This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2ygv2JcxfCyt17E5afbwFcOX4F0.cer File: 2ygv2JcxfCyt17E5afbwFcOX4F0.cer (raw, json) Hash identifier: ZeLL37d7A7TZtRqGqvib1qsDp7kIjNTSJF6A9NqXVPU= Subject key identifier: DB:28:2F:D8:97:31:7C:2C:AD:D7:B1:39:69:F6:F0:15:C3:97:E0:5D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C7F61DDE0B8158312F6922949A9F295 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2d/b7ceb8-4856-4463-b7b8-353bc6266ee6/1/2ygv2JcxfCyt17E5afbwFcOX4F0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2d/b7ceb8-4856-4463-b7b8-353bc6266ee6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:18:01 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 199608 IP: 185.9.36.0/22 IP: 185.244.144.0/22 IP: 217.70.10.0/24 IP: 2a03:48c0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:61:dd:e0:b8:15:83:12:f6:92:29:49:a9:f2:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=db282fd897317c2cadd7b13969f6f015c397e05d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:89:39:87:c3:84:17:ec:1a:eb:6e:02:68:c7: 26:01:7e:be:37:79:98:17:33:49:37:6d:16:50:50: 8e:84:ef:78:f8:89:f3:38:f4:16:b0:d9:45:c6:e6: bf:79:af:73:93:4d:1d:a8:43:c6:6c:13:b2:9d:87: de:5c:21:5f:6c:92:1a:be:1e:40:d2:3c:b7:0e:61: c0:7c:b8:87:fd:ba:42:40:5a:d1:9a:7e:ea:ff:f2: 73:cc:17:1a:cc:7a:4b:b1:5b:c5:09:1d:6e:d6:4f: be:29:aa:ad:7d:46:ca:27:59:e9:47:8e:99:c7:17: 65:09:d4:e5:be:70:bc:18:49:10:7b:a6:74:44:dd: e4:50:b2:5a:56:4d:eb:bd:e4:c3:a1:0b:10:75:6c: 33:8f:d9:14:68:90:70:ba:e6:5c:f7:ca:6c:70:12: d4:5e:f5:96:b6:93:91:9a:b4:88:a3:81:09:9d:28: 6e:37:08:7b:ab:b9:85:db:2f:9b:12:6b:22:a9:5b: bd:12:e7:1e:cc:5c:54:33:58:71:79:ac:ba:5a:d8: 3c:3a:cc:7c:12:4b:a6:90:b7:30:c5:6a:54:42:26: 30:3d:28:36:fd:c4:00:76:c4:f5:4c:22:4f:85:01: 0a:95:27:0e:4f:ae:e7:94:dd:11:4b:c9:8d:05:8a: f5:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:28:2F:D8:97:31:7C:2C:AD:D7:B1:39:69:F6:F0:15:C3:97:E0:5D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b7ceb8-4856-4463-b7b8-353bc6266ee6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b7ceb8-4856-4463-b7b8-353bc6266ee6/1/2ygv2JcxfCyt17E5afbwFcOX4F0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.9.36.0/22 185.244.144.0/22 217.70.10.0/24 IPv6: 2a03:48c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 199608 Signature Algorithm: sha256WithRSAEncryption 66:ec:42:85:9b:b1:d8:8f:a8:fb:2a:eb:8e:ec:4e:08:01:33: c7:5c:46:d1:fc:89:0d:76:c1:f8:28:24:0e:b8:2f:0d:32:2b: 2e:ef:ec:4c:b6:b1:ba:2e:bc:9c:f4:92:1d:3d:8e:cb:8e:ab: 81:a5:a8:2f:f0:70:35:27:cb:dd:02:94:9d:8b:1b:bc:5d:f8: d1:99:b9:3a:d6:e8:be:3a:6f:9d:ca:85:34:f3:8d:7d:5f:cf: 4b:8e:26:6a:e0:35:4a:61:62:7b:94:d9:7c:f0:b7:da:5a:47: 63:11:bf:9e:cb:93:9e:40:d4:95:81:d3:02:10:5a:b6:52:0a: fc:c1:61:7d:e6:8e:46:cf:d1:7f:11:28:11:06:8d:76:ce:e2: 51:74:b9:6e:ad:88:4d:12:2e:f0:16:82:c6:56:b9:40:94:5c: 54:1a:9c:8d:ea:e0:e0:1d:5c:04:2c:e4:f4:97:51:5f:54:19: a9:02:85:75:dc:b0:0c:a6:73:a0:96:61:45:7e:82:6a:44:49: 6d:12:67:2a:ce:bf:1b:4b:22:a6:53:19:46:46:45:b2:4b:13: 79:34:be:1e:bf:70:a6:a2:4f:7b:61:55:5d:4b:b6:4c:e6:f9: 16:5b:bb:bf:77:ba:87:6f:58:cb:48:b5:a1:30:e6:9a:35:7a: 20:b9:50:7e -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISAZt8f2Hd4LgVgxL2kilJqfKVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYjI4MmZkODk3MzE3YzJjYWRkN2IxMzk2OWY2ZjAxNWMzOTdlMDVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Ik5h8OEF+wa624CaMcmAX6+N3mY FzNJN20WUFCOhO94+InzOPQWsNlFxua/ea9zk00dqEPGbBOynYfeXCFfbJIavh5A 0jy3DmHAfLiH/bpCQFrRmn7q//JzzBcazHpLsVvFCR1u1k++KaqtfUbKJ1npR46Z xxdlCdTlvnC8GEkQe6Z0RN3kULJaVk3rveTDoQsQdWwzj9kUaJBwuuZc98pscBLU XvWWtpORmrSIo4EJnShuNwh7q7mF2y+bEmsiqVu9EucezFxUM1hxeay6Wtg8Osx8 EkumkLcwxWpUQiYwPSg2/cQAdsT1TCJPhQEKlScOT67nlN0RS8mNBYr13wIDAQAB o4ICuzCCArcwHQYDVR0OBBYEFNsoL9iXMXwsrdexOWn28BXDl+BdMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJkL2I3Y2Vi OC00ODU2LTQ0NjMtYjdiOC0zNTNiYzYyNjZlZTYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmQvYjdjZWI4 LTQ4NTYtNDQ2My1iN2I4LTM1M2JjNjI2NmVlNi8xLzJ5Z3YySmN4ZkN5dDE3RTVh ZmJ3RmNPWDRGMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQCuQkkAwQCufSQAwQA2UYKMA0EAgACMAcDBQAq A0jAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMLuDANBgkqhkiG9w0BAQsFAAOC AQEAZuxChZux2I+o+yrrjuxOCAEzx1xG0fyJDXbB+CgkDrgvDTIrLu/sTLaxui68 nPSSHT2Oy46rgaWoL/BwNSfL3QKUnYsbvF340Zm5OtbovjpvncqFNPONfV/PS44m auA1SmFie5TZfPC32lpHYxG/nsuTnkDUlYHTAhBatlIK/MFhfeaORs/RfxEoEQaN ds7iUXS5bq2ITRIu8BaCxla5QJRcVBqcjerg4B1cBCzk9JdRX1QZqQKFddywDKZz oJZhRX6CakRJbRJnKs6/G0siplMZRkZFsksTeTS+Hr9wpqJPe2FVXUu2TOb5Flu7 v3e6h29Yy0i1oTDmmjV6ILlQfg== -----END CERTIFICATE-----Generated at Sun Jan 25 21:35:57 2026 by rpki-client