This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JzbLcjrt1VrsNPQAt2zEZ4zLobo.cer File: JzbLcjrt1VrsNPQAt2zEZ4zLobo.cer (raw, json) Hash identifier: zfT3/DQku6OG1hs4gjJTJMh4PWiBhvoqp9a3/RqwliM= Subject key identifier: 27:36:CB:72:3A:ED:D5:5A:EC:34:F4:00:B7:6C:C4:67:8C:CB:A1:BA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019995DFBDEA94F66856CDA52067C6996E99 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/86/aabb03-2ac8-4065-af8c-47ef2a98b22d/1/JzbLcjrt1VrsNPQAt2zEZ4zLobo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/86/aabb03-2ac8-4065-af8c-47ef2a98b22d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Mon 29 Sep 2025 14:28:12 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 44521 IP: 81.31.200.0/22 IP: 91.199.159.0/24 IP: 91.235.140.0/24 IP: 193.37.146.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:95:df:bd:ea:94:f6:68:56:cd:a5:20:67:c6:99:6e:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Sep 29 14:28:12 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=2736cb723aedd55aec34f400b76cc4678ccba1ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c2:08:79:78:e4:70:97:b8:4e:3f:90:7c:00: 78:83:7d:21:81:f6:3e:02:98:4e:ba:20:91:5e:42: 1f:4d:ad:58:36:2a:50:4a:8c:18:84:c9:d2:21:28: 72:1a:07:56:8f:5a:c4:c0:b1:af:27:f8:fa:a9:90: 70:e9:d0:a4:b6:83:8d:a4:f4:44:94:77:e3:f9:ae: 27:00:a1:14:4a:9f:e8:f6:0c:5e:ba:81:79:85:03: 01:7a:65:d0:83:12:a9:80:cb:92:bb:c9:00:57:cf: 3a:0a:da:10:7f:fb:70:fe:53:d5:2e:0c:6a:74:ea: 65:04:76:df:5b:98:b9:82:5d:34:ec:41:4f:de:dc: 94:64:a4:f8:b5:88:7a:db:72:05:11:e3:e4:3f:46: e4:83:12:c3:78:02:31:c6:70:bd:b3:fa:14:1e:55: 3e:e4:76:8e:ca:d6:c2:05:a0:f1:a3:ca:be:8c:c0: 28:ec:80:ca:c5:f4:21:64:e2:78:73:77:d3:9e:0b: 8e:24:ee:c4:07:52:47:51:b5:cf:2a:94:cb:5a:52: 0d:ba:fa:0c:f1:ca:95:bb:58:04:11:b4:fe:cf:62: 09:62:ef:3e:7a:bc:bb:81:70:9d:5b:f7:24:68:3c: 2c:80:10:97:e0:56:4c:af:63:44:eb:fd:87:d3:c4: cf:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:36:CB:72:3A:ED:D5:5A:EC:34:F4:00:B7:6C:C4:67:8C:CB:A1:BA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/aabb03-2ac8-4065-af8c-47ef2a98b22d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/aabb03-2ac8-4065-af8c-47ef2a98b22d/1/JzbLcjrt1VrsNPQAt2zEZ4zLobo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.31.200.0/22 91.199.159.0/24 91.235.140.0/24 193.37.146.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 44521 Signature Algorithm: sha256WithRSAEncryption 9f:ec:03:ce:86:f5:40:8c:c2:3c:50:d9:4a:ea:b5:b8:11:ef: ad:42:a0:99:16:d8:a4:10:1f:88:44:82:e3:21:ee:44:3d:35: fa:0d:48:46:c2:60:d9:50:b9:8a:07:a5:f7:67:ca:39:6d:08: 96:19:89:b0:ee:a9:2b:2d:04:59:91:eb:c2:e9:12:0d:a7:94: bb:62:96:f7:ea:f4:c4:a7:be:af:44:56:3f:94:95:a1:b0:51: b8:27:6c:67:a0:b1:76:31:1b:95:18:d1:2e:91:28:00:e7:23: 27:2c:0c:8c:05:ce:5a:5f:f1:3a:db:95:e7:1d:53:45:86:6a: 60:d7:27:22:73:c4:f0:84:b9:2f:55:1c:81:97:14:2f:b9:83: 10:d9:8b:a9:af:35:6d:1a:bc:20:e3:e8:8b:c8:8c:8f:61:d0: 41:a4:0d:1c:47:fc:35:db:7d:66:ac:73:7b:36:4d:14:61:34: 7e:1c:d9:6c:43:b3:be:d7:7d:d1:35:fc:f3:66:ec:c7:65:f1: d7:79:05:9b:bb:64:88:7a:02:6f:75:b8:91:b1:a2:20:47:e0: 18:9a:da:ad:97:fe:81:16:3a:9c:ab:5b:c4:5f:1d:b3:78:28: 4b:51:71:b2:a5:57:6b:c8:3b:e9:d8:a6:9e:e5:63:70:f4:55: 86:e9:e6:2b -----BEGIN CERTIFICATE----- MIIFpjCCBI6gAwIBAgISAZmV373qlPZoVs2lIGfGmW6ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUwOTI5MTQyODEyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNzM2Y2I3MjNhZWRkNTVhZWMzNGY0MDBiNzZjYzQ2NzhjY2JhMWJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMIIeXjkcJe4Tj+QfAB4g30hgfY+ AphOuiCRXkIfTa1YNipQSowYhMnSIShyGgdWj1rEwLGvJ/j6qZBw6dCktoONpPRE lHfj+a4nAKEUSp/o9gxeuoF5hQMBemXQgxKpgMuSu8kAV886CtoQf/tw/lPVLgxq dOplBHbfW5i5gl007EFP3tyUZKT4tYh623IFEePkP0bkgxLDeAIxxnC9s/oUHlU+ 5HaOytbCBaDxo8q+jMAo7IDKxfQhZOJ4c3fTnguOJO7EB1JHUbXPKpTLWlINuvoM 8cqVu1gEEbT+z2IJYu8+ery7gXCdW/ckaDwsgBCX4FZMr2NE6/2H08TPyQIDAQAB o4ICsjCCAq4wHQYDVR0OBBYEFCc2y3I67dVa7DT0ALdsxGeMy6G6MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg2L2FhYmIw My0yYWM4LTQwNjUtYWY4Yy00N2VmMmE5OGIyMmQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODYvYWFiYjAz LTJhYzgtNDA2NS1hZjhjLTQ3ZWYyYTk4YjIyZC8xL0p6YkxjanJ0MVZyc05QUUF0 MnpFWjR6TG9iby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDEGCCsGAQUF BwEHAQH/BCIwIDAeBAIAATAYAwQCUR/IAwQAW8efAwQAW+uMAwQAwSWSMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwCt6TANBgkqhkiG9w0BAQsFAAOCAQEAn+wDzob1 QIzCPFDZSuq1uBHvrUKgmRbYpBAfiESC4yHuRD01+g1IRsJg2VC5igel92fKOW0I lhmJsO6pKy0EWZHrwukSDaeUu2KW9+r0xKe+r0RWP5SVobBRuCdsZ6CxdjEblRjR LpEoAOcjJywMjAXOWl/xOtuV5x1TRYZqYNcnInPE8IS5L1UcgZcUL7mDENmLqa81 bRq8IOPoi8iMj2HQQaQNHEf8Ndt9ZqxzezZNFGE0fhzZbEOzvtd90TX882bsx2Xx 13kFm7tkiHoCb3W4kbGiIEfgGJrarZf+gRY6nKtbxF8ds3goS1FxsqVXa8g76dim nuVjcPRVhunmKw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:59:15 2025 by rpki-client