This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JSkmUqns2ca9yCZLmUjfYhIgdiQ.cer File: JSkmUqns2ca9yCZLmUjfYhIgdiQ.cer (raw, json) Hash identifier: UFIG4xQ3D1glY9mPZnc7peQl0WH1AWLmdzG07o8iDio= Subject key identifier: 25:29:26:52:A9:EC:D9:C6:BD:C8:26:4B:99:48:DF:62:12:20:76:24 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5C950588D1A5465AF22CB204ED06B6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:19:38 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 201698 IP: 45.156.164.0/22 IP: 185.64.156.0/22 IP: 2a04:f8c0::/29 IP: 2a0f:1980::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:95:05:88:d1:a5:46:5a:f2:2c:b2:04:ed:06:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:19:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=25292652a9ecd9c6bdc8264b9948df6212207624 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:5e:17:a7:ce:7e:31:0c:86:ae:34:51:fb:53: 86:0c:d4:66:cd:3a:e0:da:b5:91:77:85:59:59:ff: fc:cb:88:cb:b9:44:af:50:7d:dc:d4:e8:32:29:4a: cc:c3:ae:d3:69:39:b8:b2:b8:d9:ce:b3:8d:18:24: 43:ec:c2:b1:c4:bd:7b:78:8f:62:da:d4:6b:0a:e3: 81:e3:86:6e:a8:31:62:d2:3c:e0:ed:1a:30:ad:79: bd:ad:8d:67:27:d4:c7:50:72:cf:fd:80:7f:a8:9d: c6:95:fa:ae:49:20:e4:1e:10:8a:5a:e6:a3:0e:a2: 87:f6:95:6b:0a:63:ca:78:73:84:8e:63:2c:44:b9: 8b:a5:c0:0f:3b:14:97:ac:66:f6:82:23:00:12:27: f8:be:99:99:8e:e9:75:4a:8b:60:93:9e:80:17:0b: f5:ff:ed:82:d8:01:75:b1:97:9d:d1:17:79:0c:15: 00:26:0c:bc:85:d2:2a:c8:10:54:b5:1d:e6:ea:fb: 59:fa:ad:95:79:d6:d9:3f:fe:46:f5:14:fc:e1:0e: 08:18:e7:f3:c6:63:a7:ae:f1:1f:1b:24:bb:3e:fc: 57:69:e2:dc:52:56:34:9e:99:92:06:11:be:00:29: 9a:ac:80:c4:a5:45:bf:8d:10:19:67:10:53:2a:ed: ac:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:29:26:52:A9:EC:D9:C6:BD:C8:26:4B:99:48:DF:62:12:20:76:24 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.156.164.0/22 185.64.156.0/22 IPv6: 2a04:f8c0::/29 2a0f:1980::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 201698 Signature Algorithm: sha256WithRSAEncryption 5a:84:0c:a7:62:74:dc:d7:0e:90:c2:4a:50:b6:a2:9d:4d:af: 44:86:cb:ae:ba:60:b3:df:4d:42:07:2f:36:7e:38:35:d6:90: 69:e9:df:ee:58:b4:39:fa:61:2c:34:6a:30:8d:8f:a1:5a:1f: 76:ba:c4:b3:ae:25:4b:23:2c:44:0a:1c:8e:1a:b7:9a:e9:27: 14:db:ae:c1:b7:48:89:a0:8b:57:d5:88:c5:3c:34:c8:5f:6f: f8:84:27:d5:4b:2f:f3:45:1c:3a:37:86:a9:23:72:fa:fd:1a: 91:2f:ff:ff:aa:ee:0c:ac:5c:c4:0c:15:7d:a4:df:34:17:94: 12:9d:9d:f3:14:8e:da:5d:23:ad:be:9d:14:71:7a:09:01:c4: 1d:56:16:de:31:23:f1:f5:1d:b6:ec:0f:4c:02:90:95:21:11: 2b:3f:14:4f:6e:50:26:10:37:c0:a0:2c:89:d5:4c:b9:5e:9a: 86:85:35:c0:25:a0:4f:6b:e2:e5:8e:03:03:c6:f7:df:6c:b2: 2d:b7:6e:fc:a8:2b:de:f2:84:26:e7:55:72:15:16:a5:58:fb: 63:2e:6e:0e:f2:5c:64:d7:fa:42:1a:88:13:9a:b9:e6:73:78: ab:e6:58:46:1c:26:24:2c:48:90:af:0f:11:25:6c:4f:db:19: 7d:f8:84:de -----BEGIN CERTIFICATE----- MIIFsDCCBJigAwIBAgISAZt9XJUFiNGlRlryLLIE7Qa2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxOTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNTI5MjY1MmE5ZWNkOWM2YmRjODI2NGI5OTQ4ZGY2MjEyMjA3NjI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzF4Xp85+MQyGrjRR+1OGDNRmzTrg 2rWRd4VZWf/8y4jLuUSvUH3c1OgyKUrMw67TaTm4srjZzrONGCRD7MKxxL17eI9i 2tRrCuOB44ZuqDFi0jzg7RowrXm9rY1nJ9THUHLP/YB/qJ3GlfquSSDkHhCKWuaj DqKH9pVrCmPKeHOEjmMsRLmLpcAPOxSXrGb2giMAEif4vpmZjul1Sotgk56AFwv1 /+2C2AF1sZed0Rd5DBUAJgy8hdIqyBBUtR3m6vtZ+q2VedbZP/5G9RT84Q4IGOfz xmOnrvEfGyS7PvxXaeLcUlY0npmSBhG+ACmarIDEpUW/jRAZZxBTKu2sNQIDAQAB o4ICvDCCArgwHQYDVR0OBBYEFCUpJlKp7NnGvcgmS5lI32ISIHYkMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUyLzIxYTRm ZC1iZDhhLTRhYTQtOGM0NS01NzEwMzA1NDM5ZWMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTIvMjFhNGZk LWJkOGEtNGFhNC04YzQ1LTU3MTAzMDU0MzllYy8xL0pTa21VcW5zMmNhOXlDWkxt VWpmWWhJZ2RpUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDsGCCsGAQUF BwEHAQH/BCwwKjASBAIAATAMAwQCLZykAwQCuUCcMBQEAgACMA4DBQMqBPjAAwUD Kg8ZgDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDE+IwDQYJKoZIhvcNAQELBQAD ggEBAFqEDKdidNzXDpDCSlC2op1Nr0SGy666YLPfTUIHLzZ+ODXWkGnp3+5YtDn6 YSw0ajCNj6FaH3a6xLOuJUsjLEQKHI4at5rpJxTbrsG3SImgi1fViMU8NMhfb/iE J9VLL/NFHDo3hqkjcvr9GpEv//+q7gysXMQMFX2k3zQXlBKdnfMUjtpdI62+nRRx egkBxB1WFt4xI/H1HbbsD0wCkJUhESs/FE9uUCYQN8CgLInVTLlemoaFNcAloE9r 4uWOAwPG999ssi23bvyoK97yhCbnVXIVFqVY+2Mubg7yXGTX+kIaiBOaueZzeKvm WEYcJiQsSJCvDxElbE/bGX34hN4= -----END CERTIFICATE-----Generated at Sun Jan 25 14:06:41 2026 by rpki-client