This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/g2pzvtdapO-ld-2QrTVi4hlR0bI.cer File: g2pzvtdapO-ld-2QrTVi4hlR0bI.cer (raw, json) Hash identifier: vYcKin+SKsJP5b/P0Vnes9VgVLI3FZcT1bD/Pi0uvLQ= Subject key identifier: 83:6A:73:BE:D7:5A:A4:EF:A5:77:ED:90:AD:35:62:E2:19:51:D1:B2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B791046415B282B2BFEB1221990CCD506 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/70/ab34ad-9e9a-4289-8727-b1acd75018c3/1/g2pzvtdapO-ld-2QrTVi4hlR0bI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/70/ab34ad-9e9a-4289-8727-b1acd75018c3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:17:48 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 200797 IP: 185.95.212.0/22 IP: 2a05:fc40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 19:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:46:41:5b:28:2b:2b:fe:b1:22:19:90:cc:d5:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=836a73bed75aa4efa577ed90ad3562e21951d1b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:87:86:93:c8:91:02:a2:a7:60:f0:5c:02:9c: 6e:ae:94:5d:ac:a3:00:0f:28:37:93:5d:93:aa:26: 22:83:9f:3e:df:65:34:fc:e6:af:e8:67:10:9f:f7: 7b:3a:49:45:ef:4b:e8:61:c8:8b:94:27:fe:b0:77: d0:e0:2f:65:11:0e:8e:e5:91:e8:b9:b1:ac:d2:45: 0e:20:1d:77:8a:a2:ad:17:b1:64:15:13:d6:0a:f4: d9:19:32:b0:8f:51:84:37:7c:e7:25:6e:72:be:e9: b6:78:50:2e:6f:11:3c:87:38:0a:e5:65:1b:94:7e: 09:a8:bc:bd:7f:49:6a:ea:30:0b:8f:e8:c9:31:3c: ea:41:2c:fe:b1:36:43:50:a7:4f:91:6d:b5:da:8f: 05:ff:98:2b:04:ec:a9:b8:98:1b:95:46:5d:60:4e: 39:f7:c6:11:4e:8d:b4:49:9b:e3:e8:74:ce:4d:ba: 62:74:92:59:42:44:27:32:b5:0b:3b:c6:64:55:82: 9c:1c:4f:70:ef:87:c3:f3:1f:f2:05:87:f2:fa:91: 8b:90:d5:7c:e6:3e:91:b4:d0:48:bc:54:94:5a:e1: a4:c9:3b:d6:7d:04:8f:48:b9:f4:8b:87:10:41:e5: 81:55:e2:e4:26:60:5d:62:5c:c3:91:e8:b4:5e:86: e5:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:6A:73:BE:D7:5A:A4:EF:A5:77:ED:90:AD:35:62:E2:19:51:D1:B2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/ab34ad-9e9a-4289-8727-b1acd75018c3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/ab34ad-9e9a-4289-8727-b1acd75018c3/1/g2pzvtdapO-ld-2QrTVi4hlR0bI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.95.212.0/22 IPv6: 2a05:fc40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 200797 Signature Algorithm: sha256WithRSAEncryption 7a:f8:ca:d8:50:ef:b9:0c:2e:e6:65:e2:24:b8:66:fa:11:9b: 3c:42:9c:87:0f:e5:9b:94:0b:bf:28:ef:4a:c7:19:84:c5:67: b6:20:02:04:6b:2f:91:95:dc:f3:f7:01:bf:b6:6c:d1:61:62: 47:da:d3:f8:b9:79:2f:93:f7:84:2d:b9:0a:62:57:37:b8:34: ed:7c:1a:59:e6:2e:50:85:67:88:da:05:e8:b2:c9:87:ba:be: bc:7e:b3:ce:c2:88:a7:05:6a:fa:2a:14:80:a4:49:56:c6:b2: 41:b4:59:56:1f:19:a3:d3:72:68:7c:39:3d:c7:58:80:9d:7f: a3:b1:c2:61:d9:a0:ff:51:13:e4:bf:e7:7a:54:5f:e0:08:28: 72:60:49:6d:2b:34:74:81:b3:c5:c3:14:52:9f:f5:31:8b:9f: 13:1e:64:55:e7:92:46:22:3b:b6:8f:e3:ee:7f:f3:43:6a:e0: 6e:d9:0d:7d:20:42:ff:08:56:6c:b0:cb:b6:da:0d:85:6a:1b: 1c:31:64:96:d1:0a:a6:3e:aa:a4:fb:b2:c6:c5:c3:b1:dc:6d: e1:84:fc:0f:1d:82:8c:85:2e:a1:26:0f:b2:88:65:5a:2e:a3: eb:da:5a:a9:06:2a:68:0a:8c:14:d6:fd:40:eb:90:26:12:2e: 07:68:e3:b3 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt5EEZBWygrK/6xIhmQzNUGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MzZhNzNiZWQ3NWFhNGVmYTU3N2VkOTBhZDM1NjJlMjE5NTFkMWIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+IeGk8iRAqKnYPBcApxurpRdrKMA Dyg3k12TqiYig58+32U0/Oav6GcQn/d7OklF70voYciLlCf+sHfQ4C9lEQ6O5ZHo ubGs0kUOIB13iqKtF7FkFRPWCvTZGTKwj1GEN3znJW5yvum2eFAubxE8hzgK5WUb lH4JqLy9f0lq6jALj+jJMTzqQSz+sTZDUKdPkW212o8F/5grBOypuJgblUZdYE45 98YRTo20SZvj6HTOTbpidJJZQkQnMrULO8ZkVYKcHE9w74fD8x/yBYfy+pGLkNV8 5j6RtNBIvFSUWuGkyTvWfQSPSLn0i4cQQeWBVeLkJmBdYlzDkei0XoblhwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFINqc77XWqTvpXftkK01YuIZUdGyMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzcwL2FiMzRh ZC05ZTlhLTQyODktODcyNy1iMWFjZDc1MDE4YzMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzAvYWIzNGFk LTllOWEtNDI4OS04NzI3LWIxYWNkNzUwMThjMy8xL2cycHp2dGRhcE8tbGQtMlFy VFZpNGhsUjBiSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuV/UMA0EAgACMAcDBQMqBfxAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMQXTANBgkqhkiG9w0BAQsFAAOCAQEAevjK2FDvuQwu 5mXiJLhm+hGbPEKchw/lm5QLvyjvSscZhMVntiACBGsvkZXc8/cBv7Zs0WFiR9rT +Ll5L5P3hC25CmJXN7g07XwaWeYuUIVniNoF6LLJh7q+vH6zzsKIpwVq+ioUgKRJ VsayQbRZVh8Zo9NyaHw5PcdYgJ1/o7HCYdmg/1ET5L/nelRf4AgocmBJbSs0dIGz xcMUUp/1MYufEx5kVeeSRiI7to/j7n/zQ2rgbtkNfSBC/whWbLDLttoNhWobHDFk ltEKpj6qpPuyxsXDsdxt4YT8Dx2CjIUuoSYPsohlWi6j69paqQYqaAqMFNb9QOuQ JhIuB2jjsw== -----END CERTIFICATE-----Generated at Fri Jan 2 23:24:33 2026 by rpki-client