This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JiUc99jW0FfcZHFbqDYpnfOf2Fs.cer File: JiUc99jW0FfcZHFbqDYpnfOf2Fs.cer (raw, json) Hash identifier: vfTulovWoqgNOo/6m+TIrObiKU690RCQbMUBqihaS10= Subject key identifier: 26:25:1C:F7:D8:D6:D0:57:DC:64:71:5B:A8:36:29:9D:F3:9F:D8:5B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ECAABE2E44AB2D45C094FCAF717D96 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a2/48b52c-a045-409f-981b-9520549d7fd1/1/JiUc99jW0FfcZHFbqDYpnfOf2Fs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a2/48b52c-a045-409f-981b-9520549d7fd1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:31 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.201.124.0/22 IP: 2a04:66c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:aa:be:2e:44:ab:2d:45:c0:94:fc:af:71:7d:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=26251cf7d8d6d057dc64715ba836299df39fd85b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:cb:1b:36:eb:34:e4:7a:4a:05:89:8e:de:a7: fa:37:b6:d2:41:a6:e1:43:3d:24:58:50:2b:f2:2b: 19:73:07:ae:52:5f:1d:a9:a9:52:ba:f0:20:2e:87: 31:af:38:7f:5f:a6:13:1d:bd:90:21:69:6e:36:3c: 09:b5:a6:11:e8:48:02:77:c0:4f:70:91:0c:a1:eb: 1c:a3:fc:35:e0:d8:5c:ea:c0:0e:86:05:e3:ac:50: 92:69:2c:fa:04:08:67:8a:a7:89:c6:0b:87:d8:90: 2a:49:7f:0f:56:1d:53:33:13:ec:6f:c7:9b:a8:68: c7:00:e5:15:88:87:67:d9:26:3a:44:8b:f8:db:67: 8c:87:4e:9d:c2:50:1f:3e:20:36:be:66:f3:14:39: b6:33:6b:4b:43:7a:8e:84:16:5c:5a:35:a3:48:52: bf:98:45:19:71:4d:99:7b:fa:09:50:c6:65:a9:36: 16:f2:93:65:5b:01:3b:45:c5:d9:b5:10:3a:39:a2: 63:4b:03:2b:7a:92:9d:c1:63:63:4e:d0:00:1d:b9: 40:bc:69:da:d1:cc:34:d0:5c:de:f0:83:8f:ab:72: 02:df:35:d9:42:6c:80:fc:f4:e0:c3:be:77:0d:74: 74:6a:dd:93:80:a7:4c:e0:5b:5e:07:c4:07:23:6f: 5b:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:25:1C:F7:D8:D6:D0:57:DC:64:71:5B:A8:36:29:9D:F3:9F:D8:5B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/48b52c-a045-409f-981b-9520549d7fd1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/48b52c-a045-409f-981b-9520549d7fd1/1/JiUc99jW0FfcZHFbqDYpnfOf2Fs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.201.124.0/22 IPv6: 2a04:66c0::/29 Signature Algorithm: sha256WithRSAEncryption 55:a3:2f:3e:59:50:0f:d6:3a:f5:a7:51:81:16:03:a5:35:48: e4:4f:2d:34:1a:e5:58:98:91:bb:81:49:6c:47:03:be:2a:c7: bf:69:43:48:b0:09:1d:40:8d:d8:80:25:b2:de:d3:8d:f1:f5: f3:cf:35:0b:a0:e3:56:4f:88:8f:e0:6f:db:21:96:95:43:9a: b6:bd:ec:37:e7:eb:02:e8:c1:37:96:ec:ea:fc:23:f7:ba:85: 72:88:13:16:73:39:d8:e6:85:d2:e7:30:3f:49:9b:a4:67:11: fc:ef:e8:c5:d4:cb:bb:2d:25:75:1c:51:ee:ab:ff:9f:9b:2c: 50:55:3b:2b:7f:9a:b2:00:ec:3f:fc:8c:45:00:7c:ae:36:18: 59:82:41:ef:c0:46:9a:d0:a0:a5:95:60:b3:55:a3:ad:d1:a5: 47:77:09:9f:d8:2e:c2:ec:07:e1:9c:62:77:b4:ad:10:46:68: 85:e4:09:88:a9:3f:94:81:19:f9:dc:44:f7:ad:de:91:b3:29: dd:13:be:e4:93:c3:68:90:04:50:7a:c6:58:fe:ee:7d:03:71: 1a:f8:e2:ee:44:d2:1e:cc:be:8e:24:79:db:39:77:5a:20:f2: cc:6c:aa:52:f9:75:60:ad:9d:9c:73:5a:ef:cc:b7:a0:f9:23: 6c:ba:8a:7c -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt57Kq+LkSrLUXAlPyvcX2WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNjI1MWNmN2Q4ZDZkMDU3ZGM2NDcxNWJhODM2Mjk5ZGYzOWZkODViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMsbNus05HpKBYmO3qf6N7bSQabh Qz0kWFAr8isZcweuUl8dqalSuvAgLocxrzh/X6YTHb2QIWluNjwJtaYR6EgCd8BP cJEMoesco/w14Nhc6sAOhgXjrFCSaSz6BAhniqeJxguH2JAqSX8PVh1TMxPsb8eb qGjHAOUViIdn2SY6RIv422eMh06dwlAfPiA2vmbzFDm2M2tLQ3qOhBZcWjWjSFK/ mEUZcU2Ze/oJUMZlqTYW8pNlWwE7RcXZtRA6OaJjSwMrepKdwWNjTtAAHblAvGna 0cw00Fze8IOPq3IC3zXZQmyA/PTgw753DXR0at2TgKdM4FteB8QHI29bpwIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFCYlHPfY1tBX3GRxW6g2KZ3zn9hbMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2EyLzQ4YjUy Yy1hMDQ1LTQwOWYtOTgxYi05NTIwNTQ5ZDdmZDEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTIvNDhiNTJj LWEwNDUtNDA5Zi05ODFiLTk1MjA1NDlkN2ZkMS8xL0ppVWM5OWpXMEZmY1pIRmJx RFlwbmZPZjJGcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCW8l8MA0EAgACMAcDBQMqBGbAMA0GCSqGSIb3 DQEBCwUAA4IBAQBVoy8+WVAP1jr1p1GBFgOlNUjkTy00GuVYmJG7gUlsRwO+Kse/ aUNIsAkdQI3YgCWy3tON8fXzzzULoONWT4iP4G/bIZaVQ5q2vew35+sC6ME3luzq /CP3uoVyiBMWcznY5oXS5zA/SZukZxH87+jF1Mu7LSV1HFHuq/+fmyxQVTsrf5qy AOw//IxFAHyuNhhZgkHvwEaa0KCllWCzVaOt0aVHdwmf2C7C7AfhnGJ3tK0QRmiF 5AmIqT+UgRn53ET3rd6RsyndE77kk8NokARQesZY/u59A3Ea+OLuRNIezL6OJHnb OXdaIPLMbKpS+XVgrZ2cc1rvzLeg+SNsuop8 -----END CERTIFICATE-----Generated at Sun Jan 25 21:42:20 2026 by rpki-client