This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer File: cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer (raw, json) Hash identifier: zwVF0BAE7oNms4M3wHlxoVWhfEpzKrq0n4p3zFE8lCs= Subject key identifier: 73:1D:9A:D4:04:EC:DA:FA:70:EA:9A:4C:9D:10:B9:80:18:29:EA:1F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B775914910D44D613D0188C4A994AAC6B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:18:05 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 51615 IP: 45.158.236.0/22 IP: 46.54.128.0/17 IP: 2a02:2590::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:14:91:0d:44:d6:13:d0:18:8c:4a:99:4a:ac:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=731d9ad404ecdafa70ea9a4c9d10b9801829ea1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ad:50:9a:8b:a2:a2:b7:ce:2b:ae:96:d4:87: 6b:55:d2:99:97:66:bc:ad:93:be:dd:47:ea:8c:d9: a1:da:80:53:be:d4:97:06:07:41:8d:7b:da:ff:42: 93:89:54:61:c3:72:d6:1b:21:99:f3:aa:b6:36:39: 42:4d:49:4a:35:8a:13:17:87:af:79:7c:e1:15:22: 14:22:d9:90:95:cf:19:24:cf:82:35:41:14:5f:ac: 76:7e:ad:e0:3d:dc:75:99:69:74:58:d4:13:1c:e2: 36:8d:af:ae:62:38:8c:8e:2d:21:62:5c:34:05:dd: 6a:6f:5c:02:23:24:14:52:6c:63:7a:38:a3:db:a9: 93:2d:74:5d:66:68:de:62:00:23:69:44:16:bf:f9: c1:7f:f1:1b:b5:93:16:36:2c:0d:88:35:b1:b6:ed: 2b:00:57:95:ef:71:b5:9a:e5:36:46:c4:0d:7a:0b: 9c:3f:8b:5d:48:33:bc:46:a7:66:31:8e:5d:4b:4e: 1a:62:eb:1e:51:f0:fc:47:ad:33:a2:06:c3:62:82: 4b:bb:a1:35:42:75:90:43:ef:c6:bf:fd:6d:f0:e1: d1:72:e4:fb:f9:d8:e5:49:7a:fe:c3:3b:8f:55:24: ee:02:66:8a:52:29:c6:dc:cf:2f:ae:8d:60:b7:1c: 12:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:1D:9A:D4:04:EC:DA:FA:70:EA:9A:4C:9D:10:B9:80:18:29:EA:1F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.158.236.0/22 46.54.128.0/17 IPv6: 2a02:2590::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 51615 Signature Algorithm: sha256WithRSAEncryption 06:f9:1e:6c:f5:5a:ad:61:7f:16:03:b5:de:8f:ff:c6:e2:62: 8a:e6:f8:0f:d8:ee:7a:d9:dd:3d:bb:9a:0b:b2:d4:6f:de:e5: d6:aa:33:da:67:b6:db:ef:b2:fe:b9:7b:2e:47:16:6c:b9:80: b2:9d:99:22:c2:61:a9:7a:95:dc:2d:7d:ca:b2:2f:e0:80:b6: 99:6e:c8:71:14:9d:ba:fd:76:ae:ae:c8:02:3d:69:60:37:cd: 08:cd:f1:7f:e6:ad:5a:d2:ca:c1:3e:ad:34:ab:36:e9:29:46: 7b:db:52:74:9a:ad:49:c8:70:98:71:fe:70:74:6c:59:40:97: 68:8a:40:c8:1a:4b:b1:7e:2b:1c:7a:00:9a:6d:02:56:56:e2: 3e:3d:e4:5b:36:0d:83:10:40:f7:3b:02:88:de:0e:47:92:49: 0a:7e:9c:0d:14:51:01:63:e0:62:8c:ed:08:16:02:6a:5c:2d: 85:67:df:cb:d6:b6:f7:ac:f4:b3:f2:1d:ef:90:6d:2a:26:0d: 38:20:f6:ee:b6:ed:a5:75:63:22:3c:ee:eb:0a:21:b4:a1:4a: f6:12:c6:b4:47:41:18:5e:fe:ad:ef:1c:0a:eb:58:2e:07:62: b3:19:b2:40:79:53:0a:77:58:28:5d:8c:bc:12:b6:28:00:da: b4:0a:9e:22 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt3WRSRDUTWE9AYjEqZSqxrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MzFkOWFkNDA0ZWNkYWZhNzBlYTlhNGM5ZDEwYjk4MDE4MjllYTFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlK1QmouiorfOK66W1IdrVdKZl2a8 rZO+3UfqjNmh2oBTvtSXBgdBjXva/0KTiVRhw3LWGyGZ86q2NjlCTUlKNYoTF4ev eXzhFSIUItmQlc8ZJM+CNUEUX6x2fq3gPdx1mWl0WNQTHOI2ja+uYjiMji0hYlw0 Bd1qb1wCIyQUUmxjejij26mTLXRdZmjeYgAjaUQWv/nBf/EbtZMWNiwNiDWxtu0r AFeV73G1muU2RsQNegucP4tdSDO8RqdmMY5dS04aYuseUfD8R60zogbDYoJLu6E1 QnWQQ+/Gv/1t8OHRcuT7+djlSXr+wzuPVSTuAmaKUinG3M8vro1gtxwSowIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFHMdmtQE7Nr6cOqaTJ0QuYAYKeofMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzIwLzQ0Mjlh NC0wYjM2LTRjZWQtODQ2Zi1lMjBhNjU0ZmNhOTUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjAvNDQyOWE0 LTBiMzYtNGNlZC04NDZmLWUyMGE2NTRmY2E5NS8xL2N4MmExQVRzMnZwdzZwcE1u UkM1Z0JncDZoOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCLZ7sAwQHLjaAMA0EAgACMAcDBQAqAiWQMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwDJnzANBgkqhkiG9w0BAQsFAAOCAQEABvke bPVarWF/FgO13o//xuJiiub4D9juetndPbuaC7LUb97l1qoz2me22++y/rl7LkcW bLmAsp2ZIsJhqXqV3C19yrIv4IC2mW7IcRSduv12rq7IAj1pYDfNCM3xf+atWtLK wT6tNKs26SlGe9tSdJqtSchwmHH+cHRsWUCXaIpAyBpLsX4rHHoAmm0CVlbiPj3k WzYNgxBA9zsCiN4OR5JJCn6cDRRRAWPgYoztCBYCalwthWffy9a296z0s/Id75Bt KiYNOCD27rbtpXVjIjzu6wohtKFK9hLGtEdBGF7+re8cCutYLgdisxmyQHlTCndY KF2MvBK2KADatAqeIg== -----END CERTIFICATE-----Generated at Mon Jan 26 05:36:03 2026 by rpki-client