This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2vy2Q-aiHi-24hzQZTqwlenr7xM.cer File: 2vy2Q-aiHi-24hzQZTqwlenr7xM.cer (raw, json) Hash identifier: /oCsIpPA1Z2Fa8ffyAwKFKJm5k4ZIHaLTvzze1Aqa88= Subject key identifier: DA:FC:B6:43:E6:A2:1E:2F:B6:E2:1C:D0:65:3A:B0:95:E9:EB:EF:13 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A2227CDB13588A0E6E30A7542319F4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/2vy2Q-aiHi-24hzQZTqwlenr7xM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:17:30 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 15929 AS: 21488 IP: 193.110.106.0/23 IP: 194.246.116.0/23 IP: 217.66.96.0/20 IP: 2a0f:c240::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:22:7c:db:13:58:8a:0e:6e:30:a7:54:23:19:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dafcb643e6a21e2fb6e21cd0653ab095e9ebef13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:7b:63:94:a3:1f:93:42:2f:c4:ba:9e:fc:ba: 37:ce:82:fa:a4:cd:bf:e7:56:f8:b5:f2:e9:90:78: dc:5f:b1:6c:55:c5:e5:a7:26:81:e2:d2:0a:d7:1c: 86:66:cb:68:eb:11:5d:d4:11:7e:7d:a1:be:e6:2d: f0:ad:a6:f3:bc:11:a8:a8:c2:14:d1:f6:8f:fa:dc: 1d:ff:f8:91:87:b5:b5:2f:3c:37:24:a7:33:09:3b: 07:22:90:66:3c:38:a2:62:33:8a:40:54:26:51:d2: 5e:fd:8d:8a:d5:7f:b4:fe:a7:7a:a0:48:01:31:a8: dc:37:ca:b8:11:62:cf:99:b3:9c:56:59:1d:64:53: 86:3d:db:bf:70:0a:a6:02:1d:14:59:b6:7d:11:a8: 0d:8d:a0:83:9f:a6:7f:a1:f3:76:92:d3:ec:a4:2a: 2e:d7:dc:0a:1b:61:3f:5a:14:c2:ab:ca:c7:b1:14: 23:3b:b4:29:ba:98:51:92:9b:79:5b:11:59:40:a6: 78:f0:e5:dc:a1:68:ff:85:66:d3:15:65:4d:27:0b: 52:5a:88:84:9f:97:5f:d7:b5:e1:f8:1b:77:f1:f5: 89:21:62:9a:9f:38:94:d1:16:7d:df:01:6d:f6:0c: f9:28:b5:05:09:ee:f1:9d:b6:0e:e9:fd:04:32:97: 20:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:FC:B6:43:E6:A2:1E:2F:B6:E2:1C:D0:65:3A:B0:95:E9:EB:EF:13 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/2vy2Q-aiHi-24hzQZTqwlenr7xM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.110.106.0/23 194.246.116.0/23 217.66.96.0/20 IPv6: 2a0f:c240::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 15929 21488 Signature Algorithm: sha256WithRSAEncryption 76:11:2f:64:0c:8b:b2:ff:2e:4d:f1:f9:b1:e1:33:48:ad:52: 5f:67:e7:8c:97:cf:6f:24:96:4c:c5:dd:d5:df:75:b7:db:67: e5:f8:53:16:0c:a2:20:93:e0:4a:17:5b:40:7c:23:b5:a3:7f: e8:12:e7:35:48:8c:d0:3a:56:16:67:51:d2:6c:df:f6:1f:a3: df:0e:c4:1e:d8:29:4e:93:da:56:95:88:10:25:e5:3a:63:6d: 9a:11:4d:19:bd:43:6b:29:00:69:0e:2e:45:d7:7a:86:44:4e: bc:41:43:8a:76:d8:fd:e4:22:ad:95:d7:15:41:d0:8b:a4:1c: f9:40:78:a6:0d:48:85:8c:d0:3c:48:4d:68:e0:77:ca:d3:2f: da:2e:7b:e0:41:ce:34:58:58:23:df:68:cb:81:ae:e6:d8:c2: ed:f5:50:aa:2d:66:60:6d:53:5c:ec:52:c6:23:58:21:a8:f1: 79:eb:ad:59:45:90:e9:65:36:51:79:7a:48:14:43:20:f2:71: 8d:af:50:48:5f:05:e0:3e:f6:fe:aa:8e:65:c0:de:3e:97:65: f7:e7:74:b5:68:56:63:ae:da:ac:3d:70:92:71:43:2f:ee:ea: a0:a4:cc:d0:c0:fd:04:28:81:cb:b0:6b:4a:33:45:eb:07:2d: 0b:68:4c:15 -----BEGIN CERTIFICATE----- MIIFsjCCBJqgAwIBAgISAZt4oiJ82xNYig5uMKdUIxn0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYWZjYjY0M2U2YTIxZTJmYjZlMjFjZDA2NTNhYjA5NWU5ZWJlZjEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA63tjlKMfk0IvxLqe/Lo3zoL6pM2/ 51b4tfLpkHjcX7FsVcXlpyaB4tIK1xyGZsto6xFd1BF+faG+5i3wrabzvBGoqMIU 0faP+twd//iRh7W1Lzw3JKczCTsHIpBmPDiiYjOKQFQmUdJe/Y2K1X+0/qd6oEgB MajcN8q4EWLPmbOcVlkdZFOGPdu/cAqmAh0UWbZ9EagNjaCDn6Z/ofN2ktPspCou 19wKG2E/WhTCq8rHsRQjO7QpuphRkpt5WxFZQKZ48OXcoWj/hWbTFWVNJwtSWoiE n5df17Xh+Bt38fWJIWKanziU0RZ93wFt9gz5KLUFCe7xnbYO6f0EMpcgFQIDAQAB o4ICvjCCArowHQYDVR0OBBYEFNr8tkPmoh4vtuIc0GU6sJXp6+8TMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JkLzI3YTM3 NC1jOTg0LTRiMTktYWM3ZS1kZTJkZTE1ZjkwZWQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmQvMjdhMzc0 LWM5ODQtNGIxOS1hYzdlLWRlMmRlMTVmOTBlZC8xLzJ2eTJRLWFpSGktMjRoelFa VHF3bGVucjd4TS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQBwW5qAwQBwvZ0AwQE2UJgMA0EAgACMAcDBQMq D8JAMB0GCCsGAQUFBwEIAQH/BA4wDKAKMAgCAj45AgJT8DANBgkqhkiG9w0BAQsF AAOCAQEAdhEvZAyLsv8uTfH5seEzSK1SX2fnjJfPbySWTMXd1d91t9tn5fhTFgyi IJPgShdbQHwjtaN/6BLnNUiM0DpWFmdR0mzf9h+j3w7EHtgpTpPaVpWIECXlOmNt mhFNGb1DaykAaQ4uRdd6hkROvEFDinbY/eQirZXXFUHQi6Qc+UB4pg1IhYzQPEhN aOB3ytMv2i574EHONFhYI99oy4Gu5tjC7fVQqi1mYG1TXOxSxiNYIajxeeutWUWQ 6WU2UXl6SBRDIPJxja9QSF8F4D72/qqOZcDePpdl9+d0tWhWY67arD1wknFDL+7q oKTM0MD9BCiBy7BrSjNF6wctC2hMFQ== -----END CERTIFICATE-----Generated at Sun Jan 25 19:43:26 2026 by rpki-client