This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/J5O96Uauk208rME2pfMjnt8kMfQ.cer File: J5O96Uauk208rME2pfMjnt8kMfQ.cer (raw, json) Hash identifier: 1uQQ1wV7rF/Wei390HiAamzObnILtxey6qUFvHAu2Go= Subject key identifier: 27:93:BD:E9:46:AE:93:6D:3C:AC:C1:36:A5:F3:23:9E:DF:24:31:F4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E3868F6A213C3CD80F20CF1579B44BC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:44 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 81.31.198.0/24 IP: 91.188.252.0/22 IP: 2a0b:8dc0::/29 IP: 2a0f:6840::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:68:f6:a2:13:c3:cd:80:f2:0c:f1:57:9b:44:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2793bde946ae936d3cacc136a5f3239edf2431f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:a9:dd:ee:9c:6c:3c:d8:f5:1c:a3:f8:37:f3: 51:84:26:01:ec:90:03:b0:79:e3:75:8e:89:33:84: 15:0e:24:ac:5e:ac:5e:d5:4f:a9:35:23:ce:2d:f1: 55:d1:d0:51:c5:55:9f:b3:27:c7:82:d3:07:ef:52: 4a:6c:1c:46:e1:3b:5d:a3:d3:60:1a:02:51:bd:ff: 91:92:a8:1e:22:76:f8:40:c1:f5:41:eb:15:3f:5c: 0b:c0:01:e1:df:86:72:99:10:a0:99:5a:ba:f9:89: 53:0e:5d:ab:1b:df:fe:ae:24:29:a5:60:b6:46:20: 67:58:e3:53:bc:04:6c:d9:12:64:53:12:68:ca:76: dc:a5:72:b4:78:1d:05:e9:9c:64:95:dc:c5:8c:16: 15:1c:fb:85:68:43:8a:56:f0:4a:d5:2e:15:bb:96: c6:2f:c9:74:fd:d6:ea:ac:24:85:90:55:e1:d5:72: fc:91:c5:52:f9:24:cc:88:98:37:3a:78:32:f4:d6: b2:38:0b:cb:4c:e1:5d:9b:2d:2e:50:6f:5e:27:50: 07:34:c2:be:4a:32:53:3b:5d:dc:c8:98:15:1d:5b: e6:14:6a:74:e8:93:a4:a8:84:ba:74:a0:34:2d:4b: 97:e8:89:e3:e9:35:a2:50:ae:e4:c5:75:58:6f:5f: f1:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:93:BD:E9:46:AE:93:6D:3C:AC:C1:36:A5:F3:23:9E:DF:24:31:F4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.31.198.0/24 91.188.252.0/22 IPv6: 2a0b:8dc0::/29 2a0f:6840::/29 Signature Algorithm: sha256WithRSAEncryption 81:7f:b6:4f:b5:a5:bf:da:59:e1:66:45:18:30:a1:12:c7:df: 4b:45:07:ee:14:6c:5c:6e:56:73:96:26:a1:1a:83:55:17:9e: 20:bf:7a:8c:2d:6b:0d:f9:32:aa:51:40:8d:f2:25:c0:1b:14: 0e:b9:3c:0b:1a:c6:4e:58:76:95:bd:21:dd:62:08:d6:97:d1: 78:0b:14:11:44:d4:4f:79:fb:7c:5f:50:9a:d2:e6:fc:90:d1: 3b:5a:5f:f2:ee:48:d2:e2:b4:17:1e:00:3d:6b:a5:a3:13:72: 3f:80:ed:b5:63:33:e5:83:59:a6:8b:35:38:f4:f8:96:4a:69: 46:98:6d:f5:87:cc:99:61:cb:ea:dc:d6:19:ae:d0:80:89:fa: c2:c9:7e:f2:d1:cd:89:05:76:a3:3f:a5:32:09:74:c3:9e:72: 24:73:ab:6a:92:4c:45:1f:a7:a6:d7:fd:db:f9:3f:a0:40:6d: a3:0a:d6:e8:a2:a2:96:bf:c4:af:58:5a:46:8f:d4:5c:6b:dd: a8:6b:ba:3d:77:ef:80:34:ed:10:c2:9b:f3:7f:c1:fa:1c:82: ae:0e:b6:88:03:92:f1:d2:aa:0f:e8:cb:54:04:29:b2:4f:f3: ad:e7:74:c3:2c:cc:67:86:39:af:e7:1b:1b:5f:1f:0f:ed:15: b7:85:06:34 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt+OGj2ohPDzYDyDPFXm0S8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNzkzYmRlOTQ2YWU5MzZkM2NhY2MxMzZhNWYzMjM5ZWRmMjQzMWY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzqnd7pxsPNj1HKP4N/NRhCYB7JAD sHnjdY6JM4QVDiSsXqxe1U+pNSPOLfFV0dBRxVWfsyfHgtMH71JKbBxG4Ttdo9Ng GgJRvf+RkqgeInb4QMH1QesVP1wLwAHh34ZymRCgmVq6+YlTDl2rG9/+riQppWC2 RiBnWONTvARs2RJkUxJoynbcpXK0eB0F6ZxkldzFjBYVHPuFaEOKVvBK1S4Vu5bG L8l0/dbqrCSFkFXh1XL8kcVS+STMiJg3Ongy9NayOAvLTOFdmy0uUG9eJ1AHNMK+ SjJTO13cyJgVHVvmFGp06JOkqIS6dKA0LUuX6Inj6TWiUK7kxXVYb1/xoQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFCeTvelGrpNtPKzBNqXzI57fJDH0MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzlmL2JmNThk YS1hOWQyLTQyMWEtYjQzYS05MmMzYmY3NGE5N2IvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWYvYmY1OGRh LWE5ZDItNDIxYS1iNDNhLTkyYzNiZjc0YTk3Yi8xL0o1Tzk2VWF1azIwOHJNRTJw Zk1qbnQ4a01mUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDsGCCsGAQUF BwEHAQH/BCwwKjASBAIAATAMAwQAUR/GAwQCW7z8MBQEAgACMA4DBQMqC43AAwUD Kg9oQDANBgkqhkiG9w0BAQsFAAOCAQEAgX+2T7Wlv9pZ4WZFGDChEsffS0UH7hRs XG5Wc5YmoRqDVReeIL96jC1rDfkyqlFAjfIlwBsUDrk8CxrGTlh2lb0h3WII1pfR eAsUEUTUT3n7fF9QmtLm/JDRO1pf8u5I0uK0Fx4APWuloxNyP4DttWMz5YNZpos1 OPT4lkppRpht9YfMmWHL6tzWGa7QgIn6wsl+8tHNiQV2oz+lMgl0w55yJHOrapJM RR+nptf92/k/oEBtowrW6KKilr/Er1haRo/UXGvdqGu6PXfvgDTtEMKb83/B+hyC rg62iAOS8dKqD+jLVAQpsk/zred0wyzMZ4Y5r+cbG18fD+0Vt4UGNA== -----END CERTIFICATE-----Generated at Sun Jan 25 23:35:33 2026 by rpki-client