This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JG-b54PXPZWriqVGGeYPkBHATWc.cer File: JG-b54PXPZWriqVGGeYPkBHATWc.cer (raw, json) Hash identifier: Tvz4uS0+TTFn0jbPON1g6BY0gq2/LxwtH5mBnC8TtTY= Subject key identifier: 24:6F:9B:E7:83:D7:3D:95:AB:8A:A5:46:19:E6:0F:90:11:C0:4D:67 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7910AC6E027C9EEC8B389CE2C5EF1A4E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:14 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 197937 IP: 185.7.172.0/24 IP: 2a13:83c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:ac:6e:02:7c:9e:ec:8b:38:9c:e2:c5:ef:1a:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=246f9be783d73d95ab8aa54619e60f9011c04d67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:2e:7e:c0:b8:8c:24:79:04:a9:81:91:b7:40: f0:e9:49:52:72:85:67:a7:a7:a7:81:1d:3e:7c:fe: ab:84:65:cf:14:fc:bc:0e:46:d0:09:32:d8:d3:c9: 91:cd:5c:45:30:e1:6e:87:c0:40:74:d6:d8:d3:7b: fd:8a:ab:34:d0:be:d1:4e:9e:48:44:70:fb:5f:68: 24:af:93:cf:6e:ee:5c:c1:db:7c:fc:90:3e:cd:69: dc:71:35:8f:83:77:f4:ef:fd:a9:26:4a:8f:e5:2b: 1d:16:bd:48:4b:06:bd:a3:ee:02:08:eb:d0:67:72: b0:a5:1e:b8:58:6a:cc:a5:00:2c:ee:46:95:d1:a8: ad:d1:9b:a6:5d:e8:78:46:ed:c2:98:f8:dc:0b:ef: 42:79:cb:39:a2:c6:a2:12:16:4d:67:79:48:9f:9d: c5:02:fe:3b:49:00:0f:85:64:1a:8e:c1:47:31:c5: 37:66:c9:f8:db:d0:35:a5:9d:6d:59:f7:55:00:31: a0:3e:6c:a2:84:54:20:b0:1f:20:a1:79:d7:1b:42: 4a:ad:a0:84:6f:88:63:5c:b7:bb:e0:54:01:fe:5f: 02:01:00:42:3b:ce:49:9f:2f:51:6a:04:42:ea:94: e3:a8:0e:3c:03:f2:34:14:aa:ff:e6:95:77:cd:1e: c8:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:6F:9B:E7:83:D7:3D:95:AB:8A:A5:46:19:E6:0F:90:11:C0:4D:67 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.7.172.0/24 IPv6: 2a13:83c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 197937 Signature Algorithm: sha256WithRSAEncryption 56:a2:8c:62:20:fd:7d:55:75:a1:f4:2a:6b:64:de:e4:c0:36: dc:2c:92:5a:e9:a0:f9:62:48:60:45:0c:5c:11:32:3b:97:e7: 00:1e:e4:c6:e0:5e:0f:ba:7d:ae:0e:9e:31:66:8c:d0:58:67: 9a:02:91:5d:5a:64:51:f7:00:09:f9:21:91:33:af:8e:42:8b: 25:3c:55:f7:62:16:0b:c0:cb:0a:9e:c5:f7:ef:42:2b:ae:9a: 9a:f7:1a:c8:63:41:f6:92:30:25:f2:52:15:a9:c4:9d:69:c8: d0:fa:27:9a:69:94:31:91:fe:4d:7f:8b:df:34:a9:6e:dc:c9: 2d:33:e9:17:62:25:5c:0f:2e:83:be:54:bc:44:ea:58:02:01: b6:87:fa:97:3a:51:b8:ed:6b:07:1a:84:39:0b:18:30:81:84: c6:8c:67:1c:a8:fa:d9:dc:6d:c5:1d:0a:37:c8:3e:56:ea:4e: 1a:9f:78:0f:ee:a7:06:36:da:3d:8b:e6:af:b4:ed:63:ae:ef: a8:e7:7a:d6:b6:a5:e2:6e:5d:99:a3:44:a7:89:7f:45:05:fa: 26:be:14:3b:72:3a:14:ac:49:98:00:07:40:c5:72:2e:c5:7f: e8:4f:c7:9c:82:83:7c:f7:36:22:e3:bc:7c:16:cd:79:13:d6: 05:93:b4:2f -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt5EKxuAnye7Is4nOLF7xpOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNDZmOWJlNzgzZDczZDk1YWI4YWE1NDYxOWU2MGY5MDExYzA0ZDY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuS5+wLiMJHkEqYGRt0Dw6UlScoVn p6engR0+fP6rhGXPFPy8DkbQCTLY08mRzVxFMOFuh8BAdNbY03v9iqs00L7RTp5I RHD7X2gkr5PPbu5cwdt8/JA+zWnccTWPg3f07/2pJkqP5SsdFr1ISwa9o+4CCOvQ Z3KwpR64WGrMpQAs7kaV0ait0ZumXeh4Ru3CmPjcC+9Cecs5osaiEhZNZ3lIn53F Av47SQAPhWQajsFHMcU3Zsn429A1pZ1tWfdVADGgPmyihFQgsB8goXnXG0JKraCE b4hjXLe74FQB/l8CAQBCO85Jny9RagRC6pTjqA48A/I0FKr/5pV3zR7I6QIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFCRvm+eD1z2Vq4qlRhnmD5ARwE1nMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk5L2JhYTM3 Mi04MjNiLTRiMDctOWFhYi1jYmJkMDFmMmI5MWMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTkvYmFhMzcy LTgyM2ItNGIwNy05YWFiLWNiYmQwMWYyYjkxYy8xL0pHLWI1NFBYUFpXcmlxVkdH ZVlQa0JIQVRXYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAuQesMA0EAgACMAcDBQMqE4PAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMFMTANBgkqhkiG9w0BAQsFAAOCAQEAVqKMYiD9fVV1 ofQqa2Te5MA23CySWumg+WJIYEUMXBEyO5fnAB7kxuBeD7p9rg6eMWaM0FhnmgKR XVpkUfcACfkhkTOvjkKLJTxV92IWC8DLCp7F9+9CK66amvcayGNB9pIwJfJSFanE nWnI0PonmmmUMZH+TX+L3zSpbtzJLTPpF2IlXA8ug75UvETqWAIBtof6lzpRuO1r BxqEOQsYMIGExoxnHKj62dxtxR0KN8g+VupOGp94D+6nBjbaPYvmr7TtY67vqOd6 1ral4m5dmaNEp4l/RQX6Jr4UO3I6FKxJmAAHQMVyLsV/6E/HnIKDfPc2IuO8fBbN eRPWBZO0Lw== -----END CERTIFICATE-----Generated at Sun Jan 25 21:37:40 2026 by rpki-client