This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2URo88w_OG8m5igbf6iww7sjagY.cer File: 2URo88w_OG8m5igbf6iww7sjagY.cer (raw, json) Hash identifier: L6fr8U+wJnuCcZE6KQm4lDdvYAaduoejIur/cdqu38Q= Subject key identifier: D9:44:68:F3:CC:3F:38:6F:26:E6:28:1B:7F:A8:B0:C3:BB:23:6A:06 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E38E4299F3D5C5B9A5AAEE4FECB5BAF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:20:16 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 31.98.0.0/16 IP: 31.105.0.0/16 IP: 45.15.76.0/22 IP: 45.81.216.0/22 IP: 45.84.180.0/22 IP: 45.86.252.0/22 IP: 45.87.68.0/22 IP: 45.93.76.0/22 IP: 45.95.60.0/22 IP: 45.129.112.0/22 IP: 45.134.196.0/22 IP: 45.135.20.0/22 IP: 45.138.60.0/22 IP: 45.138.116.0/22 IP: 45.142.148.0/22 IP: 45.146.28.0/22 IP: 45.147.184.0/22 IP: 45.148.180.0/22 IP: 45.150.176.0/22 IP: 45.151.160.0/22 IP: 45.159.52.0/22 IP: 87.56.0.0/19 IP: 176.20.192.0/19 IP: 193.160.236.0/23 IP: 193.161.2.0/23 IP: 194.113.112.0/23 IP: 194.113.118.0/23 IP: 194.213.13.0/24 IP: 194.213.15.0/24 IP: 194.213.17.0/24 IP: 194.213.20.0/24 IP: 2a04:a3c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:e4:29:9f:3d:5c:5b:9a:5a:ae:e4:fe:cb:5b:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:20:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d94468f3cc3f386f26e6281b7fa8b0c3bb236a06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:61:7c:e1:15:38:7a:6a:bd:7d:ee:83:7b:da: 03:e2:2b:21:49:87:06:d9:ed:7a:23:13:1e:81:e3: e1:4b:d6:f2:82:4f:8b:8e:07:83:f1:4c:d2:40:e4: bd:41:55:16:02:a8:e0:95:e6:03:7b:68:03:ef:bf: da:e7:3d:0d:e9:76:c4:02:72:f1:b7:c6:d4:30:05: ed:e3:8f:3a:0c:4f:79:a6:51:64:76:e9:a7:bb:e4: 87:c8:bd:62:f7:8a:d7:56:15:d9:d2:f7:60:4d:70: e1:99:1b:01:63:b6:93:21:5c:60:41:7b:5d:49:39: ed:b5:1d:92:68:a0:49:3b:cd:e1:57:92:c5:37:5a: ac:ee:80:35:c2:d3:eb:3c:39:28:af:6d:14:34:27: 19:17:e4:f9:a1:61:99:8d:7f:85:21:b9:71:01:3e: 33:2f:a7:b1:3c:37:5e:50:2c:40:15:aa:89:8e:6c: 74:a1:e6:69:45:14:c0:a6:61:e1:3e:fc:7f:09:dc: 76:e7:bd:72:b5:74:69:01:77:7b:4c:b2:b3:f3:3b: f5:a9:fa:8b:f4:ac:17:0a:80:21:d3:9f:4b:65:7f: a5:4f:c6:0e:84:d2:78:98:4e:e1:ee:88:ce:82:c7: 62:ed:b2:76:40:84:fd:ef:a0:a4:5b:06:f8:a0:8f: 12:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:44:68:F3:CC:3F:38:6F:26:E6:28:1B:7F:A8:B0:C3:BB:23:6A:06 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.98.0.0/16 31.105.0.0/16 45.15.76.0/22 45.81.216.0/22 45.84.180.0/22 45.86.252.0/22 45.87.68.0/22 45.93.76.0/22 45.95.60.0/22 45.129.112.0/22 45.134.196.0/22 45.135.20.0/22 45.138.60.0/22 45.138.116.0/22 45.142.148.0/22 45.146.28.0/22 45.147.184.0/22 45.148.180.0/22 45.150.176.0/22 45.151.160.0/22 45.159.52.0/22 87.56.0.0/19 176.20.192.0/19 193.160.236.0/23 193.161.2.0/23 194.113.112.0/23 194.113.118.0/23 194.213.13.0/24 194.213.15.0/24 194.213.17.0/24 194.213.20.0/24 IPv6: 2a04:a3c0::/29 Signature Algorithm: sha256WithRSAEncryption 05:85:fd:3a:c9:0e:f3:db:30:d3:d7:81:0f:53:83:ed:d5:a0: c5:fa:d7:b2:25:df:34:26:51:91:7a:e5:50:05:8d:dd:9f:57: 0f:a6:9a:cb:93:2c:ab:04:c4:af:a1:0a:54:f7:48:f6:ef:9e: c1:a3:34:a0:56:ec:e2:8d:99:b2:e0:2e:78:1e:ca:5f:7f:e0: f9:78:76:da:fb:43:15:a7:a9:2d:12:4b:ab:20:08:43:ad:66: c3:fb:e3:a7:a5:bc:04:4b:0d:2a:36:79:3c:02:9e:9a:e8:83: 00:ae:d8:59:2f:85:4d:b0:43:f6:92:2f:67:87:c1:03:9a:e4: 92:9f:d2:62:f0:ea:f0:3c:8e:28:cf:b0:ec:98:d3:4d:3e:a2: 1a:49:28:e7:64:26:f3:0e:bc:08:42:a5:0f:68:94:5b:5c:66: 89:8f:32:39:33:d2:0d:f6:b1:48:a1:22:b8:ec:04:2f:de:4a: 4b:81:d0:6f:e5:bb:cf:33:0a:7b:0f:2f:d0:58:7a:82:6c:6f: de:ff:95:ff:a5:1d:a3:ff:89:fd:75:39:6c:7c:0f:4d:a0:cc: e9:63:0a:72:f9:24:1d:90:82:17:92:a8:51:94:8e:81:a3:8a: 45:c4:33:cf:9d:4e:53:3b:e4:09:9c:bc:94:df:38:5d:bb:4b: 8e:67:53:e1 -----BEGIN CERTIFICATE----- MIIGPjCCBSagAwIBAgISAZt+OOQpnz1cW5paruT+y1uvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAyMDE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOTQ0NjhmM2NjM2YzODZmMjZlNjI4MWI3ZmE4YjBjM2JiMjM2YTA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2F84RU4emq9fe6De9oD4ishSYcG 2e16IxMegePhS9bygk+LjgeD8UzSQOS9QVUWAqjgleYDe2gD77/a5z0N6XbEAnLx t8bUMAXt4486DE95plFkdumnu+SHyL1i94rXVhXZ0vdgTXDhmRsBY7aTIVxgQXtd STnttR2SaKBJO83hV5LFN1qs7oA1wtPrPDkor20UNCcZF+T5oWGZjX+FIblxAT4z L6exPDdeUCxAFaqJjmx0oeZpRRTApmHhPvx/Cdx2571ytXRpAXd7TLKz8zv1qfqL 9KwXCoAh059LZX+lT8YOhNJ4mE7h7ojOgsdi7bJ2QIT976CkWwb4oI8SGQIDAQAB o4IDSjCCA0YwHQYDVR0OBBYEFNlEaPPMPzhvJuYoG3+osMO7I2oGMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZiLzgyODcx ZS01MmEwLTQwZGYtYWUzZC03NmZhNTE1YjRiNmUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmIvODI4NzFl LTUyYTAtNDBkZi1hZTNkLTc2ZmE1MTViNGI2ZS8xLzJVUm84OHdfT0c4bTVpZ2Jm Nml3dzdzamFnWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIHkBggrBgEF BQcBBwEB/wSB1DCB0TCBvwQCAAEwgbgDAwAfYgMDAB9pAwQCLQ9MAwQCLVHYAwQC LVS0AwQCLVb8AwQCLVdEAwQCLV1MAwQCLV88AwQCLYFwAwQCLYbEAwQCLYcUAwQC LYo8AwQCLYp0AwQCLY6UAwQCLZIcAwQCLZO4AwQCLZS0AwQCLZawAwQCLZegAwQC LZ80AwQFVzgAAwQFsBTAAwQBwaDsAwQBwaECAwQBwnFwAwQBwnF2AwQAwtUNAwQA wtUPAwQAwtURAwQAwtUUMA0EAgACMAcDBQMqBKPAMA0GCSqGSIb3DQEBCwUAA4IB AQAFhf06yQ7z2zDT14EPU4Pt1aDF+teyJd80JlGReuVQBY3dn1cPpprLkyyrBMSv oQpU90j2757BozSgVuzijZmy4C54Hspff+D5eHba+0MVp6ktEkurIAhDrWbD++On pbwESw0qNnk8Ap6a6IMArthZL4VNsEP2ki9nh8EDmuSSn9Ji8OrwPI4oz7DsmNNN PqIaSSjnZCbzDrwIQqUPaJRbXGaJjzI5M9IN9rFIoSK47AQv3kpLgdBv5bvPMwp7 Dy/QWHqCbG/e/5X/pR2j/4n9dTlsfA9NoMzpYwpy+SQdkIIXkqhRlI6Bo4pFxDPP nU5TO+QJnLyU3zhdu0uOZ1Ph -----END CERTIFICATE-----Generated at Sun Jan 25 12:10:50 2026 by rpki-client