This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JPUbvfAQiNNMa6ru-GvaJanwIZY.cer File: JPUbvfAQiNNMa6ru-GvaJanwIZY.cer (raw, json) Hash identifier: vW8QpaftuAV861Sy/IReGBk7TVi34818xKpPktZR1Tg= Subject key identifier: 24:F5:1B:BD:F0:10:88:D3:4C:6B:AA:EE:F8:6B:DA:25:A9:F0:21:96 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B775906F689EBFCAD374CD92E62CD5C63 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:18:01 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 34562 AS: 49471 AS: 49500 AS: 50814 AS: 57518 AS: 61258 IP: 45.89.21.0/24 IP: 85.198.32.0/20 IP: 86.106.24.0/24 IP: 91.123.0.0/20 IP: 91.205.221.0/24 IP: 91.217.235.0/24 IP: 190.106.160.0/19 IP: 190.211.144.0/24 IP: 192.68.136.0/24 IP: 206.195.128.0/20 IP: 2001:678:fe4::/48 IP: 2001:678:fe8::/48 IP: 2001:67c:23e0::/48 IP: 2a09:c600::/29 IP: 2a11:4000::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:06:f6:89:eb:fc:ad:37:4c:d9:2e:62:cd:5c:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=24f51bbdf01088d34c6baaeef86bda25a9f02196 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:31:6c:1e:71:ee:c7:23:79:42:ef:b8:c3:3d: c4:88:ca:ac:41:33:0b:62:f7:08:ee:d7:b5:e4:5d: 25:b1:1d:e7:a0:79:2e:1b:ad:84:e1:e4:4f:72:31: d8:0f:61:bd:28:6a:75:15:cd:34:11:10:d7:69:5f: e3:f7:59:5f:f9:6e:76:87:b0:88:66:02:8e:eb:b4: eb:db:31:7d:64:65:5c:d7:d9:8d:19:56:a2:f8:6b: 04:84:40:2b:8c:57:b1:e0:6c:9a:cc:42:16:68:98: de:75:58:68:80:6a:88:b8:12:19:78:ec:65:35:2c: 11:4f:7b:a4:1e:23:06:4b:17:12:1f:28:4b:ca:77: ed:7d:ed:e0:19:31:64:1b:6e:09:72:a3:f9:6f:93: aa:36:73:2e:ae:55:e4:36:07:d2:55:24:de:4f:1e: ac:2f:5c:b2:c0:ed:87:1b:1c:f0:28:4e:42:8b:80: 4b:50:40:4b:7e:dc:98:29:5b:b3:9a:97:06:f8:b5: 36:43:60:9e:85:ed:bf:d4:32:98:8c:63:6a:7b:ca: 6d:d6:07:2c:b7:9d:06:d0:cc:2b:11:4a:c5:8a:18: 4d:06:50:48:f0:25:31:54:ef:93:d2:fb:a7:d8:f7: 62:a4:b6:2e:87:08:66:b5:7f:6b:4a:7c:d5:ab:dd: c8:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:F5:1B:BD:F0:10:88:D3:4C:6B:AA:EE:F8:6B:DA:25:A9:F0:21:96 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.89.21.0/24 85.198.32.0/20 86.106.24.0/24 91.123.0.0/20 91.205.221.0/24 91.217.235.0/24 190.106.160.0/19 190.211.144.0/24 192.68.136.0/24 206.195.128.0/20 IPv6: 2001:678:fe4::/48 2001:678:fe8::/48 2001:67c:23e0::/48 2a09:c600::/29 2a11:4000::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 34562 49471 49500 50814 57518 61258 Signature Algorithm: sha256WithRSAEncryption 16:51:70:d0:35:61:58:47:59:39:0e:f3:1f:70:3c:98:84:99: 1d:6c:f9:32:83:a5:fb:be:89:2e:cb:03:b9:bb:9c:3e:7a:e2: 4d:5d:ae:3c:76:0d:6e:12:20:fa:11:08:90:50:c6:71:bd:64: 1e:bc:7e:74:3d:33:b7:15:e1:f2:da:10:57:5e:65:28:65:e2: 68:87:a4:96:8f:43:8f:f6:24:bf:f3:c0:15:37:ac:dd:e3:79: 44:e8:01:2a:67:ba:24:17:b5:0b:c2:55:e7:08:6c:29:05:58: 59:28:2a:19:6e:da:88:98:47:7d:34:3c:6b:72:fc:f7:f6:48: 81:e4:b2:9a:33:79:2f:b3:14:50:72:43:3c:31:1f:39:6b:58: 47:63:cf:36:9f:98:c1:be:4b:75:77:6f:55:5d:44:71:87:66: de:9f:03:77:5a:8f:10:6d:af:dc:a3:41:7a:6f:56:5b:43:1f: 08:1c:67:37:34:20:02:c2:e4:4e:74:d1:13:a6:f3:15:38:a4: 69:25:17:05:0b:db:e9:53:42:53:bd:6e:60:04:c0:a4:67:8f: 22:99:28:c8:57:65:33:5f:86:c9:67:dd:cb:39:c1:34:6c:5a: 4f:53:da:3b:9e:f3:ad:37:2d:25:fd:9f:2e:6d:49:d7:9d:94: e8:99:e6:db -----BEGIN CERTIFICATE----- MIIGFTCCBP2gAwIBAgISAZt3WQb2iev8rTdM2S5izVxjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNGY1MWJiZGYwMTA4OGQzNGM2YmFhZWVmODZiZGEyNWE5ZjAyMTk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1jFsHnHuxyN5Qu+4wz3EiMqsQTML YvcI7te15F0lsR3noHkuG62E4eRPcjHYD2G9KGp1Fc00ERDXaV/j91lf+W52h7CI ZgKO67Tr2zF9ZGVc19mNGVai+GsEhEArjFex4GyazEIWaJjedVhogGqIuBIZeOxl NSwRT3ukHiMGSxcSHyhLynftfe3gGTFkG24JcqP5b5OqNnMurlXkNgfSVSTeTx6s L1yywO2HGxzwKE5Ci4BLUEBLftyYKVuzmpcG+LU2Q2Cehe2/1DKYjGNqe8pt1gcs t50G0MwrEUrFihhNBlBI8CUxVO+T0vun2PdipLYuhwhmtX9rSnzVq93IHwIDAQAB o4IDITCCAx0wHQYDVR0OBBYEFCT1G73wEIjTTGuq7vhr2iWp8CGWMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzlmL2U4ZWJk Ni01NjFkLTQyYWYtYmIzNi01MjAxYTIzZDdhNDkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWYvZThlYmQ2 LTU2MWQtNDJhZi1iYjM2LTUyMDFhMjNkN2E0OS8xL0pQVWJ2ZkFRaU5OTWE2cnUt R3ZhSmFud0laWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGGBggrBgEF BQcBBwEB/wR3MHUwQgQCAAEwPAMEAC1ZFQMEBFXGIAMEAFZqGAMEBFt7AAMEAFvN 3QMEAFvZ6wMEBb5qoAMEAL7TkAMEAMBEiAMEBM7DgDAvBAIAAjApAwcAIAEGeA/k AwcAIAEGeA/oAwcAIAEGfCPgAwUDKgnGAAMFAyoRQAAwMwYIKwYBBQUHAQgBAf8E JDAioCAwHgIDAIcCAgMAwT8CAwDBXAIDAMZ+AgMA4K4CAwDvSjANBgkqhkiG9w0B AQsFAAOCAQEAFlFw0DVhWEdZOQ7zH3A8mISZHWz5MoOl+76JLssDubucPnriTV2u PHYNbhIg+hEIkFDGcb1kHrx+dD0ztxXh8toQV15lKGXiaIeklo9Dj/Ykv/PAFTes 3eN5ROgBKme6JBe1C8JV5whsKQVYWSgqGW7aiJhHfTQ8a3L89/ZIgeSymjN5L7MU UHJDPDEfOWtYR2PPNp+Ywb5LdXdvVV1EcYdm3p8Dd1qPEG2v3KNBem9WW0MfCBxn NzQgAsLkTnTRE6bzFTikaSUXBQvb6VNCU71uYATApGePIpkoyFdlM1+GyWfdyznB NGxaT1PaO57zrTctJf2fLm1J152U6Jnm2w== -----END CERTIFICATE-----Generated at Sun Jan 25 05:38:58 2026 by rpki-client