This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JI9eJvHAj0SGyZEci2Cerotst00.cer File: JI9eJvHAj0SGyZEci2Cerotst00.cer (raw, json) Hash identifier: T4xARF4AmO01XK4XpEHaSe6bLtxulC7yKeor1hmTmMk= Subject key identifier: 24:8F:5E:26:F1:C0:8F:44:86:C9:91:1C:8B:60:9E:AE:8B:6C:B7:4D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77592510805F307CBDBB1BECED611909 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:18:09 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 15985 IP: 193.188.192.0 -- 193.188.194.255 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:25:10:80:5f:30:7c:bd:bb:1b:ec:ed:61:19:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=248f5e26f1c08f4486c9911c8b609eae8b6cb74d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:23:8c:98:10:4b:90:5c:b8:3f:01:f7:0a:92: 4f:e2:44:9d:53:b7:1d:ed:45:e5:9b:02:e3:8a:7e: 09:3a:79:5a:c9:05:01:92:22:c0:bb:35:54:0d:6e: ad:7e:6c:f9:3d:e7:18:cf:2e:99:80:4e:87:b5:80: 91:a4:67:9d:c7:76:f0:bd:6c:8c:ea:83:37:02:ee: 56:40:40:e8:b5:56:bc:f5:dc:17:28:83:74:97:c9: fd:43:3e:54:3b:bf:6b:ba:d2:11:9b:0b:17:70:e8: 37:13:2c:c1:d6:2e:69:82:08:39:60:0a:50:ec:b1: d8:ba:b6:09:7d:7d:fc:15:0f:bc:94:d8:30:a6:fe: ca:2d:15:72:06:7c:7c:24:b9:4c:11:50:13:8c:02: 90:81:c2:04:91:5f:12:04:93:eb:14:ed:d9:d8:6e: d9:f9:3a:8c:0d:51:84:3a:8e:1a:00:29:91:e0:da: aa:25:f9:fe:ec:77:46:26:bb:66:1d:9f:88:cf:ea: f9:75:f2:62:93:5f:c7:97:c4:b4:75:71:6b:b0:6d: 4a:16:44:a6:74:57:9c:93:11:1e:28:47:96:b2:49: 31:37:29:e0:0c:ba:33:fe:3c:cd:47:77:e5:1c:7f: f7:8d:a3:ba:08:c6:19:55:76:6b:2f:57:84:d6:02: 02:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:8F:5E:26:F1:C0:8F:44:86:C9:91:1C:8B:60:9E:AE:8B:6C:B7:4D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.188.192.0-193.188.194.255 sbgp-autonomousSysNum: critical Autonomous System Numbers: 15985 Signature Algorithm: sha256WithRSAEncryption 39:bd:cc:73:b6:f1:b8:db:78:fe:61:ea:54:3c:57:90:41:85: b2:e7:5d:c8:00:b8:62:b4:17:ef:62:89:59:33:4c:e1:68:e9: df:50:6e:1a:23:3e:fe:1d:f0:cb:b4:00:e0:0e:25:1b:1d:04: 2d:5f:f6:df:1c:df:88:09:38:2b:06:8b:61:64:ea:b3:46:85: 24:6e:ee:bc:9d:b8:c7:93:31:cb:01:5c:ad:d9:36:2d:42:d6: aa:a5:ea:72:64:88:20:9a:5c:f8:09:c3:30:b0:a4:b1:a6:8e: 56:f4:15:ce:3f:c4:ad:da:87:2e:0c:3e:00:a9:6e:c8:8e:c4: 37:6d:2f:7c:03:36:22:74:19:87:8c:da:53:96:c6:b2:0c:bd: bf:07:1f:66:83:cf:7c:42:63:7c:4a:23:ad:00:97:07:15:64: d7:0b:bc:28:28:2f:16:fb:51:ed:b0:a5:3f:e4:88:42:b7:ab: 57:92:e3:07:25:df:a9:92:bc:97:c0:b7:e2:90:b8:86:83:3b: 32:5a:09:c8:f8:1d:66:36:54:08:c7:10:24:74:f2:ce:2e:72: 8d:f4:7f:98:f2:a0:71:95:f4:a6:66:cd:c2:5e:57:bb:33:27: 44:8f:88:32:cd:e3:43:1f:0a:21:36:1d:08:3e:43:7a:26:73: a4:78:1a:8a -----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgISAZt3WSUQgF8wfL27G+ztYRkJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNDhmNWUyNmYxYzA4ZjQ0ODZjOTkxMWM4YjYwOWVhZThiNmNiNzRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSOMmBBLkFy4PwH3CpJP4kSdU7cd 7UXlmwLjin4JOnlayQUBkiLAuzVUDW6tfmz5PecYzy6ZgE6HtYCRpGedx3bwvWyM 6oM3Au5WQEDotVa89dwXKIN0l8n9Qz5UO79rutIRmwsXcOg3EyzB1i5pggg5YApQ 7LHYurYJfX38FQ+8lNgwpv7KLRVyBnx8JLlMEVATjAKQgcIEkV8SBJPrFO3Z2G7Z +TqMDVGEOo4aACmR4NqqJfn+7HdGJrtmHZ+Iz+r5dfJik1/Hl8S0dXFrsG1KFkSm dFeckxEeKEeWskkxNyngDLoz/jzNR3flHH/3jaO6CMYZVXZrL1eE1gICrQIDAQAB o4ICpzCCAqMwHQYDVR0OBBYEFCSPXibxwI9EhsmRHItgnq6LbLdNMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBiL2RhZThi MC05N2QwLTQ4ZDQtOWIyNi0wMTM3YjFmNzVkMDIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGIvZGFlOGIw LTk3ZDAtNDhkNC05YjI2LTAxMzdiMWY3NWQwMi8xL0pJOWVKdkhBajBTR3laRWNp MkNlcm90c3QwMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCcGCCsGAQUF BwEHAQH/BBgwFjAUBAIAATAOMAwDBAbBvMADBADBvMIwGQYIKwYBBQUHAQgBAf8E CjAIoAYwBAICPnEwDQYJKoZIhvcNAQELBQADggEBADm9zHO28bjbeP5h6lQ8V5BB hbLnXcgAuGK0F+9iiVkzTOFo6d9QbhojPv4d8Mu0AOAOJRsdBC1f9t8c34gJOCsG i2Fk6rNGhSRu7ryduMeTMcsBXK3ZNi1C1qql6nJkiCCaXPgJwzCwpLGmjlb0Fc4/ xK3ahy4MPgCpbsiOxDdtL3wDNiJ0GYeM2lOWxrIMvb8HH2aDz3xCY3xKI60AlwcV ZNcLvCgoLxb7Ue2wpT/kiEK3q1eS4wcl36mSvJfAt+KQuIaDOzJaCcj4HWY2VAjH ECR08s4uco30f5jyoHGV9KZmzcJeV7szJ0SPiDLN40MfCiE2HQg+Q3omc6R4Goo= -----END CERTIFICATE-----Generated at Sun Jan 25 22:20:57 2026 by rpki-client