This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2yMD6WgDeTw8SM2lIHpB505Qy3w.cer File: 2yMD6WgDeTw8SM2lIHpB505Qy3w.cer (raw, json) Hash identifier: lPOo2Rd/7aE+4tMSO+23NWRWsa9N3iLlW2j/qAa2sx0= Subject key identifier: DB:23:03:E9:68:03:79:3C:3C:48:CD:A5:20:7A:41:E7:4E:50:CB:7C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78351F6F491E8C857067245F92B0CA3B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c7/d5f804-a193-4b3f-a652-45f2afc91d2d/1/2yMD6WgDeTw8SM2lIHpB505Qy3w.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c7/d5f804-a193-4b3f-a652-45f2afc91d2d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:26 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 202732 IP: 2001:3ac0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:1f:6f:49:1e:8c:85:70:67:24:5f:92:b0:ca:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=db2303e96803793c3c48cda5207a41e74e50cb7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e2:b1:f7:4c:ef:e9:d9:60:cd:f7:e0:f9:d3: 07:04:d0:4b:8a:be:f6:9e:1d:3f:9c:e3:d7:9f:f0: dc:d4:0f:b1:21:78:02:5c:c9:c6:c7:29:4b:d3:78: 38:de:b6:a0:64:80:ed:78:dd:06:41:54:bc:07:e0: cd:83:8e:bf:88:bd:13:58:82:b2:f0:c4:51:d2:de: 44:51:ff:04:c4:36:d3:4a:08:33:c9:f8:e5:65:a1: 02:8e:ed:59:ec:38:9a:21:33:66:b3:55:12:d5:48: 5f:83:9f:ad:32:71:28:f3:9e:15:ac:c8:13:78:fb: b3:e8:5c:ff:46:7c:e9:8a:d1:db:36:8b:d8:75:6a: ba:33:b8:6a:29:60:8b:75:16:61:a9:08:37:a5:6e: 61:b6:48:e4:ce:c9:85:96:5c:1b:b6:24:49:2c:b7: fb:69:d0:18:e4:2c:7c:e5:34:22:6b:6c:74:79:c2: a0:6f:bf:e4:c1:6c:d3:75:83:a3:72:b2:fe:27:5a: b2:ee:9a:07:34:01:22:c3:ec:23:20:6e:43:04:9c: 4c:99:bf:a3:4d:cc:0d:68:a9:c6:73:76:1e:4d:02: 25:e5:02:83:cd:2b:bb:59:af:00:34:3a:e1:54:c5: a0:dc:16:c4:61:91:d4:b3:0e:e8:50:a8:02:57:67: 48:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:23:03:E9:68:03:79:3C:3C:48:CD:A5:20:7A:41:E7:4E:50:CB:7C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/d5f804-a193-4b3f-a652-45f2afc91d2d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/d5f804-a193-4b3f-a652-45f2afc91d2d/1/2yMD6WgDeTw8SM2lIHpB505Qy3w.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:3ac0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 202732 Signature Algorithm: sha256WithRSAEncryption 92:1d:0f:54:5a:e3:96:a5:aa:64:77:e5:11:39:4d:67:10:7e: 5e:20:e3:99:23:f7:ed:ac:e0:c1:fd:2a:e4:d7:95:cb:fe:ea: d9:0f:17:e6:da:28:92:94:3d:2a:81:39:b5:ff:c5:d3:05:90: 76:96:4c:d4:9c:41:d2:92:07:5a:4c:30:8a:51:9f:d0:6f:02: ed:17:69:b0:0f:0a:dd:b2:9c:1a:af:4e:ac:b9:de:5d:16:53: 34:33:d7:01:76:53:40:a5:55:42:87:87:70:3e:01:4f:e5:0d: eb:de:52:1e:ec:1d:43:fd:75:27:ed:91:b9:9a:01:69:77:36: 56:18:79:47:ee:ce:86:79:7e:82:a0:10:8d:3b:d3:1a:a5:92: 97:d6:00:14:25:cb:82:05:af:ad:48:b3:30:cd:4c:92:66:b9: 5d:59:a7:03:77:f9:dd:f1:24:64:27:d1:8d:27:38:ba:12:1c: b7:ee:0f:d8:60:58:13:76:73:5a:29:34:55:ee:f1:b8:16:da: 19:f2:d6:20:c1:30:2b:ae:b3:cd:e9:90:64:b3:94:7b:22:dd: 71:0d:fd:30:6e:d8:e7:41:12:03:ad:1b:73:c2:5d:91:1b:b9: 7a:45:46:8f:1a:25:a7:cd:54:e9:b9:e4:42:01:e2:bf:fc:da: 86:d9:c7:ad -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgISAZt4NR9vSR6MhXBnJF+SsMo7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYjIzMDNlOTY4MDM3OTNjM2M0OGNkYTUyMDdhNDFlNzRlNTBjYjdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquKx90zv6dlgzffg+dMHBNBLir72 nh0/nOPXn/Dc1A+xIXgCXMnGxylL03g43ragZIDteN0GQVS8B+DNg46/iL0TWIKy 8MRR0t5EUf8ExDbTSggzyfjlZaECju1Z7DiaITNms1US1Uhfg5+tMnEo854VrMgT ePuz6Fz/RnzpitHbNovYdWq6M7hqKWCLdRZhqQg3pW5htkjkzsmFllwbtiRJLLf7 adAY5Cx85TQia2x0ecKgb7/kwWzTdYOjcrL+J1qy7poHNAEiw+wjIG5DBJxMmb+j TcwNaKnGc3YeTQIl5QKDzSu7Wa8ANDrhVMWg3BbEYZHUsw7oUKgCV2dICwIDAQAB o4ICoTCCAp0wHQYDVR0OBBYEFNsjA+loA3k8PEjNpSB6QedOUMt8MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M3L2Q1Zjgw NC1hMTkzLTRiM2YtYTY1Mi00NWYyYWZjOTFkMmQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzcvZDVmODA0 LWExOTMtNGIzZi1hNjUyLTQ1ZjJhZmM5MWQyZC8xLzJ5TUQ2V2dEZVR3OFNNMmxJ SHBCNTA1UXkzdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF BwEHAQH/BBEwDzANBAIAAjAHAwUDIAE6wDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMDF+wwDQYJKoZIhvcNAQELBQADggEBAJIdD1Ra45alqmR35RE5TWcQfl4g45kj 9+2s4MH9KuTXlcv+6tkPF+baKJKUPSqBObX/xdMFkHaWTNScQdKSB1pMMIpRn9Bv Au0XabAPCt2ynBqvTqy53l0WUzQz1wF2U0ClVUKHh3A+AU/lDeveUh7sHUP9dSft kbmaAWl3NlYYeUfuzoZ5foKgEI070xqlkpfWABQly4IFr61IszDNTJJmuV1ZpwN3 +d3xJGQn0Y0nOLoSHLfuD9hgWBN2c1opNFXu8bgW2hny1iDBMCuus83pkGSzlHsi 3XEN/TBu2OdBEgOtG3PCXZEbuXpFRo8aJafNVOm55EIB4r/82obZx60= -----END CERTIFICATE-----Generated at Mon Jan 26 05:04:55 2026 by rpki-client