This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer File: J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer (raw, json) Hash identifier: n/ap4drzpAf7/c9xhrlX15v5fXzjpiw2Zwor3KN89y0= Subject key identifier: 27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB47AAB0B9328E7B058D3C9E4349D3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:09 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 12880 AS: 60148 AS: 210548 IP: 2.176.0.0/12 IP: 78.38.0.0/15 IP: 80.191.0.0/16 IP: 85.185.0.0/16 IP: 185.57.200.0/22 IP: 195.146.32.0/19 IP: 217.218.0.0/15 IP: 2001:4188::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:47:aa:b0:b9:32:8e:7b:05:8d:3c:9e:43:49:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=27a39e4794c34612e7f22569b1a6a81710260ae5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d6:14:4e:ee:c5:f8:ee:07:34:24:81:71:08: 81:23:91:33:7c:ff:34:af:e8:61:aa:1f:63:b5:69: ec:47:b1:d4:ee:c2:97:27:b8:d0:f9:4a:c7:2d:d4: 16:db:c3:b7:85:85:05:36:62:35:6e:d5:cb:dc:b6: f2:d4:0a:4e:7c:a0:5a:de:2e:14:ea:1a:e4:16:8c: e7:f4:53:07:34:00:e2:cd:e8:5a:1e:f2:1d:46:7a: 79:3d:c4:e1:8e:cb:02:40:92:9a:b5:36:6b:8f:72: 72:fb:33:2f:35:d4:f5:68:c8:01:24:79:bc:0f:d4: 11:34:35:59:16:f3:0c:54:aa:67:65:79:6c:98:4a: a4:d7:a8:fc:9b:ea:91:09:57:40:68:ec:d9:a2:bd: fd:17:2d:79:f7:8a:c9:d7:8c:6e:fc:12:32:a8:0b: 45:4f:81:62:84:fc:1e:16:61:86:d7:8a:c0:78:fd: b2:cd:5c:67:c6:a0:f4:95:fa:ba:96:c9:21:fa:9a: a1:c8:86:98:49:88:a1:0a:b2:d6:c9:3e:cc:03:7e: 0b:f1:89:17:44:a4:55:de:0b:b1:e1:fd:ad:a1:83: 10:f2:c7:b0:24:8f:e9:0b:f2:f3:d7:e4:e0:72:f9: d1:ea:82:e0:3a:f5:df:84:70:08:6f:36:49:29:63: 66:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.176.0.0/12 78.38.0.0/15 80.191.0.0/16 85.185.0.0/16 185.57.200.0/22 195.146.32.0/19 217.218.0.0/15 IPv6: 2001:4188::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 12880 60148 210548 Signature Algorithm: sha256WithRSAEncryption 42:1f:1a:a8:cd:29:32:24:1e:29:8c:3c:bd:a8:b2:b3:38:bc: 78:e0:44:c9:93:71:06:74:5b:36:98:41:55:69:ca:74:0d:93: 5a:f4:60:48:af:f5:45:58:4a:c8:52:b2:e0:d7:6b:23:9c:1b: cb:2d:2a:c2:cc:8a:9e:ac:4e:52:f3:df:a3:e7:52:f1:c8:fe: 0d:c0:ac:dd:19:f8:a6:fc:5e:53:d1:af:7e:17:d3:6a:be:14: 9f:5e:1c:d3:13:bd:da:ca:ed:d1:26:95:bc:ad:76:ae:65:96: 47:1e:a9:03:ac:2b:34:05:6f:36:05:f7:cf:a8:68:69:e0:e8: 0e:ed:3c:21:3f:49:6b:df:49:34:66:10:eb:d7:23:c8:6c:a2: 40:0a:47:9d:b5:62:72:5f:0d:43:81:a9:85:da:a8:c5:c8:0a: 37:12:91:33:67:90:0e:26:58:41:46:c2:05:e4:5b:27:19:9f: 58:b0:03:2f:eb:d1:30:9a:fa:4a:44:60:f7:df:37:ed:c8:ad: 8c:89:30:33:ab:d2:3b:99:ef:cd:a3:a2:e4:d9:ee:34:c4:da: 51:f3:63:e4:ae:21:af:48:96:78:22:d8:9f:da:a3:64:73:f8: e3:11:ac:df:8a:8d:03:3e:54:42:b5:f6:f2:43:4a:0e:f8:e7: b8:9b:11:5f -----BEGIN CERTIFICATE----- MIIFyzCCBLOgAwIBAgISAZt260eqsLkyjnsFjTyeQ0nTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyN2EzOWU0Nzk0YzM0NjEyZTdmMjI1NjliMWE2YTgxNzEwMjYwYWU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNYUTu7F+O4HNCSBcQiBI5EzfP80 r+hhqh9jtWnsR7HU7sKXJ7jQ+UrHLdQW28O3hYUFNmI1btXL3Lby1ApOfKBa3i4U 6hrkFozn9FMHNADizehaHvIdRnp5PcThjssCQJKatTZrj3Jy+zMvNdT1aMgBJHm8 D9QRNDVZFvMMVKpnZXlsmEqk16j8m+qRCVdAaOzZor39Fy1594rJ14xu/BIyqAtF T4FihPweFmGG14rAeP2yzVxnxqD0lfq6lskh+pqhyIaYSYihCrLWyT7MA34L8YkX RKRV3gux4f2toYMQ8sewJI/pC/Lz1+TgcvnR6oLgOvXfhHAIbzZJKWNmMQIDAQAB o4IC1zCCAtMwHQYDVR0OBBYEFCejnkeUw0YS5/IlabGmqBcQJgrlMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQwLzM4ZmMz My0wNmMxLTQwMDYtOWUyMy1mNzRkOTUxODU3NmMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDAvMzhmYzMz LTA2YzEtNDAwNi05ZTIzLWY3NGQ5NTE4NTc2Yy8xL0o2T2VSNVREUmhMbjhpVnBz YWFvRnhBbUN1VS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CME0GCCsGAQUF BwEHAQH/BD4wPDArBAIAATAlAwMEArADAwFOJgMDAFC/AwMAVbkDBAK5OcgDBAXD kiADAwHZ2jANBAIAAjAHAwUDIAFBiDAjBggrBgEFBQcBCAEB/wQUMBKgEDAOAgIy UAIDAOr0AgMDNnQwDQYJKoZIhvcNAQELBQADggEBAEIfGqjNKTIkHimMPL2osrM4 vHjgRMmTcQZ0WzaYQVVpynQNk1r0YEiv9UVYSshSsuDXayOcG8stKsLMip6sTlLz 36PnUvHI/g3ArN0Z+Kb8XlPRr34X02q+FJ9eHNMTvdrK7dEmlbytdq5llkceqQOs KzQFbzYF98+oaGng6A7tPCE/SWvfSTRmEOvXI8hsokAKR521YnJfDUOBqYXaqMXI CjcSkTNnkA4mWEFGwgXkWycZn1iwAy/r0TCa+kpEYPffN+3IrYyJMDOr0juZ782j ouTZ7jTE2lHzY+SuIa9Ilngi2J/ao2Rz+OMRrN+KjQM+VEK19vJDSg7457ibEV8= -----END CERTIFICATE-----Generated at Sun Jan 25 17:18:38 2026 by rpki-client