This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.cer File: 2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.cer (raw, json) Hash identifier: BrB8xHqY6N/xM2ZO+nOqULvAGFNy9UFI99Bb6q/cOPk= Subject key identifier: D8:FC:6E:45:18:1D:83:9F:D1:0E:4A:90:27:62:F2:6C:9A:64:67:96 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5BBD7DBBAD92ADCB7431964BDBBD1C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:18:42 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 201135 IP: 80.92.207.0/24 IP: 87.249.61.0 -- 87.249.63.255 IP: 185.84.188.0/22 IP: 2a05:a7c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:bd:7d:bb:ad:92:ad:cb:74:31:96:4b:db:bd:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d8fc6e45181d839fd10e4a902762f26c9a646796 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:dd:20:79:eb:23:35:5c:2d:c4:dd:4e:cf:83: 4d:52:04:bd:b7:93:0b:6c:38:e7:25:83:38:8c:08: 32:ad:53:d2:83:3b:13:c9:1e:9d:24:7a:ea:7f:91: 13:45:63:ae:4d:6a:c6:3d:e7:e7:1a:34:47:f0:73: 94:90:1d:8c:08:e9:be:50:e1:55:08:ad:42:9b:67: 5f:ca:c9:28:cf:e2:6e:35:36:43:60:3a:cf:42:48: 7b:a3:e7:d5:67:1b:21:4c:75:c7:61:56:1e:23:37: aa:7a:c5:7b:20:47:87:c0:81:e3:e6:a4:1a:99:24: 9c:61:d4:1b:02:0c:f0:a1:dd:a9:8f:bd:31:6c:4a: f5:10:42:93:a7:16:c0:34:a2:a2:4e:c1:ab:99:b2: c7:0d:98:c7:34:9f:e3:77:d2:55:11:47:88:0f:78: 8b:da:cf:3b:a5:1b:87:2a:40:72:83:3f:56:bc:fb: c9:7e:6e:63:b1:30:a2:3a:97:6b:60:3d:e6:e7:b1: 5f:a7:3e:41:91:22:76:39:29:81:9c:7c:0e:79:23: d8:44:f4:42:da:84:fb:d6:43:01:b6:0e:25:5a:9d: 41:dd:d6:f4:a8:7b:c0:79:89:be:63:6b:d7:a8:c8: 39:6c:97:6d:e5:f1:c2:92:93:64:4b:e3:f2:e8:ed: a3:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:FC:6E:45:18:1D:83:9F:D1:0E:4A:90:27:62:F2:6C:9A:64:67:96 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.92.207.0/24 87.249.61.0-87.249.63.255 185.84.188.0/22 IPv6: 2a05:a7c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 201135 Signature Algorithm: sha256WithRSAEncryption 8a:2e:a6:fe:6b:a7:d2:3f:d1:c3:05:bb:8a:92:e9:f2:b9:28: be:de:8a:75:97:3a:4f:35:0a:19:62:4a:20:e3:27:bf:93:64: 46:36:3e:aa:06:7f:81:fa:cb:0d:0f:3b:6a:54:6b:34:6e:3d: e9:72:c9:bb:a4:54:06:24:33:a8:94:38:60:81:3e:49:c2:2d: c8:88:12:ef:1d:a2:f6:61:4c:97:3a:09:44:48:98:61:f5:df: 12:5f:28:56:a8:de:66:e3:98:40:03:6a:08:f1:26:c6:44:bc: bc:77:a5:88:1a:87:75:28:ff:8b:34:00:c9:f9:68:b1:5c:ec: 83:5d:7a:61:04:c9:cc:85:c6:f8:ee:78:3e:6f:12:1e:dd:b2: 01:42:84:26:28:13:24:da:b7:d9:5e:9e:a5:d3:89:b9:bd:bd: 16:7e:7b:c9:54:c7:8a:66:ee:98:7a:83:6f:b9:db:dd:93:d5: d7:e4:db:ee:cc:a1:06:f3:a5:69:95:d4:b9:78:05:d0:2a:23: c7:91:3a:87:c8:91:79:e2:ad:1b:a7:11:3e:ab:87:41:39:81: 1b:fa:da:7c:0d:70:5f:2c:1a:bf:5e:65:af:60:6b:7c:ed:e7: 32:bd:7b:90:33:a8:1b:87:f4:47:23:a1:90:b8:22:90:10:32: 95:b3:0d:1e -----BEGIN CERTIFICATE----- MIIFtzCCBJ+gAwIBAgISAZt9W719u62Srct0MZZL270cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOGZjNmU0NTE4MWQ4MzlmZDEwZTRhOTAyNzYyZjI2YzlhNjQ2Nzk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvN0geesjNVwtxN1Oz4NNUgS9t5ML bDjnJYM4jAgyrVPSgzsTyR6dJHrqf5ETRWOuTWrGPefnGjRH8HOUkB2MCOm+UOFV CK1Cm2dfyskoz+JuNTZDYDrPQkh7o+fVZxshTHXHYVYeIzeqesV7IEeHwIHj5qQa mSScYdQbAgzwod2pj70xbEr1EEKTpxbANKKiTsGrmbLHDZjHNJ/jd9JVEUeID3iL 2s87pRuHKkBygz9WvPvJfm5jsTCiOpdrYD3m57Ffpz5BkSJ2OSmBnHwOeSPYRPRC 2oT71kMBtg4lWp1B3db0qHvAeYm+Y2vXqMg5bJdt5fHCkpNkS+Py6O2jewIDAQAB o4ICwzCCAr8wHQYDVR0OBBYEFNj8bkUYHYOf0Q5KkCdi8myaZGeWMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI2LzYyMzQz Yy1lZGJlLTRhOGEtODRmMi03ZWIyZWI4NWI4NGEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjYvNjIzNDNj LWVkYmUtNGE4YS04NGYyLTdlYjJlYjg1Yjg0YS8xLzJQeHVSUmdkZzVfUkRrcVFK Mkx5Ykpwa1o1WS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEIGCCsGAQUF BwEHAQH/BDMwMTAgBAIAATAaAwQAUFzPMAwDBABX+T0DBAZX+QADBAK5VLwwDQQC AAIwBwMFAyoFp8AwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAxGvMA0GCSqGSIb3 DQEBCwUAA4IBAQCKLqb+a6fSP9HDBbuKkunyuSi+3op1lzpPNQoZYkog4ye/k2RG Nj6qBn+B+ssNDztqVGs0bj3pcsm7pFQGJDOolDhggT5Jwi3IiBLvHaL2YUyXOglE SJhh9d8SXyhWqN5m45hAA2oI8SbGRLy8d6WIGod1KP+LNADJ+WixXOyDXXphBMnM hcb47ng+bxIe3bIBQoQmKBMk2rfZXp6l04m5vb0WfnvJVMeKZu6YeoNvudvdk9XX 5NvuzKEG86VpldS5eAXQKiPHkTqHyJF54q0bpxE+q4dBOYEb+tp8DXBfLBq/XmWv YGt87ecyvXuQM6gbh/RHI6GQuCKQEDKVsw0e -----END CERTIFICATE-----Generated at Mon Jan 26 03:34:00 2026 by rpki-client