This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/J1FtIOvv0S8HLUE8TSYGvbJYaRo.cer File: J1FtIOvv0S8HLUE8TSYGvbJYaRo.cer (raw, json) Hash identifier: Y+ot1oziJwpJsdUJk+Gvzl9ePoRat7huSgb9V1L892o= Subject key identifier: 27:51:6D:20:EB:EF:D1:2F:07:2D:41:3C:4D:26:06:BD:B2:58:69:1A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA360FF85CB69323389ACDDFE1D75E4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:17:43 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.190.46.0/23 IP: 193.238.68.0/22 IP: 2a13:8400::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:60:ff:85:cb:69:32:33:89:ac:dd:fe:1d:75:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=27516d20ebefd12f072d413c4d2606bdb258691a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:08:e0:75:90:e1:c1:7d:5b:19:46:a6:e9:3c: 26:de:5b:38:c4:54:f8:ba:08:d5:04:aa:ff:26:0a: 7b:5c:9d:ea:e3:c0:ca:7b:70:b8:be:9d:ff:0f:3e: 96:6e:98:c0:da:dc:1f:5a:74:ce:71:22:19:81:e2: 05:98:82:72:3a:67:9e:40:af:e7:e6:9b:b3:b5:53: 8f:00:18:22:94:f2:27:67:13:76:66:c9:1f:cc:5b: f5:4e:0e:26:0b:19:32:ad:68:e2:5a:c9:91:02:4a: 45:01:cb:55:40:44:d8:a6:1e:48:f5:e9:0f:07:96: 0a:ea:d4:24:e4:a5:f6:df:af:cd:69:32:bb:e4:1f: 84:42:88:2d:1e:65:9d:dc:44:13:e4:e5:7e:80:fa: 26:06:1d:75:3c:42:1e:5a:6a:29:cc:c0:bd:b5:20: cf:99:32:4f:b4:0c:cb:b6:a9:ca:1a:c6:88:2f:65: 72:45:67:25:c5:ba:3b:71:b7:ad:66:2c:67:b8:48: 8e:d6:cb:42:f8:00:76:17:75:d2:14:fa:97:17:73: f3:e5:d9:fd:0d:1c:76:20:63:a3:64:2f:e3:5d:29: 00:35:ab:92:ee:6c:a2:09:37:26:5d:de:e5:0f:05: d0:80:b3:3a:24:b7:5e:1a:6d:cd:ff:10:29:03:6d: 74:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:51:6D:20:EB:EF:D1:2F:07:2D:41:3C:4D:26:06:BD:B2:58:69:1A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.190.46.0/23 193.238.68.0/22 IPv6: 2a13:8400::/32 Signature Algorithm: sha256WithRSAEncryption 20:d3:4e:c1:f5:e5:d2:96:c0:68:38:d3:be:87:cf:ba:da:6c: 14:81:8c:9c:9c:97:ab:2e:29:a2:09:9e:16:3a:d9:f6:08:08: 9a:ca:1d:52:3e:6b:d4:ee:ab:b5:82:8a:b2:d1:23:5b:9c:ff: 37:f1:46:b0:87:08:38:30:e2:dd:4b:4f:ac:2b:24:f3:0d:33: 3e:e3:e4:5c:f8:5c:c4:72:48:f7:22:20:b2:71:62:73:08:a8: aa:57:54:e7:8d:38:12:ac:d1:c4:2d:77:2e:8a:44:02:07:3b: ed:76:47:58:b6:10:72:a8:e9:8d:79:2f:d0:6d:3f:8e:09:8a: ab:06:ea:5e:3a:31:52:74:ff:ea:6a:0a:6a:6d:bd:d3:92:bd: 4e:4d:86:4c:b6:ef:34:ea:90:e1:07:14:c1:18:14:1b:15:4f: 34:43:10:6f:5b:40:cf:e9:69:ed:bc:c8:01:f6:5f:d5:89:36: e5:27:9a:6f:7e:7a:08:10:e6:4f:98:00:00:52:28:d8:c9:59: d5:37:f6:d6:f4:4f:28:16:e5:f8:0c:78:c7:f5:40:d3:76:e6: 5d:55:90:14:b9:5d:3e:e5:a1:1c:bb:7e:26:da:b7:c7:37:47: ff:a9:57:72:81:cd:7f:a4:a3:cb:f7:45:dd:07:21:a3:50:e0: 7d:2e:c4:25 -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgISAZt7o2D/hctpMjOJrN3+HXXkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNzUxNmQyMGViZWZkMTJmMDcyZDQxM2M0ZDI2MDZiZGIyNTg2OTFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1AjgdZDhwX1bGUam6Twm3ls4xFT4 ugjVBKr/Jgp7XJ3q48DKe3C4vp3/Dz6WbpjA2twfWnTOcSIZgeIFmIJyOmeeQK/n 5puztVOPABgilPInZxN2ZskfzFv1Tg4mCxkyrWjiWsmRAkpFActVQETYph5I9ekP B5YK6tQk5KX236/NaTK75B+EQogtHmWd3EQT5OV+gPomBh11PEIeWmopzMC9tSDP mTJPtAzLtqnKGsaIL2VyRWclxbo7cbetZixnuEiO1stC+AB2F3XSFPqXF3Pz5dn9 DRx2IGOjZC/jXSkANauS7myiCTcmXd7lDwXQgLM6JLdeGm3N/xApA210JQIDAQAB o4ICmTCCApUwHQYDVR0OBBYEFCdRbSDr79EvBy1BPE0mBr2yWGkaMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFjLzU5ZDgw OC0xNTRmLTQyYWUtYWY4Zi03OTAyNDQ1MDhkZjQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWMvNTlkODA4 LTE1NGYtNDJhZS1hZjhmLTc5MDI0NDUwOGRmNC8xL0oxRnRJT3Z2MFM4SExVRThU U1lHdmJKWWFSby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQBub4uAwQCwe5EMA0EAgACMAcDBQAqE4QAMA0G CSqGSIb3DQEBCwUAA4IBAQAg007B9eXSlsBoONO+h8+62mwUgYycnJerLimiCZ4W Otn2CAiayh1SPmvU7qu1goqy0SNbnP838Uawhwg4MOLdS0+sKyTzDTM+4+Rc+FzE ckj3IiCycWJzCKiqV1TnjTgSrNHELXcuikQCBzvtdkdYthByqOmNeS/QbT+OCYqr BupeOjFSdP/qagpqbb3Tkr1OTYZMtu806pDhBxTBGBQbFU80QxBvW0DP6WntvMgB 9l/ViTblJ5pvfnoIEOZPmAAAUijYyVnVN/bW9E8oFuX4DHjH9UDTduZdVZAUuV0+ 5aEcu34m2rfHN0f/qVdygc1/pKPL90XdByGjUOB9LsQl -----END CERTIFICATE-----Generated at Mon Jan 26 06:22:19 2026 by rpki-client