This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2yOWhUCfZLocOlSo7xQckk5x2JI.cer File: 2yOWhUCfZLocOlSo7xQckk5x2JI.cer (raw, json) Hash identifier: 6AKJ0BauuFniI0AvDH/j3KgXaWfk8oM5nW4dmZSyQE4= Subject key identifier: DB:23:96:85:40:9F:64:BA:1C:3A:54:A8:EF:14:1C:92:4E:71:D8:92 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F8349D1650CBE08BFA3C847B9C93307 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e0/8d6fd7-1cb3-413c-a32b-2ef447e1b08c/1/2yOWhUCfZLocOlSo7xQckk5x2JI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e0/8d6fd7-1cb3-413c-a32b-2ef447e1b08c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:21:09 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 8975 AS: 15489 AS: 34948 AS: 35012 AS: 44099 AS: 47841 AS: 51754 IP: 31.3.136.0/21 IP: 46.17.64.0/21 IP: 46.18.128.0/21 IP: 62.240.224.0/19 IP: 78.109.80.0/20 IP: 79.99.32.0/21 IP: 89.185.32.0/19 IP: 91.195.164.0/23 IP: 91.198.159.0/24 IP: 91.208.181.0/24 IP: 94.198.144.0/21 IP: 95.131.136.0/21 IP: 146.185.40.0/21 IP: 185.7.36.0/22 IP: 185.29.40.0/22 IP: 185.65.112.0/22 IP: 185.88.104.0/22 IP: 185.93.36.0/22 IP: 185.129.164.0/22 IP: 185.206.136.0/22 IP: 193.58.233.0/24 IP: 193.189.143.0/24 IP: 193.238.148.0/22 IP: 194.146.172.0/22 IP: 195.238.251.0/24 IP: 212.43.192.0/18 IP: 2001:a70::/32 IP: 2a00:6000::/32 IP: 2a01:4580::/29 IP: 2a02:1f8::/32 IP: 2a02:c70::/32 IP: 2a02:2328::/32 IP: 2a03:7300::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:49:d1:65:0c:be:08:bf:a3:c8:47:b9:c9:33:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:21:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=db239685409f64ba1c3a54a8ef141c924e71d892 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:08:24:6d:9e:3f:7b:7d:0e:89:f9:f7:fc:d3: db:f4:21:12:80:a2:84:9b:b0:dc:40:3e:88:77:85: 52:51:b8:91:04:08:76:68:8d:d8:6b:9a:97:34:e1: cc:6a:a7:e7:af:82:b2:2a:7c:6a:6a:97:d7:e3:e8: 3d:3a:54:bf:cf:4e:4b:f8:f5:d1:64:24:3d:3a:3d: d8:fb:8f:b4:2a:22:f6:ca:10:36:10:da:bc:06:63: 64:c6:97:28:d7:69:a1:55:c8:2f:69:df:e9:7c:35: a2:eb:27:9d:87:c0:7f:30:75:55:dc:83:7a:c0:fe: 95:ad:f1:8d:27:01:ec:e9:41:73:7e:90:62:8a:22: 25:d3:bb:c1:89:9f:d9:d5:78:f0:4c:75:7c:3e:3f: 1a:27:08:cb:52:a9:dc:86:d8:03:ff:72:dc:46:86: 94:c6:8b:bd:62:ae:5b:72:5e:0c:cf:10:9f:79:87: 15:ee:d5:1d:6c:67:7d:94:2a:8a:f2:93:0e:f2:a6: 5e:47:14:a3:d1:a4:f4:69:2a:f4:85:5a:8f:27:e1: 4e:e3:23:ca:58:26:00:15:39:d5:1f:e4:0e:2f:34: c4:c5:70:87:c1:06:3e:0d:8c:e2:57:1e:b7:38:e6: b7:3f:32:4a:c1:97:2f:4f:e0:f2:9e:68:2d:2f:5e: 08:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:23:96:85:40:9F:64:BA:1C:3A:54:A8:EF:14:1C:92:4E:71:D8:92 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8d6fd7-1cb3-413c-a32b-2ef447e1b08c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8d6fd7-1cb3-413c-a32b-2ef447e1b08c/1/2yOWhUCfZLocOlSo7xQckk5x2JI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.3.136.0/21 46.17.64.0/21 46.18.128.0/21 62.240.224.0/19 78.109.80.0/20 79.99.32.0/21 89.185.32.0/19 91.195.164.0/23 91.198.159.0/24 91.208.181.0/24 94.198.144.0/21 95.131.136.0/21 146.185.40.0/21 185.7.36.0/22 185.29.40.0/22 185.65.112.0/22 185.88.104.0/22 185.93.36.0/22 185.129.164.0/22 185.206.136.0/22 193.58.233.0/24 193.189.143.0/24 193.238.148.0/22 194.146.172.0/22 195.238.251.0/24 212.43.192.0/18 IPv6: 2001:a70::/32 2a00:6000::/32 2a01:4580::/29 2a02:1f8::/32 2a02:c70::/32 2a02:2328::/32 2a03:7300::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 8975 15489 34948 35012 44099 47841 51754 Signature Algorithm: sha256WithRSAEncryption 7a:9a:c9:6f:28:cb:05:6f:28:23:77:4e:86:ce:97:ea:5e:1f: 24:62:fc:43:5b:0b:69:17:b2:05:15:2a:32:61:d4:0d:09:1f: d3:f1:09:c7:11:f5:ee:b0:58:0b:34:62:a3:54:95:c0:97:79: 5f:06:1b:e4:3a:3d:e2:f2:ba:d7:c0:50:ff:25:ab:4b:a0:21: f7:ab:f4:3b:26:0f:8d:fd:0e:e4:d1:3c:e8:46:30:24:47:a4: 4a:8a:e0:13:a3:c2:e3:65:80:80:4a:b5:48:65:d8:39:90:f1: 67:5c:0d:3a:e9:b2:87:c8:76:5d:f3:e0:f2:29:c8:56:8a:0f: 67:f5:c8:e4:41:c2:e4:23:b3:ab:64:05:42:26:a1:da:fd:f3: 73:e0:52:f9:a2:18:f8:ae:6b:d4:46:c1:93:d9:8a:bf:e0:e3: 6d:a3:4d:c4:f9:57:0c:42:3d:7c:e1:56:8e:8e:d3:10:f1:7e: e0:99:5d:96:44:9b:b3:aa:b5:3f:80:42:de:8e:13:13:98:5c: a0:47:0c:a2:98:83:e4:6e:8d:0f:87:46:20:69:5c:c3:27:6e: 18:6f:8f:4a:25:e8:1c:f3:6b:8e:7f:80:60:b1:4f:21:c9:17: 66:1e:d6:ef:4b:37:33:74:6b:a3:1f:90:b6:83:41:24:a9:99: 73:87:46:9f -----BEGIN CERTIFICATE----- MIIGhDCCBWygAwIBAgISAZt/g0nRZQy+CL+jyEe5yTMHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYjIzOTY4NTQwOWY2NGJhMWMzYTU0YThlZjE0MWM5MjRlNzFkODkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAgkbZ4/e30Oifn3/NPb9CESgKKE m7DcQD6Id4VSUbiRBAh2aI3Ya5qXNOHMaqfnr4KyKnxqapfX4+g9OlS/z05L+PXR ZCQ9Oj3Y+4+0KiL2yhA2ENq8BmNkxpco12mhVcgvad/pfDWi6yedh8B/MHVV3IN6 wP6VrfGNJwHs6UFzfpBiiiIl07vBiZ/Z1XjwTHV8Pj8aJwjLUqnchtgD/3LcRoaU xou9Yq5bcl4MzxCfeYcV7tUdbGd9lCqK8pMO8qZeRxSj0aT0aSr0hVqPJ+FO4yPK WCYAFTnVH+QOLzTExXCHwQY+DYziVx63OOa3PzJKwZcvT+DynmgtL14IeQIDAQAB o4IDkDCCA4wwHQYDVR0OBBYEFNsjloVAn2S6HDpUqO8UHJJOcdiSMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2UwLzhkNmZk Ny0xY2IzLTQxM2MtYTMyYi0yZWY0NDdlMWIwOGMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTAvOGQ2ZmQ3 LTFjYjMtNDEzYy1hMzJiLTJlZjQ0N2UxYjA4Yy8xLzJ5T1doVUNmWkxvY09sU283 eFFja2s1eDJKSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIHyBggrBgEF BQcBBwEB/wSB4jCB3zCBowQCAAEwgZwDBAMfA4gDBAMuEUADBAMuEoADBAU+8OAD BARObVADBANPYyADBAVZuSADBAFbw6QDBABbxp8DBABb0LUDBANexpADBANfg4gD BAOSuSgDBAK5ByQDBAK5HSgDBAK5QXADBAK5WGgDBAK5XSQDBAK5gaQDBAK5zogD BADBOukDBADBvY8DBALB7pQDBALCkqwDBADD7vsDBAbUK8AwNwQCAAIwMQMFACAB CnADBQAqAGAAAwUDKgFFgAMFACoCAfgDBQAqAgxwAwUAKgIjKAMFACoDcwAwNgYI KwYBBQUHAQgBAf8EJzAloCMwIQICIw8CAjyBAgMAiIQCAwCIxAIDAKxDAgMAuuEC AwDKKjANBgkqhkiG9w0BAQsFAAOCAQEAeprJbyjLBW8oI3dOhs6X6l4fJGL8Q1sL aReyBRUqMmHUDQkf0/EJxxH17rBYCzRio1SVwJd5XwYb5Do94vK618BQ/yWrS6Ah 96v0OyYPjf0O5NE86EYwJEekSorgE6PC42WAgEq1SGXYOZDxZ1wNOumyh8h2XfPg 8inIVooPZ/XI5EHC5COzq2QFQiah2v3zc+BS+aIY+K5r1EbBk9mKv+DjbaNNxPlX DEI9fOFWjo7TEPF+4JldlkSbs6q1P4BC3o4TE5hcoEcMopiD5G6ND4dGIGlcwydu GG+PSiXoHPNrjn+AYLFPIckXZh7W70s3M3Rrox+QtoNBJKmZc4dGnw== -----END CERTIFICATE-----Generated at Sun Jan 25 12:11:07 2026 by rpki-client