This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Jc-djVUs3H2MDcb2SbMB8jUUCe4.cer File: Jc-djVUs3H2MDcb2SbMB8jUUCe4.cer (raw, json) Hash identifier: b8q0cUa/vTvF6dQhJbz3GRhEWNT1kOOW3okhlzXezE8= Subject key identifier: 25:CF:9D:8D:55:2C:DC:7D:8C:0D:C6:F6:49:B3:01:F2:35:14:09:EE Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7834E07BBAADB31930211446B0EDBB80 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5b/a0e08a-9ff0-44b4-bcc4-a10690a744e4/1/Jc-djVUs3H2MDcb2SbMB8jUUCe4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5b/a0e08a-9ff0-44b4-bcc4-a10690a744e4/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:09 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 47482 IP: 45.66.32.0/22 IP: 2a09:61c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:e0:7b:ba:ad:b3:19:30:21:14:46:b0:ed:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=25cf9d8d552cdc7d8c0dc6f649b301f2351409ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:c3:ea:44:e3:36:7e:0f:21:cf:ad:f4:67:2b: 50:2a:03:35:65:50:f1:f2:c0:31:74:6e:17:28:8a: 86:22:d7:b9:1d:fa:84:6c:8b:f0:2f:de:ec:fc:df: e0:fc:05:a1:52:95:f6:68:95:02:8a:0e:81:b9:ba: 03:02:31:35:8d:13:e3:7a:7b:85:49:f0:79:7d:b9: 4b:af:54:d7:87:f6:4a:0b:d4:e9:2b:88:51:60:fd: 0f:23:c3:35:8e:35:3a:cb:95:84:0e:da:90:df:26: bd:13:d1:cc:71:f7:5e:8c:42:9c:fa:6d:cc:ff:72: 7b:ed:28:74:52:0a:e0:ed:d1:91:ee:73:82:c4:d2: a7:c8:16:0b:1c:22:92:cc:8e:f6:a2:2f:00:b7:d9: 2f:80:9d:bd:1e:e2:55:dd:e6:d4:81:ef:87:ac:48: 12:0f:7d:a3:d2:ad:99:c6:2c:ce:d3:29:65:cb:38: ee:03:66:d2:40:eb:72:dd:2e:40:1a:90:59:5e:e4: 2d:7b:0e:f4:dd:7d:da:97:77:9e:19:d2:0f:74:7c: e7:80:19:42:00:83:8c:ba:fd:aa:69:95:87:25:79: d5:e4:5e:71:80:f0:fa:00:85:61:d8:32:a4:ff:0a: 76:93:28:2d:13:11:f0:7d:06:56:c8:2b:f4:1b:9a: e8:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:CF:9D:8D:55:2C:DC:7D:8C:0D:C6:F6:49:B3:01:F2:35:14:09:EE X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/a0e08a-9ff0-44b4-bcc4-a10690a744e4/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/a0e08a-9ff0-44b4-bcc4-a10690a744e4/1/Jc-djVUs3H2MDcb2SbMB8jUUCe4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.66.32.0/22 IPv6: 2a09:61c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 47482 Signature Algorithm: sha256WithRSAEncryption 4f:f0:c4:a2:30:a0:c5:a7:20:6f:06:9b:af:52:9f:2a:79:54: f4:a8:a6:8f:f3:8a:b7:17:b0:60:da:9f:d3:bf:54:af:d9:d7: c6:ef:47:3d:5a:29:b2:9f:f3:00:aa:c2:23:50:0e:f6:7c:d3: 5b:84:7b:cf:cd:c4:05:62:38:68:b4:18:1e:5c:73:a2:7f:22: 70:12:2e:8e:76:0e:81:6c:57:47:48:a8:87:54:fb:96:83:82: 78:82:6a:09:14:a8:83:56:f3:cf:8a:cd:81:d3:e0:4f:59:1f: dc:54:04:25:60:ba:64:84:b8:b0:8b:4a:3e:b1:95:1c:da:84: 54:33:ad:81:8f:ad:35:ea:01:84:0b:5e:dd:82:10:5e:d9:93: f2:e3:b9:ad:29:a8:fb:65:a0:99:47:b6:a0:a6:39:7f:c1:6c: 89:44:5a:25:fc:55:00:ac:cc:2c:7e:51:aa:65:9a:3f:fb:2c: 42:32:c1:bd:7f:eb:06:7a:57:f5:5d:f2:d5:02:99:2c:a9:34: f0:a1:92:00:3c:a5:6b:35:3a:b4:f2:89:ee:f4:e4:19:aa:17: e8:a1:83:2a:78:ef:31:98:6c:13:25:92:38:1c:fd:b2:bb:20: 0e:6f:7c:bf:39:c9:0d:ea:e7:1a:e6:17:e5:57:f9:57:57:6e: ca:f1:a7:7c -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt4NOB7uq2zGTAhFEaw7buAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNWNmOWQ4ZDU1MmNkYzdkOGMwZGM2ZjY0OWIzMDFmMjM1MTQwOWVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3MPqROM2fg8hz630ZytQKgM1ZVDx 8sAxdG4XKIqGIte5HfqEbIvwL97s/N/g/AWhUpX2aJUCig6BuboDAjE1jRPjenuF SfB5fblLr1TXh/ZKC9TpK4hRYP0PI8M1jjU6y5WEDtqQ3ya9E9HMcfdejEKc+m3M /3J77Sh0Ugrg7dGR7nOCxNKnyBYLHCKSzI72oi8At9kvgJ29HuJV3ebUge+HrEgS D32j0q2ZxizO0yllyzjuA2bSQOty3S5AGpBZXuQtew703X3al3eeGdIPdHzngBlC AIOMuv2qaZWHJXnV5F5xgPD6AIVh2DKk/wp2kygtExHwfQZWyCv0G5roswIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFCXPnY1VLNx9jA3G9kmzAfI1FAnuMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzViL2EwZTA4 YS05ZmYwLTQ0YjQtYmNjNC1hMTA2OTBhNzQ0ZTQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWIvYTBlMDhh LTlmZjAtNDRiNC1iY2M0LWExMDY5MGE3NDRlNC8xL0pjLWRqVlVzM0gyTURjYjJT Yk1COGpVVUNlNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCLUIgMA0EAgACMAcDBQMqCWHAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwC5ejANBgkqhkiG9w0BAQsFAAOCAQEAT/DEojCgxacg bwabr1KfKnlU9Kimj/OKtxewYNqf079Ur9nXxu9HPVopsp/zAKrCI1AO9nzTW4R7 z83EBWI4aLQYHlxzon8icBIujnYOgWxXR0ioh1T7loOCeIJqCRSog1bzz4rNgdPg T1kf3FQEJWC6ZIS4sItKPrGVHNqEVDOtgY+tNeoBhAte3YIQXtmT8uO5rSmo+2Wg mUe2oKY5f8FsiURaJfxVAKzMLH5RqmWaP/ssQjLBvX/rBnpX9V3y1QKZLKk08KGS ADylazU6tPKJ7vTkGaoX6KGDKnjvMZhsEyWSOBz9srsgDm98vznJDernGuYX5Vf5 V1duyvGnfA== -----END CERTIFICATE-----Generated at Sun Jan 25 22:18:21 2026 by rpki-client