This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0jcICZ96IFVktfjgXSF70vrk3og.cer File: 0jcICZ96IFVktfjgXSF70vrk3og.cer (raw, json) Hash identifier: W62mcqLLDLq5XmJZeuk8bmQMw0TVCjFi4p6H85n+3Pc= Subject key identifier: D2:37:08:09:9F:7A:20:55:64:B5:F8:E0:5D:21:7B:D2:FA:E4:DE:88 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B7114796B92A930B2936558D54000 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:31 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 58132 IP: 2001:678:594::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:71:14:79:6b:92:a9:30:b2:93:65:58:d5:40:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d23708099f7a205564b5f8e05d217bd2fae4de88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:ca:4c:4c:54:34:d2:d5:35:ba:f4:dd:bf:73: 0d:2d:52:60:76:6d:c6:7d:5a:da:70:6f:e1:d1:a6: 41:9a:b0:d2:64:1a:92:21:35:b2:54:88:66:d1:6a: f7:03:1a:de:99:50:00:a0:23:de:a9:79:53:69:c4: 3c:e1:5f:c5:fe:27:a3:b9:23:26:1c:ed:f7:0b:1a: e0:7c:dc:49:49:e7:14:be:d8:0e:56:bf:a1:7a:ea: f9:cb:44:c9:b5:18:7a:92:d6:73:96:b7:98:59:1d: a0:2e:73:19:07:4a:60:10:a4:7d:33:e5:2a:be:84: e2:0c:c3:fa:6f:62:e8:79:ae:a8:f4:6d:40:26:75: 80:8c:ec:1a:da:2d:ca:ea:f6:34:30:df:08:46:41: a3:8e:11:7f:79:cd:5b:db:20:80:53:6b:b6:b6:05: fc:ce:21:c7:1d:ca:96:25:90:24:ae:30:72:6d:5d: fb:99:d1:1b:27:2c:76:bf:41:52:72:e9:61:2d:78: c1:2d:df:a7:55:50:71:ab:c9:4c:2d:af:15:ad:77: 9b:dc:01:39:27:2c:35:c1:ba:81:fa:ab:f2:a7:fc: 1e:1f:71:42:36:49:95:73:3b:b0:14:8b:37:c4:1a: 79:79:59:cb:55:c0:d4:8a:02:d5:1e:4f:49:27:63: 1e:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:37:08:09:9F:7A:20:55:64:B5:F8:E0:5D:21:7B:D2:FA:E4:DE:88 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:594::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 58132 Signature Algorithm: sha256WithRSAEncryption 0a:ca:34:f1:71:b4:2d:f7:c3:46:a4:e0:1a:79:3f:78:f2:dd: 14:50:b8:d5:e8:fd:8c:8c:40:f4:c6:ca:78:c7:8f:76:13:3e: 9c:75:dd:c8:a8:f6:29:7e:7a:c5:48:f4:c1:37:df:e7:27:55: ce:28:6f:fa:53:ab:5d:31:63:ed:3b:cc:93:54:0a:01:e7:84: a3:b6:0d:2f:54:b9:7c:6b:ca:6b:82:35:7f:f3:4a:6d:4a:39: 87:e3:0f:20:c9:b2:30:15:15:d7:c4:26:02:32:4c:46:3e:f9: 9d:6b:a5:8c:83:04:07:8f:42:bb:ee:44:4c:b8:4a:e8:e9:9a: 37:f3:24:6c:61:29:f2:6d:96:90:35:20:e6:46:b1:a8:ea:10: 7d:cd:49:ba:e1:d4:07:94:cc:20:53:08:8c:81:45:11:93:6f: b3:bd:6c:cd:91:1c:b2:6b:13:53:80:51:58:c1:c5:ad:33:13: 9c:3b:ea:8c:e9:fd:f1:f9:67:f1:88:57:dc:c2:17:c6:f8:83: 52:44:6d:b5:db:3b:aa:12:6a:97:ed:1d:ad:79:83:73:0f:1d: 01:20:8d:cf:40:b4:18:18:7c:b5:c2:79:08:16:c2:32:91:ad: 9f:7e:fd:a7:b4:b5:bc:fe:3a:23:71:3e:aa:c5:67:05:ce:9c: 0a:bc:fa:9d -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZt6W3EUeWuSqTCyk2VY1UAAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMjM3MDgwOTlmN2EyMDU1NjRiNWY4ZTA1ZDIxN2JkMmZhZTRkZTg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/cpMTFQ00tU1uvTdv3MNLVJgdm3G fVracG/h0aZBmrDSZBqSITWyVIhm0Wr3AxremVAAoCPeqXlTacQ84V/F/iejuSMm HO33CxrgfNxJSecUvtgOVr+heur5y0TJtRh6ktZzlreYWR2gLnMZB0pgEKR9M+Uq voTiDMP6b2Loea6o9G1AJnWAjOwa2i3K6vY0MN8IRkGjjhF/ec1b2yCAU2u2tgX8 ziHHHcqWJZAkrjBybV37mdEbJyx2v0FSculhLXjBLd+nVVBxq8lMLa8VrXeb3AE5 Jyw1wbqB+qvyp/weH3FCNkmVczuwFIs3xBp5eVnLVcDUigLVHk9JJ2MekQIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFNI3CAmfeiBVZLX44F0he9L65N6IMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU4LzAxYjVh Zi1iNzc3LTRiNTktYTViMi01ZTk3ZjRhNTEyZTUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTgvMDFiNWFm LWI3NzctNGI1OS1hNWIyLTVlOTdmNGE1MTJlNS8xLzBqY0lDWjk2SUZWa3RmamdY U0Y3MHZyazNvZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAWUMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwDjFDANBgkqhkiG9w0BAQsFAAOCAQEACso08XG0LffDRqTgGnk/ePLdFFC4 1ej9jIxA9MbKeMePdhM+nHXdyKj2KX56xUj0wTff5ydVzihv+lOrXTFj7TvMk1QK AeeEo7YNL1S5fGvKa4I1f/NKbUo5h+MPIMmyMBUV18QmAjJMRj75nWuljIMEB49C u+5ETLhK6OmaN/MkbGEp8m2WkDUg5kaxqOoQfc1JuuHUB5TMIFMIjIFFEZNvs71s zZEcsmsTU4BRWMHFrTMTnDvqjOn98fln8YhX3MIXxviDUkRttds7qhJql+0drXmD cw8dASCNz0C0GBh8tcJ5CBbCMpGtn379p7S1vP46I3E+qsVnBc6cCrz6nQ== -----END CERTIFICATE-----Generated at Sun Jan 25 22:20:22 2026 by rpki-client