This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f8MyFNVS935CZqjzuvTUka5KPU.cer File: 2f8MyFNVS935CZqjzuvTUka5KPU.cer (raw, json) Hash identifier: v9fqXLjZ7YPZaNX0mHp7Hv2GPeiorG58Oya43RgTFII= Subject key identifier: D9:FF:0C:C8:53:55:4B:DD:F9:09:9A:A3:CE:EB:D3:52:46:B9:28:F5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BA6FE0D8D4EFB09EC4A93E6DAC0A9AB88 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9b/aaa05d-e7b1-4e39-8470-cafe5e7db758/1/2f8MyFNVS935CZqjzuvTUka5KPU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9b/aaa05d-e7b1-4e39-8470-cafe5e7db758/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Sat 10 Jan 2026 08:20:26 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 206735 AS: 212347 IP: 194.93.123.64/26 IP: 2001:7f8:37::/48 IP: 2a06:5200::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a6:fe:0d:8d:4e:fb:09:ec:4a:93:e6:da:c0:a9:ab:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 10 08:20:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d9ff0cc853554bddf9099aa3ceebd35246b928f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:38:d3:4c:64:b9:d7:39:b4:1b:0d:8d:e3:e9: 42:ea:e7:3f:2f:7d:69:50:44:20:34:9d:5e:ea:f1: e4:58:a6:05:1b:9e:72:96:22:19:1c:ac:a1:71:cd: 45:51:e5:68:5d:5d:b0:c3:f9:3a:62:e3:83:4c:78: 44:ed:66:ce:f5:a6:08:8c:08:35:a4:06:97:52:69: b4:1c:f0:ec:1f:04:84:db:45:4c:b6:4b:da:df:a4: a3:8e:bf:ad:24:1c:50:58:76:f5:85:80:dc:46:d9: 6b:da:eb:9c:44:31:cf:a1:60:62:e2:d4:88:f1:6d: 57:09:0a:a7:fc:9b:1c:4c:08:64:97:db:6e:43:21: 72:3e:8a:a3:7b:ee:71:ba:70:1b:96:d5:38:29:8d: e0:f8:78:f9:b2:73:23:bc:95:24:06:ac:f2:4c:5e: 99:4e:9b:8b:e7:90:aa:1f:9f:a6:ee:6d:ce:c4:eb: 20:bb:8a:fd:48:d1:ff:d0:82:98:05:84:40:16:0f: 0c:d4:fb:88:08:e8:30:1b:aa:d6:9a:90:6d:14:bd: 11:ee:81:da:67:63:4e:cc:25:05:7e:15:77:9f:fc: 83:29:ef:0b:e3:2d:fa:91:0e:c7:36:42:9f:84:6a: e1:fa:ad:fc:d5:6f:bf:7c:2a:e8:e5:22:fb:fd:b4: ac:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:FF:0C:C8:53:55:4B:DD:F9:09:9A:A3:CE:EB:D3:52:46:B9:28:F5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/aaa05d-e7b1-4e39-8470-cafe5e7db758/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/aaa05d-e7b1-4e39-8470-cafe5e7db758/1/2f8MyFNVS935CZqjzuvTUka5KPU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.93.123.64/26 IPv6: 2001:7f8:37::/48 2a06:5200::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 206735 212347 Signature Algorithm: sha256WithRSAEncryption 5c:49:2c:93:39:c6:f6:95:f8:60:a4:7c:9b:5c:29:8b:c1:b0: 46:09:c9:48:1d:f4:1b:8f:f8:74:a4:8d:13:e3:c6:a6:ac:a1: 08:b3:70:12:b9:b9:11:bc:b9:65:7f:80:4f:31:b7:72:e9:f2: 96:73:51:ce:1f:0f:ad:08:c2:48:6a:8f:2b:2e:cb:cc:a4:b3: 5c:3c:d6:54:d5:d3:73:c9:9e:c2:83:95:24:de:2d:67:67:ab: 12:9a:cc:00:71:51:56:03:c9:1e:7e:59:60:af:4d:9f:41:8b: 14:46:d7:d0:3f:76:78:c0:ae:60:37:6d:02:db:c9:8c:f6:f9: 20:aa:a2:81:2b:ce:7b:b8:fa:dc:1f:0c:a1:f3:1c:7a:fd:98: a1:56:30:b9:d6:dd:e5:21:ed:57:a9:8b:c2:17:e9:96:5e:13: d7:ce:c1:60:4e:04:a4:a5:de:10:dd:b6:e9:aa:7a:38:77:62: 87:63:50:6c:fc:07:26:b5:0d:e9:95:aa:79:0e:d3:34:5f:7e: c0:c2:e4:b4:2f:01:f0:6d:92:e1:0d:02:9b:a0:70:44:d3:b8: 81:37:a6:05:d5:c6:89:75:b4:93:06:cf:53:1b:a0:39:4f:b5: cc:9a:3e:af:55:44:4d:80:2c:88:49:89:af:a5:15:73:e3:8e: 6f:6c:3f:de -----BEGIN CERTIFICATE----- MIIFsjCCBJqgAwIBAgISAZum/g2NTvsJ7EqT5trAqauIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTEwMDgyMDI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOWZmMGNjODUzNTU0YmRkZjkwOTlhYTNjZWViZDM1MjQ2YjkyOGY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjjTTGS51zm0Gw2N4+lC6uc/L31p UEQgNJ1e6vHkWKYFG55yliIZHKyhcc1FUeVoXV2ww/k6YuODTHhE7WbO9aYIjAg1 pAaXUmm0HPDsHwSE20VMtkva36Sjjr+tJBxQWHb1hYDcRtlr2uucRDHPoWBi4tSI 8W1XCQqn/JscTAhkl9tuQyFyPoqje+5xunAbltU4KY3g+Hj5snMjvJUkBqzyTF6Z TpuL55CqH5+m7m3OxOsgu4r9SNH/0IKYBYRAFg8M1PuICOgwG6rWmpBtFL0R7oHa Z2NOzCUFfhV3n/yDKe8L4y36kQ7HNkKfhGrh+q381W+/fCro5SL7/bSs8wIDAQAB o4ICvjCCArowHQYDVR0OBBYEFNn/DMhTVUvd+Qmao87r01JGuSj1MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzliL2FhYTA1 ZC1lN2IxLTRlMzktODQ3MC1jYWZlNWU3ZGI3NTgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWIvYWFhMDVk LWU3YjEtNGUzOS04NDcwLWNhZmU1ZTdkYjc1OC8xLzJmOE15Rk5WUzkzNUNacWp6 dXZUVWthNUtQVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDgGCCsGAQUF BwEHAQH/BCkwJzANBAIAATAHAwUGwl17QDAWBAIAAjAQAwcAIAEH+AA3AwUDKgZS ADAfBggrBgEFBQcBCAEB/wQQMA6gDDAKAgMDJ48CAwM9ezANBgkqhkiG9w0BAQsF AAOCAQEAXEkskznG9pX4YKR8m1wpi8GwRgnJSB30G4/4dKSNE+PGpqyhCLNwErm5 Eby5ZX+ATzG3cunylnNRzh8PrQjCSGqPKy7LzKSzXDzWVNXTc8mewoOVJN4tZ2er EprMAHFRVgPJHn5ZYK9Nn0GLFEbX0D92eMCuYDdtAtvJjPb5IKqigSvOe7j63B8M ofMcev2YoVYwudbd5SHtV6mLwhfpll4T187BYE4EpKXeEN226ap6OHdih2NQbPwH JrUN6ZWqeQ7TNF9+wMLktC8B8G2S4Q0Cm6BwRNO4gTemBdXGiXW0kwbPUxugOU+1 zJo+r1VETYAsiEmJr6UVc+OOb2w/3g== -----END CERTIFICATE-----Generated at Sun Jan 25 16:10:14 2026 by rpki-client