This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JU0Xi-GyC41zhEa-BS4InImgCrM.cer File: JU0Xi-GyC41zhEa-BS4InImgCrM.cer (raw, json) Hash identifier: DlC+eoBNY4ultohaldRERiYh/2dKpXBVKS9onZiLMT8= Subject key identifier: 25:4D:17:8B:E1:B2:0B:8D:73:84:46:BE:05:2E:08:9C:89:A0:0A:B3 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E383CB1A55D05BD66CD9D7E6FC6A1EE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6d/68ace7-3e31-4cfe-a1e4-a104d247715f/1/JU0Xi-GyC41zhEa-BS4InImgCrM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6d/68ace7-3e31-4cfe-a1e4-a104d247715f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 16097 IP: 80.64.176.0/20 IP: 85.232.0.0/19 IP: 85.239.96.0/19 IP: 94.101.32.0/20 IP: 109.104.32.0/19 IP: 146.0.96.0/19 IP: 185.19.52.0/22 IP: 185.80.120.0/22 IP: 212.122.32.0/19 IP: 213.187.64.0/19 IP: 217.69.224.0/19 IP: 2a02:238::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:3c:b1:a5:5d:05:bd:66:cd:9d:7e:6f:c6:a1:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=254d178be1b20b8d738446be052e089c89a00ab3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a8:42:0b:9e:6f:79:36:ae:a1:7c:c7:59:60: 88:01:d7:a8:94:a9:1f:ab:f7:20:11:2a:ff:99:81: 7a:19:1d:c0:84:7c:8f:8c:ef:65:20:30:cf:cb:16: 97:28:6c:52:d1:29:44:14:75:da:0e:f0:95:89:29: 7d:dc:d5:5e:55:17:e1:d3:8f:03:d5:75:fb:8c:5d: e3:c4:0e:86:fb:f6:76:13:5b:e7:f0:ad:de:78:25: 4a:2b:35:ac:7f:c0:d3:66:60:65:bb:41:d1:13:dc: 3e:35:b9:44:e7:cb:44:a1:36:3e:3f:e4:fa:4a:0f: a9:72:1b:58:ca:d8:84:14:4c:e8:29:05:8f:6f:82: 93:07:aa:9f:53:58:bc:76:ec:4d:a0:7b:47:61:37: 97:14:54:89:25:a3:ad:cd:78:3b:7b:c1:18:4f:59: e4:b9:a8:b3:93:fe:f1:cc:c0:56:c2:fc:4b:3b:52: d0:30:46:55:fa:44:3a:ab:87:d3:09:55:6d:ab:f9: 10:72:62:df:be:56:e8:25:14:f6:43:52:81:99:34: 1d:6f:e0:cd:7b:5d:5a:96:3c:04:5f:62:65:33:00: 83:7b:6a:af:7f:39:29:0a:e4:34:46:07:fe:0c:fc: 66:d1:db:f1:f8:ed:ab:d6:68:c6:25:68:3d:1a:21: 37:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:4D:17:8B:E1:B2:0B:8D:73:84:46:BE:05:2E:08:9C:89:A0:0A:B3 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/68ace7-3e31-4cfe-a1e4-a104d247715f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/68ace7-3e31-4cfe-a1e4-a104d247715f/1/JU0Xi-GyC41zhEa-BS4InImgCrM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.64.176.0/20 85.232.0.0/19 85.239.96.0/19 94.101.32.0/20 109.104.32.0/19 146.0.96.0/19 185.19.52.0/22 185.80.120.0/22 212.122.32.0/19 213.187.64.0/19 217.69.224.0/19 IPv6: 2a02:238::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 16097 Signature Algorithm: sha256WithRSAEncryption 03:44:59:9c:53:e8:bd:7e:a9:e3:38:d3:8b:7d:42:11:6f:4b: b9:00:ab:b1:22:a6:32:d5:11:fe:5d:86:f4:eb:0e:e2:94:17: 96:55:c2:16:3a:e8:d1:1d:ca:4e:75:b9:15:e1:7f:96:80:85: 34:20:a9:5d:b2:f0:81:db:ce:bc:70:52:f7:2e:21:2a:ce:71: 42:42:52:17:ba:8f:45:c7:3b:f8:4d:43:6d:67:ff:55:99:a3: 98:8d:4b:56:c0:ab:a6:0a:e7:f8:dc:fd:7a:56:8c:71:42:39: 5c:40:da:08:47:8f:39:23:8a:a3:81:c2:c6:e9:97:40:f4:35: 14:9d:aa:bc:88:0e:87:8f:7f:d8:fc:31:a7:c6:56:f6:1c:6c: f5:37:37:40:7e:01:41:37:a2:50:ae:69:34:a9:88:07:5a:5b: 64:68:78:25:92:29:36:3a:05:44:32:ad:51:9b:89:8b:eb:cf: 32:78:ec:39:4b:d5:33:20:28:f9:cf:f5:26:a7:b3:2b:55:54: 2c:50:3e:08:e0:c0:10:ab:3b:05:58:70:17:84:23:7c:be:c8: 48:23:5f:15:66:7c:e7:d1:48:cc:c0:96:4e:01:10:96:48:23: e6:ad:a7:8e:07:ea:44:0b:fe:83:0c:37:36:55:23:7a:5b:de: 24:b3:d8:37 -----BEGIN CERTIFICATE----- MIIF3jCCBMagAwIBAgISAZt+ODyxpV0FvWbNnX5vxqHuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNTRkMTc4YmUxYjIwYjhkNzM4NDQ2YmUwNTJlMDg5Yzg5YTAwYWIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKhCC55veTauoXzHWWCIAdeolKkf q/cgESr/mYF6GR3AhHyPjO9lIDDPyxaXKGxS0SlEFHXaDvCViSl93NVeVRfh048D 1XX7jF3jxA6G+/Z2E1vn8K3eeCVKKzWsf8DTZmBlu0HRE9w+NblE58tEoTY+P+T6 Sg+pchtYytiEFEzoKQWPb4KTB6qfU1i8duxNoHtHYTeXFFSJJaOtzXg7e8EYT1nk uaizk/7xzMBWwvxLO1LQMEZV+kQ6q4fTCVVtq/kQcmLfvlboJRT2Q1KBmTQdb+DN e11aljwEX2JlMwCDe2qvfzkpCuQ0Rgf+DPxm0dvx+O2r1mjGJWg9GiE3zQIDAQAB o4IC6jCCAuYwHQYDVR0OBBYEFCVNF4vhsguNc4RGvgUuCJyJoAqzMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZkLzY4YWNl Ny0zZTMxLTRjZmUtYTFlNC1hMTA0ZDI0NzcxNWYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmQvNjhhY2U3 LTNlMzEtNGNmZS1hMWU0LWExMDRkMjQ3NzE1Zi8xL0pVMFhpLUd5QzQxemhFYS1C UzRJbkltZ0NyTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGoGCCsGAQUF BwEHAQH/BFswWTBIBAIAATBCAwQEUECwAwQFVegAAwQFVe9gAwQEXmUgAwQFbWgg AwQFkgBgAwQCuRM0AwQCuVB4AwQF1HogAwQF1btAAwQF2UXgMA0EAgACMAcDBQAq AgI4MBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAj7hMA0GCSqGSIb3DQEBCwUAA4IB AQADRFmcU+i9fqnjONOLfUIRb0u5AKuxIqYy1RH+XYb06w7ilBeWVcIWOujRHcpO dbkV4X+WgIU0IKldsvCB2868cFL3LiEqznFCQlIXuo9Fxzv4TUNtZ/9VmaOYjUtW wKumCuf43P16VoxxQjlcQNoIR485I4qjgcLG6ZdA9DUUnaq8iA6Hj3/Y/DGnxlb2 HGz1NzdAfgFBN6JQrmk0qYgHWltkaHglkik2OgVEMq1Rm4mL688yeOw5S9UzICj5 z/Ump7MrVVQsUD4I4MAQqzsFWHAXhCN8vshII18VZnzn0UjMwJZOARCWSCPmraeO B+pEC/6DDDc2VSN6W94ks9g3 -----END CERTIFICATE-----Generated at Sun Jan 25 22:53:22 2026 by rpki-client