This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2J8W9XSSQzePgUyUskA010s5J98.cer File: 2J8W9XSSQzePgUyUskA010s5J98.cer (raw, json) Hash identifier: X9/TqCEE0cHnxcQFcWVBEKdo7nIF5+ZfVHCX5+lytEw= Subject key identifier: D8:9F:16:F5:74:92:43:37:8F:81:4C:94:B2:40:34:D7:4B:39:27:DF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA48D8215BC43BDE7A6ACB5F66EAF6A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/32/797e65-3da0-4d6e-b695-346bd973c843/1/2J8W9XSSQzePgUyUskA010s5J98.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/32/797e65-3da0-4d6e-b695-346bd973c843/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:17:51 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 215915 IP: 117.18.102.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:8d:82:15:bc:43:bd:e7:a6:ac:b5:f6:6e:af:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d89f16f5749243378f814c94b24034d74b3927df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:84:e2:c3:97:9a:84:c9:0e:e9:03:70:1a:2b: c5:12:1b:45:69:6d:32:bd:3e:d5:df:b5:c9:6c:43: 74:8d:51:b1:b3:31:19:53:95:ab:ef:79:9d:ab:e6: 8e:87:3f:38:a4:e8:a9:93:d4:1b:42:17:81:74:e0: 79:63:76:cb:76:e1:32:67:d0:a7:e5:7e:79:a4:ad: 93:6d:af:39:19:a0:7e:df:64:d5:43:fe:57:a0:4e: ce:c8:5c:8c:8e:d6:18:dd:ad:d9:f6:22:94:58:6a: 3a:d5:5d:55:2a:bf:a3:02:96:33:0f:38:c6:ba:1a: 87:af:e1:00:ca:43:0c:6a:e8:21:91:bc:11:7c:9e: c9:5d:aa:88:bc:20:38:be:43:79:09:95:27:36:4c: 37:6e:c0:e4:ba:c9:0e:94:45:fc:c8:b5:1e:9a:c2: 71:cf:30:59:98:99:d3:84:ae:b7:c1:f1:0e:50:36: 24:10:a5:3d:23:ba:08:43:df:0d:8f:1d:a3:36:6d: 4c:aa:65:2f:05:28:f0:6f:75:cf:c1:56:c8:50:a5: 2d:5c:5a:e6:d2:38:62:dc:f7:95:53:9d:20:58:08: 51:de:27:c9:1e:7c:64:09:d9:02:8a:60:c1:b9:6a: d7:82:bb:05:52:50:1e:e1:3e:b3:d1:af:8a:2e:1a: 06:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:9F:16:F5:74:92:43:37:8F:81:4C:94:B2:40:34:D7:4B:39:27:DF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/797e65-3da0-4d6e-b695-346bd973c843/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/797e65-3da0-4d6e-b695-346bd973c843/1/2J8W9XSSQzePgUyUskA010s5J98.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 117.18.102.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 215915 Signature Algorithm: sha256WithRSAEncryption 81:80:4e:b6:a1:f6:34:63:06:66:49:f0:ad:9a:9e:c1:7b:91: 4f:c8:ab:48:9e:9e:8b:3a:53:b2:2d:b6:c8:b2:dd:85:13:79: 66:f0:d5:82:3f:bc:af:1b:f6:81:44:65:bb:db:cc:e4:83:ee: 6a:93:f7:0e:f6:07:ed:de:e4:08:15:d9:0d:ac:31:04:4e:8c: f6:01:67:e9:ea:91:14:65:81:4a:16:98:bb:9c:5f:54:d2:1a: 0e:b9:c0:e0:82:1d:f9:ed:60:6a:10:1b:76:b4:fb:cd:5c:e9: a7:e7:e9:83:34:d3:50:c6:fd:e2:f8:21:f3:00:34:88:03:80: dc:6d:68:db:5b:0e:db:7b:bc:0b:96:ee:b5:56:01:2f:d5:32: b1:5e:aa:9f:73:5f:92:63:55:a4:a9:d6:c2:5b:32:0b:eb:e5: a7:49:23:9d:71:bf:ab:34:32:da:58:f3:f1:d8:d0:ce:09:f9: 2b:9c:ed:cf:04:2f:9c:8e:4f:34:11:17:d0:e4:94:98:8a:25: 3f:3e:2a:1b:24:e7:4b:49:a5:95:57:8e:d3:93:02:a7:25:c4: 57:a2:1d:4c:e5:71:fd:6a:49:f7:8d:77:02:bd:53:87:46:f0: 7b:9e:a8:63:ba:e6:fa:7d:94:69:36:6e:07:04:ee:44:2a:81: aa:cd:76:43 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt+pI2CFbxDveemrLX2bq9qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkODlmMTZmNTc0OTI0MzM3OGY4MTRjOTRiMjQwMzRkNzRiMzkyN2RmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApITiw5eahMkO6QNwGivFEhtFaW0y vT7V37XJbEN0jVGxszEZU5Wr73mdq+aOhz84pOipk9QbQheBdOB5Y3bLduEyZ9Cn 5X55pK2Tba85GaB+32TVQ/5XoE7OyFyMjtYY3a3Z9iKUWGo61V1VKr+jApYzDzjG uhqHr+EAykMMaughkbwRfJ7JXaqIvCA4vkN5CZUnNkw3bsDkuskOlEX8yLUemsJx zzBZmJnThK63wfEOUDYkEKU9I7oIQ98Njx2jNm1MqmUvBSjwb3XPwVbIUKUtXFrm 0jhi3PeVU50gWAhR3ifJHnxkCdkCimDBuWrXgrsFUlAe4T6z0a+KLhoGhwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFNifFvV0kkM3j4FMlLJANNdLOSffMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMyLzc5N2U2 NS0zZGEwLTRkNmUtYjY5NS0zNDZiZDk3M2M4NDMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzIvNzk3ZTY1 LTNkYTAtNGQ2ZS1iNjk1LTM0NmJkOTczYzg0My8xLzJKOFc5WFNTUXplUGdVeVVz a0EwMTBzNUo5OC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAdRJmMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwNLazANBgkqhkiG9w0BAQsFAAOCAQEAgYBOtqH2NGMGZknwrZqewXuRT8irSJ6e izpTsi22yLLdhRN5ZvDVgj+8rxv2gURlu9vM5IPuapP3DvYH7d7kCBXZDawxBE6M 9gFn6eqRFGWBShaYu5xfVNIaDrnA4IId+e1gahAbdrT7zVzpp+fpgzTTUMb94vgh 8wA0iAOA3G1o21sO23u8C5butVYBL9UysV6qn3NfkmNVpKnWwlsyC+vlp0kjnXG/ qzQy2ljz8djQzgn5K5ztzwQvnI5PNBEX0OSUmIolPz4qGyTnS0mllVeO05MCpyXE V6IdTOVx/WpJ9413Ar1Th0bwe56oY7rm+n2UaTZuBwTuRCqBqs12Qw== -----END CERTIFICATE-----Generated at Mon Jan 26 03:10:25 2026 by rpki-client