx0wZ1EDHy9xQ4dv1Ylmx8i2E8Be/cBXh gpklsc5/mOHoPSoHiKsL05gq3rDYjyim+lR+VfUEldyqSmwELSYQeKYP/wIDAQAB o4ICujCCArYwHQYDVR0OBBYEFNjGCg0tcKkzfQvaVtGtWWrB9pzaMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI0L2I1MWE4 NS1mOTlmLTQyM2YtOWZhZS1kZDI5NGMzNzhmNmMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjQvYjUxYTg1 LWY5OWYtNDIzZi05ZmFlLWRkMjk0YzM3OGY2Yy8xLzJNWUtEUzF3cVROOUM5cFcw YTFaYXNIMm5Oby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQDTUrgAwQEbWnAMA0EAgACMAcDBQAqAiHAMB8G CCsGAQUFBwEIAQH/BBAwDqAMMAoCAwCoqwIDAOysMA0GCSqGSIb3DQEBCwUAA4IB AQClTDyvdd3xImky4XImqVHTwoN+ysYQn/nIRIPqKsfI4EPix40KeVBzey9nWZPT XYuqzG5aEVdPSLg/aPH8QEsKfQ1dJLD7vMKbqK4LT6Jr36KD9AQbh2BK1F4utnQL fjhjV6DqegaH17q/9bdpjG6xu+nmhxWgRmDJDrOlXEhhI3QKgkbFdqFnNiw3gXbM l7zaDi9EopDHUHbpGEKNVn4Xq/Ak8y3PzDFjGXqOlGLJKFqE2gaGzyN5yHtN+X+K LU2qzggexxrDfiUFNGVPznIFmn8M8nYeJH92wv6BZFWj2ocGdEUt16Owg5NHDjVN +z0wBLH2ZvPSp7pzUCD/mdr6 -----END CERTIFICATE-----Generated at Sun Jan 25 09:19:53 2026 by rpki-client