This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JgGttY6Dyu5nXc94lUugiqkwGg4.cer File: JgGttY6Dyu5nXc94lUugiqkwGg4.cer (raw, json) Hash identifier: AW0Fb0TLX6jKI6RBQt3iz07mwW89Nxopqa5bDwd+2TQ= Subject key identifier: 26:01:AD:B5:8E:83:CA:EE:67:5D:CF:78:95:4B:A0:8A:A9:30:1A:0E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A292815B61BC185AA9B323B526E04C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/df/c699a3-7d51-4b38-809d-1529adb0c9d7/1/JgGttY6Dyu5nXc94lUugiqkwGg4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/df/c699a3-7d51-4b38-809d-1529adb0c9d7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:17:58 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 215980 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:92:81:5b:61:bc:18:5a:a9:b3:23:b5:26:e0:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2601adb58e83caee675dcf78954ba08aa9301a0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:d3:9f:96:56:f5:ff:3a:c5:80:39:5b:3e:11: 55:b3:b6:84:41:3c:5f:34:ae:3a:66:81:ab:90:1b: f9:c8:30:f7:b5:b4:08:15:9f:4b:d1:a2:c9:ce:ba: a0:9b:9c:1e:e3:44:af:74:0d:0f:25:c8:ad:55:99: 6f:02:cb:04:6e:8f:7c:cd:f0:9d:09:4c:c6:cd:a7: 06:fb:b4:5e:c9:74:b6:b5:27:62:a3:18:c0:68:cd: 1d:2f:d8:52:66:ab:38:10:2e:78:68:26:44:1e:ff: 1f:b7:88:37:f7:6b:7b:fc:f3:b9:71:c6:77:92:1c: a9:3f:f7:77:bf:24:a3:06:9c:58:16:d0:ec:8a:8e: 40:ef:be:68:e8:5d:64:2b:7d:ea:f3:64:99:1e:0a: 77:50:7b:0e:c3:16:c4:02:85:7a:d5:b3:49:2b:82: 73:ed:f0:a1:84:62:37:1c:f2:60:0a:5f:1c:de:b1: c8:47:7f:66:ad:d3:dd:26:04:be:94:09:d1:50:64: 20:35:8c:5c:65:8d:71:6e:5e:b8:69:4c:e6:8a:2e: 79:b0:c8:c4:ba:64:21:6e:0a:c2:a5:a6:c3:20:a6: 50:3f:1a:96:ba:47:2a:9d:12:bd:be:65:ec:29:32: 9b:a6:72:e1:0b:dc:ab:91:20:04:54:a7:cf:d9:ed: 55:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:01:AD:B5:8E:83:CA:EE:67:5D:CF:78:95:4B:A0:8A:A9:30:1A:0E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c699a3-7d51-4b38-809d-1529adb0c9d7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c699a3-7d51-4b38-809d-1529adb0c9d7/1/JgGttY6Dyu5nXc94lUugiqkwGg4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 215980 Signature Algorithm: sha256WithRSAEncryption 1c:98:9e:b0:68:7f:5f:b7:c7:51:0f:e4:22:89:8f:3a:a9:38: 7d:1b:a2:81:21:1b:5a:82:02:6c:6e:52:c0:09:4a:bd:e5:2f: 86:ac:81:da:09:27:f9:c9:2e:40:82:d9:a7:6e:87:04:1f:47: 4a:13:ed:bd:6f:41:07:92:09:dd:43:ca:ab:14:fa:4c:5b:32: 9a:62:b7:42:95:8f:50:5f:d9:ce:b2:28:ec:34:d1:9a:93:de: 03:be:93:65:4f:35:b4:11:92:37:00:e2:54:0c:13:f0:84:d2: 35:47:8b:b0:c6:22:46:62:d7:39:e2:8d:9f:7a:a7:d7:63:20: ef:9a:c3:91:15:9c:ab:c4:78:bf:1f:bd:77:3c:f0:25:cd:8d: a9:bf:01:8f:be:e0:7f:57:b8:62:c9:e5:98:4a:7a:c3:65:0a: ed:d7:c3:38:b9:13:6d:7c:15:70:63:b1:1f:d0:20:97:8b:f8: 2a:b7:4b:12:18:66:b5:e0:5a:d3:aa:28:31:d3:0d:3a:72:36: 3e:ba:a8:5e:d1:eb:c1:2a:e0:87:7d:e5:df:27:22:63:e6:72: 48:10:26:2e:c3:db:a8:37:ee:81:07:23:d2:8d:88:0d:78:4f: 5b:ff:30:38:5a:4e:87:ce:ff:bf:a8:0a:9e:97:5a:89:b0:7f: 1a:6f:d3:1e -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt4opKBW2G8GFqpsyO1JuBMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNjAxYWRiNThlODNjYWVlNjc1ZGNmNzg5NTRiYTA4YWE5MzAxYTBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9Ofllb1/zrFgDlbPhFVs7aEQTxf NK46ZoGrkBv5yDD3tbQIFZ9L0aLJzrqgm5we40SvdA0PJcitVZlvAssEbo98zfCd CUzGzacG+7ReyXS2tSdioxjAaM0dL9hSZqs4EC54aCZEHv8ft4g392t7/PO5ccZ3 khypP/d3vySjBpxYFtDsio5A775o6F1kK33q82SZHgp3UHsOwxbEAoV61bNJK4Jz 7fChhGI3HPJgCl8c3rHIR39mrdPdJgS+lAnRUGQgNYxcZY1xbl64aUzmii55sMjE umQhbgrCpabDIKZQPxqWukcqnRK9vmXsKTKbpnLhC9yrkSAEVKfP2e1VKwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFCYBrbWOg8ruZ13PeJVLoIqpMBoOMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RmL2M2OTlh My03ZDUxLTRiMzgtODA5ZC0xNTI5YWRiMGM5ZDcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGYvYzY5OWEz LTdkNTEtNGIzOC04MDlkLTE1MjlhZGIwYzlkNy8xL0pnR3R0WTZEeXU1blhjOTRs VXVnaXFrd0dnNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNLrDANBgkqhkiG9w0BAQsFAAOCAQEAHJiesGh/X7fH UQ/kIomPOqk4fRuigSEbWoICbG5SwAlKveUvhqyB2gkn+ckuQILZp26HBB9HShPt vW9BB5IJ3UPKqxT6TFsymmK3QpWPUF/ZzrIo7DTRmpPeA76TZU81tBGSNwDiVAwT 8ITSNUeLsMYiRmLXOeKNn3qn12Mg75rDkRWcq8R4vx+9dzzwJc2Nqb8Bj77gf1e4 YsnlmEp6w2UK7dfDOLkTbXwVcGOxH9Agl4v4KrdLEhhmteBa06ooMdMNOnI2Prqo XtHrwSrgh33l3yciY+ZySBAmLsPbqDfugQcj0o2IDXhPW/8wOFpOh87/v6gKnpda ibB/Gm/THg== -----END CERTIFICATE-----Generated at Mon Jan 26 08:41:39 2026 by rpki-client