This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/J_lYw7dZsseJb17WY-gHeB8_9aI.cer File: J_lYw7dZsseJb17WY-gHeB8_9aI.cer (raw, json) Hash identifier: lP/GX7djLeyYif0F5/HaHrqe/KIpfIw4o471Tw2qpmY= Subject key identifier: 27:F9:58:C3:B7:59:B2:C7:89:6F:5E:D6:63:E8:07:78:1F:3F:F5:A2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCB26534CAA56A298A56B262AE35050 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:20:24 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 210251 IP: 5.1.120.0/21 IP: 185.206.208.0/22 IP: 2a02:e740::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:26:53:4c:aa:56:a2:98:a5:6b:26:2a:e3:50:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:20:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=27f958c3b759b2c7896f5ed663e807781f3ff5a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:59:8c:eb:2f:94:9c:f4:36:02:c6:1f:46:7a: 11:c2:82:c1:0e:f7:94:9f:75:d3:91:8e:ab:f4:03: 8c:2f:06:dd:1c:bc:f5:24:97:90:7e:cb:c3:d5:65: ae:0d:df:43:db:0c:e7:f6:01:8a:d6:8c:56:27:47: ed:25:73:ee:a3:bc:26:93:b3:1c:9f:fd:cb:04:0c: cd:d5:e3:36:82:fa:36:6d:7b:86:85:c4:3d:24:a2: 43:06:9d:39:32:67:63:8b:5a:f3:ce:7b:b4:18:c7: cf:c8:4e:b7:09:02:42:7d:a4:fa:cd:1b:33:b9:8d: 98:3b:88:17:76:ed:15:b0:e7:17:d7:2e:1e:bb:c9: 19:88:c0:1c:38:3a:66:ed:ac:a9:42:12:c3:12:0e: ad:58:33:3b:44:55:dc:56:be:33:4c:38:b1:7f:3c: 4e:b8:82:b8:65:34:0f:36:f6:be:f9:fc:df:87:00: 01:b1:52:c3:84:a0:d8:f2:60:b7:be:2c:c0:d0:a5: 8a:84:14:ee:38:53:51:41:95:a2:dc:24:19:26:5d: e9:8f:7c:12:c3:ff:40:6b:7a:f6:65:60:54:e1:b6: 50:4e:78:be:30:4b:e3:7b:4c:05:7a:5f:b1:42:0e: 20:a8:33:d4:3e:43:4c:fd:cf:74:f2:87:6f:88:98: 9d:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:F9:58:C3:B7:59:B2:C7:89:6F:5E:D6:63:E8:07:78:1F:3F:F5:A2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.1.120.0/21 185.206.208.0/22 IPv6: 2a02:e740::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 210251 Signature Algorithm: sha256WithRSAEncryption 97:be:e9:7d:2f:ef:2f:95:45:73:e8:dd:4f:8c:d9:f7:05:29: e5:a3:ba:cd:5f:c9:1b:cd:bf:69:f1:05:64:9c:8d:f3:13:73: 50:63:65:d7:2a:e0:11:0c:48:78:7c:e6:12:54:b8:b6:ec:90: 7f:09:af:7c:a8:f3:63:2a:2f:0d:3d:04:f4:f7:38:13:28:06: 12:a9:3d:c5:4a:62:e9:cd:88:93:08:b8:b1:e8:20:a8:ed:74: a3:27:4f:77:18:28:83:0a:40:cf:ce:5d:be:2a:30:a5:fd:43: 0f:13:7b:89:3e:f0:d3:c6:8f:e4:76:60:fb:8d:c8:46:5a:7a: ed:df:91:6d:61:cf:f1:78:20:39:9e:83:09:9d:ea:c8:4f:25: fa:02:c1:8b:9e:2b:54:eb:be:16:ec:a8:d4:60:ec:af:62:9e: f0:b5:6f:c0:f7:d3:b6:71:b4:68:f5:3d:98:98:c9:c9:f6:81: 93:78:9d:69:af:8b:60:98:e6:ba:89:40:75:de:12:61:26:58: 6a:0b:20:e5:87:ad:78:0b:a0:2d:02:b4:cb:22:62:3b:ab:c8: 36:26:7b:c8:ee:a7:9c:59:bd:af:9b:ca:89:c4:09:cf:1b:15: 89:c1:59:8d:db:a0:55:80:78:28:fc:29:00:94:b5:6d:15:c2: 6f:42:36:f4 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt9yyZTTKpWopilayYq41BQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgyMDI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyN2Y5NThjM2I3NTliMmM3ODk2ZjVlZDY2M2U4MDc3ODFmM2ZmNWEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVmM6y+UnPQ2AsYfRnoRwoLBDveU n3XTkY6r9AOMLwbdHLz1JJeQfsvD1WWuDd9D2wzn9gGK1oxWJ0ftJXPuo7wmk7Mc n/3LBAzN1eM2gvo2bXuGhcQ9JKJDBp05Mmdji1rzznu0GMfPyE63CQJCfaT6zRsz uY2YO4gXdu0VsOcX1y4eu8kZiMAcODpm7aypQhLDEg6tWDM7RFXcVr4zTDixfzxO uIK4ZTQPNva++fzfhwABsVLDhKDY8mC3vizA0KWKhBTuOFNRQZWi3CQZJl3pj3wS w/9Aa3r2ZWBU4bZQTni+MEvje0wFel+xQg4gqDPUPkNM/c908odviJidBQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFCf5WMO3WbLHiW9e1mPoB3gfP/WiMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2EzL2NkYmZi ZC1lZDY3LTQ0YjctOWUxZi1iMjkxMDdiOThhY2MvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTMvY2RiZmJk LWVkNjctNDRiNy05ZTFmLWIyOTEwN2I5OGFjYy8xL0pfbFl3N2Rac3NlSmIxN1dZ LWdIZUI4XzlhSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQDBQF4AwQCuc7QMA0EAgACMAcDBQMqAudAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwM1SzANBgkqhkiG9w0BAQsFAAOCAQEAl77p fS/vL5VFc+jdT4zZ9wUp5aO6zV/JG82/afEFZJyN8xNzUGNl1yrgEQxIeHzmElS4 tuyQfwmvfKjzYyovDT0E9Pc4EygGEqk9xUpi6c2Ikwi4seggqO10oydPdxgogwpA z85dviowpf1DDxN7iT7w08aP5HZg+43IRlp67d+RbWHP8XggOZ6DCZ3qyE8l+gLB i54rVOu+Fuyo1GDsr2Ke8LVvwPfTtnG0aPU9mJjJyfaBk3idaa+LYJjmuolAdd4S YSZYagsg5YeteAugLQK0yyJiO6vINiZ7yO6nnFm9r5vKicQJzxsVicFZjdugVYB4 KPwpAJS1bRXCb0I29A== -----END CERTIFICATE-----Generated at Sun Jan 25 19:43:49 2026 by rpki-client