This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JiNBtDPh-Py3ljItL9kmQJOW560.cer File: JiNBtDPh-Py3ljItL9kmQJOW560.cer (raw, json) Hash identifier: B+FEcPlXS5MkM/pwQSwQENnSiVMz4OhGsNUEedq3VW8= Subject key identifier: 26:23:41:B4:33:E1:F8:FC:B7:96:32:2D:2F:D9:26:40:93:96:E7:AD Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B775884B79CC63379F352B011577EDE10 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:17:28 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 43088 AS: 57030 IP: 45.12.36.0/22 IP: 46.31.16.0/21 IP: 176.62.200.0/21 IP: 185.66.0.0/22 IP: 185.177.120.0/22 IP: 193.200.225.0/24 IP: 195.42.150.0/23 IP: 2a02:2530::/32 IP: 2a02:7f20::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:84:b7:9c:c6:33:79:f3:52:b0:11:57:7e:de:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=262341b433e1f8fcb796322d2fd926409396e7ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:62:4f:52:42:a3:4f:02:dc:39:25:f7:79:b2: 80:0b:4b:28:e1:f4:4c:8c:e0:12:58:7e:04:ea:86: f6:fa:66:60:ba:0a:9a:72:57:84:bf:94:38:45:36: f7:f4:1f:49:da:f5:13:c8:b3:f6:06:04:84:b3:81: 53:48:11:67:04:4b:89:88:69:75:1b:9f:0a:b6:f8: 5a:c5:3a:ef:b1:2d:5a:3a:75:ce:a3:c5:46:b0:fc: e6:31:30:b0:ea:a8:f4:19:08:1b:da:be:59:12:27: f7:cc:f6:73:c3:1e:c9:a6:4f:08:9e:a8:db:e5:af: dd:9e:21:a0:da:05:3f:e1:ed:98:c6:27:21:43:f5: a3:7d:1f:9f:d6:36:ee:f0:ce:3c:56:5e:50:92:4a: fb:7a:0e:a3:05:9a:33:fb:36:24:34:53:57:67:f6: 1f:02:10:22:e3:41:cc:e2:9b:2e:25:8d:47:f4:ee: 2e:c0:db:20:5c:78:14:a3:38:83:6e:77:11:fd:6a: 7c:6c:c0:17:84:5d:e3:6e:b4:8a:cf:d6:7d:09:fb: 94:28:d3:49:6f:7e:f1:6b:71:2e:03:97:fb:ff:ce: ab:bb:ed:b7:11:6f:9a:63:18:8a:0c:1b:f0:01:42: 3f:84:76:a4:74:89:e2:00:74:48:18:34:e0:86:9b: 49:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:23:41:B4:33:E1:F8:FC:B7:96:32:2D:2F:D9:26:40:93:96:E7:AD X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.12.36.0/22 46.31.16.0/21 176.62.200.0/21 185.66.0.0/22 185.177.120.0/22 193.200.225.0/24 195.42.150.0/23 IPv6: 2a02:2530::/32 2a02:7f20::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 43088 57030 Signature Algorithm: sha256WithRSAEncryption 0d:9a:81:bf:0b:a0:e2:f1:5a:b2:5e:5e:e3:ef:07:f6:99:a0: 31:51:46:18:f7:3e:58:d8:92:7f:99:f6:eb:f6:32:b4:60:8c: 04:e4:58:df:33:dd:a2:9c:a0:f1:27:0d:b9:cf:e1:19:3d:3d: 2d:4e:f4:96:7d:c5:92:94:9a:5f:bc:4f:94:ea:f2:79:84:c8: c6:06:7c:93:23:56:6f:2a:67:da:87:85:e3:3b:f7:c6:45:6a: da:a5:12:b6:f1:ca:cb:31:af:20:4f:da:ca:b9:37:d5:b8:fc: bc:91:02:7a:2d:3b:7b:28:f5:a8:74:46:32:fc:9d:b4:f9:47: 93:4d:23:bd:db:6b:e0:71:55:da:15:47:68:f9:51:7a:b3:22: d5:1d:fc:ac:8d:0d:25:ad:f9:9a:69:e4:16:97:97:a2:6e:e9: a8:15:0b:a8:1e:66:ad:7d:e3:5d:e0:60:ae:1c:1e:62:30:63: fe:39:1f:e2:e5:ca:a1:2b:f3:ef:2f:72:f9:49:97:68:ef:a1: 05:d8:61:ac:e7:6a:3c:3f:f8:d1:3e:35:81:31:3a:a1:db:a9: 29:e8:48:d1:bf:a8:26:2a:b7:c3:c6:9f:c2:b4:99:6d:1f:89: 99:99:a8:c5:18:d5:29:43:b4:68:38:43:b0:6e:07:bc:4f:fb: 4c:5f:70:b1 -----BEGIN CERTIFICATE----- MIIF0zCCBLugAwIBAgISAZt3WIS3nMYzefNSsBFXft4QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNjIzNDFiNDMzZTFmOGZjYjc5NjMyMmQyZmQ5MjY0MDkzOTZlN2FkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2JPUkKjTwLcOSX3ebKAC0so4fRM jOASWH4E6ob2+mZgugqacleEv5Q4RTb39B9J2vUTyLP2BgSEs4FTSBFnBEuJiGl1 G58KtvhaxTrvsS1aOnXOo8VGsPzmMTCw6qj0GQgb2r5ZEif3zPZzwx7Jpk8Inqjb 5a/dniGg2gU/4e2YxichQ/WjfR+f1jbu8M48Vl5Qkkr7eg6jBZoz+zYkNFNXZ/Yf AhAi40HM4psuJY1H9O4uwNsgXHgUoziDbncR/Wp8bMAXhF3jbrSKz9Z9CfuUKNNJ b37xa3EuA5f7/86ru+23EW+aYxiKDBvwAUI/hHakdIniAHRIGDTghptJ+wIDAQAB o4IC3zCCAtswHQYDVR0OBBYEFCYjQbQz4fj8t5YyLS/ZJkCTluetMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ViLzU2OGUy MS01M2E0LTRlNTUtOWM1Ny05ODI4MmM4OWY1MTYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIvNTY4ZTIx LTUzYTQtNGU1NS05YzU3LTk4MjgyYzg5ZjUxNi8xL0ppTkJ0RFBoLVB5M2xqSXRM OWttUUpPVzU2MC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFkGCCsGAQUF BwEHAQH/BEowSDAwBAIAATAqAwQCLQwkAwQDLh8QAwQDsD7IAwQCuUIAAwQCubF4 AwQAwcjhAwQBwyqWMBQEAgACMA4DBQAqAiUwAwUAKgJ/IDAfBggrBgEFBQcBCAEB /wQQMA6gDDAKAgMAqFACAwDexjANBgkqhkiG9w0BAQsFAAOCAQEADZqBvwug4vFa sl5e4+8H9pmgMVFGGPc+WNiSf5n26/YytGCMBORY3zPdopyg8ScNuc/hGT09LU70 ln3FkpSaX7xPlOryeYTIxgZ8kyNWbypn2oeF4zv3xkVq2qUStvHKyzGvIE/ayrk3 1bj8vJECei07eyj1qHRGMvydtPlHk00jvdtr4HFV2hVHaPlRerMi1R38rI0NJa35 mmnkFpeXom7pqBULqB5mrX3jXeBgrhweYjBj/jkf4uXKoSvz7y9y+UmXaO+hBdhh rOdqPD/40T41gTE6odupKehI0b+oJiq3w8afwrSZbR+JmZmoxRjVKUO0aDhDsG4H vE/7TF9wsQ== -----END CERTIFICATE-----Generated at Mon Jan 26 12:59:15 2026 by rpki-client