This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/J7ITMhmYnmoy1xFY0IUqUW62958.cer File: J7ITMhmYnmoy1xFY0IUqUW62958.cer (raw, json) Hash identifier: jjQhnuVBH88D+pNTHO+QmRalIh6cay8g+NDBLsLm12Y= Subject key identifier: 27:B2:13:32:19:98:9E:6A:32:D7:11:58:D0:85:2A:51:6E:B6:F7:9F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79101FA5B670E1E8F548FFA1EC6C28E3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d3/c66606-2ae8-4ada-b35b-c2e8a0303fc3/1/J7ITMhmYnmoy1xFY0IUqUW62958.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d3/c66606-2ae8-4ada-b35b-c2e8a0303fc3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:17:38 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 202675 IP: 185.17.106.0/23 IP: 185.56.218.0/23 IP: 2a02:5620::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:1f:a5:b6:70:e1:e8:f5:48:ff:a1:ec:6c:28:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=27b2133219989e6a32d71158d0852a516eb6f79f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b9:a5:9f:80:27:f6:04:e3:ba:4d:1c:e0:e1: 2f:4a:3c:c7:33:6f:a0:8b:87:a9:9c:ad:9c:db:61: 55:22:3a:e6:11:d9:e0:fb:44:76:ae:15:1d:41:8c: e1:5e:7e:37:9e:b5:4a:f8:f7:c4:23:31:b3:3d:5b: 86:70:ef:8d:c4:82:19:2c:2d:e2:eb:00:bc:4d:06: 3d:24:b0:77:be:84:62:ad:e3:7a:57:dc:19:a5:0d: 6d:f0:58:e6:6c:28:f8:40:9f:f7:b8:9f:ed:1d:71: 79:37:b0:e4:a4:2b:e4:fb:7b:a7:3f:fb:8c:98:fa: ab:d1:3c:2e:4d:ed:cb:1b:70:fb:86:8c:0d:d6:61: 89:22:6d:d7:ef:67:08:5a:b3:e4:ad:b1:c6:d1:ef: 15:9f:45:01:f1:31:66:02:63:26:eb:81:e2:44:8c: 58:ea:b8:52:54:1c:92:c5:8f:c4:e3:0f:5a:19:8c: 79:11:3e:a4:1d:f9:6f:96:d2:0d:b2:37:16:fa:b3: cd:2a:19:fa:69:e4:57:44:74:f2:5a:42:20:dc:66: 77:9c:b5:ee:97:c3:e9:29:66:e4:c3:b6:08:04:39: 0d:82:50:e2:5b:0e:d3:69:10:87:ab:a5:3e:2c:57: fb:a5:e0:8e:e5:4d:d9:00:9a:bf:c3:ed:73:09:15: f4:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:B2:13:32:19:98:9E:6A:32:D7:11:58:D0:85:2A:51:6E:B6:F7:9F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c66606-2ae8-4ada-b35b-c2e8a0303fc3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c66606-2ae8-4ada-b35b-c2e8a0303fc3/1/J7ITMhmYnmoy1xFY0IUqUW62958.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.17.106.0/23 185.56.218.0/23 IPv6: 2a02:5620::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 202675 Signature Algorithm: sha256WithRSAEncryption 2b:26:df:d6:49:07:de:ff:e4:3c:c6:f1:5d:01:93:d5:99:18: 5d:f7:c3:76:7e:32:3b:39:2b:9c:1d:08:2d:94:44:2f:fe:b6: fa:3d:6c:71:0f:dd:d8:2a:6b:1c:25:45:ff:cd:ee:5b:6c:2b: 74:a4:d8:0d:70:81:05:9a:ff:51:0d:e4:56:4d:61:ca:fd:2f: 1c:d0:77:97:f4:89:c8:fb:90:2d:c6:d1:2d:d9:16:71:94:47: ac:65:82:4d:4e:dc:59:3e:c4:93:86:79:7f:8c:f7:2d:90:cf: 80:44:06:ba:37:de:12:6e:1f:b8:ea:16:29:0d:a1:a5:1d:58: bc:dc:e3:70:5c:c4:96:61:57:75:4a:0b:e9:52:6b:d6:87:a6: 32:b1:7a:aa:da:9c:ef:6d:97:4e:9b:37:5e:e4:70:cb:d4:e5: 09:87:15:2a:e9:38:a7:a5:62:8e:ed:b1:6e:8a:24:72:84:f8: ca:3f:4e:2c:77:fa:eb:1b:a0:9c:ab:50:6c:05:83:48:29:1b: e4:49:bb:62:ed:0d:a5:c0:77:3c:75:b8:82:6a:42:a6:a8:c8: 30:76:ce:f6:c1:4e:b8:f9:41:2f:36:7f:2d:2c:03:ef:1f:b3: aa:42:eb:93:66:3b:0a:82:00:bc:31:05:4d:88:04:2c:e9:05: ab:a3:d7:0f -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt5EB+ltnDh6PVI/6HsbCjjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyN2IyMTMzMjE5OTg5ZTZhMzJkNzExNThkMDg1MmE1MTZlYjZmNzlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbmln4An9gTjuk0c4OEvSjzHM2+g i4epnK2c22FVIjrmEdng+0R2rhUdQYzhXn43nrVK+PfEIzGzPVuGcO+NxIIZLC3i 6wC8TQY9JLB3voRireN6V9wZpQ1t8FjmbCj4QJ/3uJ/tHXF5N7DkpCvk+3unP/uM mPqr0TwuTe3LG3D7howN1mGJIm3X72cIWrPkrbHG0e8Vn0UB8TFmAmMm64HiRIxY 6rhSVBySxY/E4w9aGYx5ET6kHflvltINsjcW+rPNKhn6aeRXRHTyWkIg3GZ3nLXu l8PpKWbkw7YIBDkNglDiWw7TaRCHq6U+LFf7peCO5U3ZAJq/w+1zCRX0XwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFCeyEzIZmJ5qMtcRWNCFKlFutvefMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2QzL2M2NjYw Ni0yYWU4LTRhZGEtYjM1Yi1jMmU4YTAzMDNmYzMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDMvYzY2NjA2 LTJhZTgtNGFkYS1iMzViLWMyZThhMDMwM2ZjMy8xL0o3SVRNaG1Zbm1veTF4Rlkw SVVxVVc2Mjk1OC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQBuRFqAwQBuTjaMA0EAgACMAcDBQAqAlYgMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMXszANBgkqhkiG9w0BAQsFAAOCAQEAKybf 1kkH3v/kPMbxXQGT1ZkYXffDdn4yOzkrnB0ILZREL/62+j1scQ/d2CprHCVF/83u W2wrdKTYDXCBBZr/UQ3kVk1hyv0vHNB3l/SJyPuQLcbRLdkWcZRHrGWCTU7cWT7E k4Z5f4z3LZDPgEQGujfeEm4fuOoWKQ2hpR1YvNzjcFzElmFXdUoL6VJr1oemMrF6 qtqc722XTps3XuRwy9TlCYcVKuk4p6Viju2xbookcoT4yj9OLHf66xugnKtQbAWD SCkb5Em7Yu0NpcB3PHW4gmpCpqjIMHbO9sFOuPlBLzZ/LSwD7x+zqkLrk2Y7CoIA vDEFTYgELOkFq6PXDw== -----END CERTIFICATE-----Generated at Mon Jan 26 09:28:58 2026 by rpki-client