This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JNnaT_sbttJz3hutXbvw0f9H8M8.cer File: JNnaT_sbttJz3hutXbvw0f9H8M8.cer (raw, json) Hash identifier: LwQhY4e1ZE7ccPB4ucTzcl2BKcAzDzba7eZgWbXARgA= Subject key identifier: 24:D9:DA:4F:FB:1B:B6:D2:73:DE:1B:AD:5D:BB:F0:D1:FF:47:F0:CF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B3572C98ACEAA4FF7091326D89AD7BD Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/JNnaT_sbttJz3hutXbvw0f9H8M8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:17:39 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 48065 IP: 46.57.128.0/17 IP: 46.213.0.0/16 IP: 94.252.128.0/17 IP: 178.52.0.0/16 IP: 185.136.144.0/22 IP: 188.139.128.0/17 IP: 2a00:b800::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:72:c9:8a:ce:aa:4f:f7:09:13:26:d8:9a:d7:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=24d9da4ffb1bb6d273de1bad5dbbf0d1ff47f0cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:5b:05:10:54:b0:58:9b:32:a5:6b:ec:38:08: 54:7b:41:d7:ce:0d:6a:ff:14:b3:58:e4:11:63:35: f1:b6:bf:af:32:b7:05:93:43:4b:6c:eb:a2:4a:3c: bc:17:78:8f:88:0f:ef:af:9d:89:33:68:b7:60:75: a4:f1:d2:2a:a2:d5:fa:e9:12:cc:91:46:e6:65:de: 39:94:3e:be:3b:8b:8a:94:17:39:11:15:43:85:03: 07:68:71:2b:82:7b:78:9f:26:8c:91:46:da:01:aa: ba:3e:a5:51:da:5a:26:50:77:0b:5f:ff:33:e9:09: ff:7f:cd:62:cf:8b:51:6a:8f:51:b1:e4:d0:66:96: 81:c8:14:eb:c9:87:23:23:12:f3:8d:6a:20:6b:24: da:f5:9f:62:6f:5f:b1:cc:4f:17:92:fb:f2:59:f1: 54:0c:41:5b:08:3e:31:b1:e5:46:e9:9d:9f:33:ed: 5a:c6:6b:38:d9:93:e6:e2:45:16:ba:c3:25:4c:08: 62:6a:77:bc:57:89:98:8c:23:43:e5:3a:ad:e7:65: 27:3e:10:70:ac:ed:63:c7:bb:90:6f:67:7a:87:da: 9c:f3:84:ea:73:23:2b:1c:cc:17:91:8b:14:23:66: 3f:ed:ef:f4:45:11:86:b5:df:24:55:d8:18:66:16: 3d:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:D9:DA:4F:FB:1B:B6:D2:73:DE:1B:AD:5D:BB:F0:D1:FF:47:F0:CF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/JNnaT_sbttJz3hutXbvw0f9H8M8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.57.128.0/17 46.213.0.0/16 94.252.128.0/17 178.52.0.0/16 185.136.144.0/22 188.139.128.0/17 IPv6: 2a00:b800::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 48065 Signature Algorithm: sha256WithRSAEncryption 89:d6:ce:06:08:97:01:bd:28:72:7a:35:6a:62:9b:6c:ea:d1: f3:37:f4:63:10:c1:03:95:81:4a:02:0b:b3:e4:46:42:d9:de: c4:39:a3:ee:43:de:f4:b1:64:43:82:f6:e5:a5:04:c8:1e:e5: 57:7c:f8:15:36:36:1f:f7:af:1a:6c:ac:e6:7d:fa:66:c3:19: 00:38:e2:c3:1e:80:37:2c:1e:7a:ef:49:7f:68:26:29:b1:3d: 26:08:1f:5f:6c:4a:db:d4:04:fb:1c:07:de:a6:b5:e9:c4:94: 06:08:62:63:31:bc:3c:d6:f8:d3:8e:0a:ee:62:2d:1e:7e:31: c3:d2:e7:88:c3:58:00:3b:21:b0:18:8f:de:91:9b:a7:ec:a2: dc:b3:90:97:78:6e:9d:d0:56:06:b9:9d:a5:07:fd:71:d4:c3: 6f:e1:04:17:c6:b9:0d:45:13:dc:5d:e6:9e:a1:33:13:f0:e4: 1c:b2:37:d1:88:c5:f9:25:5f:5c:66:40:6e:49:bd:87:2c:aa: 9a:42:7b:4d:0d:65:93:0e:66:30:98:8a:dc:ee:9d:3f:94:d9: ec:fb:c9:cb:95:73:a7:75:f3:3c:a7:18:e1:8b:26:ca:b0:85: c9:bb:51:5d:42:07:30:ce:f0:17:34:ff:9a:bc:14:5d:d6:d0: 7c:cb:9c:8b -----BEGIN CERTIFICATE----- MIIFvzCCBKegAwIBAgISAZt7NXLJis6qT/cJEybYmte9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNGQ5ZGE0ZmZiMWJiNmQyNzNkZTFiYWQ1ZGJiZjBkMWZmNDdmMGNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFsFEFSwWJsypWvsOAhUe0HXzg1q /xSzWOQRYzXxtr+vMrcFk0NLbOuiSjy8F3iPiA/vr52JM2i3YHWk8dIqotX66RLM kUbmZd45lD6+O4uKlBc5ERVDhQMHaHErgnt4nyaMkUbaAaq6PqVR2lomUHcLX/8z 6Qn/f81iz4tRao9RseTQZpaByBTryYcjIxLzjWogayTa9Z9ib1+xzE8XkvvyWfFU DEFbCD4xseVG6Z2fM+1axms42ZPm4kUWusMlTAhiane8V4mYjCND5Tqt52UnPhBw rO1jx7uQb2d6h9qc84TqcyMrHMwXkYsUI2Y/7e/0RRGGtd8kVdgYZhY9oQIDAQAB o4ICyzCCAscwHQYDVR0OBBYEFCTZ2k/7G7bSc94brV278NH/R/DPMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc3LzFlYjEy MC02ODdjLTQ5OTMtODU3Zi04YTAzYTdjMWZlOWIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzcvMWViMTIw LTY4N2MtNDk5My04NTdmLThhMDNhN2MxZmU5Yi8xL0pObmFUX3NidHRKejNodXRY YnZ3MGY5SDhNOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEoGCCsGAQUF BwEHAQH/BDswOTAoBAIAATAiAwQHLjmAAwMALtUDBAde/IADAwCyNAMEArmIkAME B7yLgDANBAIAAjAHAwUDKgC4ADAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMAu8Ew DQYJKoZIhvcNAQELBQADggEBAInWzgYIlwG9KHJ6NWpim2zq0fM39GMQwQOVgUoC C7PkRkLZ3sQ5o+5D3vSxZEOC9uWlBMge5Vd8+BU2Nh/3rxpsrOZ9+mbDGQA44sMe gDcsHnrvSX9oJimxPSYIH19sStvUBPscB96mtenElAYIYmMxvDzW+NOOCu5iLR5+ McPS54jDWAA7IbAYj96Rm6fsotyzkJd4bp3QVga5naUH/XHUw2/hBBfGuQ1FE9xd 5p6hMxPw5ByyN9GIxfklX1xmQG5JvYcsqppCe00NZZMOZjCYitzunT+U2ez7ycuV c6d18zynGOGLJsqwhcm7UV1CBzDO8Bc0/5q8FF3W0HzLnIs= -----END CERTIFICATE-----Generated at Mon Jan 26 04:00:38 2026 by rpki-client