This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JLpPUqwb4HVdNLxUg8BhvfKTRH4.cer File: JLpPUqwb4HVdNLxUg8BhvfKTRH4.cer (raw, json) Hash identifier: Cdj3N102ejpnFFXwOi5duFOF+t0Ssi9n0bu2Pi8ICHM= Subject key identifier: 24:BA:4F:52:AC:1B:E0:75:5D:34:BC:54:83:C0:61:BD:F2:93:44:7E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5CEED8DE16FF513DD890C36CE56B10 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/JLpPUqwb4HVdNLxUg8BhvfKTRH4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:20:01 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 8781 AS: 34796 AS: 42298 AS: 59966 AS: 211942 AS: 215791 IP: 37.208.128.0/17 IP: 37.210.0.0/15 IP: 78.100.0.0/15 IP: 82.148.96.0/19 IP: 86.62.192.0/18 IP: 89.211.0.0/16 IP: 176.202.0.0/15 IP: 178.152.0.0/15 IP: 185.96.224.0/22 IP: 194.42.47.64/26 IP: 194.93.123.0/26 IP: 212.77.192.0/19 IP: 213.130.96.0/19 IP: 2001:7f8:162::/47 IP: 2001:1a10::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:ee:d8:de:16:ff:51:3d:d8:90:c3:6c:e5:6b:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:20:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=24ba4f52ac1be0755d34bc5483c061bdf293447e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:ff:cb:69:70:4f:80:b7:00:03:8b:08:bc:a3: 9a:59:3e:a2:89:c2:ef:45:bd:19:e8:bf:d6:ff:ee: 64:da:ae:8e:af:ec:68:4d:0e:30:f7:f6:da:8e:6b: 11:76:e6:80:cb:ee:88:53:e0:c3:2e:43:22:69:78: 22:7f:c3:ea:5e:f2:a9:33:75:80:9a:bc:29:4b:87: 23:7b:63:1e:6b:be:75:1a:8c:fa:b6:9b:b9:e3:b2: af:ba:11:32:32:b1:e0:f5:f4:49:5c:15:49:3e:de: 88:83:94:a7:9c:58:ec:6b:d0:f0:3f:3f:94:69:3a: 44:be:f5:5a:a3:0b:d7:ae:0e:49:3b:04:84:8c:5f: 3a:95:6f:ef:e0:b3:6c:8a:f8:da:a3:ff:d7:a8:2b: 99:f4:1b:db:39:69:70:2e:e5:e1:55:e8:a8:67:dc: 99:6b:0c:6c:09:e5:35:5b:1f:11:29:16:49:dd:e6: 90:0a:e1:17:01:67:9d:51:5b:02:b1:91:6e:d1:cb: bb:46:4f:c4:1a:56:f6:7e:48:32:ef:0f:a8:c4:dd: 7f:94:a2:8f:32:11:22:d9:16:ba:a7:24:16:f9:2d: 63:76:86:db:58:b6:c0:e3:0f:8f:80:d9:a4:47:54: 01:18:37:82:14:30:ee:b4:9d:8a:67:1b:58:1f:45: 5f:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:BA:4F:52:AC:1B:E0:75:5D:34:BC:54:83:C0:61:BD:F2:93:44:7E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/JLpPUqwb4HVdNLxUg8BhvfKTRH4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.208.128.0/17 37.210.0.0/15 78.100.0.0/15 82.148.96.0/19 86.62.192.0/18 89.211.0.0/16 176.202.0.0/15 178.152.0.0/15 185.96.224.0/22 194.42.47.64/26 194.93.123.0/26 212.77.192.0/19 213.130.96.0/19 IPv6: 2001:7f8:162::/47 2001:1a10::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 8781 34796 42298 59966 211942 215791 Signature Algorithm: sha256WithRSAEncryption 89:19:04:f9:f3:f2:61:78:25:4a:d8:b2:93:3e:34:f5:c1:9b: b2:92:bd:02:04:b0:15:6a:fb:dd:4f:d9:25:fb:94:ba:78:dc: 3e:73:4e:23:b5:49:a9:fe:d9:cf:d7:35:06:25:8e:98:90:ce: d8:6d:a1:02:12:85:ab:ad:39:0e:16:4a:43:6c:c8:4b:74:2d: 44:e5:6a:1a:22:5f:59:b7:de:9f:79:14:72:ea:13:f7:45:df: d8:7e:ac:b3:a1:2a:46:59:0b:e7:c0:5b:e6:03:d5:42:f8:6d: 18:95:d8:76:d6:27:0f:ee:61:c3:85:8f:1e:4c:e6:f7:10:87: 53:6a:df:f7:0a:54:4c:37:4d:9d:51:bd:7d:29:0e:31:90:86: 68:dc:09:f3:32:3e:6a:3e:8f:fe:e9:23:dd:f5:c7:46:47:90: dc:df:14:a2:1f:a7:e3:8b:91:e8:15:72:2d:71:36:15:45:6d: 08:8f:df:38:a3:27:4e:7a:5f:9f:8d:60:d0:af:55:92:ed:39: 82:7a:b1:dc:24:00:27:fa:41:92:71:4c:8e:5f:6c:2c:45:8f: d5:83:ac:91:f4:98:23:fa:91:80:a2:11:e4:24:fc:ab:c7:a7: 3b:ad:df:be:00:0b:26:c2:89:1d:c7:a6:1a:94:6b:d0:bb:19: 66:3f:ad:44 -----BEGIN CERTIFICATE----- MIIGCTCCBPGgAwIBAgISAZt9XO7Y3hb/UT3YkMNs5WsQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYyMDAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNGJhNGY1MmFjMWJlMDc1NWQzNGJjNTQ4M2MwNjFiZGYyOTM0NDdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmf/LaXBPgLcAA4sIvKOaWT6iicLv Rb0Z6L/W/+5k2q6Or+xoTQ4w9/bajmsRduaAy+6IU+DDLkMiaXgif8PqXvKpM3WA mrwpS4cje2Mea751Goz6tpu547KvuhEyMrHg9fRJXBVJPt6Ig5SnnFjsa9DwPz+U aTpEvvVaowvXrg5JOwSEjF86lW/v4LNsivjao//XqCuZ9BvbOWlwLuXhVeioZ9yZ awxsCeU1Wx8RKRZJ3eaQCuEXAWedUVsCsZFu0cu7Rk/EGlb2fkgy7w+oxN1/lKKP MhEi2Ra6pyQW+S1jdobbWLbA4w+PgNmkR1QBGDeCFDDutJ2KZxtYH0VfvQIDAQAB o4IDFTCCAxEwHQYDVR0OBBYEFCS6T1KsG+B1XTS8VIPAYb3yk0R+MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM3LzM5NzU0 Ni1kYzdiLTQ2NjAtOGE1MS1iZjU5ZmMxY2IyNmQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzcvMzk3NTQ2 LWRjN2ItNDY2MC04YTUxLWJmNTlmYzFjYjI2ZC8xL0pMcFBVcXdiNEhWZE5MeFVn OEJodmZLVFJINC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMHwGCCsGAQUF BwEHAQH/BG0wazBRBAIAATBLAwQHJdCAAwMBJdIDAwFOZAMEBVKUYAMEBlY+wAMD AFnTAwMBsMoDAwGymAMEArlg4AMFBsIqL0ADBQbCXXsAAwQF1E3AAwQF1YJgMBYE AgACMBADBwEgAQf4AWIDBQMgARoQMDIGCCsGAQUFBwEIAQH/BCMwIaAfMB0CAiJN AgMAh+wCAwClOgIDAOo+AgMDO+YCAwNK7zANBgkqhkiG9w0BAQsFAAOCAQEAiRkE +fPyYXglStiykz409cGbspK9AgSwFWr73U/ZJfuUunjcPnNOI7VJqf7Zz9c1BiWO mJDO2G2hAhKFq605DhZKQ2zIS3QtROVqGiJfWbfen3kUcuoT90Xf2H6ss6EqRlkL 58Bb5gPVQvhtGJXYdtYnD+5hw4WPHkzm9xCHU2rf9wpUTDdNnVG9fSkOMZCGaNwJ 8zI+aj6P/ukj3fXHRkeQ3N8Uoh+n44uR6BVyLXE2FUVtCI/fOKMnTnpfn41g0K9V ku05gnqx3CQAJ/pBknFMjl9sLEWP1YOskfSYI/qRgKIR5CT8q8enO63fvgALJsKJ HcemGpRr0LsZZj+tRA== -----END CERTIFICATE-----Generated at Sun Jan 25 18:53:46 2026 by rpki-client