This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98JWIDjwgdGNhSaUBxMcmEAD5XU.cer File: 98JWIDjwgdGNhSaUBxMcmEAD5XU.cer (raw, json) Hash identifier: tdA6C3NJX4CyHqEzdr6ZOyNxy8EPfI7qkqTYq/c2mlY= Subject key identifier: F7:C2:56:20:38:F0:81:D1:8D:85:26:94:07:13:1C:98:40:03:E5:75 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC8AA9E31DB4B98B10B9166E146718C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/22/5229b3-b873-4808-b9d2-ad094b314e0f/1/98JWIDjwgdGNhSaUBxMcmEAD5XU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/22/5229b3-b873-4808-b9d2-ad094b314e0f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:18:49 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.109.40.0/21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:05:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:aa:9e:31:db:4b:98:b1:0b:91:66:e1:46:71:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f7c2562038f081d18d85269407131c984003e575 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:67:09:b2:d8:9c:61:cc:5f:03:8f:4b:6d:7e: 2a:76:20:ae:f0:4f:74:4d:e7:0c:0f:77:50:d0:b5: 8b:d5:2f:79:5d:21:d5:b6:ab:3a:0c:a6:d2:9e:7e: f0:a9:e1:db:4b:48:0f:08:fd:06:dc:81:2f:77:1c: 0f:a8:a8:2b:2e:91:89:af:33:12:01:44:9f:d4:09: 9e:cf:f3:bc:91:25:59:8a:3d:e7:e7:cf:7a:2e:ad: b5:46:61:f9:fa:a9:1b:3c:6b:5e:d5:03:5d:43:26: eb:58:e2:bc:c7:45:e5:40:40:63:60:97:5d:7f:b0: ad:25:fe:70:85:96:79:06:4f:d4:46:8c:fe:06:13: d4:7c:cc:30:a5:91:23:96:13:d6:38:66:d6:e0:3e: 97:7d:c2:6f:7c:cc:ee:27:ca:6b:25:c1:b3:a8:b0: 24:c1:a5:ef:06:0f:fe:20:c5:5c:8d:79:1b:25:1e: 28:de:b4:f0:0a:fb:29:5a:b6:02:5d:86:f8:bc:03: 1e:d1:37:83:fe:fe:14:a5:73:82:a0:34:87:2e:5e: e4:f5:44:58:5d:82:bf:c4:5a:f3:6f:92:f1:a3:d7: 66:3a:73:75:e2:72:c7:f5:de:32:5f:ad:98:6a:e4: ae:c0:b3:9c:6d:13:cc:ee:4c:21:fd:51:f1:5b:d4: ad:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:C2:56:20:38:F0:81:D1:8D:85:26:94:07:13:1C:98:40:03:E5:75 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/5229b3-b873-4808-b9d2-ad094b314e0f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/5229b3-b873-4808-b9d2-ad094b314e0f/1/98JWIDjwgdGNhSaUBxMcmEAD5XU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.109.40.0/21 Signature Algorithm: sha256WithRSAEncryption 01:1b:a0:3e:2d:20:74:22:18:4a:f3:2a:cf:c3:b5:3b:70:5d: e6:ff:76:e6:cc:30:d1:13:de:fd:4e:4c:8f:67:91:f5:f5:fe: b4:a1:a8:08:5c:8a:7f:29:35:d5:86:10:0d:af:4b:41:89:57: 0e:51:f1:e8:62:fe:ad:96:06:04:dd:df:70:26:47:52:d3:4a: 5b:5b:8a:81:eb:15:b8:01:ab:33:2a:e8:a4:96:7c:9d:28:ba: 75:d3:e5:82:4d:fe:e8:28:fb:34:25:03:89:39:46:e0:44:d1: b9:be:7f:fd:f4:40:6b:d6:1b:a9:ea:df:3e:de:fb:76:00:f3: 6e:25:0c:83:44:85:6f:d0:fb:65:f7:c1:ae:13:b8:15:89:3e: d1:18:13:02:80:cd:7d:90:78:61:79:35:a8:4a:f8:6f:54:ce: b5:86:2a:d0:f8:e4:01:d3:af:6d:d3:b8:51:2c:51:0d:dd:40: 75:4d:f7:62:e1:80:98:91:7b:5d:98:fb:a7:1a:41:6e:ed:d1: 93:8f:2c:10:e9:2a:0a:e2:07:fa:ea:f5:a4:d6:a5:c9:87:72: 31:b6:fe:88:0d:ae:ae:ef:fe:81:ae:00:ea:67:4f:9e:b2:ff: 91:b4:a2:c2:4a:50:58:f4:3d:f1:60:75:19:9d:07:d7:13:3b: 53:cb:0e:e7 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt6yKqeMdtLmLELkWbhRnGMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmN2MyNTYyMDM4ZjA4MWQxOGQ4NTI2OTQwNzEzMWM5ODQwMDNlNTc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6GcJsticYcxfA49LbX4qdiCu8E90 TecMD3dQ0LWL1S95XSHVtqs6DKbSnn7wqeHbS0gPCP0G3IEvdxwPqKgrLpGJrzMS AUSf1Amez/O8kSVZij3n5896Lq21RmH5+qkbPGte1QNdQybrWOK8x0XlQEBjYJdd f7CtJf5whZZ5Bk/URoz+BhPUfMwwpZEjlhPWOGbW4D6XfcJvfMzuJ8prJcGzqLAk waXvBg/+IMVcjXkbJR4o3rTwCvspWrYCXYb4vAMe0TeD/v4UpXOCoDSHLl7k9URY XYK/xFrzb5Lxo9dmOnN14nLH9d4yX62YauSuwLOcbRPM7kwh/VHxW9StJwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFPfCViA48IHRjYUmlAcTHJhAA+V1MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzIyLzUyMjli My1iODczLTQ4MDgtYjlkMi1hZDA5NGIzMTRlMGYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjIvNTIyOWIz LWI4NzMtNDgwOC1iOWQyLWFkMDk0YjMxNGUwZi8xLzk4SldJRGp3Z2RHTmhTYVVC eE1jbUVBRDVYVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQDwW0oMA0GCSqGSIb3DQEBCwUAA4IBAQABG6A+ LSB0IhhK8yrPw7U7cF3m/3bmzDDRE979TkyPZ5H19f60oagIXIp/KTXVhhANr0tB iVcOUfHoYv6tlgYE3d9wJkdS00pbW4qB6xW4AaszKuiklnydKLp10+WCTf7oKPs0 JQOJOUbgRNG5vn/99EBr1hup6t8+3vt2APNuJQyDRIVv0Ptl98GuE7gViT7RGBMC gM19kHhheTWoSvhvVM61hirQ+OQB069t07hRLFEN3UB1Tfdi4YCYkXtdmPunGkFu 7dGTjywQ6SoK4gf66vWk1qXJh3Ixtv6IDa6u7/6BrgDqZ0+esv+RtKLCSlBY9D3x YHUZnQfXEztTyw7n -----END CERTIFICATE-----Generated at Mon Jan 26 17:29:48 2026 by rpki-client