This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JZB_kNn52QL88EvQtGFSw4J6fVA.cer File: JZB_kNn52QL88EvQtGFSw4J6fVA.cer (raw, json) Hash identifier: NacNHF/rq13EJMwIj9fdIzK6KbM6RexFeEI3flDr4Hc= Subject key identifier: 25:90:7F:90:D9:F9:D9:02:FC:F0:4B:D0:B4:61:52:C3:82:7A:7D:50 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B791135216C1A660982E5C86026158F93 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/49/dd1ec7-3446-4709-b93c-089c89ef63c8/1/JZB_kNn52QL88EvQtGFSw4J6fVA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/49/dd1ec7-3446-4709-b93c-089c89ef63c8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:49 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 199393 IP: 194.169.183.0/24 IP: 2a13:c480::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:35:21:6c:1a:66:09:82:e5:c8:60:26:15:8f:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=25907f90d9f9d902fcf04bd0b46152c3827a7d50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:e1:33:37:1e:f4:34:b4:d5:d0:a9:92:4e:ea: c6:49:14:c0:21:ac:12:3a:5c:7a:05:b3:cb:87:bc: 24:43:0d:07:80:c8:aa:6e:b3:0c:8f:67:2e:a8:ba: f0:38:d5:2a:00:9e:72:00:d2:47:8c:fe:cb:75:79: 1b:dc:62:50:4f:73:4b:64:df:51:a3:c0:96:a7:ba: 5a:f4:b7:3f:ee:eb:09:d9:6d:3e:93:93:90:2d:a3: e1:15:47:d2:c5:ba:e3:a6:16:c8:ee:fb:bf:ca:3f: 63:ce:b7:72:24:ef:0b:7b:3e:a2:49:4b:6b:e3:69: 1c:92:72:04:54:e8:9b:e0:43:90:85:67:c0:6b:91: b2:3f:7b:49:b7:47:cd:83:14:aa:e6:bd:ab:16:cc: 24:85:19:77:72:5a:88:b1:80:71:b3:42:f0:66:27: 7d:65:54:59:ef:6f:71:8e:bd:1f:c4:af:69:39:a1: ba:04:3e:d7:bc:df:3f:1a:81:fb:bc:89:0a:82:55: f3:8c:17:33:de:4e:52:e0:0e:59:c0:de:2b:22:6a: 92:7f:5e:3b:7f:15:58:78:0c:1a:36:15:0b:b1:4f: ce:a0:94:ea:03:24:92:97:51:46:86:5e:e0:6e:ec: 45:ca:fe:91:49:84:2a:35:81:84:09:e8:69:3c:77: 8a:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:90:7F:90:D9:F9:D9:02:FC:F0:4B:D0:B4:61:52:C3:82:7A:7D:50 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/dd1ec7-3446-4709-b93c-089c89ef63c8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/dd1ec7-3446-4709-b93c-089c89ef63c8/1/JZB_kNn52QL88EvQtGFSw4J6fVA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.169.183.0/24 IPv6: 2a13:c480::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 199393 Signature Algorithm: sha256WithRSAEncryption ac:8c:a4:bc:0d:89:e9:fc:a3:90:5e:3c:c8:4d:9b:e9:dc:32: 0d:b4:da:2e:3f:de:d2:f0:7a:a9:a7:36:5f:b0:c1:8e:75:b6: 52:3a:47:bd:77:96:68:44:9f:30:16:99:4f:d0:39:82:d4:1f: 1a:b7:a7:a8:fb:34:68:5b:6e:ca:91:ac:bc:ee:d8:29:78:f2: 0e:04:78:66:22:18:92:16:b3:03:87:b6:e1:e2:7b:9e:fa:27: 24:d6:89:47:c1:37:4e:64:53:e3:4b:d8:1d:50:cf:7d:28:e8: 55:5e:b3:35:bd:9a:ce:8d:7e:77:d8:9d:26:7d:4d:73:2b:c0: 56:7f:5d:fa:14:23:ec:c5:8c:9e:e9:d1:7d:af:03:8f:de:1f: 0e:3d:0c:25:e1:47:75:bb:f8:ef:9d:c9:41:aa:b7:3a:6c:7a: f8:2e:d9:5c:ae:d4:75:be:7b:2f:5a:24:d0:94:aa:77:b8:71: 83:44:3b:d0:45:44:56:4d:41:d6:d5:a9:43:4e:e5:b6:79:3b: 4e:ca:60:4a:75:96:e2:0f:3c:7a:03:c6:31:78:e2:c0:3a:82: 41:8a:30:bb:83:38:de:a4:0f:9a:7f:e6:db:d6:f4:8b:e4:6c: f6:fd:11:a3:4e:d2:42:07:8c:bb:cf:90:c6:0f:4d:0c:4d:65: 4c:b5:7e:7d -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt5ETUhbBpmCYLlyGAmFY+TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNTkwN2Y5MGQ5ZjlkOTAyZmNmMDRiZDBiNDYxNTJjMzgyN2E3ZDUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6+EzNx70NLTV0KmSTurGSRTAIawS Olx6BbPLh7wkQw0HgMiqbrMMj2cuqLrwONUqAJ5yANJHjP7LdXkb3GJQT3NLZN9R o8CWp7pa9Lc/7usJ2W0+k5OQLaPhFUfSxbrjphbI7vu/yj9jzrdyJO8Lez6iSUtr 42kcknIEVOib4EOQhWfAa5GyP3tJt0fNgxSq5r2rFswkhRl3clqIsYBxs0LwZid9 ZVRZ729xjr0fxK9pOaG6BD7XvN8/GoH7vIkKglXzjBcz3k5S4A5ZwN4rImqSf147 fxVYeAwaNhULsU/OoJTqAySSl1FGhl7gbuxFyv6RSYQqNYGECehpPHeKDwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFCWQf5DZ+dkC/PBL0LRhUsOCen1QMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ5L2RkMWVj Ny0zNDQ2LTQ3MDktYjkzYy0wODljODllZjYzYzgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDkvZGQxZWM3 LTM0NDYtNDcwOS1iOTNjLTA4OWM4OWVmNjNjOC8xL0paQl9rTm41MlFMODhFdlF0 R0ZTdzRKNmZWQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAwqm3MA0EAgACMAcDBQMqE8SAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMK4TANBgkqhkiG9w0BAQsFAAOCAQEArIykvA2J6fyj kF48yE2b6dwyDbTaLj/e0vB6qac2X7DBjnW2UjpHvXeWaESfMBaZT9A5gtQfGren qPs0aFtuypGsvO7YKXjyDgR4ZiIYkhazA4e24eJ7nvonJNaJR8E3TmRT40vYHVDP fSjoVV6zNb2azo1+d9idJn1NcyvAVn9d+hQj7MWMnunRfa8Dj94fDj0MJeFHdbv4 753JQaq3Omx6+C7ZXK7Udb57L1ok0JSqd7hxg0Q70EVEVk1B1tWpQ07ltnk7Tspg SnWW4g88egPGMXjiwDqCQYowu4M43qQPmn/m29b0i+Rs9v0Ro07SQgeMu8+Qxg9N DE1lTLV+fQ== -----END CERTIFICATE-----Generated at Sun Jan 25 19:42:12 2026 by rpki-client