This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kR2gx6mUBcRrqthMudk-g0WZyOE.cer File: kR2gx6mUBcRrqthMudk-g0WZyOE.cer (raw, json) Hash identifier: 2v2X7wfI+7j1p+z06l/3QrfMTDJ1JYORgWpv8KOXvRc= Subject key identifier: 91:1D:A0:C7:A9:94:05:C4:6B:AA:D8:4C:B9:D9:3E:83:45:99:C8:E1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7910496DBC3E25D08192BC1A70669151 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/kR2gx6mUBcRrqthMudk-g0WZyOE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:17:49 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 201031 IP: 185.88.24.0/22 IP: 2a03:7d60::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:49:6d:bc:3e:25:d0:81:92:bc:1a:70:66:91:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=911da0c7a99405c46baad84cb9d93e834599c8e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ad:8b:60:ab:26:65:da:2e:bf:32:d9:29:a2: 80:bc:27:3d:c0:f5:12:7f:10:28:2c:1e:d2:5d:4c: 7d:6d:23:58:00:ee:04:bb:42:b4:31:dc:b2:13:8d: c6:b6:08:bf:bf:49:f7:0e:ce:de:c4:2d:a0:c4:96: 52:07:9d:43:82:d7:1c:41:69:df:db:c9:e8:26:2c: a4:29:da:59:59:d1:26:6f:27:38:1a:d1:1f:98:7c: 30:9e:41:b8:e1:37:29:bb:e1:11:70:1f:2c:52:40: b0:ab:b0:2b:1a:01:37:81:ff:6c:79:f3:48:ae:81: 8d:63:6c:dc:ca:75:22:e8:d4:b0:c9:cf:2a:59:22: 72:1b:f8:18:13:02:6c:6c:13:bb:7b:24:c4:be:1d: 1c:c4:94:a7:6b:f9:1e:fd:4a:98:6f:52:ad:6f:a7: 35:b5:15:f1:74:1d:98:a0:bf:28:0e:83:d7:5c:cc: 45:b6:2d:e3:5d:ea:6f:90:f9:77:bf:e3:b4:ce:b0: 8b:7d:ef:af:67:68:18:2d:c4:d4:6b:6b:b1:18:c2: 16:1f:57:18:ce:5f:f7:62:e5:2a:b4:9c:71:5c:3b: fd:d6:57:af:e1:23:13:e5:43:be:71:68:5a:9d:50: 6b:4e:ed:48:c8:56:2b:09:85:94:c4:45:3e:ba:af: 90:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:1D:A0:C7:A9:94:05:C4:6B:AA:D8:4C:B9:D9:3E:83:45:99:C8:E1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/kR2gx6mUBcRrqthMudk-g0WZyOE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.88.24.0/22 IPv6: 2a03:7d60::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 201031 Signature Algorithm: sha256WithRSAEncryption 79:cb:c1:36:67:90:63:39:ce:1c:f4:83:cd:47:e0:fd:12:8d: fe:72:13:c9:e6:d6:9b:a3:05:87:83:1a:48:39:5f:66:eb:a4: cb:34:40:f9:ed:30:81:8f:d7:42:3e:2a:81:9f:8a:e4:84:6d: 1b:62:9c:9a:b4:af:d1:c5:2b:fb:90:68:68:6a:55:4c:ab:8a: b0:7f:80:a4:1d:ce:29:3b:64:aa:a9:31:20:ad:7b:f6:cc:54: 28:e6:e8:f4:f2:c5:58:20:30:47:94:47:c4:33:f1:bf:18:78: b3:ef:d5:6b:7f:d7:f5:20:d0:9b:9a:7a:f2:bc:1b:cb:8c:9d: 03:af:08:9e:38:b8:1e:3b:fa:91:0d:f4:25:37:a7:14:bd:7a: d0:7f:a8:f7:13:a4:5b:b1:f0:46:f3:50:86:23:c8:7a:ea:43: 5e:9e:56:fc:79:07:8c:f5:2b:47:f6:bf:8b:e0:6e:fe:23:5a: ab:91:cf:e4:d0:1f:26:c7:36:81:8c:e0:1a:77:ce:d8:35:26: 37:06:ee:19:10:9d:4d:19:5d:0c:89:0e:cf:81:48:47:e3:43: 2d:07:9e:40:83:2b:33:0a:89:6b:58:48:11:b2:6d:6c:e1:42: 17:e9:1b:b9:6d:92:94:02:01:a2:ec:99:d5:e5:21:1a:04:b5: fc:39:95:af -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt5EEltvD4l0IGSvBpwZpFRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MTFkYTBjN2E5OTQwNWM0NmJhYWQ4NGNiOWQ5M2U4MzQ1OTljOGUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAta2LYKsmZdouvzLZKaKAvCc9wPUS fxAoLB7SXUx9bSNYAO4Eu0K0MdyyE43Gtgi/v0n3Ds7exC2gxJZSB51DgtccQWnf 28noJiykKdpZWdEmbyc4GtEfmHwwnkG44Tcpu+ERcB8sUkCwq7ArGgE3gf9sefNI roGNY2zcynUi6NSwyc8qWSJyG/gYEwJsbBO7eyTEvh0cxJSna/ke/UqYb1Ktb6c1 tRXxdB2YoL8oDoPXXMxFti3jXepvkPl3v+O0zrCLfe+vZ2gYLcTUa2uxGMIWH1cY zl/3YuUqtJxxXDv91lev4SMT5UO+cWhanVBrTu1IyFYrCYWUxEU+uq+Q1QIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFJEdoMeplAXEa6rYTLnZPoNFmcjhMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRiLzJjN2Fj My1lZWRmLTQ1NWItOWU5NC00NzJmMDI0NTBlYzMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGIvMmM3YWMz LWVlZGYtNDU1Yi05ZTk0LTQ3MmYwMjQ1MGVjMy8xL2tSMmd4Nm1VQmNScnF0aE11 ZGstZzBXWnlPRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuVgYMA0EAgACMAcDBQAqA31gMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMRRzANBgkqhkiG9w0BAQsFAAOCAQEAecvBNmeQYznO HPSDzUfg/RKN/nITyebWm6MFh4MaSDlfZuukyzRA+e0wgY/XQj4qgZ+K5IRtG2Kc mrSv0cUr+5BoaGpVTKuKsH+ApB3OKTtkqqkxIK179sxUKObo9PLFWCAwR5RHxDPx vxh4s+/Va3/X9SDQm5p68rwby4ydA68Inji4Hjv6kQ30JTenFL160H+o9xOkW7Hw RvNQhiPIeupDXp5W/HkHjPUrR/a/i+Bu/iNaq5HP5NAfJsc2gYzgGnfO2DUmNwbu GRCdTRldDIkOz4FIR+NDLQeeQIMrMwqJa1hIEbJtbOFCF+kbuW2SlAIBouyZ1eUh GgS1/DmVrw== -----END CERTIFICATE-----Generated at Mon Jan 26 07:30:45 2026 by rpki-client