This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2HcqrBtiuH1rAdV6GgCmpyuKfaY.cer File: 2HcqrBtiuH1rAdV6GgCmpyuKfaY.cer (raw, json) Hash identifier: 2rKDKRo+yf5ZVJj7Ly3EC52Uo1w7rR0h9dskOoYLVYA= Subject key identifier: D8:77:2A:AC:1B:62:B8:7D:6B:01:D5:7A:1A:00:A6:A7:2B:8A:7D:A6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA4E90209AE47E21B7243F8BBEB34A4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/2HcqrBtiuH1rAdV6GgCmpyuKfaY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:19:23 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 29601 IP: 139.123.0.0/16 IP: 193.24.64.0/21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:e9:02:09:ae:47:e2:1b:72:43:f8:bb:eb:34:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:19:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d8772aac1b62b87d6b01d57a1a00a6a72b8a7da6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d9:45:75:e9:fc:b2:2b:55:a6:99:66:50:ee: e9:2d:80:ad:20:be:dc:1c:d7:70:bf:a5:64:62:63: f6:dc:6c:56:9a:aa:da:49:93:41:7d:7e:0c:23:48: e4:b9:01:94:e4:2a:bc:95:94:78:38:83:eb:1e:25: d1:6a:50:d3:37:cc:d7:da:15:65:6e:62:04:ad:ef: 64:3c:e1:54:8a:9a:d8:af:c7:e6:38:54:c3:4b:17: b5:fb:59:9a:69:37:c1:c6:3c:cf:c3:cc:c6:36:d4: 42:41:2a:e7:d1:db:d1:07:05:58:4b:1f:dc:22:85: bd:64:ad:ee:f6:92:eb:a4:f1:f0:5c:7c:17:78:4d: 77:8f:cd:99:95:0b:b4:7e:92:78:a4:1a:79:3a:aa: 35:3e:2b:1a:a5:ed:57:ef:a1:0b:30:a5:59:15:96: 13:18:f0:c6:73:05:3d:3e:9f:9c:0f:da:5e:19:a7: a6:d0:44:4d:44:b2:fe:49:51:1d:83:fd:4a:1b:70: 68:2d:cd:dc:17:cb:66:43:a1:15:e5:82:de:ba:96: 7f:6a:20:a5:8b:d1:e9:89:eb:25:8c:25:7e:80:a3: a0:6e:6f:73:4f:d0:a6:f7:a2:73:79:fc:19:09:d3: 03:a2:0e:e6:fe:c6:7f:b8:dc:6a:77:8a:29:15:7d: 3b:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:77:2A:AC:1B:62:B8:7D:6B:01:D5:7A:1A:00:A6:A7:2B:8A:7D:A6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/2HcqrBtiuH1rAdV6GgCmpyuKfaY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.123.0.0/16 193.24.64.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 29601 Signature Algorithm: sha256WithRSAEncryption 6b:1e:da:1d:bd:b2:72:02:6a:84:72:b2:83:7e:01:b1:93:99: 4c:ae:25:d5:82:62:4c:86:19:39:c9:1d:b2:e4:d8:7b:f8:49: ea:68:52:82:f2:53:80:94:b5:0f:82:4e:ee:40:0c:91:9c:e1: f3:91:b4:60:e0:60:0d:c9:a8:9c:9c:56:18:3d:95:fa:ae:82: d5:09:26:96:6a:19:3f:8e:50:2b:f8:d4:d5:72:74:d7:16:52: 3a:46:61:c3:fb:8b:83:9c:e4:d3:c0:11:e9:64:12:95:04:dc: 14:2b:23:79:f2:11:79:1b:fc:68:93:72:e3:b5:8a:87:78:ad: d2:f4:31:1d:36:3f:41:72:cf:5a:23:8c:38:31:28:d4:85:19: 59:11:57:3c:f3:0b:9f:91:cd:f1:6b:87:03:0a:f6:a8:05:74: e4:be:e8:d4:21:76:b8:ef:8f:6e:cc:5e:33:24:39:56:a6:09: ed:c6:2d:45:f6:eb:08:b6:08:13:ab:c9:3e:78:52:8d:7f:a0: 24:06:c1:eb:c4:94:f2:99:c3:c5:5c:cd:a5:b3:c9:d9:6a:92: 3a:91:22:dc:b9:e4:b1:b1:2f:54:ac:00:c7:87:74:42:6f:9a: 3c:ee:a0:e5:4d:97:fe:0c:ac:e8:98:82:bf:39:98:49:12:42: 04:94:ed:1d -----BEGIN CERTIFICATE----- MIIFmDCCBICgAwIBAgISAZt7pOkCCa5H4htyQ/i76zSkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxOTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkODc3MmFhYzFiNjJiODdkNmIwMWQ1N2ExYTAwYTZhNzJiOGE3ZGE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNlFden8sitVpplmUO7pLYCtIL7c HNdwv6VkYmP23GxWmqraSZNBfX4MI0jkuQGU5Cq8lZR4OIPrHiXRalDTN8zX2hVl bmIEre9kPOFUiprYr8fmOFTDSxe1+1maaTfBxjzPw8zGNtRCQSrn0dvRBwVYSx/c IoW9ZK3u9pLrpPHwXHwXeE13j82ZlQu0fpJ4pBp5Oqo1Pisape1X76ELMKVZFZYT GPDGcwU9Pp+cD9peGaem0ERNRLL+SVEdg/1KG3BoLc3cF8tmQ6EV5YLeupZ/aiCl i9HpiesljCV+gKOgbm9zT9Cm96JzefwZCdMDog7m/sZ/uNxqd4opFX07YQIDAQAB o4ICpDCCAqAwHQYDVR0OBBYEFNh3KqwbYrh9awHVehoApqcrin2mMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUzLzYxNmE1 OC01MzQyLTQzMmMtYTljNS0zMzNiZWVjZmY2ZjQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTMvNjE2YTU4 LTUzNDItNDMyYy1hOWM1LTMzM2JlZWNmZjZmNC8xLzJIY3FyQnRpdUgxckFkVjZH Z0NtcHl1S2ZhWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCQGCCsGAQUF BwEHAQH/BBUwEzARBAIAATALAwMAi3sDBAPBGEAwGQYIKwYBBQUHAQgBAf8ECjAI oAYwBAICc6EwDQYJKoZIhvcNAQELBQADggEBAGse2h29snICaoRysoN+AbGTmUyu JdWCYkyGGTnJHbLk2Hv4SepoUoLyU4CUtQ+CTu5ADJGc4fORtGDgYA3JqJycVhg9 lfqugtUJJpZqGT+OUCv41NVydNcWUjpGYcP7i4Oc5NPAEelkEpUE3BQrI3nyEXkb /GiTcuO1iod4rdL0MR02P0Fyz1ojjDgxKNSFGVkRVzzzC5+RzfFrhwMK9qgFdOS+ 6NQhdrjvj27MXjMkOVamCe3GLUX26wi2CBOryT54Uo1/oCQGwevElPKZw8VczaWz ydlqkjqRIty55LGxL1SsAMeHdEJvmjzuoOVNl/4MrOiYgr85mEkSQgSU7R0= -----END CERTIFICATE-----Generated at Sun Jan 11 23:35:04 2026 by rpki-client