This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/J0hJVnNlSeqzsG4jqricpZk6gHY.cer File: J0hJVnNlSeqzsG4jqricpZk6gHY.cer (raw, json) Hash identifier: oGTXBQDPigY1gTnRrSzRnACkThT3ty0qwf+L7SWymq4= Subject key identifier: 27:48:49:56:73:65:49:EA:B3:B0:6E:23:AA:B8:9C:A5:99:3A:80:76 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EAB56CD11E8B474266EB4118FC982C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/J0hJVnNlSeqzsG4jqricpZk6gHY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:17:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 45.84.100.0/22 IP: 2a10:3b00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:b5:6c:d1:1e:8b:47:42:66:eb:41:18:fc:98:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=27484956736549eab3b06e23aab89ca5993a8076 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:2d:64:2a:2d:e1:26:50:a2:dd:5f:7e:be:29: 78:66:19:c6:03:6f:6e:a8:75:f2:c5:4f:45:a6:c7: d5:9c:8e:f0:22:7e:80:1e:f2:ac:a9:1c:7a:aa:88: 60:2d:86:09:9e:e9:ae:a6:c7:cc:7c:0e:c9:37:c7: 7a:cf:88:04:ea:d4:b6:11:36:84:ad:3e:5e:a7:a0: 16:5b:2a:2a:df:b3:35:a3:88:7e:2b:5b:52:e0:60: cb:76:c3:c1:54:db:30:90:f1:06:88:4d:27:bf:3a: 2a:cc:10:2e:d8:62:5d:04:b8:08:ac:70:33:69:22: d7:0d:c0:bd:ba:c5:ec:5d:db:58:6d:85:f4:ed:05: 44:22:0a:ff:bd:09:89:23:d0:cd:ea:ff:f6:00:02: da:39:f3:d2:46:db:98:48:94:fc:1d:08:ff:1d:b2: 76:e5:90:76:70:81:32:62:7d:d9:77:18:64:98:70: 91:82:93:ee:e7:4e:a9:71:fa:92:40:18:79:05:af: 7c:c5:51:af:47:1e:6f:64:aa:83:e2:94:95:7b:86: 6b:8a:58:af:aa:b2:52:10:43:00:2e:23:af:68:f2: f5:81:c5:52:a7:1a:06:ad:8e:40:a7:9e:82:ac:41: 62:52:4e:e2:4f:c3:d1:0e:d0:03:14:39:ac:6e:22: 36:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:48:49:56:73:65:49:EA:B3:B0:6E:23:AA:B8:9C:A5:99:3A:80:76 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/J0hJVnNlSeqzsG4jqricpZk6gHY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.84.100.0/22 IPv6: 2a10:3b00::/29 Signature Algorithm: sha256WithRSAEncryption 72:f2:4c:72:c8:c6:b5:49:7a:14:a8:13:b8:a0:a7:78:c0:c8: 7c:28:9e:7e:80:af:78:c3:d5:9f:7c:e2:14:b4:b9:8d:61:82: 02:60:a9:0e:64:23:cf:c3:ce:ac:9e:63:5b:c0:99:55:92:33: 41:c3:3d:cf:3a:b8:fd:71:5e:9f:b8:cd:cc:44:0d:00:41:a8: 48:84:58:51:69:64:fa:24:ca:28:2f:a6:39:d5:80:91:1d:94: af:6c:24:3e:a6:ae:d6:89:e2:15:33:a3:90:0a:d7:ba:ca:fe: f2:17:e1:12:77:7f:b6:de:43:4f:33:db:2d:95:36:2b:5d:f0: e8:cf:43:a4:2b:c2:31:ec:cf:15:6c:be:e5:07:96:a7:ca:fc: fa:13:0a:35:4e:83:0e:ce:88:95:18:03:0f:b3:45:af:7c:20: 01:cc:61:ba:a4:85:95:d0:06:36:92:c2:14:d0:6f:ad:e5:64: 93:47:74:52:ec:5e:f6:c3:99:bb:ff:57:14:7b:a8:28:59:69: 2b:0b:b0:01:c7:52:8d:ee:c0:b5:6d:2f:65:b6:4c:9f:ef:c2: 7a:70:94:cb:cb:b2:c8:0b:bc:f4:01:35:32:1a:0c:0a:c7:b1: 3f:8b:f2:fe:78:b4:34:63:fd:35:86:3f:99:b2:4a:ec:aa:84: 5e:16:4a:22 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt26rVs0R6LR0Jm60EY/JgsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNzQ4NDk1NjczNjU0OWVhYjNiMDZlMjNhYWI4OWNhNTk5M2E4MDc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvi1kKi3hJlCi3V9+vil4ZhnGA29u qHXyxU9FpsfVnI7wIn6AHvKsqRx6qohgLYYJnumupsfMfA7JN8d6z4gE6tS2ETaE rT5ep6AWWyoq37M1o4h+K1tS4GDLdsPBVNswkPEGiE0nvzoqzBAu2GJdBLgIrHAz aSLXDcC9usXsXdtYbYX07QVEIgr/vQmJI9DN6v/2AALaOfPSRtuYSJT8HQj/HbJ2 5ZB2cIEyYn3ZdxhkmHCRgpPu506pcfqSQBh5Ba98xVGvRx5vZKqD4pSVe4Zriliv qrJSEEMALiOvaPL1gcVSpxoGrY5Ap56CrEFiUk7iT8PRDtADFDmsbiI2swIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFCdISVZzZUnqs7BuI6q4nKWZOoB2MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYwL2RlZTU3 OC1mMmM2LTQxYzAtYjcyOC1hZDE2M2FiMzU0YzgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjAvZGVlNTc4 LWYyYzYtNDFjMC1iNzI4LWFkMTYzYWIzNTRjOC8xL0owaEpWbk5sU2VxenNHNGpx cmljcFprNmdIWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCLVRkMA0EAgACMAcDBQMqEDsAMA0GCSqGSIb3 DQEBCwUAA4IBAQBy8kxyyMa1SXoUqBO4oKd4wMh8KJ5+gK94w9WffOIUtLmNYYIC YKkOZCPPw86snmNbwJlVkjNBwz3POrj9cV6fuM3MRA0AQahIhFhRaWT6JMooL6Y5 1YCRHZSvbCQ+pq7WieIVM6OQCte6yv7yF+ESd3+23kNPM9stlTYrXfDoz0OkK8Ix 7M8VbL7lB5anyvz6Ewo1ToMOzoiVGAMPs0WvfCABzGG6pIWV0AY2ksIU0G+t5WST R3RS7F72w5m7/1cUe6goWWkrC7ABx1KN7sC1bS9ltkyf78J6cJTLy7LIC7z0ATUy GgwKx7E/i/L+eLQ0Y/01hj+ZskrsqoReFkoi -----END CERTIFICATE-----Generated at Sun Jan 25 15:55:14 2026 by rpki-client