This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/T2qURK2qUjxXaOn2vhQGUYOsIKg.cer File: T2qURK2qUjxXaOn2vhQGUYOsIKg.cer (raw, json) Hash identifier: SGRfFFcdwmgNnDT++vmCqUqcILEWb+hXCjUFWBOGSxI= Subject key identifier: 4F:6A:94:44:AD:AA:52:3C:57:68:E9:F6:BE:14:06:51:83:AC:20:A8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79107A2F2F71C4FD8B5FAB258F1E9601 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:01 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.7.176.0/22 IP: 2a03:28c0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:7a:2f:2f:71:c4:fd:8b:5f:ab:25:8f:1e:96:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4f6a9444adaa523c5768e9f6be14065183ac20a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a2:b8:d4:84:0a:a5:48:a4:94:94:a6:0d:d7: 7e:f8:d7:95:67:9d:78:ef:0d:3b:bd:ed:5a:4c:59: cb:a0:8b:7b:f0:8c:be:ee:9c:b7:9e:27:b8:68:a7: dc:21:3c:30:b2:6a:e5:a4:2c:a7:4e:1d:ba:aa:f6: c7:dc:59:cb:ee:49:3e:a6:d5:e4:f4:da:a7:82:41: 12:b2:10:53:06:74:3f:e8:bc:77:cf:be:5c:f8:93: 46:6b:03:ab:0d:f9:05:54:d6:2f:ab:bd:dd:a3:96: a6:c5:a7:97:20:22:01:f5:e0:ea:ae:21:6f:17:7a: f0:98:78:39:a4:14:ff:ad:33:44:1a:13:8c:6b:a1: e1:96:93:08:49:d3:6c:bb:d3:3b:71:d3:a4:12:0c: 73:93:55:1f:e6:51:99:b0:28:32:92:16:27:1f:cd: f5:36:6a:df:f8:75:25:80:61:3f:7f:02:59:32:57: 1d:68:db:06:4f:25:05:1f:cf:77:dc:16:d8:a3:c7: 04:fd:0a:9a:8b:bf:02:d3:f2:a6:82:f6:05:81:17: c9:e0:ae:88:cf:3b:58:79:07:97:cb:06:fa:d3:4f: 1a:04:67:84:ad:60:bc:e3:fb:47:65:ed:3b:6c:b5: de:51:be:95:7a:f5:f4:67:e5:97:d1:f0:53:8a:46: 50:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:6A:94:44:AD:AA:52:3C:57:68:E9:F6:BE:14:06:51:83:AC:20:A8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.7.176.0/22 IPv6: 2a03:28c0::/32 Signature Algorithm: sha256WithRSAEncryption 1c:bf:2d:59:01:bf:2d:93:d5:77:ae:ae:ce:29:b1:c7:06:25: 6f:12:5a:56:63:2e:e9:79:78:46:db:97:a1:c5:2d:0f:8a:34: 56:03:3a:b8:71:79:f6:fd:6d:91:bc:0d:d7:0d:67:ee:ef:54: df:27:ba:9a:10:99:88:6a:b3:b0:e4:15:04:58:2f:80:41:d4: 45:2c:c2:ed:ea:04:17:01:80:65:d8:e1:0d:8a:cf:96:fc:f2: 71:90:7d:10:03:9c:2e:e8:b4:d7:ad:e2:68:51:63:c1:0a:cb: dc:2f:2b:7b:12:05:4c:df:ca:89:ee:ba:d4:c4:29:c8:c9:13: bf:e1:2a:76:e0:f9:8c:3a:76:db:19:12:b0:06:4f:b7:d8:cd: 68:71:c7:e8:85:71:c2:d1:71:34:41:a0:b9:38:c8:61:98:64: 6c:51:21:11:7b:e8:bb:d3:81:ca:f2:88:e9:be:5b:63:51:46: 10:14:5e:ec:fb:51:2f:c6:b5:33:8f:3b:3e:7b:c7:b4:6e:d2: 10:85:8c:cb:8d:ac:40:a4:a8:06:ec:87:88:0b:8f:62:cc:06: 31:9e:ed:a5:ec:9c:7a:24:ec:0d:e2:4c:ae:98:b5:33:dd:eb: 3c:21:bc:78:09:36:af:e7:43:7a:15:2c:92:60:b6:dc:84:29: b1:a8:80:08 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt5EHovL3HE/YtfqyWPHpYBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZjZhOTQ0NGFkYWE1MjNjNTc2OGU5ZjZiZTE0MDY1MTgzYWMyMGE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6K41IQKpUiklJSmDdd++NeVZ514 7w07ve1aTFnLoIt78Iy+7py3nie4aKfcITwwsmrlpCynTh26qvbH3FnL7kk+ptXk 9NqngkESshBTBnQ/6Lx3z75c+JNGawOrDfkFVNYvq73do5amxaeXICIB9eDqriFv F3rwmHg5pBT/rTNEGhOMa6HhlpMISdNsu9M7cdOkEgxzk1Uf5lGZsCgykhYnH831 Nmrf+HUlgGE/fwJZMlcdaNsGTyUFH8933BbYo8cE/Qqai78C0/KmgvYFgRfJ4K6I zztYeQeXywb6008aBGeErWC84/tHZe07bLXeUb6VevX0Z+WX0fBTikZQCwIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFE9qlEStqlI8V2jp9r4UBlGDrCCoMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI0LzljNGZi MC1jNDc1LTQyMDQtOTk4Ny0wYTkxY2FkYmVlNjYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjQvOWM0ZmIw LWM0NzUtNDIwNC05OTg3LTBhOTFjYWRiZWU2Ni8xL1QycVVSSzJxVWp4WGFPbjJ2 aFFHVVlPc0lLZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuQewMA0EAgACMAcDBQAqAyjAMA0GCSqGSIb3 DQEBCwUAA4IBAQAcvy1ZAb8tk9V3rq7OKbHHBiVvElpWYy7peXhG25ehxS0PijRW Azq4cXn2/W2RvA3XDWfu71TfJ7qaEJmIarOw5BUEWC+AQdRFLMLt6gQXAYBl2OEN is+W/PJxkH0QA5wu6LTXreJoUWPBCsvcLyt7EgVM38qJ7rrUxCnIyRO/4Sp24PmM OnbbGRKwBk+32M1occfohXHC0XE0QaC5OMhhmGRsUSERe+i704HK8ojpvltjUUYQ FF7s+1EvxrUzjzs+e8e0btIQhYzLjaxApKgG7IeIC49izAYxnu2l7Jx6JOwN4kyu mLUz3es8Ibx4CTav50N6FSySYLbchCmxqIAI -----END CERTIFICATE-----Generated at Mon Jan 26 01:31:41 2026 by rpki-client