This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/J7jb2X3kzUBZtS5RPc81zTgaMrM.cer File: J7jb2X3kzUBZtS5RPc81zTgaMrM.cer (raw, json) Hash identifier: 0Fyy7xWPpa3RgAPiLeLqSemzMPAyvxtg39XV1EvHBB8= Subject key identifier: 27:B8:DB:D9:7D:E4:CD:40:59:B5:2E:51:3D:CF:35:CD:38:1A:32:B3 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78346B34A1A3D2A7A31AA5F0A8C63F38 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:17:39 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 205862 IP: 185.204.40.0/22 IP: 2a0d:b00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:6b:34:a1:a3:d2:a7:a3:1a:a5:f0:a8:c6:3f:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=27b8dbd97de4cd4059b52e513dcf35cd381a32b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:83:36:9d:24:fe:90:24:ab:f6:75:2f:37:0b: 5d:23:c1:82:37:21:c1:5a:78:83:3b:18:31:65:87: 6f:f8:54:b3:34:b0:cb:0a:69:6f:a2:b3:0c:a5:7b: 99:d7:34:de:df:e8:ed:9f:c8:5b:df:4b:59:cd:af: bb:2f:ea:ad:ec:86:d4:32:d2:a9:6a:d1:36:b7:51: a9:94:98:3f:bf:3e:7d:78:f5:c8:bd:92:77:1c:8c: 6d:e4:9c:90:eb:4d:ab:3f:5f:87:32:b3:b9:a2:d0: 22:3c:9f:94:fe:11:a7:be:7c:11:07:35:09:27:71: 6e:08:7a:a4:63:07:d2:f3:02:1b:c4:02:b0:dc:f1: a8:2f:b7:03:1f:de:43:42:9e:fb:40:69:86:ca:aa: f2:fa:38:63:80:e7:50:3b:2b:2c:09:c9:3a:a4:9c: 0d:8b:43:e8:27:8d:f3:b0:5b:09:c5:84:01:60:a6: 42:01:3e:c4:2e:99:7b:bc:e0:ce:bd:15:24:f5:0b: b9:02:23:d0:51:f7:44:11:d5:7e:1e:98:a9:78:d1: 1a:dc:0b:55:79:3f:a2:6e:37:c9:1a:d4:af:49:07: 79:e2:10:fb:34:61:05:92:c2:8a:cb:50:a3:75:97: ea:2a:95:71:a2:d9:98:f7:ae:bf:62:92:30:d4:53: 1a:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:B8:DB:D9:7D:E4:CD:40:59:B5:2E:51:3D:CF:35:CD:38:1A:32:B3 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.204.40.0/22 IPv6: 2a0d:b00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 205862 Signature Algorithm: sha256WithRSAEncryption 24:5d:c7:ec:fa:d8:95:77:36:13:2c:96:e5:8c:01:9c:2a:3b: 61:de:25:95:0e:14:0e:c3:4c:20:4e:81:e4:6e:8e:d7:db:d4: 2b:fa:53:b3:ad:bd:96:3b:80:bf:17:ed:1f:1c:b4:3a:3c:14: 87:f4:15:39:bd:1d:46:67:dc:91:33:bf:a8:49:30:c9:42:ba: bd:d2:ee:2c:a2:5c:b5:77:91:79:b1:c8:19:54:2e:61:f7:00: 36:30:87:77:53:e6:52:82:09:c6:ce:2a:4b:2e:c9:af:e1:db: 60:be:dd:d9:03:1d:80:41:97:fd:fd:b5:63:4e:bd:05:ec:6b: 01:7b:27:d5:1f:f7:14:7d:d5:27:80:6b:51:02:d1:c8:4c:ae: b5:d1:7d:f4:6e:e3:db:5e:fb:8a:0c:56:8e:2e:d2:58:54:d1: 7c:2d:ff:22:c6:3e:2d:c1:4d:c6:db:40:38:ec:57:ab:22:e7: c9:c7:eb:78:04:5b:37:26:dd:ec:85:e9:a6:e8:8e:ba:ff:38: a9:15:7d:4b:ec:22:ca:53:4d:bf:47:71:93:10:0f:1f:27:95: 23:33:ed:23:b3:1f:e1:69:d4:a5:6d:44:a6:61:98:4d:02:bc: cf:ff:12:04:90:f3:bc:ee:52:12:38:a3:72:17:78:4b:76:fc: ad:f9:74:41 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt4NGs0oaPSp6MapfCoxj84MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyN2I4ZGJkOTdkZTRjZDQwNTliNTJlNTEzZGNmMzVjZDM4MWEzMmIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7YM2nST+kCSr9nUvNwtdI8GCNyHB WniDOxgxZYdv+FSzNLDLCmlvorMMpXuZ1zTe3+jtn8hb30tZza+7L+qt7IbUMtKp atE2t1GplJg/vz59ePXIvZJ3HIxt5JyQ602rP1+HMrO5otAiPJ+U/hGnvnwRBzUJ J3FuCHqkYwfS8wIbxAKw3PGoL7cDH95DQp77QGmGyqry+jhjgOdQOyssCck6pJwN i0PoJ43zsFsJxYQBYKZCAT7ELpl7vODOvRUk9Qu5AiPQUfdEEdV+HpipeNEa3AtV eT+ibjfJGtSvSQd54hD7NGEFksKKy1CjdZfqKpVxotmY966/YpIw1FMaHwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFCe429l95M1AWbUuUT3PNc04GjKzMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VjLzg1OTI4 Zi01ZjE5LTQxZDktODIzOC01YzU0Y2RhZDE5ZjEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWMvODU5Mjhm LTVmMTktNDFkOS04MjM4LTVjNTRjZGFkMTlmMS8xL0o3amIyWDNrelVCWnRTNVJQ YzgxelRnYU1yTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCucwoMA0EAgACMAcDBQMqDQsAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMkJjANBgkqhkiG9w0BAQsFAAOCAQEAJF3H7PrYlXc2 EyyW5YwBnCo7Yd4llQ4UDsNMIE6B5G6O19vUK/pTs629ljuAvxftHxy0OjwUh/QV Ob0dRmfckTO/qEkwyUK6vdLuLKJctXeRebHIGVQuYfcANjCHd1PmUoIJxs4qSy7J r+HbYL7d2QMdgEGX/f21Y069BexrAXsn1R/3FH3VJ4BrUQLRyEyutdF99G7j2177 igxWji7SWFTRfC3/IsY+LcFNxttAOOxXqyLnycfreARbNybd7IXppuiOuv84qRV9 S+wiylNNv0dxkxAPHyeVIzPtI7Mf4WnUpW1EpmGYTQK8z/8SBJDzvO5SEjijchd4 S3b8rfl0QQ== -----END CERTIFICATE-----Generated at Mon Jan 26 10:56:35 2026 by rpki-client