This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2RFVkMpva1RAxuJTQ82EAYaOOhw.cer File: 2RFVkMpva1RAxuJTQ82EAYaOOhw.cer (raw, json) Hash identifier: Q3rwTUCC0MLB88FvViigLViFwJbK1Edvlj4WRVL466Q= Subject key identifier: D9:11:55:90:CA:6F:6B:54:40:C6:E2:53:43:CD:84:01:86:8E:3A:1C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797EAC0A4942130114B5E82F71E45191 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9e/a45520-d9cc-45f2-8645-3ffa39b4dc0b/1/2RFVkMpva1RAxuJTQ82EAYaOOhw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9e/a45520-d9cc-45f2-8645-3ffa39b4dc0b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:23 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.178.130.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:ac:0a:49:42:13:01:14:b5:e8:2f:71:e4:51:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d9115590ca6f6b5440c6e25343cd8401868e3a1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:3f:a8:8e:3b:07:79:8f:bb:2c:c7:f0:f1:fc: 7f:6b:56:82:40:b4:87:8d:4d:fe:46:52:9f:2a:7a: c3:c9:4f:ff:a4:0d:af:14:a8:86:c2:f2:b8:e0:0f: dd:68:5e:6f:e7:81:a7:d1:14:1b:0a:6c:37:09:9b: 5a:9d:89:cd:18:af:65:df:29:a2:14:45:66:a9:26: e5:46:8b:a3:11:ba:ee:c1:c7:76:64:4b:66:5a:d6: da:1f:be:62:70:5a:fd:ca:31:8c:12:fa:ce:dc:9e: 7b:06:9a:74:23:ae:f2:e6:75:2c:a8:a6:04:89:1b: 57:f8:8b:b1:7c:2e:a0:95:b3:a8:5b:9d:93:06:ac: 8c:19:60:71:2a:c4:ad:32:de:d9:fb:f9:40:2e:37: f8:28:27:0c:90:82:be:c4:b9:81:b2:3f:22:ea:b2: 98:da:f7:f0:52:48:dc:5a:eb:fd:40:82:35:91:2f: e9:ad:61:01:94:05:96:61:09:9c:8d:c7:3e:0a:01: 73:bd:ed:b8:63:fd:25:d3:0a:68:82:9d:b3:b9:0d: c9:51:d2:9e:c6:8e:d9:1d:41:78:1a:2a:2f:bd:7b: 93:c2:46:15:7f:0d:bd:00:69:6d:63:c7:8b:b0:f9: b5:02:21:e9:b4:5f:1c:38:e3:9e:f2:88:e6:ff:ce: 22:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:11:55:90:CA:6F:6B:54:40:C6:E2:53:43:CD:84:01:86:8E:3A:1C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a45520-d9cc-45f2-8645-3ffa39b4dc0b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a45520-d9cc-45f2-8645-3ffa39b4dc0b/1/2RFVkMpva1RAxuJTQ82EAYaOOhw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.178.130.0/24 Signature Algorithm: sha256WithRSAEncryption 66:f6:42:f7:36:2f:7a:e6:50:08:50:97:3d:54:fe:7e:40:08: 8c:8d:e9:9e:8c:cd:5b:95:c0:d9:b8:7c:2f:06:74:22:d3:93: f5:17:17:cf:14:a0:08:f5:e2:d3:59:8e:6e:f8:c9:6b:e3:e1: 8c:67:50:83:15:bc:b6:8b:0d:1c:81:a7:6b:24:ff:51:37:c2: 95:73:6c:bc:68:cc:c4:92:9b:a8:2b:11:58:04:6b:f0:bb:8b: 84:ff:16:51:67:eb:df:6f:8d:ee:30:99:74:75:db:f1:83:32: 86:53:99:b1:09:71:ba:ca:3b:4c:d4:eb:7d:64:a1:80:27:a3: 13:e9:8c:07:00:55:8b:ab:c0:fe:90:09:40:5b:74:5c:d4:cf: df:02:22:4a:fd:87:ed:6f:2a:43:0a:8a:0a:67:0c:0e:98:e0: 68:7f:af:97:9b:08:77:42:b2:98:32:87:ba:fb:3e:51:ae:b0: cb:e2:e1:5a:f7:d9:5e:d9:59:cd:52:68:f1:e7:02:0b:9b:47: 17:21:79:68:25:a9:50:ef:f1:6c:ef:d5:77:49:9f:a1:74:64: 37:af:1d:b5:88:d7:06:e8:52:e4:ea:97:da:fa:0c:93:fd:57: 97:a7:b4:8c:63:72:f9:71:b1:ac:a6:66:fa:9a:25:23:9d:e6: 84:67:a2:4e -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt5fqwKSUITARS16C9x5FGRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOTExNTU5MGNhNmY2YjU0NDBjNmUyNTM0M2NkODQwMTg2OGUzYTFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyT+ojjsHeY+7LMfw8fx/a1aCQLSH jU3+RlKfKnrDyU//pA2vFKiGwvK44A/daF5v54Gn0RQbCmw3CZtanYnNGK9l3ymi FEVmqSblRoujEbruwcd2ZEtmWtbaH75icFr9yjGMEvrO3J57Bpp0I67y5nUsqKYE iRtX+IuxfC6glbOoW52TBqyMGWBxKsStMt7Z+/lALjf4KCcMkIK+xLmBsj8i6rKY 2vfwUkjcWuv9QII1kS/prWEBlAWWYQmcjcc+CgFzve24Y/0l0wpogp2zuQ3JUdKe xo7ZHUF4GiovvXuTwkYVfw29AGltY8eLsPm1AiHptF8cOOOe8ojm/84iMwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFNkRVZDKb2tUQMbiU0PNhAGGjjocMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzllL2E0NTUy MC1kOWNjLTQ1ZjItODY0NS0zZmZhMzliNGRjMGIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWUvYTQ1NTIw LWQ5Y2MtNDVmMi04NjQ1LTNmZmEzOWI0ZGMwYi8xLzJSRlZrTXB2YTFSQXh1SlRR ODJFQVlhT09ody5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwbKCMA0GCSqGSIb3DQEBCwUAA4IBAQBm9kL3 Ni965lAIUJc9VP5+QAiMjemejM1blcDZuHwvBnQi05P1FxfPFKAI9eLTWY5u+Mlr 4+GMZ1CDFby2iw0cgadrJP9RN8KVc2y8aMzEkpuoKxFYBGvwu4uE/xZRZ+vfb43u MJl0ddvxgzKGU5mxCXG6yjtM1Ot9ZKGAJ6MT6YwHAFWLq8D+kAlAW3Rc1M/fAiJK /YftbypDCooKZwwOmOBof6+Xmwh3QrKYMoe6+z5RrrDL4uFa99le2VnNUmjx5wIL m0cXIXloJalQ7/Fs79V3SZ+hdGQ3rx21iNcG6FLk6pfa+gyT/VeXp7SMY3L5cbGs pmb6miUjneaEZ6JO -----END CERTIFICATE-----Generated at Mon Jan 26 06:22:47 2026 by rpki-client