This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2m5vOSJxlRs1NH-s1RP5Mv5noME.cer File: 2m5vOSJxlRs1NH-s1RP5Mv5noME.cer (raw, json) Hash identifier: R1cLkhbNR8rLlktSV/zA1NLkGCIJ6Q9Y7XTWJPS8pZ4= Subject key identifier: DA:6E:6F:39:22:71:95:1B:35:34:7F:AC:D5:13:F9:32:FE:67:A0:C1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7834804D279069FD7C92D0278D42CA14 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:17:45 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 131.211.0.0/16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:80:4d:27:90:69:fd:7c:92:d0:27:8d:42:ca:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=da6e6f392271951b35347facd513f932fe67a0c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:e7:98:6a:ac:41:2b:30:55:f4:f8:73:f6:fa: fa:9c:40:85:6f:63:c8:5d:85:dc:05:a7:e0:fb:19: 46:ea:f3:95:be:6c:d3:b3:eb:d8:91:92:e2:96:2b: cd:d8:3a:7c:0d:b8:f7:53:99:f2:4a:d6:31:41:16: 1c:a7:94:ca:6c:e7:49:83:10:d7:d9:88:14:b4:ea: 83:82:99:d5:d7:90:fa:06:8f:70:d9:17:aa:f4:c0: 8a:ba:9e:c4:57:01:03:0f:cf:2e:fa:c8:91:7a:53: e2:4c:e6:26:03:e9:a1:5e:88:74:92:7d:5e:d4:d1: 3a:a6:a9:f3:42:c9:f4:da:d4:5c:65:8f:c8:28:9b: 99:80:19:02:c9:ed:29:bb:4f:8c:f2:71:97:36:59: a4:7d:6f:b3:c8:b3:d0:7a:e9:11:c6:40:05:f3:22: 8c:aa:3e:15:6b:92:86:a3:da:f3:83:76:d6:4e:c4: 97:f3:64:e6:ad:51:2a:2c:9f:2c:bd:38:98:6d:12: 09:c1:fc:d4:34:12:e8:42:55:23:74:91:08:3c:71: f3:0e:0e:cb:a4:7f:a0:83:0a:30:1a:54:3d:61:9a: 3d:a4:e1:5e:57:7e:10:75:ec:d1:52:6b:28:43:88: 97:a9:30:6e:4a:06:a4:87:90:15:fa:a8:e9:20:a8: ed:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:6E:6F:39:22:71:95:1B:35:34:7F:AC:D5:13:F9:32:FE:67:A0:C1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.211.0.0/16 Signature Algorithm: sha256WithRSAEncryption af:85:d1:1a:1e:9b:1a:04:29:4f:5e:74:5a:39:28:70:b5:65: f7:f5:c4:13:b4:f2:3f:48:c5:0c:eb:8f:bb:4b:7b:20:c3:84: 8a:58:30:76:cb:dc:08:2f:f3:a5:6e:89:6d:a1:ad:d9:e1:04: 7b:b2:95:bd:31:36:4f:4a:4a:b4:d8:de:fe:b8:c7:f7:e2:79: dd:f5:f0:8b:7f:9e:2d:76:05:26:f3:ca:23:42:e2:96:f9:2a: 69:ad:37:c6:1c:e9:5e:4b:94:fe:8c:30:b0:be:ac:ed:7a:80: c7:e1:4b:a5:d5:dc:33:fd:85:81:96:24:6c:ec:24:58:a3:74: 2f:69:9a:ec:3e:eb:dd:b1:22:ee:eb:8b:59:23:04:0c:d9:be: 07:77:b9:1a:4e:d8:01:c5:0c:d6:46:dc:31:a6:93:4a:9d:38: 92:fc:39:d9:88:d8:b8:35:be:86:a6:67:20:06:7e:a5:f2:94: 20:b2:29:4c:8a:89:1b:d7:66:4a:ca:0c:4a:43:40:93:4b:b4: b0:43:1c:6d:c8:64:e3:0d:d8:6f:d2:4e:2c:37:a1:28:19:a7: 96:19:3d:ce:3a:38:ee:c3:37:fd:fb:b8:2d:1e:bd:a5:e5:be: fa:05:a6:f9:c8:fa:aa:49:5b:1d:d6:23:51:6c:cc:80:e7:0b: 7d:54:64:35 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgISAZt4NIBNJ5Bp/XyS0CeNQsoUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYTZlNmYzOTIyNzE5NTFiMzUzNDdmYWNkNTEzZjkzMmZlNjdhMGMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5+eYaqxBKzBV9Phz9vr6nECFb2PI XYXcBafg+xlG6vOVvmzTs+vYkZLilivN2Dp8Dbj3U5nyStYxQRYcp5TKbOdJgxDX 2YgUtOqDgpnV15D6Bo9w2Req9MCKup7EVwEDD88u+siRelPiTOYmA+mhXoh0kn1e 1NE6pqnzQsn02tRcZY/IKJuZgBkCye0pu0+M8nGXNlmkfW+zyLPQeukRxkAF8yKM qj4Va5KGo9rzg3bWTsSX82TmrVEqLJ8svTiYbRIJwfzUNBLoQlUjdJEIPHHzDg7L pH+ggwowGlQ9YZo9pOFeV34QdezRUmsoQ4iXqTBuSgakh5AV+qjpIKjtxQIDAQAB o4ICgzCCAn8wHQYDVR0OBBYEFNpubzkicZUbNTR/rNUT+TL+Z6DBMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVmL2I0MWE5 Zi0zNDhkLTRiMjQtYmJhMC0yNzY0N2JjZWY0YjAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWYvYjQxYTlm LTM0OGQtNGIyNC1iYmEwLTI3NjQ3YmNlZjRiMC8xLzJtNXZPU0p4bFJzMU5ILXMx UlA1TXY1bm9NRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUF BwEHAQH/BA8wDTALBAIAATAFAwMAg9MwDQYJKoZIhvcNAQELBQADggEBAK+F0Roe mxoEKU9edFo5KHC1Zff1xBO08j9IxQzrj7tLeyDDhIpYMHbL3Agv86VuiW2hrdnh BHuylb0xNk9KSrTY3v64x/fied318It/ni12BSbzyiNC4pb5KmmtN8Yc6V5LlP6M MLC+rO16gMfhS6XV3DP9hYGWJGzsJFijdC9pmuw+692xIu7ri1kjBAzZvgd3uRpO 2AHFDNZG3DGmk0qdOJL8OdmI2Lg1voamZyAGfqXylCCyKUyKiRvXZkrKDEpDQJNL tLBDHG3IZOMN2G/STiw3oSgZp5YZPc46OO7DN/37uC0evaXlvvoFpvnI+qpJWx3W I1FszIDnC31UZDU= -----END CERTIFICATE-----Generated at Mon Jan 26 03:09:42 2026 by rpki-client