This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/g2Uo4VK23LoVcSQaxVvlvOARGLc.cer File: g2Uo4VK23LoVcSQaxVvlvOARGLc.cer (raw, json) Hash identifier: D4nE9zUAaa0Wv/NrS2zFu1cCEuyO/nayCnTxIZIkexE= Subject key identifier: 83:65:28:E1:52:B6:DC:BA:15:71:24:1A:C5:5B:E5:BC:E0:11:18:B7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA3D2AFCFEBC0DF8F62354296F25006 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:18:12 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 197991 IP: 5.144.144.0/21 IP: 149.126.32.0/20 IP: 178.132.56.0/21 IP: 185.198.100.0/22 IP: 2a0d:a5c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:d2:af:cf:eb:c0:df:8f:62:35:42:96:f2:50:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=836528e152b6dcba1571241ac55be5bce01118b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:55:64:c3:88:cb:47:53:ce:0b:49:43:76:8b: 14:c1:67:4d:10:02:43:9f:73:2c:eb:16:82:44:68: d9:14:7e:40:00:fe:60:0e:81:b9:95:0e:f6:c1:1b: 37:a7:ae:3a:f2:4d:ee:ab:57:bc:bf:62:99:db:2e: 19:29:74:db:31:dd:b4:fd:e8:c2:a0:e9:31:ce:dd: 95:4f:5d:78:83:8e:68:ad:79:81:73:9f:62:d2:4c: aa:2d:2e:06:1e:f0:64:49:de:6a:78:4d:7c:1a:ac: e1:73:bb:a4:fb:80:79:cc:31:66:60:7a:92:69:16: e1:19:8d:6c:d2:a7:78:ad:1d:e2:41:e5:84:e7:49: 91:40:c6:d5:9a:fe:cc:2a:af:c7:0b:56:ee:fc:cd: 52:a5:7e:dd:44:cd:ca:f3:d9:d8:b3:f2:61:9b:ff: 96:8c:6c:84:f2:b4:47:91:53:77:46:dc:ad:0c:86: d9:1d:8b:3c:e8:64:ad:a6:88:29:15:f6:db:37:71: 19:1a:42:81:11:ab:a4:4b:76:9c:3b:ab:df:41:b9: 95:36:2b:a6:45:14:c2:90:84:ff:4d:9f:28:da:e4: e9:af:35:5a:cc:20:7c:ea:c4:0f:c4:49:66:47:ed: 0b:c9:1d:2f:3f:c7:0d:28:ed:d2:bb:38:42:49:71: 7e:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:65:28:E1:52:B6:DC:BA:15:71:24:1A:C5:5B:E5:BC:E0:11:18:B7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.144.144.0/21 149.126.32.0/20 178.132.56.0/21 185.198.100.0/22 IPv6: 2a0d:a5c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 197991 Signature Algorithm: sha256WithRSAEncryption 26:35:32:9f:45:54:b5:81:90:e2:dd:be:06:46:5e:a3:3d:34: c5:41:84:ca:13:e4:2d:e0:b5:12:b9:47:e5:0f:d6:f0:9d:45: c1:9e:99:f3:e8:a7:fb:9e:ad:83:1c:ad:6a:bf:49:1b:4c:79: 78:dc:04:c1:eb:23:dd:aa:68:b4:23:32:e7:31:9b:50:95:1a: 8c:65:a3:4a:93:d8:07:c8:99:c0:21:44:8c:00:68:3c:f3:ef: 09:6b:c2:2c:76:65:b7:9c:14:65:f9:a6:30:82:61:f3:cd:11: fe:f6:27:04:49:59:05:34:43:f9:9b:41:00:d7:f2:5b:05:ea: 14:8c:59:94:33:3c:51:6b:52:65:ba:f6:36:5c:23:8d:ca:30: 28:60:89:4e:16:33:a7:28:60:cb:f9:09:42:45:10:56:40:cd: 9b:95:aa:20:12:18:c0:a3:1b:1d:b6:1c:2e:0c:e1:f1:7c:a4: 42:e9:c9:12:f2:c0:43:53:06:ee:dc:51:a1:cc:32:7e:e4:f5: fc:38:47:1f:5e:57:de:ca:f8:09:7f:b7:b1:d0:13:ad:1a:16: 01:fb:fb:e7:b1:dd:11:2a:71:fe:21:19:1e:27:1d:41:fc:25: 75:84:44:ce:68:31:c3:72:d0:1d:1e:1c:c2:76:60:5a:56:10: 4f:5e:a7:bf -----BEGIN CERTIFICATE----- MIIFtTCCBJ2gAwIBAgISAZt7o9Kvz+vA349iNUKW8lAGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MzY1MjhlMTUyYjZkY2JhMTU3MTI0MWFjNTViZTViY2UwMTExOGI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlVkw4jLR1POC0lDdosUwWdNEAJD n3Ms6xaCRGjZFH5AAP5gDoG5lQ72wRs3p6468k3uq1e8v2KZ2y4ZKXTbMd20/ejC oOkxzt2VT114g45orXmBc59i0kyqLS4GHvBkSd5qeE18Gqzhc7uk+4B5zDFmYHqS aRbhGY1s0qd4rR3iQeWE50mRQMbVmv7MKq/HC1bu/M1SpX7dRM3K89nYs/Jhm/+W jGyE8rRHkVN3RtytDIbZHYs86GStpogpFfbbN3EZGkKBEaukS3acO6vfQbmVNium RRTCkIT/TZ8o2uTprzVazCB86sQPxElmR+0LyR0vP8cNKO3SuzhCSXF+0wIDAQAB o4ICwTCCAr0wHQYDVR0OBBYEFINlKOFStty6FXEkGsVb5bzgERi3MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA0LzdjNzBm NC01ZjNhLTRmZDMtODgzYy1lYjk0MTVlYzU0OGEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDQvN2M3MGY0 LTVmM2EtNGZkMy04ODNjLWViOTQxNWVjNTQ4YS8xL2cyVW80VksyM0xvVmNTUWF4 VnZsdk9BUkdMYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF BwEHAQH/BDEwLzAeBAIAATAYAwQDBZCQAwQElX4gAwQDsoQ4AwQCucZkMA0EAgAC MAcDBQMqDaXAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMFZzANBgkqhkiG9w0B AQsFAAOCAQEAJjUyn0VUtYGQ4t2+BkZeoz00xUGEyhPkLeC1ErlH5Q/W8J1FwZ6Z 8+in+56tgxytar9JG0x5eNwEwesj3apotCMy5zGbUJUajGWjSpPYB8iZwCFEjABo PPPvCWvCLHZlt5wUZfmmMIJh880R/vYnBElZBTRD+ZtBANfyWwXqFIxZlDM8UWtS Zbr2NlwjjcowKGCJThYzpyhgy/kJQkUQVkDNm5WqIBIYwKMbHbYcLgzh8XykQunJ EvLAQ1MG7txRocwyfuT1/DhHH15X3sr4CX+3sdATrRoWAfv757HdESpx/iEZHicd QfwldYREzmgxw3LQHR4cwnZgWlYQT16nvw== -----END CERTIFICATE-----Generated at Sun Jan 25 23:33:35 2026 by rpki-client