This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JsZy2nKjTMKCrcQPKCZ23nURdlQ.cer File: JsZy2nKjTMKCrcQPKCZ23nURdlQ.cer (raw, json) Hash identifier: bnvUVl6oheZ15PF6eTq3T98xB70xZK6On2sJlXWDCKw= Subject key identifier: 26:C6:72:DA:72:A3:4C:C2:82:AD:C4:0F:28:26:76:DE:75:11:76:54 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797EE219DF03A2C00A95926101CEA2AB Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/JsZy2nKjTMKCrcQPKCZ23nURdlQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:37 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 214747 IP: 31.88.0.0/15 IP: 218.254.0.0/16 IP: 2a14:f180::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:e2:19:df:03:a2:c0:0a:95:92:61:01:ce:a2:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=26c672da72a34cc282adc40f282676de75117654 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:fc:41:87:72:f4:83:6e:cc:3a:25:a6:2e:35: 9a:17:f3:ad:05:30:89:e2:b5:e6:ca:b2:9b:98:0d: 2d:8b:02:c5:32:be:a1:8e:ad:c1:58:7c:9b:9d:4c: 25:2f:07:e8:4d:ad:f1:bf:fa:f0:d2:a3:94:df:40: 8c:52:98:f0:0a:f2:ae:28:f0:1c:8e:be:18:70:ce: 07:31:dc:c9:cb:05:27:0d:3d:82:27:bb:1f:1f:3f: 3b:76:e0:33:c0:df:64:f0:1e:e0:ef:b0:13:73:8f: 67:d0:c2:c5:be:bf:26:c9:be:37:17:e9:19:fa:3d: d8:c3:f8:90:e6:d3:23:6d:0d:a8:55:f1:19:64:f3: 6d:81:03:7e:ac:1a:7f:6c:89:36:2b:6f:44:cb:49: 7b:d4:bd:f3:a5:ac:34:69:53:74:9b:ff:3f:b1:51: 66:60:68:84:f9:49:35:3f:ba:25:26:bb:a7:9f:34: e8:6e:1a:0c:91:b9:58:74:f7:d3:ed:d4:87:da:a9: f2:7c:3a:8f:26:2a:29:ad:91:f6:75:b3:2e:dc:54: 20:2c:50:00:72:ad:57:ff:3d:ef:77:ab:c5:6a:ce: 47:65:0c:7a:ef:c3:40:03:9e:f6:82:8e:58:40:41: c4:11:0c:05:19:6b:b0:8e:9e:b8:64:b9:a3:e6:49: f0:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:C6:72:DA:72:A3:4C:C2:82:AD:C4:0F:28:26:76:DE:75:11:76:54 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/JsZy2nKjTMKCrcQPKCZ23nURdlQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.88.0.0/15 218.254.0.0/16 IPv6: 2a14:f180::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 214747 Signature Algorithm: sha256WithRSAEncryption 8b:64:c1:c1:d0:5f:73:a1:72:59:86:cb:38:cd:77:8e:69:fe: 4a:b5:69:40:49:97:b6:ac:2d:b1:cf:66:9d:11:a4:26:ac:87: a8:cc:69:aa:74:27:dc:d0:e8:0f:6f:a7:33:46:aa:a8:7d:2f: 77:c2:d9:5c:27:b8:e1:65:25:44:56:b0:3f:d5:9c:7f:96:af: b5:d3:93:57:d7:c4:16:d4:94:d8:6b:f1:80:3b:6d:c4:59:83: 3e:4c:b6:14:c3:9c:b0:d9:83:d8:5a:3b:a6:09:81:27:41:ef: 75:05:66:05:5f:3e:59:00:74:ae:22:15:75:bc:1a:a4:64:a3: fb:58:3e:99:78:0f:89:22:2d:0b:f2:7f:1c:ae:f1:6a:08:a2: 8e:ca:3b:17:2e:ad:f9:70:0b:b0:75:d2:89:f7:b6:a1:0f:2e: 7b:e0:0a:5e:c7:ca:1b:db:93:48:42:33:9b:23:46:a6:58:d2: 61:f5:49:d7:0d:83:90:9c:88:7f:25:b1:65:24:ee:72:c0:dc: d0:bf:2e:7a:59:a9:ed:9d:d2:e9:31:4e:24:b2:db:e1:89:6e: 5e:57:d1:dc:26:61:98:2c:12:91:b2:30:e5:53:b2:50:cc:26: 8d:42:d7:af:97:60:65:c4:35:bf:78:f4:f8:30:53:2b:e8:a9: 68:ed:ca:69 -----BEGIN CERTIFICATE----- MIIFpzCCBI+gAwIBAgISAZt5fuIZ3wOiwAqVkmEBzqKrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNmM2NzJkYTcyYTM0Y2MyODJhZGM0MGYyODI2NzZkZTc1MTE3NjU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0fxBh3L0g27MOiWmLjWaF/OtBTCJ 4rXmyrKbmA0tiwLFMr6hjq3BWHybnUwlLwfoTa3xv/rw0qOU30CMUpjwCvKuKPAc jr4YcM4HMdzJywUnDT2CJ7sfHz87duAzwN9k8B7g77ATc49n0MLFvr8myb43F+kZ +j3Yw/iQ5tMjbQ2oVfEZZPNtgQN+rBp/bIk2K29Ey0l71L3zpaw0aVN0m/8/sVFm YGiE+Uk1P7olJrunnzTobhoMkblYdPfT7dSH2qnyfDqPJioprZH2dbMu3FQgLFAA cq1X/z3vd6vFas5HZQx678NAA572go5YQEHEEQwFGWuwjp64ZLmj5knwiQIDAQAB o4ICszCCAq8wHQYDVR0OBBYEFCbGctpyo0zCgq3EDygmdt51EXZUMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc2LzdmZTAx NS01Y2Q1LTQ0MjktOGI3ZC0yMmQwMjcxOTc3MTIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzYvN2ZlMDE1 LTVjZDUtNDQyOS04YjdkLTIyZDAyNzE5NzcxMi8xL0pzWnkybktqVE1LQ3JjUVBL Q1oyM25VUmRsUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDIGCCsGAQUF BwEHAQH/BCMwITAQBAIAATAKAwMBH1gDAwDa/jANBAIAAjAHAwUDKhTxgDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMDRtswDQYJKoZIhvcNAQELBQADggEBAItkwcHQ X3OhclmGyzjNd45p/kq1aUBJl7asLbHPZp0RpCash6jMaap0J9zQ6A9vpzNGqqh9 L3fC2VwnuOFlJURWsD/VnH+Wr7XTk1fXxBbUlNhr8YA7bcRZgz5MthTDnLDZg9ha O6YJgSdB73UFZgVfPlkAdK4iFXW8GqRko/tYPpl4D4kiLQvyfxyu8WoIoo7KOxcu rflwC7B10on3tqEPLnvgCl7Hyhvbk0hCM5sjRqZY0mH1SdcNg5CciH8lsWUk7nLA 3NC/LnpZqe2d0ukxTiSy2+GJbl5X0dwmYZgsEpGyMOVTslDMJo1C16+XYGXENb94 9PgwUyvoqWjtymk= -----END CERTIFICATE-----Generated at Sun Jan 25 12:08:38 2026 by rpki-client