This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JeqXR70BpFf6K7AvzArIIxQLUY8.cer File: JeqXR70BpFf6K7AvzArIIxQLUY8.cer (raw, json) Hash identifier: s8Oefl3W1q/0S8z3l8qVB7zStowVKmRQmC4SU7U58ns= Subject key identifier: 25:EA:97:47:BD:01:A4:57:FA:2B:B0:2F:CC:0A:C8:23:14:0B:51:8F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7758DC42B6EB7CF895A34B144C5CBD4C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/96/4fef00-908e-443c-9ff2-016d6dcfad81/1/JeqXR70BpFf6K7AvzArIIxQLUY8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/96/4fef00-908e-443c-9ff2-016d6dcfad81/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:17:50 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.142.245.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:dc:42:b6:eb:7c:f8:95:a3:4b:14:4c:5c:bd:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=25ea9747bd01a457fa2bb02fcc0ac823140b518f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:83:0a:ed:e2:cc:5e:be:6a:2d:d1:e1:a8:d6: d0:62:56:c3:33:01:e3:e0:f9:2b:f4:73:73:a9:b0: 15:56:88:e8:f5:e1:03:99:88:34:62:ad:de:54:19: 09:5c:14:76:91:3a:d2:ba:4d:d6:65:ae:81:70:08: 5e:4a:d7:d7:89:bc:0f:fa:f3:d8:03:8b:2e:0a:74: 7b:22:9e:13:0d:82:4d:0d:b4:b9:c3:bc:2f:f4:0c: 51:41:b5:6d:09:b2:7a:f6:cf:01:fd:48:c4:4d:ca: 45:e9:64:84:a5:f1:2e:15:c6:60:47:24:50:26:14: 50:95:e1:72:bd:c0:aa:dc:8e:a7:87:d0:3f:5a:43: cc:96:92:51:c0:67:11:2d:2d:ab:a6:b0:16:20:be: 6f:1f:72:65:a5:e4:d0:f6:4b:be:61:cb:48:9b:ec: 55:56:8c:db:fc:4d:d1:24:15:43:1f:bc:ae:09:dc: 18:5b:51:55:1c:67:05:5a:f9:45:c7:d7:d3:99:2e: 8b:85:15:39:f3:c3:02:a3:0f:3b:37:0e:d9:14:98: 85:ac:cd:c8:1f:9d:eb:4f:5a:b5:aa:31:ae:6f:8b: 39:99:0f:ca:ff:96:de:96:99:d1:0b:66:a7:d9:df: 65:16:c1:c7:7e:79:98:a6:bc:1b:37:f3:14:3d:2e: 65:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:EA:97:47:BD:01:A4:57:FA:2B:B0:2F:CC:0A:C8:23:14:0B:51:8F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/4fef00-908e-443c-9ff2-016d6dcfad81/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/4fef00-908e-443c-9ff2-016d6dcfad81/1/JeqXR70BpFf6K7AvzArIIxQLUY8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.142.245.0/24 Signature Algorithm: sha256WithRSAEncryption 78:cc:90:2b:fb:8d:db:6d:5b:0c:d3:fa:32:d7:21:07:53:3c: 5f:7f:d0:05:66:19:36:86:a6:4c:4c:55:12:dc:f0:0d:51:6b: 58:38:80:3d:22:df:0c:9e:5b:78:fc:2d:ab:bd:10:00:d7:ef: 92:4b:98:18:f8:cd:46:b5:58:cf:43:cc:d6:68:6a:08:24:4e: d4:4c:cc:d9:8a:8b:98:ca:e4:91:7a:88:42:64:54:d1:1c:34: 68:d8:8c:14:fe:9a:a2:a2:b3:02:f4:cb:7f:d6:c9:97:cd:90: 20:93:26:a2:bd:bd:5c:2b:c6:a7:8f:b4:95:0c:71:ab:59:f7: a3:bf:c4:5b:49:75:6d:44:e8:c9:9c:b7:24:06:71:dd:88:55: 0d:3c:32:a3:01:ae:d3:e5:7d:52:8e:50:2c:3c:e2:a9:64:06: c9:4a:51:01:21:39:89:d8:94:82:44:a5:aa:c1:b2:a1:bc:e5: 7d:c5:6a:51:5f:69:08:3b:5f:93:3e:84:d0:87:f4:88:ba:d4: 4c:59:24:44:fa:1a:9e:72:50:11:5d:41:49:74:0d:a4:f3:e4: 60:a1:e3:84:ba:58:f4:68:e4:6f:32:97:03:ae:3b:23:27:cc: 2c:0a:32:85:0f:b0:af:88:28:c9:f7:a1:20:a2:10:80:d5:79: 18:09:ad:cc -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt3WNxCtut8+JWjSxRMXL1MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNWVhOTc0N2JkMDFhNDU3ZmEyYmIwMmZjYzBhYzgyMzE0MGI1MThmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4MK7eLMXr5qLdHhqNbQYlbDMwHj 4Pkr9HNzqbAVVojo9eEDmYg0Yq3eVBkJXBR2kTrSuk3WZa6BcAheStfXibwP+vPY A4suCnR7Ip4TDYJNDbS5w7wv9AxRQbVtCbJ69s8B/UjETcpF6WSEpfEuFcZgRyRQ JhRQleFyvcCq3I6nh9A/WkPMlpJRwGcRLS2rprAWIL5vH3JlpeTQ9ku+YctIm+xV Vozb/E3RJBVDH7yuCdwYW1FVHGcFWvlFx9fTmS6LhRU588MCow87Nw7ZFJiFrM3I H53rT1q1qjGub4s5mQ/K/5belpnRC2an2d9lFsHHfnmYprwbN/MUPS5lLQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFCXql0e9AaRX+iuwL8wKyCMUC1GPMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk2LzRmZWYw MC05MDhlLTQ0M2MtOWZmMi0wMTZkNmRjZmFkODEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTYvNGZlZjAw LTkwOGUtNDQzYy05ZmYyLTAxNmQ2ZGNmYWQ4MS8xL0plcVhSNzBCcEZmNks3QXZ6 QXJJSXhRTFVZOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwY71MA0GCSqGSIb3DQEBCwUAA4IBAQB4zJAr +43bbVsM0/oy1yEHUzxff9AFZhk2hqZMTFUS3PANUWtYOIA9It8Mnlt4/C2rvRAA 1++SS5gY+M1GtVjPQ8zWaGoIJE7UTMzZiouYyuSReohCZFTRHDRo2IwU/pqiorMC 9Mt/1smXzZAgkyaivb1cK8anj7SVDHGrWfejv8RbSXVtROjJnLckBnHdiFUNPDKj Aa7T5X1SjlAsPOKpZAbJSlEBITmJ2JSCRKWqwbKhvOV9xWpRX2kIO1+TPoTQh/SI utRMWSRE+hqeclARXUFJdA2k8+RgoeOEulj0aORvMpcDrjsjJ8wsCjKFD7CviCjJ 96EgohCA1XkYCa3M -----END CERTIFICATE-----Generated at Sun Jan 25 19:22:09 2026 by rpki-client