This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/J_ylt6d9iHZJ9opFyQ1mfHZQAWQ.cer File: J_ylt6d9iHZJ9opFyQ1mfHZQAWQ.cer (raw, json) Hash identifier: swR0EhYfsXSVoq61dkjNRQde0USQ4RcQYcxYI6bvjew= Subject key identifier: 27:FC:A5:B7:A7:7D:88:76:49:F6:8A:45:C9:0D:66:7C:76:50:01:64 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C12831BC2ACEA0C43F04D0DD2D23E41 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/94/35385b-6684-459e-8327-c1fae00889db/1/J_ylt6d9iHZJ9opFyQ1mfHZQAWQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/94/35385b-6684-459e-8327-c1fae00889db/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:19:06 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 209826 IP: 185.180.8.0/22 IP: 194.34.167.0/24 IP: 2a0a:9780::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:83:1b:c2:ac:ea:0c:43:f0:4d:0d:d2:d2:3e:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=27fca5b7a77d887649f68a45c90d667c76500164 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:3e:aa:7a:d3:5f:8a:1a:db:db:32:24:0c:e1: f5:33:28:d5:a5:31:89:7a:c3:d4:41:f1:5c:e1:5f: 01:cf:36:a5:89:6d:7a:75:d5:34:9d:03:c6:ab:5c: ef:72:a9:b4:6b:9f:2d:36:9f:13:81:ea:0a:14:5d: 64:a9:d7:5f:64:0d:88:10:f1:f9:27:e4:17:cc:68: fb:42:ec:9a:4b:81:50:df:c9:76:b0:54:e3:00:12: 2b:c3:8a:1c:fa:ad:05:a7:0f:88:b4:83:46:60:98: 4f:00:57:93:b3:49:00:5f:4b:50:df:2d:fa:72:12: 96:e7:96:9b:ce:f7:ed:d9:cd:0c:6a:84:0a:d7:0b: 66:b4:21:d6:37:8e:f1:11:12:06:a3:69:90:2a:dc: 9e:02:b3:1c:b0:52:a7:48:0f:c6:0d:1c:f2:22:da: 22:06:c7:c7:26:47:a3:16:59:d0:27:5c:16:d7:f2: 59:fb:aa:b4:05:17:71:30:e8:c5:72:11:cc:01:da: ef:e2:d7:81:5d:f9:f0:b6:f2:f6:b4:88:10:7a:d9: bd:1f:77:16:07:a9:9d:48:b8:90:38:8b:4a:e3:8d: 6c:50:3f:47:77:a4:1b:8f:9e:dc:da:33:2d:40:ba: 28:00:aa:d7:35:76:7f:b6:85:1b:85:31:4f:47:40: c7:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:FC:A5:B7:A7:7D:88:76:49:F6:8A:45:C9:0D:66:7C:76:50:01:64 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/35385b-6684-459e-8327-c1fae00889db/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/35385b-6684-459e-8327-c1fae00889db/1/J_ylt6d9iHZJ9opFyQ1mfHZQAWQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.180.8.0/22 194.34.167.0/24 IPv6: 2a0a:9780::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 209826 Signature Algorithm: sha256WithRSAEncryption 73:21:78:55:0a:d6:5d:3e:5d:1f:4b:28:98:43:9e:f4:c2:c6: 8a:5b:85:99:0a:ce:e7:fa:5b:9a:b6:0b:95:b0:49:e8:ea:ad: 23:76:b3:c7:21:98:f1:d2:2b:fd:3b:e2:9f:93:ee:4c:ce:c7: 2f:a3:68:e3:33:9e:38:e6:df:b9:33:eb:a4:af:70:56:59:df: f7:d4:ce:c5:9e:d6:3d:d9:57:e3:65:35:44:b4:c4:d0:f1:e7: 2b:8f:60:e7:54:61:94:e3:b5:b3:1a:aa:0e:06:86:64:ab:71: 3d:57:8d:a3:c3:2c:85:2b:3b:6a:a0:80:74:40:83:ca:80:ca: 83:3a:74:05:55:3e:54:b7:5a:36:a5:00:83:c7:22:63:e0:42: 2c:ee:0d:fe:16:b6:80:fe:66:bf:d0:c2:17:a7:b6:f0:7d:d2: 62:a3:2e:10:2d:a7:72:6d:8a:ac:90:11:e7:0c:69:e0:1c:a2: 08:c9:50:9b:21:a2:1c:f7:c4:32:59:86:5b:94:16:c7:36:fe: b5:75:9e:70:99:55:50:70:cd:b4:77:2f:d8:82:37:76:db:9d: 12:a2:0a:db:57:a7:4a:cd:3e:65:de:5c:be:37:4d:80:af:2e: 7a:56:88:c4:57:8f:01:96:3b:95:0f:c5:32:2d:c7:03:e9:ce: 47:5d:9b:f5 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt8EoMbwqzqDEPwTQ3S0j5BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyN2ZjYTViN2E3N2Q4ODc2NDlmNjhhNDVjOTBkNjY3Yzc2NTAwMTY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwT6qetNfihrb2zIkDOH1MyjVpTGJ esPUQfFc4V8BzzaliW16ddU0nQPGq1zvcqm0a58tNp8TgeoKFF1kqddfZA2IEPH5 J+QXzGj7QuyaS4FQ38l2sFTjABIrw4oc+q0Fpw+ItINGYJhPAFeTs0kAX0tQ3y36 chKW55abzvft2c0MaoQK1wtmtCHWN47xERIGo2mQKtyeArMcsFKnSA/GDRzyItoi BsfHJkejFlnQJ1wW1/JZ+6q0BRdxMOjFchHMAdrv4teBXfnwtvL2tIgQetm9H3cW B6mdSLiQOItK441sUD9Hd6Qbj57c2jMtQLooAKrXNXZ/toUbhTFPR0DHxQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFCf8pbenfYh2SfaKRckNZnx2UAFkMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk0LzM1Mzg1 Yi02Njg0LTQ1OWUtODMyNy1jMWZhZTAwODg5ZGIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTQvMzUzODVi LTY2ODQtNDU5ZS04MzI3LWMxZmFlMDA4ODlkYi8xL0pfeWx0NmQ5aUhaSjlvcEZ5 UTFtZkhaUUFXUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCubQIAwQAwiKnMA0EAgACMAcDBQMqCpeAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMzojANBgkqhkiG9w0BAQsFAAOCAQEAcyF4 VQrWXT5dH0somEOe9MLGiluFmQrO5/pbmrYLlbBJ6OqtI3azxyGY8dIr/Tvin5Pu TM7HL6No4zOeOObfuTPrpK9wVlnf99TOxZ7WPdlX42U1RLTE0PHnK49g51RhlOO1 sxqqDgaGZKtxPVeNo8MshSs7aqCAdECDyoDKgzp0BVU+VLdaNqUAg8ciY+BCLO4N /ha2gP5mv9DCF6e28H3SYqMuEC2ncm2KrJAR5wxp4ByiCMlQmyGiHPfEMlmGW5QW xzb+tXWecJlVUHDNtHcv2II3dtudEqIK21enSs0+Zd5cvjdNgK8uelaIxFePAZY7 lQ/FMi3HA+nOR12b9Q== -----END CERTIFICATE-----Generated at Mon Jan 26 10:17:33 2026 by rpki-client