This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Jah51ij-XsinYcR0hnmZP5xp-LQ.cer File: Jah51ij-XsinYcR0hnmZP5xp-LQ.cer (raw, json) Hash identifier: sQ5TYFPCkxbwuDlyOLBWzPTEgLEZLRtgsipbTR0qfN8= Subject key identifier: 25:A8:79:D6:28:FE:5E:C8:A7:61:C4:74:86:79:99:3F:9C:69:F8:B4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7910FB5FFCF9E4965EB96F70ACC27F48 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:34 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.245.64.0/22 IP: 2a0d:4d80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:fb:5f:fc:f9:e4:96:5e:b9:6f:70:ac:c2:7f:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=25a879d628fe5ec8a761c4748679993f9c69f8b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:3f:27:5e:ca:0a:c5:16:58:f8:65:f3:f9:49: a5:3c:6d:33:5f:48:22:f9:94:68:97:09:24:94:33: 27:d4:a2:7c:f2:ca:f3:7f:04:67:32:71:94:3d:10: 48:1f:5f:d3:fe:f4:12:4a:c5:76:e2:96:57:42:35: 79:59:9c:d4:26:1a:bf:a3:3c:5b:22:cc:21:fe:a5: 30:80:6a:83:1e:55:77:ab:ca:72:60:38:01:fe:f7: 7f:28:84:53:08:5d:82:f0:de:c4:c5:4b:4c:ba:0a: ba:0a:16:6e:09:79:d5:c2:e6:ee:3d:e6:4c:4b:30: 7f:f9:90:aa:be:86:08:99:e3:91:02:ff:86:07:35: 44:50:f4:bc:0a:25:3f:23:92:b3:cc:3b:c5:19:37: 41:02:44:3a:e2:b9:c9:a6:50:a3:07:69:97:08:bc: 0e:5e:b2:19:cc:ba:06:44:d9:d1:50:9f:e6:71:0a: 9f:38:4d:cf:ab:64:0c:0f:ec:ac:69:93:48:b6:28: d5:0d:a8:9a:97:e6:5c:6c:18:7a:28:08:0a:1a:ef: e8:22:d8:6c:75:b2:e9:66:b5:47:e8:95:33:69:b0: 0d:29:e8:bc:11:cd:c2:f8:c0:86:da:fe:48:74:63: 61:c2:2c:00:1e:d9:da:d0:4f:98:c1:e5:76:3f:74: 09:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:A8:79:D6:28:FE:5E:C8:A7:61:C4:74:86:79:99:3F:9C:69:F8:B4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.245.64.0/22 IPv6: 2a0d:4d80::/29 Signature Algorithm: sha256WithRSAEncryption 3b:66:3b:25:6e:0c:49:64:a2:f3:78:ce:da:04:2d:5b:d1:a5: 2b:e3:09:d4:9d:74:e2:e4:25:7f:07:2a:3f:0a:49:66:41:2a: 84:94:81:40:bd:a2:72:b8:b7:a0:ef:6b:e8:1f:32:8f:e5:b7: b5:c2:47:3d:3d:16:a3:31:da:f6:c6:1e:9f:f1:c8:e6:2f:9c: d6:4b:ca:f3:51:e2:43:c9:2d:7e:77:94:46:98:29:fd:76:32: ce:73:f2:13:cc:67:25:8b:46:8e:37:8e:29:e6:49:63:2e:07: ba:bd:50:f6:ef:35:5f:05:60:07:96:39:43:ef:39:dd:52:14: 91:05:58:7a:3c:59:d5:2c:c5:40:44:65:9e:6a:cf:7f:ef:57: 87:bb:55:e3:75:09:3a:5f:42:2b:86:30:8e:1e:37:1a:91:c1: 4b:90:ac:84:32:91:2e:89:2f:e0:6b:87:79:45:73:99:bd:3f: 0b:96:fa:08:25:fe:42:b1:39:39:04:e8:9d:ed:89:69:ec:70: 0b:d8:a3:fc:04:b7:a7:d3:8c:54:ec:0a:4a:4b:62:06:c0:ec: 6b:ae:8b:2d:9a:18:d8:97:e1:e2:08:4e:61:e7:c3:12:dd:3d: 74:16:fb:15:a4:29:e8:ae:9e:40:6c:f0:97:55:5a:ab:8c:21: fb:d3:22:3b -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt5EPtf/Pnkll65b3Cswn9IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNWE4NzlkNjI4ZmU1ZWM4YTc2MWM0NzQ4Njc5OTkzZjljNjlmOGI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzT8nXsoKxRZY+GXz+UmlPG0zX0gi +ZRolwkklDMn1KJ88srzfwRnMnGUPRBIH1/T/vQSSsV24pZXQjV5WZzUJhq/ozxb Iswh/qUwgGqDHlV3q8pyYDgB/vd/KIRTCF2C8N7ExUtMugq6ChZuCXnVwubuPeZM SzB/+ZCqvoYImeORAv+GBzVEUPS8CiU/I5KzzDvFGTdBAkQ64rnJplCjB2mXCLwO XrIZzLoGRNnRUJ/mcQqfOE3Pq2QMD+ysaZNItijVDaial+ZcbBh6KAgKGu/oIths dbLpZrVH6JUzabANKei8Ec3C+MCG2v5IdGNhwiwAHtna0E+YweV2P3QJYwIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFCWoedYo/l7Ip2HEdIZ5mT+cafi0MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM5LzI4ZDVh Ny00OGYxLTQ0MTQtYTg1My1kODZiNGNhZWQxMWQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzkvMjhkNWE3 LTQ4ZjEtNDQxNC1hODUzLWQ4NmI0Y2FlZDExZC8xL0phaDUxaWotWHNpblljUjBo bm1aUDV4cC1MUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCufVAMA0EAgACMAcDBQMqDU2AMA0GCSqGSIb3 DQEBCwUAA4IBAQA7ZjslbgxJZKLzeM7aBC1b0aUr4wnUnXTi5CV/Byo/CklmQSqE lIFAvaJyuLeg72voHzKP5be1wkc9PRajMdr2xh6f8cjmL5zWS8rzUeJDyS1+d5RG mCn9djLOc/ITzGcli0aON44p5kljLge6vVD27zVfBWAHljlD7zndUhSRBVh6PFnV LMVARGWeas9/71eHu1XjdQk6X0IrhjCOHjcakcFLkKyEMpEuiS/ga4d5RXOZvT8L lvoIJf5CsTk5BOid7Ylp7HAL2KP8BLen04xU7ApKS2IGwOxrrostmhjYl+HiCE5h 58MS3T10FvsVpCnorp5AbPCXVVqrjCH70yI7 -----END CERTIFICATE-----Generated at Mon Jan 26 03:10:34 2026 by rpki-client