This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/J7irrCClmMyksS9ddV2OiTIfTsk.cer File: J7irrCClmMyksS9ddV2OiTIfTsk.cer (raw, json) Hash identifier: ap0unzDoPMhbeTMbJAyt4MFbOoH/YnvVtr0yLBFjUDg= Subject key identifier: 27:B8:AB:AC:20:A5:98:CC:A4:B1:2F:5D:75:5D:8E:89:32:1F:4E:C9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F15F22A0461E9713C3AF01694CC58B2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0f/729e1c-1cc0-427e-8f00-4b6fc7c06ae5/1/J7irrCClmMyksS9ddV2OiTIfTsk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0f/729e1c-1cc0-427e-8f00-4b6fc7c06ae5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:43 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 199015 IP: 91.217.54.0/23 IP: 195.20.158.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:f2:2a:04:61:e9:71:3c:3a:f0:16:94:cc:58:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=27b8abac20a598cca4b12f5d755d8e89321f4ec9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:d8:40:4c:4c:99:0f:57:40:2c:58:6a:c7:c8: 6d:d0:37:c7:22:1a:ad:a7:c7:eb:b6:7f:5a:72:d8: b4:23:9a:38:42:0f:12:ea:f7:0c:a9:e4:54:9a:af: 62:5d:36:fb:4f:4d:35:62:ad:dc:de:91:09:f0:7e: dd:6c:d4:a4:1b:d5:1f:4b:37:e0:59:60:8b:43:c4: 96:b2:de:0a:b1:b4:82:a5:c3:43:bd:68:7a:0f:11: ca:76:27:fa:b8:0d:57:5b:0f:59:b7:10:55:eb:7a: de:86:88:58:b7:57:5c:51:31:70:8f:88:91:d6:f4: 98:71:e2:f2:6a:75:23:37:f5:6a:35:0d:46:8f:3a: ad:b5:b4:b1:89:82:0b:1a:33:cf:ee:21:6a:68:18: 31:3e:04:ea:cb:30:c3:ef:1c:d4:ac:f9:4a:a8:ac: e0:9b:76:42:a4:f5:f3:63:13:e0:50:f4:eb:2b:01: dd:4c:1d:ae:6a:2e:7f:75:6a:64:0d:c1:70:fb:8f: 7a:b3:9b:fb:88:58:33:7f:ba:de:c6:8b:25:72:ae: 09:59:05:7c:c5:56:0d:3e:b9:87:cc:d4:93:e0:5e: fb:13:a4:e0:20:11:9f:9a:08:d7:9c:8d:66:54:25: 48:09:58:88:50:c7:f4:32:31:16:d3:00:12:78:d0: 93:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:B8:AB:AC:20:A5:98:CC:A4:B1:2F:5D:75:5D:8E:89:32:1F:4E:C9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/729e1c-1cc0-427e-8f00-4b6fc7c06ae5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/729e1c-1cc0-427e-8f00-4b6fc7c06ae5/1/J7irrCClmMyksS9ddV2OiTIfTsk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.217.54.0/23 195.20.158.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 199015 Signature Algorithm: sha256WithRSAEncryption 39:dc:dd:bf:68:2a:e4:a3:b0:24:10:e5:bc:8b:f5:47:1a:f2: 22:29:f1:f5:d6:ea:e9:c4:a5:af:fd:80:63:c4:09:07:97:60: 7b:4c:da:71:38:36:d9:a8:57:48:5a:50:47:79:5d:19:e1:99: 96:ff:56:7b:3e:25:17:98:15:78:2a:1d:ea:ee:a4:c0:b3:14: 34:7e:63:91:66:5f:06:aa:44:e4:53:14:fb:dd:0b:c4:33:fa: ba:c4:f7:39:2e:70:7f:4c:b4:f7:56:f4:bd:21:0f:74:9f:f1: 75:e3:b0:f6:ba:f5:0e:ba:8c:b3:86:11:d7:37:90:72:7a:32: 07:8a:01:f6:ad:3a:fb:a1:f7:c1:c9:17:9f:a8:c5:fa:28:4e: 44:40:38:3c:af:dc:53:37:67:97:22:b8:4c:e3:8a:9c:81:85: e4:2f:8c:23:6f:ea:ec:12:92:d9:38:60:ca:6d:91:e4:d9:ed: e1:97:db:9f:7d:c5:c2:62:38:aa:a7:bc:3d:e9:cf:e3:e8:87: ed:68:5d:b7:3c:23:78:76:d3:99:5c:20:76:a3:30:da:79:2e: 72:77:de:71:36:d4:ac:d6:87:55:56:e2:d2:3e:3c:f9:66:67: 2e:3f:21:06:3c:6d:94:ae:c6:cc:ff:68:60:ac:3b:d2:66:c2: 97:0e:03:66 -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZt/FfIqBGHpcTw68BaUzFiyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyN2I4YWJhYzIwYTU5OGNjYTRiMTJmNWQ3NTVkOGU4OTMyMWY0ZWM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6thATEyZD1dALFhqx8ht0DfHIhqt p8frtn9acti0I5o4Qg8S6vcMqeRUmq9iXTb7T001Yq3c3pEJ8H7dbNSkG9UfSzfg WWCLQ8SWst4KsbSCpcNDvWh6DxHKdif6uA1XWw9ZtxBV63rehohYt1dcUTFwj4iR 1vSYceLyanUjN/VqNQ1GjzqttbSxiYILGjPP7iFqaBgxPgTqyzDD7xzUrPlKqKzg m3ZCpPXzYxPgUPTrKwHdTB2uai5/dWpkDcFw+496s5v7iFgzf7rexoslcq4JWQV8 xVYNPrmHzNST4F77E6TgIBGfmgjXnI1mVCVICViIUMf0MjEW0wASeNCTQwIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFCe4q6wgpZjMpLEvXXVdjokyH07JMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBmLzcyOWUx Yy0xY2MwLTQyN2UtOGYwMC00YjZmYzdjMDZhZTUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGYvNzI5ZTFj LTFjYzAtNDI3ZS04ZjAwLTRiNmZjN2MwNmFlNS8xL0o3aXJyQ0NsbU15a3NTOWRk VjJPaVRJZlRzay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQBW9k2AwQAwxSeMBoGCCsGAQUFBwEIAQH/BAsw CaAHMAUCAwMJZzANBgkqhkiG9w0BAQsFAAOCAQEAOdzdv2gq5KOwJBDlvIv1Rxry Iinx9dbq6cSlr/2AY8QJB5dge0zacTg22ahXSFpQR3ldGeGZlv9Wez4lF5gVeCod 6u6kwLMUNH5jkWZfBqpE5FMU+90LxDP6usT3OS5wf0y091b0vSEPdJ/xdeOw9rr1 DrqMs4YR1zeQcnoyB4oB9q06+6H3wckXn6jF+ihOREA4PK/cUzdnlyK4TOOKnIGF 5C+MI2/q7BKS2Thgym2R5Nnt4Zfbn33FwmI4qqe8PenP4+iH7WhdtzwjeHbTmVwg dqMw2nkucnfecTbUrNaHVVbi0j48+WZnLj8hBjxtlK7GzP9oYKw70mbClw4DZg== -----END CERTIFICATE-----Generated at Mon Jan 26 11:46:13 2026 by rpki-client