This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2O6Q00LYZepn8rDS-3TAOfg-Skg.cer File: 2O6Q00LYZepn8rDS-3TAOfg-Skg.cer (raw, json) Hash identifier: c9M9H6PvltiIa7OPQn66XmnIQ2PQ9A3Exym49zymzBM= Subject key identifier: D8:EE:90:D3:42:D8:65:EA:67:F2:B0:D2:FB:74:C0:39:F8:3E:4A:48 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E388030FC8378FA1AC1EF57BC2F8CAF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/66/cf5c10-2131-4116-b6f9-510525c4744c/1/2O6Q00LYZepn8rDS-3TAOfg-Skg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/66/cf5c10-2131-4116-b6f9-510525c4744c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:50 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 25464 IP: 195.43.44.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:80:30:fc:83:78:fa:1a:c1:ef:57:bc:2f:8c:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d8ee90d342d865ea67f2b0d2fb74c039f83e4a48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:b0:23:b3:ed:f7:e9:01:ca:78:2a:7d:3d:80: 77:9a:41:e8:ff:08:ae:95:30:6b:52:fd:88:85:2c: a7:80:9e:19:c7:99:da:2c:b4:54:67:7d:ac:ba:c2: 0a:d3:2b:cd:79:9b:78:6e:45:12:3c:86:b3:8b:4a: 2b:47:6d:23:b6:ba:31:76:66:d7:bb:2e:de:f8:fc: 6f:09:f0:41:42:29:f1:f9:ca:63:1e:65:e8:93:4a: 72:44:d5:de:56:1a:8e:e7:c5:89:36:47:dc:bb:d2: 11:b3:a7:81:20:94:d5:fe:fc:24:45:ac:c5:6f:56: 51:bc:d0:e0:67:e8:21:9d:db:7f:2d:5c:06:be:69: 0b:6b:0e:02:a6:b8:b8:98:66:80:44:96:24:fa:e8: 7b:d7:3c:f4:42:22:2e:f4:f3:3f:dc:da:1b:8f:ab: 97:3e:13:3a:90:2e:e7:6f:50:2b:f1:74:8a:6e:80: f5:94:8a:48:c8:ba:2f:26:b5:5b:70:24:f8:6a:e0: b8:8d:57:8d:9f:f5:d1:49:57:2b:b2:e2:4d:51:da: bb:1f:d5:63:27:f2:cd:c8:01:09:d4:7a:97:d5:91: 1f:4d:de:81:41:fc:5c:bb:d0:95:30:de:43:ab:b5: 42:77:61:1d:a6:45:97:82:5a:99:28:ba:0d:e6:2e: 63:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:EE:90:D3:42:D8:65:EA:67:F2:B0:D2:FB:74:C0:39:F8:3E:4A:48 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/cf5c10-2131-4116-b6f9-510525c4744c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/cf5c10-2131-4116-b6f9-510525c4744c/1/2O6Q00LYZepn8rDS-3TAOfg-Skg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.43.44.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 25464 Signature Algorithm: sha256WithRSAEncryption 6b:79:68:92:b3:0c:27:81:31:5c:5f:48:2e:92:d1:fe:52:3c: 07:02:44:b1:17:4a:76:ca:43:04:42:7a:b6:14:61:e5:e6:51: d1:d1:cd:a3:63:a0:75:31:0f:37:6a:b1:f4:39:e2:b9:11:15: f8:bc:19:3a:5e:fa:48:0f:95:48:68:1f:47:f6:14:0d:1c:3e: 6c:50:cc:ca:8e:3e:7e:7c:1e:77:08:93:e6:96:8b:b7:36:dd: de:4f:f2:ea:e1:d1:5c:c1:58:c9:ef:d8:ba:eb:f7:d8:e9:36: bd:50:a1:46:c3:6d:c9:5c:dc:33:13:b4:13:83:de:db:6f:62: 48:4d:6b:aa:28:1a:22:b6:39:89:ab:54:08:50:79:c6:7b:8d: 3b:00:dd:eb:99:6a:22:d3:91:bd:70:e2:9a:20:f0:06:53:3b: 58:65:43:1c:37:d7:78:4a:54:c6:84:dd:ef:af:ca:88:c9:71: ef:fb:98:bc:d4:c3:9d:27:6b:6a:07:50:19:82:a5:d7:49:f8: 78:d1:53:a2:89:60:79:fe:a1:f4:90:03:19:db:72:b0:86:04: 15:ea:9d:07:74:b5:f0:c3:d4:a7:7c:e5:2b:27:f1:2e:91:a6: 6c:a8:fb:4b:1b:3b:b0:52:6d:2d:d9:b8:6c:65:10:2e:f6:ca: b4:4d:fa:3c -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISAZt+OIAw/IN4+hrB71e8L4yvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOGVlOTBkMzQyZDg2NWVhNjdmMmIwZDJmYjc0YzAzOWY4M2U0YTQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7LAjs+336QHKeCp9PYB3mkHo/wiu lTBrUv2IhSyngJ4Zx5naLLRUZ32susIK0yvNeZt4bkUSPIazi0orR20jtroxdmbX uy7e+PxvCfBBQinx+cpjHmXok0pyRNXeVhqO58WJNkfcu9IRs6eBIJTV/vwkRazF b1ZRvNDgZ+ghndt/LVwGvmkLaw4Cpri4mGaARJYk+uh71zz0QiIu9PM/3Nobj6uX PhM6kC7nb1Ar8XSKboD1lIpIyLovJrVbcCT4auC4jVeNn/XRSVcrsuJNUdq7H9Vj J/LNyAEJ1HqX1ZEfTd6BQfxcu9CVMN5Dq7VCd2EdpkWXglqZKLoN5i5jpQIDAQAB o4ICnzCCApswHQYDVR0OBBYEFNjukNNC2GXqZ/Kw0vt0wDn4PkpIMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY2L2NmNWMx MC0yMTMxLTQxMTYtYjZmOS01MTA1MjVjNDc0NGMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjYvY2Y1YzEw LTIxMzEtNDExNi1iNmY5LTUxMDUyNWM0NzQ0Yy8xLzJPNlEwMExZWmVwbjhyRFMt M1RBT2ZnLVNrZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCwyssMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQC AmN4MA0GCSqGSIb3DQEBCwUAA4IBAQBreWiSswwngTFcX0guktH+UjwHAkSxF0p2 ykMEQnq2FGHl5lHR0c2jY6B1MQ83arH0OeK5ERX4vBk6XvpID5VIaB9H9hQNHD5s UMzKjj5+fB53CJPmlou3Nt3eT/Lq4dFcwVjJ79i66/fY6Ta9UKFGw23JXNwzE7QT g97bb2JITWuqKBoitjmJq1QIUHnGe407AN3rmWoi05G9cOKaIPAGUztYZUMcN9d4 SlTGhN3vr8qIyXHv+5i81MOdJ2tqB1AZgqXXSfh40VOiiWB5/qH0kAMZ23KwhgQV 6p0HdLXww9SnfOUrJ/EukaZsqPtLGzuwUm0t2bhsZRAu9sq0Tfo8 -----END CERTIFICATE-----Generated at Sun Jan 25 23:08:30 2026 by rpki-client