This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.cer File: 2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.cer (raw, json) Hash identifier: v1aCEuZmMOtjAX8XnzpPt11KL4e9zLfHCXi1d0gOahU= Subject key identifier: D9:EE:5A:4C:9F:30:49:86:80:E4:D7:B5:9D:DB:08:F8:2B:C6:F4:C7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC9234157335C157FCBBA01277136FB Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bf/47a54a-637c-4486-b12c-7db9dfbc4ae9/1/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bf/47a54a-637c-4486-b12c-7db9dfbc4ae9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:19:20 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 209216 IP: 2.56.76.0/22 IP: 2a09:d0c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:23:41:57:33:5c:15:7f:cb:ba:01:27:71:36:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:19:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d9ee5a4c9f30498680e4d7b59ddb08f82bc6f4c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f1:da:70:53:ed:7a:c0:c1:61:31:9e:86:98: dd:4d:cb:a5:32:cb:7d:96:6a:82:90:df:69:59:34: 55:50:ab:5e:e2:6c:e2:6f:30:d2:e7:3f:cb:dc:74: a7:e9:79:68:2c:27:9a:4e:b5:4e:4e:2a:e8:1d:f6: cc:a9:03:e2:70:1b:a6:ec:69:91:57:40:b0:2f:eb: 43:5b:9d:50:cc:c4:6c:15:05:7b:6d:8e:e2:6d:7c: f3:b0:79:03:cf:d8:b9:b8:c5:07:06:aa:a6:63:99: c7:5c:59:6e:9a:d4:c3:c8:99:81:52:9d:23:09:60: c2:8a:7f:54:70:bc:7c:d9:90:a1:e3:84:52:1b:c4: 4d:80:78:aa:19:d3:58:da:dd:44:e4:12:94:b0:ba: ca:a0:60:df:cb:82:69:e3:b7:ea:27:c5:24:13:4c: 14:5b:63:9e:7b:03:ad:3f:e3:e6:fd:bc:ee:bb:5e: 1e:8b:7b:45:95:f1:59:01:62:ea:89:c7:05:9f:11: e8:c6:60:e0:b3:b5:80:a2:75:1b:c9:07:33:f0:ee: aa:2e:60:be:e2:e7:78:ec:77:96:bb:20:7c:4c:5f: 57:3f:05:f0:7e:1b:b5:7c:22:2f:66:36:bc:1c:c5: 4a:9c:26:97:3d:e2:e3:2a:0b:b5:9d:2c:a6:98:27: 06:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:EE:5A:4C:9F:30:49:86:80:E4:D7:B5:9D:DB:08:F8:2B:C6:F4:C7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/47a54a-637c-4486-b12c-7db9dfbc4ae9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/47a54a-637c-4486-b12c-7db9dfbc4ae9/1/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.56.76.0/22 IPv6: 2a09:d0c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 209216 Signature Algorithm: sha256WithRSAEncryption 61:33:fa:db:d0:0a:6a:23:49:09:f5:bc:22:e5:88:c2:4b:99: 69:8a:55:34:d1:56:84:0e:21:da:d5:44:86:f4:a0:29:93:39: aa:10:a7:bc:70:45:a3:34:8d:0f:7d:64:4e:ea:68:e1:4a:39: fd:0f:29:79:42:b4:10:7f:9a:30:0a:c1:23:f9:e6:e2:fa:13: 00:45:87:81:c8:db:9f:3c:f3:b7:b7:02:4f:41:d4:3d:88:19: 00:03:a3:fe:23:b8:86:fb:3a:8c:12:79:75:46:0c:d7:61:b0: fd:e2:88:fd:22:e6:e7:8e:54:20:9f:5b:95:24:1c:4e:72:cf: 10:27:e2:fd:a5:4a:76:d1:19:0c:53:09:b3:65:8e:b0:dd:b7: 7e:1c:b1:91:1e:08:fd:a5:7e:69:bd:ef:1f:37:06:3a:55:12: 7b:ea:03:69:80:98:8c:02:1b:d6:f8:ad:a0:6c:0d:60:eb:23: 7b:6f:15:91:0e:0c:1b:a2:43:ee:1a:d4:05:66:f1:57:b5:f1: f4:ff:77:93:8b:a0:e1:1d:1d:12:d8:d6:c3:b3:3e:8e:a3:64: e2:a8:0d:8c:e8:72:14:e3:99:ee:d3:22:07:73:b0:92:97:7c: 7b:b2:80:be:f9:d6:68:b1:3b:94:92:d4:06:66:c2:72:b7:01: da:d1:4b:f7 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt6ySNBVzNcFX/LugEncTb7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxOTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOWVlNWE0YzlmMzA0OTg2ODBlNGQ3YjU5ZGRiMDhmODJiYzZmNGM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvHacFPtesDBYTGehpjdTculMst9 lmqCkN9pWTRVUKte4mzibzDS5z/L3HSn6XloLCeaTrVOTiroHfbMqQPicBum7GmR V0CwL+tDW51QzMRsFQV7bY7ibXzzsHkDz9i5uMUHBqqmY5nHXFlumtTDyJmBUp0j CWDCin9UcLx82ZCh44RSG8RNgHiqGdNY2t1E5BKUsLrKoGDfy4Jp47fqJ8UkE0wU W2OeewOtP+Pm/bzuu14ei3tFlfFZAWLqiccFnxHoxmDgs7WAonUbyQcz8O6qLmC+ 4ud47HeWuyB8TF9XPwXwfhu1fCIvZja8HMVKnCaXPeLjKgu1nSymmCcGSQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFNnuWkyfMEmGgOTXtZ3bCPgrxvTHMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JmLzQ3YTU0 YS02MzdjLTQ0ODYtYjEyYy03ZGI5ZGZiYzRhZTkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmYvNDdhNTRh LTYzN2MtNDQ4Ni1iMTJjLTdkYjlkZmJjNGFlOS8xLzJlNWFUSjh3U1lhQTVOZTFu ZHNJLUN2RzlNYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCAjhMMA0EAgACMAcDBQMqCdDAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMxQDANBgkqhkiG9w0BAQsFAAOCAQEAYTP629AKaiNJ CfW8IuWIwkuZaYpVNNFWhA4h2tVEhvSgKZM5qhCnvHBFozSND31kTupo4Uo5/Q8p eUK0EH+aMArBI/nm4voTAEWHgcjbnzzzt7cCT0HUPYgZAAOj/iO4hvs6jBJ5dUYM 12Gw/eKI/SLm545UIJ9blSQcTnLPECfi/aVKdtEZDFMJs2WOsN23fhyxkR4I/aV+ ab3vHzcGOlUSe+oDaYCYjAIb1vitoGwNYOsje28VkQ4MG6JD7hrUBWbxV7Xx9P93 k4ug4R0dEtjWw7M+jqNk4qgNjOhyFOOZ7tMiB3Owkpd8e7KAvvnWaLE7lJLUBmbC crcB2tFL9w== -----END CERTIFICATE-----Generated at Sun Jan 25 22:20:02 2026 by rpki-client