This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2sYzoUysfHoJIv_ZgN5fJ4o74mc.cer File: 2sYzoUysfHoJIv_ZgN5fJ4o74mc.cer (raw, json) Hash identifier: aCt8VtGsy8Je98NM6b2sgbFVEhtOiq9ZRwYJVPlxAfA= Subject key identifier: DA:C6:33:A1:4C:AC:7C:7A:09:22:FF:D9:80:DE:5F:27:8A:3B:E2:67 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F136B22B51D1C891BF85715E4CCD55F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:18:57 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.233.61.0/24 IP: 185.179.176.0/24 IP: 213.5.226.0/24 IP: 2a13:6f00::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:6b:22:b5:1d:1c:89:1b:f8:57:15:e4:cc:d5:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dac633a14cac7c7a0922ffd980de5f278a3be267 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:8e:a6:8e:89:71:47:f0:6a:69:9e:e5:b7:77: aa:a6:66:24:21:b0:50:21:70:01:73:3a:35:a9:88: 63:d2:3e:16:66:b4:cc:d0:d8:17:e5:dd:2a:88:b7: 47:88:d7:fe:f5:5b:e1:99:28:19:bb:bb:a9:6e:29: 56:96:82:43:59:99:05:18:92:20:61:92:79:a5:25: 97:7b:24:05:83:fe:6f:36:6a:52:88:e1:9e:da:77: a7:6e:21:5a:c2:b8:a3:74:52:f0:c6:94:30:87:d2: e8:1e:ac:84:bb:fb:d1:2f:d5:cc:57:7c:a9:33:d1: 60:36:8f:cc:61:ef:b1:11:72:25:6c:9b:8f:78:1e: 1f:b2:ae:1c:e8:f4:59:68:5d:76:31:08:a8:4c:a6: 63:31:62:f4:05:c8:8e:a8:b4:18:24:97:4b:75:10: 32:fa:53:9e:d0:11:be:d0:cb:0a:94:0e:8e:a4:9d: be:d6:5b:b8:4f:f2:63:30:81:ba:2c:7c:bc:0e:7a: 59:c2:98:94:87:63:1f:84:b0:82:79:02:f4:f7:90: 12:61:31:35:cd:82:fd:dc:13:be:5e:2e:79:8a:40: b3:e7:5d:34:de:cd:f7:73:37:9f:84:69:7b:06:12: e9:e3:cb:99:e3:ac:d0:6d:f9:d5:06:3c:a0:82:01: 10:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:C6:33:A1:4C:AC:7C:7A:09:22:FF:D9:80:DE:5F:27:8A:3B:E2:67 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.233.61.0/24 185.179.176.0/24 213.5.226.0/24 IPv6: 2a13:6f00::/32 Signature Algorithm: sha256WithRSAEncryption 65:a0:34:4e:cf:d0:b5:9e:b8:b8:13:41:88:89:84:f8:22:03: 95:6e:89:e5:40:0f:46:49:48:15:3a:9f:99:8f:b0:32:2b:da: d1:77:5e:64:ab:69:7c:b5:a6:28:fb:76:3e:b4:17:89:17:c4: 13:b0:92:e0:fb:d0:5e:a0:3c:3c:40:30:87:00:3e:85:aa:9e: a4:ed:77:3c:25:52:b3:d8:0c:d9:2d:08:3a:90:b4:8f:75:15: a6:3c:57:c9:dd:05:f7:37:03:ab:0c:9e:5f:9f:33:80:d2:d4: ca:3e:75:4b:22:47:ec:c9:a6:99:eb:3c:91:30:84:b5:8b:c0: b7:47:8d:86:c6:d9:a9:29:97:28:6b:4d:7b:e8:80:6b:c6:7f: 88:23:da:71:df:1e:e6:99:44:fe:68:ca:b3:a4:22:d1:1f:5a: 0b:0d:38:f3:ba:5c:3b:87:bc:db:2c:5e:ca:08:c1:43:fb:94: c1:8a:98:50:50:2c:f2:f3:de:dd:35:6b:f7:fe:71:65:79:69: 4b:f8:ae:4c:3e:7c:6c:02:20:72:eb:6f:9d:43:17:ae:54:6e: 66:9d:d7:a5:6c:f9:24:0d:a2:6d:39:da:ac:b1:b3:c3:1e:8a: b9:5d:19:20:1b:6a:49:4c:48:13:09:54:a3:63:85:a3:ff:e5: cb:32:76:0c -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISAZt/E2sitR0ciRv4VxXkzNVfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYWM2MzNhMTRjYWM3YzdhMDkyMmZmZDk4MGRlNWYyNzhhM2JlMjY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiI6mjolxR/BqaZ7lt3eqpmYkIbBQ IXABczo1qYhj0j4WZrTM0NgX5d0qiLdHiNf+9VvhmSgZu7upbilWloJDWZkFGJIg YZJ5pSWXeyQFg/5vNmpSiOGe2nenbiFawrijdFLwxpQwh9LoHqyEu/vRL9XMV3yp M9FgNo/MYe+xEXIlbJuPeB4fsq4c6PRZaF12MQioTKZjMWL0BciOqLQYJJdLdRAy +lOe0BG+0MsKlA6OpJ2+1lu4T/JjMIG6LHy8DnpZwpiUh2MfhLCCeQL095ASYTE1 zYL93BO+Xi55ikCz51003s33czefhGl7BhLp48uZ46zQbfnVBjygggEQuwIDAQAB o4ICnzCCApswHQYDVR0OBBYEFNrGM6FMrHx6CSL/2YDeXyeKO+JnMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2EyL2M4NTJi NS1hY2M0LTRkNzAtYWVlYi0yNDUxNWExNGM0NTYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTIvYzg1MmI1 LWFjYzQtNGQ3MC1hZWViLTI0NTE1YTE0YzQ1Ni8xLzJzWXpvVXlzZkhvSkl2X1pn TjVmSjRvNzRtYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQAW+k9AwQAubOwAwQA1QXiMA0EAgACMAcDBQAq E28AMA0GCSqGSIb3DQEBCwUAA4IBAQBloDROz9C1nri4E0GIiYT4IgOVbonlQA9G SUgVOp+Zj7AyK9rRd15kq2l8taYo+3Y+tBeJF8QTsJLg+9BeoDw8QDCHAD6Fqp6k 7Xc8JVKz2AzZLQg6kLSPdRWmPFfJ3QX3NwOrDJ5fnzOA0tTKPnVLIkfsyaaZ6zyR MIS1i8C3R42GxtmpKZcoa0176IBrxn+II9px3x7mmUT+aMqzpCLRH1oLDTjzulw7 h7zbLF7KCMFD+5TBiphQUCzy897dNWv3/nFleWlL+K5MPnxsAiBy62+dQxeuVG5m ndelbPkkDaJtOdqssbPDHoq5XRkgG2pJTEgTCVSjY4Wj/+XLMnYM -----END CERTIFICATE-----Generated at Sun Jan 25 05:58:28 2026 by rpki-client