This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JxnUEBB2de7YtizK1DUzb4GeCm0.cer File: JxnUEBB2de7YtizK1DUzb4GeCm0.cer (raw, json) Hash identifier: MBXLZAl9ONovY0nNGbaJ2pzzV13JeBOu+IxfhoTXHbE= Subject key identifier: 27:19:D4:10:10:76:75:EE:D8:B6:2C:CA:D4:35:33:6F:81:9E:0A:6D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79EBB67D1B03AF3F762F165482A07CCC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/96/715ef2-06e9-455d-8b71-7718512f0def/1/JxnUEBB2de7YtizK1DUzb4GeCm0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/96/715ef2-06e9-455d-8b71-7718512f0def/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:17:29 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 62.97.140.0/23 IP: 185.214.212.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:eb:b6:7d:1b:03:af:3f:76:2f:16:54:82:a0:7c:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2719d410107675eed8b62ccad435336f819e0a6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:bb:a0:f7:fd:1d:e2:53:08:91:a0:3f:d5:82: 0b:ff:d8:74:08:79:29:98:ba:0e:38:66:26:7a:5a: 7d:1f:71:4d:9e:24:91:76:a9:07:3b:38:6c:68:69: 41:32:eb:d7:ec:da:44:f8:be:11:ab:e9:8c:16:30: 85:e9:50:70:10:27:21:70:c0:a6:b6:df:cf:4a:22: 30:0c:9b:52:42:4c:d2:22:36:4f:b0:5c:5e:80:54: 6d:6e:1b:56:87:70:92:94:b2:6c:cf:9a:33:b3:25: db:2e:f1:e8:05:65:65:e3:6f:41:12:8a:ea:74:53: a7:b3:09:51:05:19:16:b3:e8:9c:b2:8f:96:f3:91: 1f:c2:e5:a8:82:c1:f9:b3:81:e3:f6:08:88:c2:53: 26:21:cb:75:b7:79:f0:52:df:58:1c:ca:18:ef:71: 12:54:9f:73:b1:c3:dd:04:d0:b9:25:1e:e8:50:76: e1:57:99:44:84:49:5b:16:50:ae:f4:15:87:97:72: 33:5b:14:19:db:4a:b1:bc:38:87:53:a1:92:f4:ea: ad:ff:e4:33:5b:20:e4:f1:6c:f6:d0:d4:0c:32:70: 11:fa:53:94:74:1b:a5:c6:19:41:2b:82:1f:a0:7d: 25:f1:3f:7f:27:17:01:53:b1:e5:c3:9e:64:fe:17: 69:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:19:D4:10:10:76:75:EE:D8:B6:2C:CA:D4:35:33:6F:81:9E:0A:6D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/715ef2-06e9-455d-8b71-7718512f0def/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/715ef2-06e9-455d-8b71-7718512f0def/1/JxnUEBB2de7YtizK1DUzb4GeCm0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.97.140.0/23 185.214.212.0/22 Signature Algorithm: sha256WithRSAEncryption 9e:f7:61:01:58:db:ef:5d:1b:44:45:6d:f9:44:90:de:44:45: 4e:76:4f:0f:a0:6f:3e:a8:cb:fd:5b:85:8f:19:cc:2f:0e:ae: 48:de:9a:1e:87:27:b4:ad:02:f4:79:40:c2:67:4a:44:22:18: db:46:ec:a8:95:c5:67:99:f1:de:2a:9e:a3:6c:b5:8f:28:a3: 2d:c2:6f:45:6a:82:04:be:c8:bf:6f:4a:ba:16:68:3e:a9:95: 80:7a:e3:4a:a7:c2:b5:2f:59:a7:c8:8a:a6:4a:08:65:60:89: d2:90:0f:a4:91:fd:3f:5e:38:3d:58:74:38:59:79:ff:31:08: a2:60:26:78:46:1e:24:11:38:33:88:d6:c9:8f:45:2e:c1:4b: 45:15:be:c8:7f:2e:f0:23:7c:8b:e0:3a:6a:28:ab:85:2d:4f: e3:16:f7:84:0d:6a:78:7f:39:e1:d3:58:93:e1:e9:e0:69:08: b8:10:7c:3d:b8:c1:a2:35:43:02:4b:95:c6:6c:15:d7:d3:64: 5c:25:72:f9:95:2d:ed:b7:b4:17:9e:94:fa:65:63:64:a2:f3: a0:a0:ee:94:0f:8f:68:94:c3:30:8d:21:42:24:64:9c:59:0c: 7c:40:cd:d9:2d:32:a5:34:fa:9a:c6:c4:47:96:23:94:66:09: 9f:c1:ec:8e -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgISAZt567Z9GwOvP3YvFlSCoHzMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNzE5ZDQxMDEwNzY3NWVlZDhiNjJjY2FkNDM1MzM2ZjgxOWUwYTZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLug9/0d4lMIkaA/1YIL/9h0CHkp mLoOOGYmelp9H3FNniSRdqkHOzhsaGlBMuvX7NpE+L4Rq+mMFjCF6VBwECchcMCm tt/PSiIwDJtSQkzSIjZPsFxegFRtbhtWh3CSlLJsz5ozsyXbLvHoBWVl429BEorq dFOnswlRBRkWs+icso+W85EfwuWogsH5s4Hj9giIwlMmIct1t3nwUt9YHMoY73ES VJ9zscPdBNC5JR7oUHbhV5lEhElbFlCu9BWHl3IzWxQZ20qxvDiHU6GS9Oqt/+Qz WyDk8Wz20NQMMnAR+lOUdBulxhlBK4IfoH0l8T9/JxcBU7Hlw55k/hdpNwIDAQAB o4ICijCCAoYwHQYDVR0OBBYEFCcZ1BAQdnXu2LYsytQ1M2+BngptMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk2LzcxNWVm Mi0wNmU5LTQ1NWQtOGI3MS03NzE4NTEyZjBkZWYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTYvNzE1ZWYy LTA2ZTktNDU1ZC04YjcxLTc3MTg1MTJmMGRlZi8xL0p4blVFQkIyZGU3WXRpeksx RFV6YjRHZUNtMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQBPmGMAwQCudbUMA0GCSqGSIb3DQEBCwUAA4IB AQCe92EBWNvvXRtERW35RJDeREVOdk8PoG8+qMv9W4WPGcwvDq5I3poehye0rQL0 eUDCZ0pEIhjbRuyolcVnmfHeKp6jbLWPKKMtwm9FaoIEvsi/b0q6Fmg+qZWAeuNK p8K1L1mnyIqmSghlYInSkA+kkf0/Xjg9WHQ4WXn/MQiiYCZ4Rh4kETgziNbJj0Uu wUtFFb7Ify7wI3yL4DpqKKuFLU/jFveEDWp4fznh01iT4engaQi4EHw9uMGiNUMC S5XGbBXX02RcJXL5lS3tt7QXnpT6ZWNkovOgoO6UD49olMMwjSFCJGScWQx8QM3Z LTKlNPqaxsRHliOUZgmfweyO -----END CERTIFICATE-----Generated at Sun Jan 25 22:01:35 2026 by rpki-client