This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JClc5xJHPQ4-bap3fbiQb4AB33A.cer File: JClc5xJHPQ4-bap3fbiQb4AB33A.cer (raw, json) Hash identifier: eVb3UW4KGsrFaTEXtdSH6FQ1UeSrof3zljdWgnztEtM= Subject key identifier: 24:29:5C:E7:12:47:3D:0E:3E:6D:AA:77:7D:B8:90:6F:80:01:DF:70 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7834306F2C1F084C5ED1D0B732EE67D5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:17:24 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 176.102.64.0/22 IP: 2a07:dbc0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:30:6f:2c:1f:08:4c:5e:d1:d0:b7:32:ee:67:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:17:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=24295ce712473d0e3e6daa777db8906f8001df70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c5:30:40:1f:d3:85:d4:dd:c4:d1:92:61:22: 0f:c1:8c:83:b3:67:74:bf:94:3e:96:8e:68:11:67: fe:a8:39:29:e0:2e:72:9b:75:d0:97:d9:b2:cb:ee: 99:28:b2:b8:7d:7f:6f:ef:d6:dc:77:40:e4:b3:58: 2f:1a:b2:ac:f7:27:1f:b5:31:2e:07:e8:97:4e:d5: 6b:d1:e6:89:a0:97:34:d4:2d:37:a4:13:2b:52:8e: 2c:00:40:7e:e3:52:17:7b:4f:21:b3:6d:53:39:1f: d4:52:f8:bc:35:3b:70:4a:a9:fd:ce:41:5b:de:d6: 70:9b:54:ce:94:cf:03:e0:45:0a:7d:dc:30:63:17: 12:97:38:2b:85:6b:28:0e:f5:19:d8:09:b1:6e:32: d2:14:6a:25:86:e8:b5:8f:4b:21:2c:76:4e:67:1f: 82:42:83:cb:4f:73:6a:24:03:e5:2f:3d:0b:3f:76: 24:18:29:1a:5a:82:6a:5f:79:b0:8b:12:a7:76:a1: 81:73:42:ad:a8:8d:af:8c:ce:0b:b5:e8:48:a0:e9: e9:79:ae:ec:33:48:d9:2e:a7:c8:04:50:e5:2e:78: c8:45:34:f3:b2:d2:d9:d2:7c:51:1e:a7:65:a8:d3: 0e:53:1c:9e:58:04:d4:2f:92:38:57:1b:5e:49:60: dc:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:29:5C:E7:12:47:3D:0E:3E:6D:AA:77:7D:B8:90:6F:80:01:DF:70 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.102.64.0/22 IPv6: 2a07:dbc0::/32 Signature Algorithm: sha256WithRSAEncryption 52:ff:9f:42:17:59:43:7a:f5:e6:97:19:a4:ad:24:81:e5:6e: e7:ff:81:97:36:4d:d5:bc:0a:95:22:a5:e4:fa:98:62:da:93: e0:f3:f4:bd:f1:52:06:43:13:20:a9:d0:dc:68:90:1f:16:6c: 9e:a9:47:d8:b6:60:54:b4:95:b7:6f:7a:f9:bc:9a:7c:48:31: 07:2d:01:88:0a:0f:c8:f5:43:c5:33:98:ad:dd:55:aa:9b:32: b2:e7:00:c3:0f:df:66:f2:41:95:98:1d:cd:43:32:f5:29:02: 3a:60:1b:d3:06:6e:53:ca:61:3b:e4:68:a4:69:3a:ff:f1:52: 7e:7b:37:42:2b:29:13:7a:2e:4a:85:d1:97:a9:69:9a:06:ba: 30:07:e1:d3:f3:a7:cd:11:b5:90:6d:cf:88:06:58:5a:66:cb: 37:3b:8a:3b:04:b3:03:e6:b3:13:16:90:16:d2:cd:78:0e:42: ee:08:94:cc:57:fc:61:36:b1:31:94:3f:39:8d:a8:0c:61:46: 8b:67:d6:c0:f7:6f:02:7e:72:50:d6:26:88:35:d7:98:b0:54: f6:ce:50:29:5a:8d:3b:fb:b7:65:b3:74:60:cb:b0:10:ee:2f: 61:d5:66:4c:e5:43:ac:a7:ba:ac:5e:e0:22:f4:6a:3e:6d:62: 16:3e:a1:d9 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt4NDBvLB8ITF7R0Lcy7mfVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxNzI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNDI5NWNlNzEyNDczZDBlM2U2ZGFhNzc3ZGI4OTA2ZjgwMDFkZjcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMUwQB/ThdTdxNGSYSIPwYyDs2d0 v5Q+lo5oEWf+qDkp4C5ym3XQl9myy+6ZKLK4fX9v79bcd0Dks1gvGrKs9ycftTEu B+iXTtVr0eaJoJc01C03pBMrUo4sAEB+41IXe08hs21TOR/UUvi8NTtwSqn9zkFb 3tZwm1TOlM8D4EUKfdwwYxcSlzgrhWsoDvUZ2AmxbjLSFGolhui1j0shLHZOZx+C QoPLT3NqJAPlLz0LP3YkGCkaWoJqX3mwixKndqGBc0KtqI2vjM4LtehIoOnpea7s M0jZLqfIBFDlLnjIRTTzstLZ0nxRHqdlqNMOUxyeWATUL5I4VxteSWDc3QIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFCQpXOcSRz0OPm2qd324kG+AAd9wMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U2LzFhMGM2 YS0xYTVlLTQyNGItOWE2OS05OTU1MzE4NjI0MTkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTYvMWEwYzZh LTFhNWUtNDI0Yi05YTY5LTk5NTUzMTg2MjQxOS8xL0pDbGM1eEpIUFE0LWJhcDNm YmlRYjRBQjMzQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCsGZAMA0EAgACMAcDBQAqB9vAMA0GCSqGSIb3 DQEBCwUAA4IBAQBS/59CF1lDevXmlxmkrSSB5W7n/4GXNk3VvAqVIqXk+phi2pPg 8/S98VIGQxMgqdDcaJAfFmyeqUfYtmBUtJW3b3r5vJp8SDEHLQGICg/I9UPFM5it 3VWqmzKy5wDDD99m8kGVmB3NQzL1KQI6YBvTBm5TymE75GikaTr/8VJ+ezdCKykT ei5KhdGXqWmaBrowB+HT86fNEbWQbc+IBlhaZss3O4o7BLMD5rMTFpAW0s14DkLu CJTMV/xhNrExlD85jagMYUaLZ9bA928CfnJQ1iaINdeYsFT2zlApWo07+7dls3Rg y7AQ7i9h1WZM5UOsp7qsXuAi9Go+bWIWPqHZ -----END CERTIFICATE-----Generated at Mon Jan 26 15:20:06 2026 by rpki-client