This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_2JWLK6HP0_EoyMr9J3VNDtwhPk.cer File: _2JWLK6HP0_EoyMr9J3VNDtwhPk.cer (raw, json) Hash identifier: RpX3M6Zb8SIgnhdq+mzEGoI1NL9zvE8yMR+gTNDAjkU= Subject key identifier: FF:62:56:2C:AE:87:3F:4F:C4:A3:23:2B:F4:9D:D5:34:3B:70:84:F9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B6AA1C70E0D23900720B060029740 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a6/3dc3c4-9c48-4a64-8fa1-88f7b91b6e32/1/_2JWLK6HP0_EoyMr9J3VNDtwhPk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a6/3dc3c4-9c48-4a64-8fa1-88f7b91b6e32/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:30 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.187.120.0/22 IP: 2a0b:9e80::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:6a:a1:c7:0e:0d:23:90:07:20:b0:60:02:97:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ff62562cae873f4fc4a3232bf49dd5343b7084f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:cc:93:33:d6:bc:56:56:68:a5:6d:ab:3c:bc: 8c:58:9f:94:02:41:2e:cb:0f:1b:c1:3b:0c:36:5f: 85:50:1d:41:d9:2a:47:82:da:41:14:60:90:72:fa: 9e:13:06:63:8f:a3:f1:48:95:b5:50:e6:56:c5:f6: 18:94:c9:66:fd:be:9b:59:28:a9:92:63:30:e1:92: 24:84:95:2c:de:d5:64:b6:eb:56:22:12:7e:b3:11: 9a:7b:09:89:f1:60:b8:37:d0:07:dd:6e:e6:99:bb: 0a:3e:8f:88:52:13:ed:df:33:4c:c2:48:d2:2f:64: 7b:d7:e3:dc:8a:e7:e0:7f:ff:d7:6e:e7:bc:76:45: a5:0b:3b:5d:d2:38:c0:b2:2a:1c:31:9e:a3:fd:e0: b3:df:e2:bf:3e:7d:70:3e:b1:9f:c7:1d:0b:a4:4e: 9f:74:ee:48:36:84:c6:6a:19:75:42:6f:8a:6a:9d: e3:66:21:72:25:bf:29:aa:1d:b5:86:2d:f5:ef:50: 83:6f:ab:62:b5:cd:f4:2a:d5:cd:e9:7d:84:40:e2: 1a:f2:e2:9c:2d:b9:b0:c5:41:ee:fb:8a:f1:2c:d5: 8c:c0:70:73:83:87:80:9d:3b:e3:27:4a:fc:c5:90: eb:86:bd:0d:aa:d8:00:64:04:14:35:45:66:12:11: ea:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:62:56:2C:AE:87:3F:4F:C4:A3:23:2B:F4:9D:D5:34:3B:70:84:F9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/3dc3c4-9c48-4a64-8fa1-88f7b91b6e32/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/3dc3c4-9c48-4a64-8fa1-88f7b91b6e32/1/_2JWLK6HP0_EoyMr9J3VNDtwhPk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.187.120.0/22 IPv6: 2a0b:9e80::/32 Signature Algorithm: sha256WithRSAEncryption 93:f6:34:7c:23:71:32:76:92:2d:b6:92:8f:a9:ff:eb:76:15: b9:00:24:7d:4d:71:af:f3:4d:41:05:82:53:71:d3:0a:47:f6: a5:dd:6d:3b:eb:26:0a:14:ff:57:ed:e5:2e:e0:31:f6:e2:c0: ca:cb:c2:e7:27:45:11:73:d2:22:57:18:b0:b7:b1:2f:a8:00: 0b:ac:94:fe:d3:f4:71:ac:f7:92:e3:6b:48:60:ac:46:94:30: 0d:5a:76:0c:8c:0b:df:7e:de:bd:20:21:74:c7:52:e0:d0:b4: 64:99:33:0c:0b:32:0b:46:e0:d7:46:4c:cf:76:1a:e7:b5:f0: 9e:57:48:ce:47:b1:71:af:d2:e9:13:5a:69:33:83:33:46:ae: 1d:f4:75:bc:9a:d3:22:73:dd:43:b6:9a:6c:ab:4f:02:ed:32: 2b:9f:04:1b:21:af:95:7b:ba:3c:7b:fb:b8:a8:b5:5a:91:86: a2:dd:1e:fa:96:a8:e0:c8:d1:d8:62:c9:4c:01:16:5c:23:a6: b2:7a:1b:9f:b4:e0:66:d7:88:21:71:b7:6c:3f:16:25:b8:97: 67:7e:5c:49:57:74:6b:0a:29:90:ae:be:05:d0:90:f8:f6:90: f5:60:3c:27:58:86:65:cc:8f:be:40:bd:33:f3:96:28:5f:1d: 90:ae:68:49 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt6W2qhxw4NI5AHILBgApdAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZjYyNTYyY2FlODczZjRmYzRhMzIzMmJmNDlkZDUzNDNiNzA4NGY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8yTM9a8VlZopW2rPLyMWJ+UAkEu yw8bwTsMNl+FUB1B2SpHgtpBFGCQcvqeEwZjj6PxSJW1UOZWxfYYlMlm/b6bWSip kmMw4ZIkhJUs3tVktutWIhJ+sxGaewmJ8WC4N9AH3W7mmbsKPo+IUhPt3zNMwkjS L2R71+Pciufgf//Xbue8dkWlCztd0jjAsiocMZ6j/eCz3+K/Pn1wPrGfxx0LpE6f dO5INoTGahl1Qm+Kap3jZiFyJb8pqh21hi3171CDb6titc30KtXN6X2EQOIa8uKc LbmwxUHu+4rxLNWMwHBzg4eAnTvjJ0r8xZDrhr0NqtgAZAQUNUVmEhHqVwIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFP9iViyuhz9PxKMjK/Sd1TQ7cIT5MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E2LzNkYzNj NC05YzQ4LTRhNjQtOGZhMS04OGY3YjkxYjZlMzIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTYvM2RjM2M0 LTljNDgtNGE2NC04ZmExLTg4ZjdiOTFiNmUzMi8xL18ySldMSzZIUDBfRW95TXI5 SjNWTkR0d2hQay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCubt4MA0EAgACMAcDBQAqC56AMA0GCSqGSIb3 DQEBCwUAA4IBAQCT9jR8I3EydpIttpKPqf/rdhW5ACR9TXGv801BBYJTcdMKR/al 3W076yYKFP9X7eUu4DH24sDKy8LnJ0URc9IiVxiwt7EvqAALrJT+0/RxrPeS42tI YKxGlDANWnYMjAvfft69ICF0x1Lg0LRkmTMMCzILRuDXRkzPdhrntfCeV0jOR7Fx r9LpE1ppM4MzRq4d9HW8mtMic91Dtppsq08C7TIrnwQbIa+Ve7o8e/u4qLVakYai 3R76lqjgyNHYYslMARZcI6ayehuftOBm14ghcbdsPxYluJdnflxJV3RrCimQrr4F 0JD49pD1YDwnWIZlzI++QL0z85YoXx2QrmhJ -----END CERTIFICATE-----Generated at Sun Jan 25 12:11:03 2026 by rpki-client