This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.cer File: 2WAe-z8M_aoilRh9KwRWSUEQ4Vc.cer (raw, json) Hash identifier: 82caGNR0YKydDxWJSAXeeum7QVjqf/VK3dTR+Bati3c= Subject key identifier: D9:60:1E:FB:3F:0C:FD:AA:22:95:18:7D:2B:04:56:49:41:10:E1:57 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA32E3F0FEF43B017011781063A0293 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:17:30 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.12.72.0/22 IP: 2a02:e340::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:2e:3f:0f:ef:43:b0:17:01:17:81:06:3a:02:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d9601efb3f0cfdaa2295187d2b0456494110e157 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:f8:7d:39:eb:55:cb:7a:07:08:0b:5f:da:7a: 0e:d0:e9:51:0e:a8:07:b4:07:08:31:35:c9:bb:7a: 38:dc:d5:78:4a:31:ec:96:b7:99:aa:9a:27:9f:93: aa:65:65:fb:01:db:6d:8d:3d:ef:03:e4:57:36:26: ab:cd:d5:ff:0e:ac:bd:a2:f3:da:ad:93:a4:a2:9f: ab:43:9c:b8:59:4e:01:34:df:08:0f:39:f5:37:6c: 3e:5d:9b:3f:6a:1b:35:10:11:5c:db:08:47:1a:c7: f2:4b:45:ab:47:77:ea:d4:30:35:86:43:06:47:22: b2:28:3b:66:52:ff:5b:c0:c7:99:00:c2:11:fc:04: cb:19:e8:aa:cc:ac:a9:f2:a3:45:21:cd:7c:7f:95: e3:27:aa:f9:8b:27:d3:6b:2b:c7:57:ba:b7:d4:49: cf:dd:2b:bd:8c:7a:12:c8:db:4c:dc:7b:fe:cd:82: a7:52:e9:74:c1:25:95:b7:32:49:37:9c:83:05:9d: 8d:4d:a1:ba:9b:2e:2d:73:37:9f:a9:cb:80:9d:15: 78:38:b0:27:5b:91:bc:84:cf:8c:8d:5a:95:30:00: f4:f0:b4:52:a7:93:6f:97:09:7e:79:40:41:a1:7e: 52:58:44:17:b0:11:73:f4:af:46:04:dc:fa:b1:b5: 93:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:60:1E:FB:3F:0C:FD:AA:22:95:18:7D:2B:04:56:49:41:10:E1:57 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.12.72.0/22 IPv6: 2a02:e340::/29 Signature Algorithm: sha256WithRSAEncryption 7e:7e:5c:f8:20:8b:2a:e2:3f:60:97:29:3d:88:52:f8:0c:7d: 8c:dc:08:fa:0a:95:ce:f2:12:4a:b2:4c:d9:48:9d:3e:d9:ce: 48:1a:4b:f2:7c:6c:e5:71:44:e1:8c:b3:a4:1c:6e:1b:4c:e7: 30:35:a5:72:5b:34:81:40:af:de:40:ca:cd:7e:69:24:3a:26: 35:78:95:67:c1:54:5c:0c:b8:85:b9:d2:05:94:56:60:2d:52: b3:a3:ea:ac:c7:f5:94:d9:d9:2b:8e:69:6c:71:e0:86:77:e3: 1d:c5:81:13:fe:7a:a8:39:d7:a9:61:fd:44:a6:c4:57:b1:db: 04:12:22:2e:48:29:f4:b4:01:74:46:46:ac:a5:c9:9c:96:b2: c4:93:b4:5e:24:cc:22:3d:19:3c:ef:1c:98:71:69:b3:06:7d: b5:3a:bd:eb:b2:97:82:f3:f5:2c:06:7a:1d:6d:65:19:1c:43: 1a:f4:3f:ee:56:65:29:72:56:9f:01:f0:73:2d:4a:a1:26:6b: 15:36:50:d4:c8:5d:fe:10:d7:d4:90:67:6b:8b:b5:57:3a:f6: ba:24:1e:c0:79:cc:ac:81:15:6f:a5:ff:f1:ab:76:ef:82:82: df:ce:5f:fc:3b:d4:25:7d:d2:31:0b:cd:15:1b:3a:3b:33:9c: 64:0d:e8:82 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt7oy4/D+9DsBcBF4EGOgKTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOTYwMWVmYjNmMGNmZGFhMjI5NTE4N2QyYjA0NTY0OTQxMTBlMTU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5fh9OetVy3oHCAtf2noO0OlRDqgH tAcIMTXJu3o43NV4SjHslreZqponn5OqZWX7AdttjT3vA+RXNiarzdX/Dqy9ovPa rZOkop+rQ5y4WU4BNN8IDzn1N2w+XZs/ahs1EBFc2whHGsfyS0WrR3fq1DA1hkMG RyKyKDtmUv9bwMeZAMIR/ATLGeiqzKyp8qNFIc18f5XjJ6r5iyfTayvHV7q31EnP 3Su9jHoSyNtM3Hv+zYKnUul0wSWVtzJJN5yDBZ2NTaG6my4tczefqcuAnRV4OLAn W5G8hM+MjVqVMAD08LRSp5Nvlwl+eUBBoX5SWEQXsBFz9K9GBNz6sbWT3QIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFNlgHvs/DP2qIpUYfSsEVklBEOFXMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBlL2IwOGVl Zi1hMzRhLTQ1NzItYTlmOC02OTBhODg1ODY4NzAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGUvYjA4ZWVm LWEzNGEtNDU3Mi1hOWY4LTY5MGE4ODU4Njg3MC8xLzJXQWUtejhNX2FvaWxSaDlL d1JXU1VFUTRWYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuQxIMA0EAgACMAcDBQMqAuNAMA0GCSqGSIb3 DQEBCwUAA4IBAQB+flz4IIsq4j9glyk9iFL4DH2M3Aj6CpXO8hJKskzZSJ0+2c5I GkvyfGzlcUThjLOkHG4bTOcwNaVyWzSBQK/eQMrNfmkkOiY1eJVnwVRcDLiFudIF lFZgLVKzo+qsx/WU2dkrjmlsceCGd+MdxYET/nqoOdepYf1EpsRXsdsEEiIuSCn0 tAF0RkaspcmclrLEk7ReJMwiPRk87xyYcWmzBn21Or3rspeC8/UsBnodbWUZHEMa 9D/uVmUpclafAfBzLUqhJmsVNlDUyF3+ENfUkGdri7VXOva6JB7AecysgRVvpf/x q3bvgoLfzl/8O9QlfdIxC80VGzo7M5xkDeiC -----END CERTIFICATE-----Generated at Sun Jan 25 23:06:57 2026 by rpki-client