This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer File: JXdsd_jr5wlMoAes4anAv9wrOuw.cer (raw, json) Hash identifier: 6lXdP50TcPuuQ7hFeafi9bf0f7nX+TSoVUNF6vMqkoU= Subject key identifier: 25:77:6C:77:F8:EB:E7:09:4C:A0:07:AC:E1:A9:C0:BF:DC:2B:3A:EC Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DC9E387869EC5507D1A7C32D19A8A8D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:19:01 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 59798 IP: 23.90.128.0/18 IP: 31.216.56.0/24 IP: 94.154.120.0/24 IP: 104.166.128.0/18 IP: 146.19.236.0/24 IP: 176.56.39.0/24 IP: 185.207.112.0/22 IP: 192.169.96.0/19 IP: 193.118.32.0/19 IP: 193.118.96.0/19 IP: 199.182.232.0/21 IP: 2a0b:21c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:e3:87:86:9e:c5:50:7d:1a:7c:32:d1:9a:8a:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=25776c77f8ebe7094ca007ace1a9c0bfdc2b3aec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a6:f8:b3:d7:14:c8:b9:8a:c9:57:85:8b:44: 01:37:d6:d1:17:7f:6f:4a:74:56:07:00:f6:78:f4: b7:7e:6c:22:23:18:c9:2f:51:aa:20:56:3b:1a:da: 8f:ba:42:10:2f:2d:d6:dd:5f:0f:34:43:55:af:8d: 82:4c:53:17:0d:29:ee:73:ec:64:d0:a0:e2:87:b6: 84:86:d8:6d:3d:c9:a5:c6:0a:80:10:f1:a2:ad:56: af:9d:ba:6c:02:a5:68:8d:89:04:ee:99:27:91:bf: f9:4a:22:68:02:22:b4:bb:e0:59:e6:fc:a3:42:27: d1:86:d7:46:c8:b1:ba:79:a4:87:58:3e:73:ce:5d: 41:30:a3:04:76:f0:4b:dd:f4:e3:eb:5e:3a:25:4f: 7e:f1:54:5e:e0:1e:02:79:5e:8c:3d:2b:86:06:fc: dc:7c:e8:93:45:64:1f:40:67:53:6e:39:f2:5e:cb: 91:82:c7:43:e3:eb:e4:01:04:49:ee:9b:e7:f8:48: cf:d2:92:bd:70:c5:89:61:64:cd:64:91:3f:8b:85: 46:8f:96:79:50:9e:ca:7c:2b:85:04:de:f0:74:1b: 6a:3c:27:b1:96:76:89:28:df:e9:5f:86:af:f5:f0: f4:85:7c:d3:fe:50:36:bf:91:dd:3c:ea:3e:09:bf: cb:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:77:6C:77:F8:EB:E7:09:4C:A0:07:AC:E1:A9:C0:BF:DC:2B:3A:EC X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.90.128.0/18 31.216.56.0/24 94.154.120.0/24 104.166.128.0/18 146.19.236.0/24 176.56.39.0/24 185.207.112.0/22 192.169.96.0/19 193.118.32.0/19 193.118.96.0/19 199.182.232.0/21 IPv6: 2a0b:21c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 59798 Signature Algorithm: sha256WithRSAEncryption 0c:6a:dd:6a:66:03:c2:9a:66:ed:7a:66:a4:ac:bd:62:7e:52: 64:2a:3a:c4:d2:93:6b:8b:19:c6:a0:29:97:f7:06:ed:01:e1: c9:fe:d7:ca:7a:ea:f0:e3:92:6e:f9:10:ac:89:93:e1:32:ce: 04:c4:48:34:7c:41:78:cb:42:7d:3f:91:36:74:d5:77:e2:f9: 63:3d:e7:c5:65:d3:77:e0:c4:ba:7b:c8:f4:ae:06:86:e8:8e: f9:a0:61:8c:8b:e5:89:21:89:6a:ee:dd:74:74:28:f8:af:09: 21:f8:a4:06:a9:58:73:23:64:60:0b:cc:43:60:3a:6a:ed:73: 1c:56:55:1b:b9:8a:49:75:55:a5:cc:e7:e4:6d:6b:3c:00:12: 78:98:0f:78:36:b2:b5:77:20:0f:14:ad:d5:be:49:4a:ef:6b: b1:56:b3:d0:9c:79:1f:ce:ac:d2:70:53:d3:9b:75:48:ef:fc: a1:66:21:68:17:0b:ab:68:6e:59:a1:35:da:e4:2c:6a:d5:f2: 5a:ca:48:cc:79:67:07:57:33:03:30:e9:8e:e5:50:18:9d:5e: 96:fc:ae:57:cd:41:cc:cb:aa:01:49:0d:97:ef:96:b1:70:fe: 78:f4:e3:96:81:16:06:5b:67:55:fe:98:05:65:ea:f8:59:72: bb:bd:c1:d8 -----BEGIN CERTIFICATE----- MIIF3zCCBMegAwIBAgISAZt9yeOHhp7FUH0afDLRmoqNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNTc3NmM3N2Y4ZWJlNzA5NGNhMDA3YWNlMWE5YzBiZmRjMmIzYWVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6b4s9cUyLmKyVeFi0QBN9bRF39v SnRWBwD2ePS3fmwiIxjJL1GqIFY7GtqPukIQLy3W3V8PNENVr42CTFMXDSnuc+xk 0KDih7aEhthtPcmlxgqAEPGirVavnbpsAqVojYkE7pknkb/5SiJoAiK0u+BZ5vyj QifRhtdGyLG6eaSHWD5zzl1BMKMEdvBL3fTj6146JU9+8VRe4B4CeV6MPSuGBvzc fOiTRWQfQGdTbjnyXsuRgsdD4+vkAQRJ7pvn+EjP0pK9cMWJYWTNZJE/i4VGj5Z5 UJ7KfCuFBN7wdBtqPCexlnaJKN/pX4av9fD0hXzT/lA2v5HdPOo+Cb/L+QIDAQAB o4IC6zCCAucwHQYDVR0OBBYEFCV3bHf46+cJTKAHrOGpwL/cKzrsMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZhLzU3ZTA4 Yy1jYTNhLTQwOTktYWU3NC1lN2RhZWMxOTRhNjkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmEvNTdlMDhj LWNhM2EtNDA5OS1hZTc0LWU3ZGFlYzE5NGE2OS8xL0pYZHNkX2pyNXdsTW9BZXM0 YW5Bdjl3ck91dy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGoGCCsGAQUF BwEHAQH/BFswWTBIBAIAATBCAwQGF1qAAwQAH9g4AwQAXpp4AwQGaKaAAwQAkhPs AwQAsDgnAwQCuc9wAwQFwKlgAwQFwXYgAwQFwXZgAwQDx7boMA0EAgACMAcDBQMq CyHAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDpljANBgkqhkiG9w0BAQsFAAOC AQEADGrdamYDwppm7XpmpKy9Yn5SZCo6xNKTa4sZxqApl/cG7QHhyf7Xynrq8OOS bvkQrImT4TLOBMRINHxBeMtCfT+RNnTVd+L5Yz3nxWXTd+DEunvI9K4GhuiO+aBh jIvliSGJau7ddHQo+K8JIfikBqlYcyNkYAvMQ2A6au1zHFZVG7mKSXVVpczn5G1r PAASeJgPeDaytXcgDxSt1b5JSu9rsVaz0Jx5H86s0nBT05t1SO/8oWYhaBcLq2hu WaE12uQsatXyWspIzHlnB1czAzDpjuVQGJ1elvyuV81BzMuqAUkNl++WsXD+ePTj loEWBltnVf6YBWXq+Flyu73B2A== -----END CERTIFICATE-----Generated at Sun Jan 25 12:11:07 2026 by rpki-client