This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JZB_kNn52QL88EvQtGFSw4J6fVA.cer File: JZB_kNn52QL88EvQtGFSw4J6fVA.cer (raw, json) Hash identifier: r8hOTZwcQhpGQr5cCe4OK1INSbTKrM88Hz3btZ64ry8= Subject key identifier: 25:90:7F:90:D9:F9:D9:02:FC:F0:4B:D0:B4:61:52:C3:82:7A:7D:50 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019AD0689476E627648E69B1A69E08D32559 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/49/dd1ec7-3446-4709-b93c-089c89ef63c8/1/JZB_kNn52QL88EvQtGFSw4J6fVA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/49/dd1ec7-3446-4709-b93c-089c89ef63c8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Sat 29 Nov 2025 16:18:26 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 199393 IP: 194.169.183.0/24 IP: 2a13:c480::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d0:68:94:76:e6:27:64:8e:69:b1:a6:9e:08:d3:25:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Nov 29 16:18:26 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=25907f90d9f9d902fcf04bd0b46152c3827a7d50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:e1:33:37:1e:f4:34:b4:d5:d0:a9:92:4e:ea: c6:49:14:c0:21:ac:12:3a:5c:7a:05:b3:cb:87:bc: 24:43:0d:07:80:c8:aa:6e:b3:0c:8f:67:2e:a8:ba: f0:38:d5:2a:00:9e:72:00:d2:47:8c:fe:cb:75:79: 1b:dc:62:50:4f:73:4b:64:df:51:a3:c0:96:a7:ba: 5a:f4:b7:3f:ee:eb:09:d9:6d:3e:93:93:90:2d:a3: e1:15:47:d2:c5:ba:e3:a6:16:c8:ee:fb:bf:ca:3f: 63:ce:b7:72:24:ef:0b:7b:3e:a2:49:4b:6b:e3:69: 1c:92:72:04:54:e8:9b:e0:43:90:85:67:c0:6b:91: b2:3f:7b:49:b7:47:cd:83:14:aa:e6:bd:ab:16:cc: 24:85:19:77:72:5a:88:b1:80:71:b3:42:f0:66:27: 7d:65:54:59:ef:6f:71:8e:bd:1f:c4:af:69:39:a1: ba:04:3e:d7:bc:df:3f:1a:81:fb:bc:89:0a:82:55: f3:8c:17:33:de:4e:52:e0:0e:59:c0:de:2b:22:6a: 92:7f:5e:3b:7f:15:58:78:0c:1a:36:15:0b:b1:4f: ce:a0:94:ea:03:24:92:97:51:46:86:5e:e0:6e:ec: 45:ca:fe:91:49:84:2a:35:81:84:09:e8:69:3c:77: 8a:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:90:7F:90:D9:F9:D9:02:FC:F0:4B:D0:B4:61:52:C3:82:7A:7D:50 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/dd1ec7-3446-4709-b93c-089c89ef63c8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/dd1ec7-3446-4709-b93c-089c89ef63c8/1/JZB_kNn52QL88EvQtGFSw4J6fVA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.169.183.0/24 IPv6: 2a13:c480::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 199393 Signature Algorithm: sha256WithRSAEncryption 06:37:f4:3b:25:f4:b5:f5:e6:e4:60:a4:1e:61:7f:6e:9b:bf: 1f:9a:97:76:93:cb:42:bc:4c:c4:35:6b:02:b3:e0:7f:6f:ec: a2:a1:f1:f3:81:41:ae:dd:1f:e1:74:16:bb:90:48:eb:6d:e0: 0b:af:eb:41:88:03:f0:d0:54:38:53:ba:81:14:d1:74:de:b1: 39:ce:11:05:ce:91:af:a9:c2:01:a1:a3:3a:5b:f3:5d:7d:f9: 5f:75:11:a2:db:e6:54:ec:54:96:34:06:01:ac:a3:e7:70:6a: bb:6e:8b:1b:77:f0:1f:ee:63:04:74:70:49:21:33:c6:eb:77: 23:4f:65:88:b6:6c:c4:d7:ad:61:76:54:1d:cf:a4:5c:bf:75: 52:30:49:15:e6:ed:d8:17:db:2c:0c:28:f0:3b:10:ec:d3:56: be:fe:1d:ce:39:6c:0d:90:14:36:36:82:3a:58:01:92:51:62: d7:bd:00:e9:b9:1c:76:6d:30:04:38:e2:f9:3a:3a:cb:03:a1: 1f:d0:a4:b8:c1:ae:17:a4:ea:8c:50:e3:1d:40:bc:12:24:3d: ec:c1:e2:2a:f2:0e:1d:8e:9a:ba:69:cf:fb:f6:2b:93:3a:49: c7:ca:01:b0:1d:40:2f:d4:36:69:70:40:ad:06:33:18:3c:aa: 79:54:f7:2f -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZrQaJR25idkjmmxpp4I0yVZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMTI5MTYxODI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNTkwN2Y5MGQ5ZjlkOTAyZmNmMDRiZDBiNDYxNTJjMzgyN2E3ZDUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6+EzNx70NLTV0KmSTurGSRTAIawS Olx6BbPLh7wkQw0HgMiqbrMMj2cuqLrwONUqAJ5yANJHjP7LdXkb3GJQT3NLZN9R o8CWp7pa9Lc/7usJ2W0+k5OQLaPhFUfSxbrjphbI7vu/yj9jzrdyJO8Lez6iSUtr 42kcknIEVOib4EOQhWfAa5GyP3tJt0fNgxSq5r2rFswkhRl3clqIsYBxs0LwZid9 ZVRZ729xjr0fxK9pOaG6BD7XvN8/GoH7vIkKglXzjBcz3k5S4A5ZwN4rImqSf147 fxVYeAwaNhULsU/OoJTqAySSl1FGhl7gbuxFyv6RSYQqNYGECehpPHeKDwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFCWQf5DZ+dkC/PBL0LRhUsOCen1QMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ5L2RkMWVj Ny0zNDQ2LTQ3MDktYjkzYy0wODljODllZjYzYzgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDkvZGQxZWM3 LTM0NDYtNDcwOS1iOTNjLTA4OWM4OWVmNjNjOC8xL0paQl9rTm41MlFMODhFdlF0 R0ZTdzRKNmZWQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAwqm3MA0EAgACMAcDBQMqE8SAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMK4TANBgkqhkiG9w0BAQsFAAOCAQEABjf0OyX0tfXm 5GCkHmF/bpu/H5qXdpPLQrxMxDVrArPgf2/soqHx84FBrt0f4XQWu5BI623gC6/r QYgD8NBUOFO6gRTRdN6xOc4RBc6Rr6nCAaGjOlvzXX35X3URotvmVOxUljQGAayj 53Bqu26LG3fwH+5jBHRwSSEzxut3I09liLZsxNetYXZUHc+kXL91UjBJFebt2Bfb LAwo8DsQ7NNWvv4dzjlsDZAUNjaCOlgBklFi170A6bkcdm0wBDji+To6ywOhH9Ck uMGuF6TqjFDjHUC8EiQ97MHiKvIOHY6aumnP+/YrkzpJx8oBsB1AL9Q2aXBArQYz GDyqeVT3Lw== -----END CERTIFICATE-----Generated at Sat Dec 6 06:37:58 2025 by rpki-client