This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Jw__IYVmW535AIyeG-YmARiafXw.cer File: Jw__IYVmW535AIyeG-YmARiafXw.cer (raw, json) Hash identifier: HWPzh8qciFHaYck6s7oZ+FvPWeRQc8YvTyEjenvG3uQ= Subject key identifier: 27:0F:FF:21:85:66:5B:9D:F9:00:8C:9E:1B:E6:26:01:18:9A:7D:7C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B3694C3149D05471427643E2A9B371A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/76/7dc454-1516-4979-9c72-e4694afbb6fc/1/Jw__IYVmW535AIyeG-YmARiafXw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/76/7dc454-1516-4979-9c72-e4694afbb6fc/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:53 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 194.5.170.0 -- 194.5.174.255 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:94:c3:14:9d:05:47:14:27:64:3e:2a:9b:37:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=270fff2185665b9df9008c9e1be62601189a7d7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:05:38:a6:06:75:7b:f9:ba:f7:23:53:10:38: 7e:17:14:f0:c4:2b:d8:38:25:d8:d8:53:08:4c:fd: df:8b:37:12:8b:36:5c:fd:19:55:7f:db:3d:bb:43: 3e:6e:4e:eb:11:94:31:c6:f8:fe:66:8b:7e:15:18: c3:36:21:12:6c:37:15:71:84:11:37:41:66:4b:c8: 16:ce:b5:8d:15:5b:d1:f7:b1:ca:aa:56:e9:e4:c0: 2e:08:ae:ed:6c:b2:36:e4:dd:92:0e:ad:53:7d:13: 0b:93:19:16:a9:ec:7e:7c:1c:14:3e:dd:55:63:04: 19:e3:b5:97:b1:e0:6e:09:fb:49:54:d7:b6:24:ba: e2:b8:90:f6:e0:45:1f:63:40:13:e4:bf:be:e1:7f: 66:e0:71:39:ea:04:d7:79:50:b8:dd:9b:77:3a:dc: b1:71:8b:df:63:d2:ee:18:70:cd:b4:e5:db:ec:74: 28:b2:6f:91:ca:ae:df:18:a2:04:6b:26:3d:6a:22: 9e:66:38:d7:6b:ce:03:7c:49:3b:6d:dd:d8:02:f1: 6a:fc:8c:e0:6b:e9:df:6a:82:3f:cf:93:a0:f4:eb: 6e:33:36:d4:92:cd:59:27:21:76:ad:a9:b3:1e:93: 5d:dd:19:f1:4c:95:61:a3:e2:5a:09:69:3c:f8:0c: 5b:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:0F:FF:21:85:66:5B:9D:F9:00:8C:9E:1B:E6:26:01:18:9A:7D:7C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7dc454-1516-4979-9c72-e4694afbb6fc/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7dc454-1516-4979-9c72-e4694afbb6fc/1/Jw__IYVmW535AIyeG-YmARiafXw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.5.170.0-194.5.174.255 Signature Algorithm: sha256WithRSAEncryption 19:9e:0a:00:10:8e:74:ab:36:7e:9d:52:82:4a:ee:13:ed:63: ad:52:cd:a7:27:74:34:e5:94:e1:41:86:1d:1e:e7:15:93:da: 7d:59:ce:58:d8:50:01:24:a4:45:2d:e3:e8:8c:41:7f:f5:30: 78:dd:f5:eb:e2:59:d8:23:e1:64:9b:38:d9:0e:8c:8d:86:eb: 51:43:c6:bf:2f:4b:8e:3a:d8:b9:68:14:e9:a3:04:7d:68:22: 7e:da:b1:99:1f:d8:9f:86:6d:56:8a:93:8b:fc:06:37:f4:91: cc:11:71:d0:67:40:1c:9a:b6:95:56:86:6a:c6:f8:6b:b6:0e: 27:05:18:aa:aa:bf:b8:ba:98:f0:ea:99:08:9d:9f:c5:4c:09: 84:3b:fb:48:d6:bc:45:dc:a2:eb:8a:7f:c9:b2:eb:e7:d0:04: 60:33:8f:c5:e2:91:6e:09:ae:e8:83:a5:a2:01:e3:ae:05:72: f1:82:75:3a:26:ad:5b:68:0a:ee:f9:df:6c:c9:8c:14:e7:5c: 71:be:02:da:96:18:7d:66:cf:ae:20:51:1b:57:e5:d8:9e:b5: f0:3f:6f:b9:6c:f0:a5:d6:03:db:9c:d7:45:31:c7:35:38:a8: 2d:dd:67:06:fe:34:3d:c1:9e:b0:a1:70:53:5b:fc:d6:f5:ab: b2:db:2f:97 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgISAZt7NpTDFJ0FRxQnZD4qmzcaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNzBmZmYyMTg1NjY1YjlkZjkwMDhjOWUxYmU2MjYwMTE4OWE3ZDdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2AU4pgZ1e/m69yNTEDh+FxTwxCvY OCXY2FMITP3fizcSizZc/RlVf9s9u0M+bk7rEZQxxvj+Zot+FRjDNiESbDcVcYQR N0FmS8gWzrWNFVvR97HKqlbp5MAuCK7tbLI25N2SDq1TfRMLkxkWqex+fBwUPt1V YwQZ47WXseBuCftJVNe2JLriuJD24EUfY0AT5L++4X9m4HE56gTXeVC43Zt3Otyx cYvfY9LuGHDNtOXb7HQosm+Ryq7fGKIEayY9aiKeZjjXa84DfEk7bd3YAvFq/Izg a+nfaoI/z5Og9OtuMzbUks1ZJyF2ramzHpNd3RnxTJVho+JaCWk8+AxbBQIDAQAB o4ICjDCCAogwHQYDVR0OBBYEFCcP/yGFZlud+QCMnhvmJgEYmn18MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc2LzdkYzQ1 NC0xNTE2LTQ5NzktOWM3Mi1lNDY5NGFmYmI2ZmMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzYvN2RjNDU0 LTE1MTYtNDk3OS05YzcyLWU0Njk0YWZiYjZmYy8xL0p3X19JWVZtVzUzNUFJeWVH LVltQVJpYWZYdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCcGCCsGAQUF BwEHAQH/BBgwFjAUBAIAATAOMAwDBAHCBaoDBADCBa4wDQYJKoZIhvcNAQELBQAD ggEBABmeCgAQjnSrNn6dUoJK7hPtY61SzacndDTllOFBhh0e5xWT2n1ZzljYUAEk pEUt4+iMQX/1MHjd9eviWdgj4WSbONkOjI2G61FDxr8vS4462LloFOmjBH1oIn7a sZkf2J+GbVaKk4v8Bjf0kcwRcdBnQByatpVWhmrG+Gu2DicFGKqqv7i6mPDqmQid n8VMCYQ7+0jWvEXcouuKf8my6+fQBGAzj8XikW4JruiDpaIB464FcvGCdTomrVto Cu7532zJjBTnXHG+AtqWGH1mz64gURtX5dietfA/b7ls8KXWA9uc10UxxzU4qC3d Zwb+ND3BnrChcFNb/Nb1q7LbL5c= -----END CERTIFICATE-----Generated at Mon Jan 26 07:54:30 2026 by rpki-client