This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/K2nm32CJ1NhhNocX6mbnthbHkMk.cer File: K2nm32CJ1NhhNocX6mbnthbHkMk.cer (raw, json) Hash identifier: yyjoohUe8LqjNUsyb9uDlUomp1JOiQIRGv+UGwkaOPA= Subject key identifier: 2B:69:E6:DF:60:89:D4:D8:61:36:87:17:EA:66:E7:B6:16:C7:90:C9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCAC29687F729868381602CFE30B07A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:19:58 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 77.74.152.0/21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:c2:96:87:f7:29:86:83:81:60:2c:fe:30:b0:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:19:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2b69e6df6089d4d861368717ea66e7b616c790c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e1:e5:31:ee:e8:ac:a2:4c:d8:16:38:3a:bb: 50:45:40:8b:f5:e1:b1:c7:16:ce:37:00:b1:52:81: 90:a1:e1:28:69:3f:63:3e:2c:cc:14:5e:77:f2:55: 53:ee:04:b4:2f:af:9b:de:6c:e3:bf:8c:0b:ee:b3: 02:19:cf:2f:ea:38:4b:1d:08:ad:3d:0d:1c:03:0a: f0:e5:09:b7:94:58:0f:44:65:39:43:71:ae:5b:fd: de:f2:3f:93:c0:7a:b0:ac:5d:e5:39:69:9f:30:8f: 9f:2c:ad:03:32:99:d6:37:68:2a:15:4a:13:f8:a4: db:39:45:f5:98:f6:1b:e8:6d:40:b3:fa:22:23:a1: 4b:fa:27:fe:02:3e:30:77:cd:03:59:f6:e8:31:dc: 34:87:84:1c:e5:0a:cd:74:b5:4a:0a:d3:21:7d:b2: e8:3c:69:c1:88:24:a8:55:fb:c9:03:7c:d4:cb:f0: 8b:fa:23:46:3e:35:91:5c:2e:e6:ba:38:24:fd:f7: a4:b0:ab:c4:6f:9b:b3:1b:48:7e:d6:40:9b:b4:f0: 03:ae:e0:17:46:45:b2:9c:5c:0d:32:8e:ca:48:70: 22:8a:c0:fc:38:60:6d:bb:b4:5b:76:ea:96:51:5d: e7:e2:b9:c1:cb:5c:b7:e5:fc:d8:d8:20:42:5a:06: 7e:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:69:E6:DF:60:89:D4:D8:61:36:87:17:EA:66:E7:B6:16:C7:90:C9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.74.152.0/21 Signature Algorithm: sha256WithRSAEncryption 80:5b:68:1b:39:5d:17:a8:44:02:e0:34:9a:65:ff:d2:b1:2e: f0:d2:9b:85:f0:9f:32:10:8d:98:ba:b0:b9:22:49:bb:40:82: 41:fc:f9:0f:7c:dc:fb:0c:38:42:07:71:54:a5:97:d1:73:a7: ef:d9:15:9f:a0:fa:aa:a4:f5:3f:ae:99:06:06:31:e7:cb:1c: 88:e2:5e:70:c4:16:bc:79:7a:1f:3c:41:10:98:e0:27:2d:1e: 15:b5:72:62:ae:c0:72:96:ce:d7:a0:4e:fb:2a:7a:f0:cd:54: 7a:06:59:62:fc:c2:f9:2d:23:2c:61:3a:27:69:7a:aa:2d:98: b4:e1:0c:fb:4c:6e:41:80:59:91:63:7f:80:11:10:ba:18:d3: b5:b7:6d:dd:c3:17:04:e7:66:ea:2a:5f:0f:f2:af:7d:25:6c: 63:23:6b:46:08:8c:d6:81:a4:2e:b2:25:e2:42:aa:ea:b3:53: 52:6f:78:a2:f6:32:6d:e6:66:de:c5:b1:56:20:4e:11:f2:6b: 70:9d:0f:fc:4e:9e:8d:04:ed:d1:c9:49:a9:d3:6a:f0:e4:35: 8a:33:13:79:4c:51:83:71:a2:7d:5e:87:2d:b5:8e:d4:29:40: 06:de:51:74:ee:00:ab:f9:8f:77:26:5e:73:ca:98:e5:ab:51: c1:6e:44:65 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt9ysKWh/cphoOBYCz+MLB6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxOTU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYjY5ZTZkZjYwODlkNGQ4NjEzNjg3MTdlYTY2ZTdiNjE2Yzc5MGM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuHlMe7orKJM2BY4OrtQRUCL9eGx xxbONwCxUoGQoeEoaT9jPizMFF538lVT7gS0L6+b3mzjv4wL7rMCGc8v6jhLHQit PQ0cAwrw5Qm3lFgPRGU5Q3GuW/3e8j+TwHqwrF3lOWmfMI+fLK0DMpnWN2gqFUoT +KTbOUX1mPYb6G1As/oiI6FL+if+Aj4wd80DWfboMdw0h4Qc5QrNdLVKCtMhfbLo PGnBiCSoVfvJA3zUy/CL+iNGPjWRXC7mujgk/feksKvEb5uzG0h+1kCbtPADruAX RkWynFwNMo7KSHAiisD8OGBtu7RbduqWUV3n4rnBy1y35fzY2CBCWgZ+SwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFCtp5t9gidTYYTaHF+pm57YWx5DJMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhmL2M4ZGFk Yy04ZTI3LTRiYmUtYWVlNS0wNWIzZTQzMWMxZWEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGYvYzhkYWRj LThlMjctNGJiZS1hZWU1LTA1YjNlNDMxYzFlYS8xL0sybm0zMkNKMU5oaE5vY1g2 bWJudGhiSGtNay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQDTUqYMA0GCSqGSIb3DQEBCwUAA4IBAQCAW2gb OV0XqEQC4DSaZf/SsS7w0puF8J8yEI2YurC5Ikm7QIJB/PkPfNz7DDhCB3FUpZfR c6fv2RWfoPqqpPU/rpkGBjHnyxyI4l5wxBa8eXofPEEQmOAnLR4VtXJirsByls7X oE77KnrwzVR6Blli/ML5LSMsYTonaXqqLZi04Qz7TG5BgFmRY3+AERC6GNO1t23d wxcE52bqKl8P8q99JWxjI2tGCIzWgaQusiXiQqrqs1NSb3ii9jJt5mbexbFWIE4R 8mtwnQ/8Tp6NBO3RyUmp02rw5DWKMxN5TFGDcaJ9XocttY7UKUAG3lF07gCr+Y93 Jl5zypjlq1HBbkRl -----END CERTIFICATE-----Generated at Mon Jan 26 03:10:11 2026 by rpki-client