This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2okNBdXIi33m9bqkwdCF_nMB9dU.cer File: 2okNBdXIi33m9bqkwdCF_nMB9dU.cer (raw, json) Hash identifier: AqmJYPkrz+urgJZShNdzNbttZJ7czs6kXkN0phxlb/0= Subject key identifier: DA:89:0D:05:D5:C8:8B:7D:E6:F5:BA:A4:C1:D0:85:FE:73:01:F5:D5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA529FE41D8A3DF6706BDC9DFB518AD Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/2okNBdXIi33m9bqkwdCF_nMB9dU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:18:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 194.0.235.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:29:fe:41:d8:a3:df:67:06:bd:c9:df:b5:18:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=da890d05d5c88b7de6f5baa4c1d085fe7301f5d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:43:4c:7c:dd:a3:62:98:0e:2f:97:73:cd:bd: 98:8c:4e:d6:7c:1f:a0:f9:8b:81:d4:c2:a3:a1:8e: ef:85:92:fe:23:6a:5c:8a:83:6b:a6:93:5a:fb:40: 8b:52:28:99:49:b3:91:0c:37:ed:06:70:d2:c1:b9: 08:ae:4e:6c:96:13:43:ac:d3:12:f2:ef:47:9b:7e: 36:cf:dc:9d:d3:8b:14:5a:e8:a0:48:26:d1:10:67: 91:59:00:d3:b8:20:46:1c:cc:fb:78:23:e2:81:b4: a7:fb:b8:a0:fb:0b:a3:d1:c8:5a:0f:e4:bb:f6:61: 9a:c1:78:85:fc:d1:8d:db:ad:36:16:de:f5:61:f2: 5e:11:42:5d:f0:d0:49:93:7b:0c:ed:f2:f7:fb:ba: 6f:be:cb:ba:4d:aa:73:74:90:e9:67:41:3a:7d:d5: e4:95:d0:f3:ce:52:ff:26:ff:07:96:84:b7:18:5e: 48:7c:f5:f1:22:75:0e:0e:a9:ec:ad:23:09:6c:0d: f7:77:e3:7d:cd:e8:39:08:df:5e:70:23:c6:a2:87: b6:c8:c3:17:04:cd:54:6b:0c:d6:54:cf:00:b7:77: 41:e1:bd:d1:a0:5b:ed:ec:8f:80:8c:80:8e:db:e5: a1:35:30:8b:96:04:f1:77:3f:b5:d0:7c:39:b0:ae: 2d:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:89:0D:05:D5:C8:8B:7D:E6:F5:BA:A4:C1:D0:85:FE:73:01:F5:D5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/2okNBdXIi33m9bqkwdCF_nMB9dU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.0.235.0/24 Signature Algorithm: sha256WithRSAEncryption 97:5e:76:1b:f7:04:d5:ff:77:15:75:1f:a3:ca:11:f9:11:ab: ec:51:16:4e:b8:0e:53:1b:63:cd:67:71:8f:65:15:73:5e:4c: 73:61:b3:e2:91:6d:89:2c:10:69:d2:c2:9b:34:94:f0:9b:e4: 39:ff:6e:6b:c6:d0:c6:7b:86:8b:7d:3b:53:a0:30:e3:27:e0: ac:34:da:e6:89:3a:19:0a:a0:71:07:33:36:e6:53:0c:2e:3e: 9e:ec:6e:62:5d:c8:77:e4:a7:8c:db:f8:c3:75:8c:50:c0:d6: ec:52:aa:fb:64:ac:19:fa:a2:48:3a:af:e6:14:6c:0b:1e:b9: 80:f7:e5:2c:97:f9:43:e2:21:f6:58:f7:39:a2:e9:18:14:c7: c1:e8:83:d5:ed:d1:0f:69:dd:0a:9a:e0:52:67:d2:6b:d5:c7: 93:3a:b1:8a:32:2a:a0:27:4c:19:c0:28:d0:f5:1c:72:1d:3c: 2b:44:b9:18:5c:a6:17:a6:9b:5a:57:d8:0e:30:9b:50:cc:64: c7:f2:27:77:81:65:db:75:88:d1:36:63:19:a9:d4:41:07:3f: 32:ed:f9:9c:20:09:85:59:59:55:b2:39:4d:07:e1:0e:41:e6: 2d:3e:51:5c:4a:c1:62:8b:77:31:78:1a:5c:b6:ef:0d:0a:1e: 5d:c6:bc:31 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt+pSn+Qdij32cGvcnftRitMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYTg5MGQwNWQ1Yzg4YjdkZTZmNWJhYTRjMWQwODVmZTczMDFmNWQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkNMfN2jYpgOL5dzzb2YjE7WfB+g +YuB1MKjoY7vhZL+I2pcioNrppNa+0CLUiiZSbORDDftBnDSwbkIrk5slhNDrNMS 8u9Hm342z9yd04sUWuigSCbREGeRWQDTuCBGHMz7eCPigbSn+7ig+wuj0chaD+S7 9mGawXiF/NGN2602Ft71YfJeEUJd8NBJk3sM7fL3+7pvvsu6TapzdJDpZ0E6fdXk ldDzzlL/Jv8HloS3GF5IfPXxInUODqnsrSMJbA33d+N9zeg5CN9ecCPGooe2yMMX BM1UawzWVM8At3dB4b3RoFvt7I+AjICO2+WhNTCLlgTxdz+10Hw5sK4txQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFNqJDQXVyIt95vW6pMHQhf5zAfXVMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU1L2E2NzQy MC1iMWI1LTQ0OTUtOTE3Ni1iNDgzNmJjMTY0YTEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTUvYTY3NDIw LWIxYjUtNDQ5NS05MTc2LWI0ODM2YmMxNjRhMS8xLzJva05CZFhJaTMzbTlicWt3 ZENGX25NQjlkVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwgDrMA0GCSqGSIb3DQEBCwUAA4IBAQCXXnYb 9wTV/3cVdR+jyhH5EavsURZOuA5TG2PNZ3GPZRVzXkxzYbPikW2JLBBp0sKbNJTw m+Q5/25rxtDGe4aLfTtToDDjJ+CsNNrmiToZCqBxBzM25lMMLj6e7G5iXch35KeM 2/jDdYxQwNbsUqr7ZKwZ+qJIOq/mFGwLHrmA9+Usl/lD4iH2WPc5oukYFMfB6IPV 7dEPad0KmuBSZ9Jr1ceTOrGKMiqgJ0wZwCjQ9RxyHTwrRLkYXKYXpptaV9gOMJtQ zGTH8id3gWXbdYjRNmMZqdRBBz8y7fmcIAmFWVlVsjlNB+EOQeYtPlFcSsFii3cx eBpctu8NCh5dxrwx -----END CERTIFICATE-----Generated at Sat Jan 10 03:57:22 2026 by rpki-client