This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JSxOK_XyE4Ri70pdng9uenY1MP4.cer File: JSxOK_XyE4Ri70pdng9uenY1MP4.cer (raw, json) Hash identifier: STfxMppdHyK6tTexFIehlmWO3Y5rgGQBOcnOlnKyrOs= Subject key identifier: 25:2C:4E:2B:F5:F2:13:84:62:EF:4A:5D:9E:0F:6E:7A:76:35:30:FE Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA755A486CB0EA367478CA2D5E9F33D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:20:54 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 211987 IP: 185.234.102.0/24 IP: 2a10:da80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:55:a4:86:cb:0e:a3:67:47:8c:a2:d5:e9:f3:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:20:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=252c4e2bf5f2138462ef4a5d9e0f6e7a763530fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:5a:64:23:fd:fd:09:cb:b9:66:c8:c9:d4:76: a1:e7:ff:e0:2c:93:7c:c0:1a:41:26:e8:87:31:84: 6a:71:9d:2a:79:cb:17:00:04:25:92:df:88:7d:80: 2d:2a:b3:c2:a6:95:49:51:95:dc:29:dc:a3:d2:4b: a7:8e:3f:41:1b:00:ba:c5:cd:c4:28:5e:b1:29:21: 65:cb:7d:74:7f:d4:2f:9b:12:cf:5e:f3:c0:e6:e9: f0:c4:92:f6:a5:c4:9f:e4:11:66:fb:ef:2e:53:53: 52:27:10:d5:a5:fa:02:e4:bf:f1:e8:e4:8a:e4:af: a7:0c:4a:59:9b:07:eb:e5:04:9d:81:15:48:d5:fd: 6f:10:95:d3:31:ea:0a:fd:ba:c4:35:75:80:ad:ca: 25:f2:76:cf:77:48:dd:91:d8:08:ed:13:c7:8c:73: 63:eb:0b:4a:bd:0c:2f:e4:78:5b:1c:27:9f:69:0e: 98:0c:85:9d:19:7c:89:c7:04:be:ae:35:a3:64:c7: 85:69:6b:3a:5d:e3:21:64:fd:c4:af:9a:7a:d1:54: c5:0a:9a:58:58:c6:6f:cd:38:46:de:2c:4b:cb:a4: 52:bd:40:a7:66:50:0b:99:eb:b6:0b:fe:66:5a:8e: b7:c5:d1:1c:7c:ea:dd:d8:5c:dc:9c:1c:9d:9c:4a: a7:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:2C:4E:2B:F5:F2:13:84:62:EF:4A:5D:9E:0F:6E:7A:76:35:30:FE X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.234.102.0/24 IPv6: 2a10:da80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 211987 Signature Algorithm: sha256WithRSAEncryption 08:c0:65:d1:ac:c8:77:94:84:04:1c:a0:7e:2e:cc:a0:3c:87: 29:54:6c:76:5d:8d:8f:2c:90:05:6f:17:f3:3d:2d:51:da:5e: ff:66:72:0a:63:dc:ac:48:57:1f:7f:44:7d:75:6a:af:7b:46: 16:39:43:4c:ab:7a:69:da:81:8e:93:f9:19:e4:1f:2f:51:cd: 37:d7:ed:28:03:f6:36:31:24:fc:77:90:d4:e6:96:57:5f:03: 96:48:a3:5a:8e:2d:7c:07:e0:8e:7f:24:63:95:a3:43:61:34: c6:10:aa:68:ed:03:a8:ae:da:fb:b2:97:74:a7:d5:d0:7d:02: 5b:36:32:55:a2:a1:83:5e:d6:43:95:bf:b3:94:73:90:f1:22: c9:10:69:b2:0b:e7:a7:6b:67:b2:4f:86:4d:73:7d:19:f6:f2: a8:45:cd:6b:7c:58:36:da:45:0b:e9:02:55:fe:55:3b:f6:16: c2:71:f4:49:a2:f8:0b:4a:2b:24:87:28:f5:79:57:77:26:c5: ee:fd:06:de:8e:88:ca:3d:12:3e:cc:1d:0f:34:b1:b7:e4:2c: 3d:ea:90:08:a1:ae:8b:82:a7:eb:36:a9:66:d2:29:1b:8f:f6: bb:17:65:d8:a0:da:2e:aa:35:35:56:b5:e3:80:df:c2:79:55: 38:17:35:ee -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt+p1WkhssOo2dHjKLV6fM9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIyMDU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNTJjNGUyYmY1ZjIxMzg0NjJlZjRhNWQ5ZTBmNmU3YTc2MzUzMGZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1pkI/39Ccu5ZsjJ1Hah5//gLJN8 wBpBJuiHMYRqcZ0qecsXAAQlkt+IfYAtKrPCppVJUZXcKdyj0kunjj9BGwC6xc3E KF6xKSFly310f9QvmxLPXvPA5unwxJL2pcSf5BFm++8uU1NSJxDVpfoC5L/x6OSK 5K+nDEpZmwfr5QSdgRVI1f1vEJXTMeoK/brENXWArcol8nbPd0jdkdgI7RPHjHNj 6wtKvQwv5HhbHCefaQ6YDIWdGXyJxwS+rjWjZMeFaWs6XeMhZP3Er5p60VTFCppY WMZvzThG3ixLy6RSvUCnZlALmeu2C/5mWo63xdEcfOrd2FzcnBydnEqnJQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFCUsTiv18hOEYu9KXZ4Pbnp2NTD+MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMyL2JiYmE4 OC0xMzQ0LTRkODktOGY1Mi02ZGY3YmY1OWUzMjYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzIvYmJiYTg4 LTEzNDQtNGQ4OS04ZjUyLTZkZjdiZjU5ZTMyNi8xL0pTeE9LX1h5RTRSaTcwcGRu Zzl1ZW5ZMU1QNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAuepmMA0EAgACMAcDBQMqENqAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM8EzANBgkqhkiG9w0BAQsFAAOCAQEACMBl0azId5SE BBygfi7MoDyHKVRsdl2NjyyQBW8X8z0tUdpe/2ZyCmPcrEhXH39EfXVqr3tGFjlD TKt6adqBjpP5GeQfL1HNN9ftKAP2NjEk/HeQ1OaWV18DlkijWo4tfAfgjn8kY5Wj Q2E0xhCqaO0DqK7a+7KXdKfV0H0CWzYyVaKhg17WQ5W/s5RzkPEiyRBpsgvnp2tn sk+GTXN9GfbyqEXNa3xYNtpFC+kCVf5VO/YWwnH0SaL4C0orJIco9XlXdybF7v0G 3o6Iyj0SPswdDzSxt+QsPeqQCKGui4Kn6zapZtIpG4/2uxdl2KDaLqo1NVa144Df wnlVOBc17g== -----END CERTIFICATE-----Generated at Sun Jan 25 22:32:13 2026 by rpki-client