This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/x2FQMdCo4Cv1jvx_IzCvPWWVTvw.cer File: x2FQMdCo4Cv1jvx_IzCvPWWVTvw.cer (raw, json) Hash identifier: uaeCmpH2779JmtsrOufxux07qTlt7ZtMAevErS0QcF8= Subject key identifier: C7:61:50:31:D0:A8:E0:2B:F5:8E:FC:7F:23:30:AF:3D:65:95:4E:FC Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB283CA17474BBD19887156B23C038 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/1/C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/1/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:01 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 211374 AS: 213525 AS: 214498 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:28:3c:a1:74:74:bb:d1:98:87:15:6b:23:c0:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c7615031d0a8e02bf58efc7f2330af3d65954efc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:bf:16:f8:c1:52:1b:ec:b2:f2:c0:42:0d:0a: 68:60:58:13:89:9d:b2:e6:b8:e2:12:2e:01:d5:6e: d9:45:51:0d:12:cd:c1:12:61:f5:2f:50:db:4e:df: 43:00:e3:22:b9:0b:d8:59:ac:4c:e0:c4:2f:2c:43: 4c:43:7b:d0:88:8f:01:e8:f1:c0:22:79:92:fc:86: 8d:27:32:97:19:50:bd:f5:45:43:b9:18:38:87:54: b0:5a:b6:68:fe:c5:94:60:11:3c:1f:41:71:c6:4f: e4:6d:a7:43:03:d5:fc:98:ff:60:a2:46:50:79:0e: 36:5a:c8:8c:d6:a9:bd:69:e1:ab:51:ec:db:a6:ea: f3:ec:ef:16:34:f9:60:2e:d9:b5:5b:70:e6:98:10: 4f:ca:10:65:72:92:af:84:53:17:43:f3:d4:23:f1: 10:35:ad:d1:7c:a8:37:15:c7:e1:df:1b:22:ed:a9: b7:00:cd:fa:a8:91:f6:82:32:c4:5a:d4:39:2d:76: 56:c5:1a:84:6d:ac:3a:20:0b:ae:e8:e6:aa:30:bc: 95:89:b9:19:94:e8:ba:58:7c:f9:6e:aa:cc:9c:c3: 14:68:b5:d2:3e:c3:ec:84:93:88:8f:48:88:4d:08: 83:eb:18:98:a2:73:5f:bd:e7:dd:50:ec:64:da:84: 7d:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:61:50:31:D0:A8:E0:2B:F5:8E:FC:7F:23:30:AF:3D:65:95:4E:FC X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/1/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/1/C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 211374 213525 214498 Signature Algorithm: sha256WithRSAEncryption 5e:7d:0a:4c:aa:53:23:a0:03:fd:83:c6:8f:fa:fb:e5:8d:c7: 2a:09:b5:db:2a:e0:c4:b7:cf:49:c5:e3:a5:fb:69:99:1d:0c: ed:75:30:ec:4d:78:19:18:87:de:74:e9:3c:ca:8c:ac:a9:11: 52:bb:7d:e9:1e:b5:76:57:7c:8a:de:ea:5d:c6:a4:ab:4a:6f: 53:f2:65:ce:5e:60:cc:d4:7c:40:8b:61:03:a6:24:fe:bf:8a: 58:69:fc:ba:56:b6:5b:55:e8:ca:df:93:89:62:32:71:e4:dc: a3:23:ca:9d:78:da:11:59:d2:b8:ac:b2:9e:6a:ef:ec:b1:86: 7b:b9:ac:db:b7:7f:80:74:cf:77:5b:03:9b:76:9e:10:ff:61: 38:04:ee:3c:cc:17:fa:75:fb:02:76:4e:59:a3:1a:e0:ad:79: 93:c1:7e:29:2b:75:da:41:90:82:ef:4e:5f:cb:08:86:3e:ef: 78:0c:08:fd:a9:00:35:b7:25:d6:49:48:dc:ff:93:6a:03:6f: be:ec:25:b1:0b:15:b4:f8:83:58:e3:0c:3d:38:ad:36:5b:ad: 8e:b3:3f:ef:db:45:1a:82:9a:92:97:6d:9b:e2:42:21:a3:23: b8:67:00:1a:79:c9:08:ce:7b:53:04:08:52:b5:c2:61:08:8e: ae:d6:a0:53 -----BEGIN CERTIFICATE----- MIIFmTCCBIGgAwIBAgISAZt26yg8oXR0u9GYhxVrI8A4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNzYxNTAzMWQwYThlMDJiZjU4ZWZjN2YyMzMwYWYzZDY1OTU0ZWZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA378W+MFSG+yy8sBCDQpoYFgTiZ2y 5rjiEi4B1W7ZRVENEs3BEmH1L1DbTt9DAOMiuQvYWaxM4MQvLENMQ3vQiI8B6PHA InmS/IaNJzKXGVC99UVDuRg4h1SwWrZo/sWUYBE8H0Fxxk/kbadDA9X8mP9gokZQ eQ42WsiM1qm9aeGrUezbpurz7O8WNPlgLtm1W3DmmBBPyhBlcpKvhFMXQ/PUI/EQ Na3RfKg3Fcfh3xsi7am3AM36qJH2gjLEWtQ5LXZWxRqEbaw6IAuu6OaqMLyVibkZ lOi6WHz5bqrMnMMUaLXSPsPshJOIj0iITQiD6xiYonNfvefdUOxk2oR9vQIDAQAB o4ICpTCCAqEwHQYDVR0OBBYEFMdhUDHQqOAr9Y78fyMwrz1llU78MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUx ODEwLTE5ODctNDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8xLzCBiwYIKwYBBQUHMAqG f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODRk NTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2NGY0LzEvQzc2MTUwMzFEMEE4 RTAyQkY1OEVGQzdGMjMzMEFGM0Q2NTk1NEVGQy5tZnQwPAYIKwYBBQUHMA2GMGh0 dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAkBggrBgEFBQcBCAEB/wQVMBOgETAPAgMDOa4C AwNCFQIDA0XiMA0GCSqGSIb3DQEBCwUAA4IBAQBefQpMqlMjoAP9g8aP+vvljccq CbXbKuDEt89JxeOl+2mZHQztdTDsTXgZGIfedOk8yoysqRFSu33pHrV2V3yK3upd xqSrSm9T8mXOXmDM1HxAi2EDpiT+v4pYafy6VrZbVejK35OJYjJx5NyjI8qdeNoR WdK4rLKeau/ssYZ7uazbt3+AdM93WwObdp4Q/2E4BO48zBf6dfsCdk5ZoxrgrXmT wX4pK3XaQZCC705fywiGPu94DAj9qQA1tyXWSUjc/5NqA2++7CWxCxW0+INY4ww9 OK02W62Osz/v20UagpqSl22b4kIhoyO4ZwAaeckIzntTBAhStcJhCI6u1qBT -----END CERTIFICATE-----Generated at Sun Jan 25 21:37:34 2026 by rpki-client