This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2Vlnb-E41Osqrhm7ZzH-5ikteT0.cer File: 2Vlnb-E41Osqrhm7ZzH-5ikteT0.cer (raw, json) Hash identifier: 28aS8plcMqdrPLL5WxwOw4w3Vb/DJFanFyX0DoSJrq4= Subject key identifier: D9:59:67:6F:E1:38:D4:EB:2A:AE:19:BB:67:31:FE:E6:29:2D:79:3D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCAEA8C4AFCE918D5A713E2837EEC4D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/2Vlnb-E41Osqrhm7ZzH-5ikteT0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:20:08 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 28931 IP: 185.103.188.0/22 IP: 2a00:f400::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:ea:8c:4a:fc:e9:18:d5:a7:13:e2:83:7e:ec:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:20:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d959676fe138d4eb2aae19bb6731fee6292d793d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:c5:c9:58:d9:91:72:f1:03:9a:b0:bb:31:89: d5:3c:bd:38:3b:01:ee:9c:ae:93:bb:ca:2f:80:58: 07:d9:a1:61:32:2b:71:a6:99:dd:fa:d0:fe:65:d6: cf:4c:23:d1:01:c1:a6:e5:bd:99:6e:af:6c:d9:2d: 20:03:57:b1:7d:51:30:c8:42:89:22:1d:8f:41:d9: f9:8b:4d:e1:d9:c3:54:75:3b:19:a3:28:f5:a7:94: 01:82:d8:06:28:70:20:4a:a4:52:84:a7:99:a4:97: 14:f2:6e:67:7d:07:04:98:a0:dc:d4:9c:cc:6e:35: c7:68:cc:78:78:91:2e:c0:19:6b:1e:4c:65:35:c3: 03:0e:37:9d:01:25:60:16:74:7d:a7:3c:e7:bd:47: 55:ea:69:3b:0b:7a:4e:a5:61:30:27:64:d7:30:be: 1a:76:64:e1:4b:c2:54:eb:e3:73:bb:ac:fa:06:4c: 69:db:1e:51:cd:e9:05:a1:5d:a2:fc:9d:36:8e:2f: 65:27:ea:7b:c0:e8:bd:e3:83:3f:cb:c3:2f:a5:75: 88:a4:6d:96:c7:b4:5a:7c:a6:28:c0:df:42:1d:ce: 66:0a:42:dc:d2:f3:cf:38:59:58:a8:fe:5b:1f:22: 3d:33:01:d1:e5:22:cb:21:5e:8c:02:c9:0d:62:68: b6:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:59:67:6F:E1:38:D4:EB:2A:AE:19:BB:67:31:FE:E6:29:2D:79:3D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/2Vlnb-E41Osqrhm7ZzH-5ikteT0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.103.188.0/22 IPv6: 2a00:f400::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28931 Signature Algorithm: sha256WithRSAEncryption 37:72:ba:46:c8:00:58:53:11:eb:e6:3a:e2:b4:6d:ce:4d:2a: c2:fd:53:1a:83:d1:44:53:7c:03:84:59:3a:24:57:fb:f2:17: 28:c4:2e:57:40:d7:59:8d:ec:5e:96:05:6d:cf:68:cd:06:eb: 74:f4:44:07:2b:37:37:a7:3c:2c:e3:2b:1d:65:1a:eb:17:70: 49:13:26:af:e5:aa:60:d6:08:5e:e5:3d:e3:45:15:15:05:b8: 28:31:fb:2c:0e:92:87:6a:b4:7e:69:68:1c:81:0f:41:77:fa: f6:9b:c3:22:40:10:cb:2b:4c:d9:f7:3b:b7:6a:6c:a4:07:0f: 94:58:49:8d:f4:d9:22:64:8e:e8:50:56:e9:56:bf:de:54:76: 88:10:5b:01:e1:57:8e:4b:2e:00:29:89:1d:55:e6:36:da:17: 97:e7:df:44:d7:73:58:48:32:41:92:f6:c1:a0:f3:f1:f5:50: 19:e4:06:37:21:c0:ec:98:6b:ec:b8:d5:e2:7a:51:a0:92:81: 6a:c1:81:58:43:26:a3:a8:92:fd:b1:d0:ba:ad:00:39:b7:09: 0a:35:e2:8b:e7:bd:2b:68:94:9c:c8:77:8f:87:d7:93:af:e0: fe:c8:86:bc:ce:e8:3b:7a:35:07:0a:dc:1d:e8:0b:95:fd:18: 42:ea:65:65 -----BEGIN CERTIFICATE----- MIIFojCCBIqgAwIBAgISAZt9yuqMSvzpGNWnE+KDfuxNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgyMDA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOTU5Njc2ZmUxMzhkNGViMmFhZTE5YmI2NzMxZmVlNjI5MmQ3OTNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMXJWNmRcvEDmrC7MYnVPL04OwHu nK6Tu8ovgFgH2aFhMitxppnd+tD+ZdbPTCPRAcGm5b2Zbq9s2S0gA1exfVEwyEKJ Ih2PQdn5i03h2cNUdTsZoyj1p5QBgtgGKHAgSqRShKeZpJcU8m5nfQcEmKDc1JzM bjXHaMx4eJEuwBlrHkxlNcMDDjedASVgFnR9pzznvUdV6mk7C3pOpWEwJ2TXML4a dmThS8JU6+Nzu6z6Bkxp2x5RzekFoV2i/J02ji9lJ+p7wOi944M/y8MvpXWIpG2W x7RafKYowN9CHc5mCkLc0vPPOFlYqP5bHyI9MwHR5SLLIV6MAskNYmi2GwIDAQAB o4ICrjCCAqowHQYDVR0OBBYEFNlZZ2/hONTrKq4Zu2cx/uYpLXk9MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU4L2NmMDI4 ZS03NTdlLTQ4NDMtYTFlYS00Yzc0ZDMzMmVhNTgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTgvY2YwMjhl LTc1N2UtNDg0My1hMWVhLTRjNzRkMzMyZWE1OC8xLzJWbG5iLUU0MU9zcXJobTda ekgtNWlrdGVUMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuWe8MA0EAgACMAcDBQAqAPQAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAnEDMA0GCSqGSIb3DQEBCwUAA4IBAQA3crpGyABYUxHr 5jritG3OTSrC/VMag9FEU3wDhFk6JFf78hcoxC5XQNdZjexelgVtz2jNBut09EQH Kzc3pzws4ysdZRrrF3BJEyav5apg1ghe5T3jRRUVBbgoMfssDpKHarR+aWgcgQ9B d/r2m8MiQBDLK0zZ9zu3amykBw+UWEmN9NkiZI7oUFbpVr/eVHaIEFsB4VeOSy4A KYkdVeY22heX599E13NYSDJBkvbBoPPx9VAZ5AY3IcDsmGvsuNXielGgkoFqwYFY QyajqJL9sdC6rQA5twkKNeKL570raJScyHePh9eTr+D+yIa8zug7ejUHCtwd6AuV /RhC6mVl -----END CERTIFICATE-----Generated at Sun Jan 25 14:43:36 2026 by rpki-client