This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/J97R2QxNUraHECO8cSltCKmMTNs.cer File: J97R2QxNUraHECO8cSltCKmMTNs.cer (raw, json) Hash identifier: tHRmB4Bbi48HCDZOZjDF58WSmCpGHJYVcjb/FzAPYQI= Subject key identifier: 27:DE:D1:D9:0C:4D:52:B6:87:10:23:BC:71:29:6D:08:A9:8C:4C:DB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA4E6891102D1430690A843C8F1E1D0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6a/338212-38a7-468d-b874-351ab9f236b0/1/J97R2QxNUraHECO8cSltCKmMTNs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6a/338212-38a7-468d-b874-351ab9f236b0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:18:14 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 207183 IP: 185.135.56.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:e6:89:11:02:d1:43:06:90:a8:43:c8:f1:e1:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=27ded1d90c4d52b6871023bc71296d08a98c4cdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:38:6c:59:f2:b7:45:58:24:3a:cf:16:47:6b: 3a:13:88:7a:0d:fa:1e:6c:42:1d:82:f8:00:06:2d: 05:bb:fd:76:6b:8f:bf:06:28:74:31:72:d3:48:d0: 32:37:fd:1d:ac:1d:98:42:58:68:41:2b:9f:02:9d: 60:38:c9:a5:84:82:a4:75:5f:67:2a:5e:65:96:79: aa:5a:9e:96:46:5e:63:39:85:97:22:f2:e8:27:8d: d8:17:a4:0f:1c:f8:a0:47:70:f4:48:92:cf:21:3b: 87:fd:70:0e:8d:0d:6e:40:91:63:d0:f9:2f:50:a0: 09:a2:d1:10:a2:e3:f0:f7:3c:c9:47:85:bb:19:f3: ca:76:d3:92:6e:58:59:2f:bd:2f:29:5d:08:32:79: a7:87:7e:80:16:50:7a:4e:a3:f6:4c:b9:31:de:89: 75:52:69:6d:d2:1a:df:41:b8:4c:44:ca:22:c9:97: 3d:c0:45:2a:cb:17:1a:e0:be:9d:ab:f9:0a:4e:3e: 65:89:e1:71:3d:d5:26:dc:ab:74:cf:cc:49:99:5a: db:30:d6:5d:48:b7:a6:b2:0b:03:07:90:cf:cb:6a: 3c:65:8c:9c:16:c5:49:f6:d7:3d:a6:d7:14:cb:07: 93:ea:5c:c7:77:96:45:fd:59:df:94:ea:51:c0:c8: 28:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:DE:D1:D9:0C:4D:52:B6:87:10:23:BC:71:29:6D:08:A9:8C:4C:DB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/338212-38a7-468d-b874-351ab9f236b0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/338212-38a7-468d-b874-351ab9f236b0/1/J97R2QxNUraHECO8cSltCKmMTNs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.135.56.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 207183 Signature Algorithm: sha256WithRSAEncryption 9d:89:d6:df:1a:df:a7:1c:c6:a5:ed:f8:bd:ad:a1:bb:86:3e: 56:17:60:fa:b9:b8:12:1a:3d:76:fe:ac:00:76:c6:8a:53:ff: b0:62:8a:35:d7:41:ea:48:a5:43:3e:fe:81:31:72:26:01:20: ee:42:89:85:f7:6b:4a:48:8f:ba:ad:e4:6f:b8:f8:c8:99:29: 9b:fc:d1:7f:1a:8d:8e:38:a3:74:b5:7e:a6:4f:9a:34:c8:2f: 5e:d4:20:ac:e4:34:04:ed:1f:75:78:aa:c8:d2:9c:6e:79:90: c3:20:93:04:7d:bc:ab:f1:56:cc:de:14:5b:6d:c2:c9:26:e4: b6:4a:b0:15:77:d0:95:9b:a6:ef:a2:7a:e7:88:63:2a:d3:5c: 4d:2d:f1:77:a0:8f:7f:92:1b:d7:26:a0:14:f5:68:ce:ed:df: 0d:df:bc:b8:dc:b0:69:03:e0:62:f0:f7:3d:82:0d:75:7d:65: c7:e0:26:f9:2a:7e:e4:f1:9d:f5:66:47:75:c0:4f:5a:7a:78: b4:0c:02:d0:1e:d3:4c:09:90:67:2f:30:76:ec:d0:4b:68:22: 8d:09:8e:36:46:85:9b:99:a8:65:31:45:5e:63:2c:11:8d:75: 13:b4:ab:cd:e6:dd:c6:c5:f4:e9:a8:0b:32:2d:57:2f:31:07: fa:90:51:e0 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt+pOaJEQLRQwaQqEPI8eHQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyN2RlZDFkOTBjNGQ1MmI2ODcxMDIzYmM3MTI5NmQwOGE5OGM0Y2RiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDhsWfK3RVgkOs8WR2s6E4h6Dfoe bEIdgvgABi0Fu/12a4+/Bih0MXLTSNAyN/0drB2YQlhoQSufAp1gOMmlhIKkdV9n Kl5llnmqWp6WRl5jOYWXIvLoJ43YF6QPHPigR3D0SJLPITuH/XAOjQ1uQJFj0Pkv UKAJotEQouPw9zzJR4W7GfPKdtOSblhZL70vKV0IMnmnh36AFlB6TqP2TLkx3ol1 Umlt0hrfQbhMRMoiyZc9wEUqyxca4L6dq/kKTj5lieFxPdUm3Kt0z8xJmVrbMNZd SLemsgsDB5DPy2o8ZYycFsVJ9tc9ptcUyweT6lzHd5ZF/VnflOpRwMgoXwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFCfe0dkMTVK2hxAjvHEpbQipjEzbMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZhLzMzODIx Mi0zOGE3LTQ2OGQtYjg3NC0zNTFhYjlmMjM2YjAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmEvMzM4MjEy LTM4YTctNDY4ZC1iODc0LTM1MWFiOWYyMzZiMC8xL0o5N1IyUXhOVXJhSEVDTzhj U2x0Q0ttTVROcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCuYc4MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMpTzANBgkqhkiG9w0BAQsFAAOCAQEAnYnW3xrfpxzGpe34va2hu4Y+Vhdg+rm4 Eho9dv6sAHbGilP/sGKKNddB6kilQz7+gTFyJgEg7kKJhfdrSkiPuq3kb7j4yJkp m/zRfxqNjjijdLV+pk+aNMgvXtQgrOQ0BO0fdXiqyNKcbnmQwyCTBH28q/FWzN4U W23CySbktkqwFXfQlZum76J654hjKtNcTS3xd6CPf5Ib1yagFPVozu3fDd+8uNyw aQPgYvD3PYINdX1lx+Am+Sp+5PGd9WZHdcBPWnp4tAwC0B7TTAmQZy8wduzQS2gi jQmONkaFm5moZTFFXmMsEY11E7SrzebdxsX06agLMi1XLzEH+pBR4A== -----END CERTIFICATE-----Generated at Sun Jan 25 16:44:09 2026 by rpki-client