This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/J90kebrctAokpDax7cw2HD-mKvs.cer File: J90kebrctAokpDax7cw2HD-mKvs.cer (raw, json) Hash identifier: IsBH8sysSufimw6W5yAOYG2T9NsdntaqJjBhmAnIi5k= Subject key identifier: 27:DD:24:79:BA:DC:B4:0A:24:A4:36:B1:ED:CC:36:1C:3F:A6:2A:FB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ED35E98CFE8B9257F4D8E8A2CCCD15 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:19:07 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 60718 IP: 185.18.168.0/22 IP: 2a03:f9c0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:35:e9:8c:fe:8b:92:57:f4:d8:e8:a2:cc:cd:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=27dd2479badcb40a24a436b1edcc361c3fa62afb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:f1:e8:f6:a8:c6:34:0d:3a:27:a6:e8:05:31: 2b:e6:81:21:c5:ef:59:81:34:7b:db:30:a6:f0:9a: 4e:fb:8f:da:fe:e5:34:bb:a6:39:23:fa:b9:43:a0: e4:86:5e:fd:d8:22:ba:7f:19:4b:5d:5f:f3:c0:68: 27:c9:20:da:eb:cf:30:68:da:2e:a1:f3:e5:9d:ef: 8c:26:50:2a:37:05:1d:97:8c:b0:68:a1:ae:f6:f8: de:13:7a:08:b4:50:70:00:2d:79:99:0e:3f:aa:03: 15:33:15:71:99:c4:3f:6a:35:ab:78:c1:1d:69:34: c1:79:33:8d:97:ea:7c:9e:39:f4:d2:ab:05:26:8a: 31:68:3c:c6:1d:f7:d3:61:f3:c7:cf:ac:d7:1f:53: 22:24:65:76:b4:10:2d:fe:41:91:f4:f6:cc:e9:9d: f5:8b:a8:c6:0d:dd:43:97:2f:ed:45:df:41:ef:0a: 22:53:66:82:3b:79:7b:30:be:73:ab:cf:d0:bc:61: cb:cc:ec:57:60:18:27:bf:5a:ab:43:58:a0:d9:b0: 4d:14:9d:16:94:6c:c7:8d:20:70:f0:d6:b6:16:ca: 97:13:b9:77:f9:d6:20:1a:5d:fb:7e:8a:a7:29:f3: 2a:89:59:e6:90:de:d4:41:a3:2d:70:b7:32:01:14: 37:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:DD:24:79:BA:DC:B4:0A:24:A4:36:B1:ED:CC:36:1C:3F:A6:2A:FB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.18.168.0/22 IPv6: 2a03:f9c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 60718 Signature Algorithm: sha256WithRSAEncryption 89:92:5c:e1:9b:f0:90:3a:10:bc:3e:ad:29:70:25:6c:f2:cb: d3:bf:e2:33:32:81:38:20:71:3d:08:33:08:e9:07:11:f0:07: 4b:1a:78:85:ba:d2:fa:f6:49:d6:4d:bd:f6:9d:37:76:99:ed: 94:11:d3:a6:fa:50:30:79:ef:27:9d:8d:eb:d3:d3:45:a3:75: 4c:36:90:b3:8a:56:c8:6a:e2:ff:e2:e1:2c:88:2b:27:b9:ac: 51:de:73:a4:56:fa:c8:fb:48:db:97:d5:73:15:14:c2:c3:9b: 86:21:30:91:67:5a:c6:21:22:f5:9a:91:f7:e6:a0:1b:a7:5d: f2:f6:d4:59:d8:e4:d0:91:c7:b4:0b:6c:e5:bd:d7:ff:a1:1d: c9:71:e8:cd:06:b9:ee:1c:06:cd:03:73:e6:44:2f:10:e3:98: c8:ed:1d:96:21:87:76:9c:1e:98:c7:ef:06:fe:ea:30:54:f3: 18:19:ca:0e:6d:22:f5:e3:e2:ed:b4:73:d5:45:9b:2c:67:f0: 75:11:db:6a:20:d7:b9:07:d6:5a:ae:65:17:d6:f6:c5:a1:11: 20:37:91:ed:de:f3:8c:e3:cb:e2:7e:54:85:db:af:7b:b1:87: 0e:a2:0e:45:6a:54:57:16:9e:d8:9f:00:a4:de:69:91:b9:24: 56:93:cf:61 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt57TXpjP6Lklf02OiizM0VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyN2RkMjQ3OWJhZGNiNDBhMjRhNDM2YjFlZGNjMzYxYzNmYTYyYWZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivHo9qjGNA06J6boBTEr5oEhxe9Z gTR72zCm8JpO+4/a/uU0u6Y5I/q5Q6Dkhl792CK6fxlLXV/zwGgnySDa688waNou ofPlne+MJlAqNwUdl4ywaKGu9vjeE3oItFBwAC15mQ4/qgMVMxVxmcQ/ajWreMEd aTTBeTONl+p8njn00qsFJooxaDzGHffTYfPHz6zXH1MiJGV2tBAt/kGR9PbM6Z31 i6jGDd1Dly/tRd9B7woiU2aCO3l7ML5zq8/QvGHLzOxXYBgnv1qrQ1ig2bBNFJ0W lGzHjSBw8Na2FsqXE7l3+dYgGl37foqnKfMqiVnmkN7UQaMtcLcyARQ3+QIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFCfdJHm63LQKJKQ2se3MNhw/pir7MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVjLzc5NGRl My0zOWU2LTRmMmMtODZmMS1iYzJjNDUzYzBlYzgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWMvNzk0ZGUz LTM5ZTYtNGYyYy04NmYxLWJjMmM0NTNjMGVjOC8xL0o5MGtlYnJjdEFva3BEYXg3 Y3cySEQtbUt2cy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuRKoMA0EAgACMAcDBQAqA/nAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDtLjANBgkqhkiG9w0BAQsFAAOCAQEAiZJc4ZvwkDoQ vD6tKXAlbPLL07/iMzKBOCBxPQgzCOkHEfAHSxp4hbrS+vZJ1k299p03dpntlBHT pvpQMHnvJ52N69PTRaN1TDaQs4pWyGri/+LhLIgrJ7msUd5zpFb6yPtI25fVcxUU wsObhiEwkWdaxiEi9ZqR9+agG6dd8vbUWdjk0JHHtAts5b3X/6EdyXHozQa57hwG zQNz5kQvEOOYyO0dliGHdpwemMfvBv7qMFTzGBnKDm0i9ePi7bRz1UWbLGfwdRHb aiDXuQfWWq5lF9b2xaERIDeR7d7zjOPL4n5Uhduve7GHDqIORWpUVxae2J8ApN5p kbkkVpPPYQ== -----END CERTIFICATE-----Generated at Mon Jan 26 08:40:35 2026 by rpki-client