This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2n1fyh5GmSnUqLb1evPLzcY5o14.cer File: 2n1fyh5GmSnUqLb1evPLzcY5o14.cer (raw, json) Hash identifier: fWN8n2cQRZnT4zEhhP/BBOpu3cm14Kmj3iJDhMHxWgA= Subject key identifier: DA:7D:5F:CA:1E:46:99:29:D4:A8:B6:F5:7A:F3:CB:CD:C6:39:A3:5E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C121AD1D12C195353399D1A7950B1AA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/2n1fyh5GmSnUqLb1evPLzcY5o14.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:18:39 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 210644 IP: 2a01:e5c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:1a:d1:d1:2c:19:53:53:39:9d:1a:79:50:b1:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=da7d5fca1e469929d4a8b6f57af3cbcdc639a35e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:19:2a:75:c6:cb:d0:10:a2:c8:05:ba:fd:a6: 1a:59:eb:d8:38:4e:d7:61:6d:a7:fa:8b:a1:0c:e4: 4b:2f:83:cc:a0:21:a7:ae:d0:f6:55:0d:09:2f:dc: 16:b0:1e:68:c9:90:7f:09:24:23:20:48:cf:59:83: 13:93:33:7f:e1:32:c8:5d:f2:69:7f:07:57:70:b3: fa:4c:65:ae:cf:7d:e6:a5:7a:a5:ff:0a:d1:8c:da: 5f:80:98:fa:8a:0e:b6:9d:97:fd:ea:7f:cf:c9:0a: 1d:7e:77:e5:63:3a:c0:a0:77:e7:1a:fe:5b:2b:4e: 0a:89:28:89:51:2f:8e:06:74:1d:b1:e4:86:3b:4b: eb:e8:93:0f:17:28:de:3e:62:08:a4:a3:c5:51:d1: e3:95:f4:81:dc:cc:78:7f:ae:20:ea:33:f9:81:43: 8d:4e:f7:3b:6f:97:31:6f:5c:0c:1c:36:1d:9d:45: 9f:26:3c:90:0f:df:5d:c7:4e:4d:fc:48:e4:a9:27: f6:ce:db:f1:19:74:09:12:40:43:0e:ed:de:a4:09: b4:e8:11:be:63:f6:fc:f2:4b:ed:ee:0a:a3:97:13: a3:44:44:b5:8d:b2:d7:5a:e1:08:ec:da:5b:cc:e1: fa:ed:31:93:96:3d:7c:34:f8:1c:0b:88:4c:ba:47: 8e:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:7D:5F:CA:1E:46:99:29:D4:A8:B6:F5:7A:F3:CB:CD:C6:39:A3:5E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/2n1fyh5GmSnUqLb1evPLzcY5o14.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a01:e5c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 210644 Signature Algorithm: sha256WithRSAEncryption a9:9e:24:e5:bd:56:61:aa:60:9b:61:a1:38:db:3a:ed:92:62: c1:62:61:8b:a5:aa:c8:cc:3f:a7:f5:60:1b:64:6d:e9:8f:08: 6c:52:99:b9:06:17:7c:52:33:1a:3e:69:21:3c:94:f7:10:a3: 75:8a:af:e3:eb:d0:42:20:19:80:75:55:cc:02:5c:48:84:96: 74:77:76:06:7d:7f:47:6a:18:7e:f6:21:d7:28:a6:99:c9:b0: d4:70:85:53:66:8a:eb:f4:59:0e:c9:c3:3f:b4:44:e3:89:f3: 44:1e:c6:03:e9:c9:11:0d:d5:42:03:cc:51:14:2b:21:10:9d: 08:9c:97:97:c6:eb:d3:09:89:de:48:9b:96:74:dc:d1:c0:4d: 87:5e:d8:a3:78:c8:1f:77:aa:19:e0:b9:fc:c6:8b:c8:20:f8: 11:e2:9c:67:4d:4a:88:38:de:8d:89:9d:2f:83:8a:a9:bf:12: b7:4a:52:9e:25:12:13:35:f5:03:35:62:58:25:40:de:3d:8b: f8:1a:bb:2d:17:04:8a:ac:de:14:97:f4:b9:cb:92:9d:1b:94: 83:31:37:28:71:5d:12:e7:99:15:7c:9d:06:03:76:70:04:b2: 08:cd:2d:b9:05:23:ea:b0:0a:0e:43:22:83:af:9b:e4:26:9c: e3:f0:f2:1d -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgISAZt8EhrR0SwZU1M5nRp5ULGqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYTdkNWZjYTFlNDY5OTI5ZDRhOGI2ZjU3YWYzY2JjZGM2MzlhMzVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxkqdcbL0BCiyAW6/aYaWevYOE7X YW2n+ouhDORLL4PMoCGnrtD2VQ0JL9wWsB5oyZB/CSQjIEjPWYMTkzN/4TLIXfJp fwdXcLP6TGWuz33mpXql/wrRjNpfgJj6ig62nZf96n/PyQodfnflYzrAoHfnGv5b K04KiSiJUS+OBnQdseSGO0vr6JMPFyjePmIIpKPFUdHjlfSB3Mx4f64g6jP5gUON Tvc7b5cxb1wMHDYdnUWfJjyQD99dx05N/EjkqSf2ztvxGXQJEkBDDu3epAm06BG+ Y/b88kvt7gqjlxOjRES1jbLXWuEI7NpbzOH67TGTlj18NPgcC4hMukeOTwIDAQAB o4ICoTCCAp0wHQYDVR0OBBYEFNp9X8oeRpkp1Ki29Xrzy83GOaNeMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I0LzA2MGYz Mi1hNDhiLTQ2NTctYTU4Yi00MWI3MzAzMjdjNzgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjQvMDYwZjMy LWE0OGItNDY1Ny1hNThiLTQxYjczMDMyN2M3OC8xLzJuMWZ5aDVHbVNuVXFMYjFl dlBMemNZNW8xNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF BwEHAQH/BBEwDzANBAIAAjAHAwUDKgHlwDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMDNtQwDQYJKoZIhvcNAQELBQADggEBAKmeJOW9VmGqYJthoTjbOu2SYsFiYYul qsjMP6f1YBtkbemPCGxSmbkGF3xSMxo+aSE8lPcQo3WKr+Pr0EIgGYB1VcwCXEiE lnR3dgZ9f0dqGH72IdcoppnJsNRwhVNmiuv0WQ7Jwz+0ROOJ80QexgPpyREN1UID zFEUKyEQnQicl5fG69MJid5Im5Z03NHATYde2KN4yB93qhngufzGi8gg+BHinGdN Sog43o2JnS+Diqm/ErdKUp4lEhM19QM1YlglQN49i/gauy0XBIqs3hSX9LnLkp0b lIMxNyhxXRLnmRV8nQYDdnAEsgjNLbkFI+qwCg5DIoOvm+QmnOPw8h0= -----END CERTIFICATE-----Generated at Mon Jan 26 10:17:11 2026 by rpki-client