This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/itJAYD7G681i9y1G8dwAy34fCy4.cer File: itJAYD7G681i9y1G8dwAy34fCy4.cer (raw, json) Hash identifier: PflorOrEtBR+KcZPwzY/Em4Yyhm4o/L0Px741uGTN8g= Subject key identifier: 8A:D2:40:60:3E:C6:EB:CD:62:F7:2D:46:F1:DC:00:CB:7E:1F:0B:2E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B359D330E64BDC8C5342C7C04058B42 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:17:49 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 3330 AS: 21013 AS: 61108 IP: 62.249.64.0/18 IP: 80.243.160.0/20 IP: 85.31.0.0/19 IP: 88.218.52.0/22 IP: 185.91.80.0/22 IP: 185.92.100.0/22 IP: 185.163.50.0/24 IP: 185.226.40.0/22 IP: 193.186.161.0/24 IP: 194.112.128.0/17 IP: 212.52.192.0/19 IP: 2a02:5e0::/29 IP: 2a02:940::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:9d:33:0e:64:bd:c8:c5:34:2c:7c:04:05:8b:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8ad240603ec6ebcd62f72d46f1dc00cb7e1f0b2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c1:cd:59:6b:f3:87:b2:c8:2b:52:a7:82:45: c2:6a:67:ec:a4:a2:97:d2:10:01:51:80:72:03:55: 7d:d7:e6:a7:46:88:b6:b6:09:e7:fa:2d:b6:67:85: c3:38:6d:0b:13:a1:6d:c0:16:b5:0a:f3:94:bb:9f: 5c:56:97:80:60:b2:29:ae:2c:2c:10:2d:45:d4:a5: 1c:69:b5:24:54:8a:6e:4b:56:2a:6c:67:fb:b8:5f: b9:f6:f4:ac:a0:f7:73:a2:c0:f6:d5:6a:c3:81:0f: ac:1d:a5:17:4c:f6:a8:cf:24:cb:e8:84:dc:1e:19: 65:58:3c:54:34:d1:1a:05:6b:c9:8d:37:cb:94:94: 60:a5:4c:8a:cf:9e:89:eb:22:48:dc:bf:72:1a:6b: 32:98:8a:d8:03:f9:50:d6:34:2f:40:43:58:7c:76: 30:67:ae:2d:dd:c2:ac:3f:d6:ef:38:48:f5:1f:a2: cd:f9:05:44:51:ac:c1:31:c5:44:3c:6e:5d:57:3a: 64:28:6a:b4:f8:61:4c:7c:55:a9:a3:c2:d4:10:fd: d6:38:47:68:15:8e:04:c5:44:5f:60:f4:06:f8:29: 99:01:ab:99:35:31:40:8b:5a:28:1a:f3:30:fa:42: cc:e1:9f:dc:a3:71:0e:4f:a4:8e:1f:63:89:a0:fc: 15:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:D2:40:60:3E:C6:EB:CD:62:F7:2D:46:F1:DC:00:CB:7E:1F:0B:2E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.249.64.0/18 80.243.160.0/20 85.31.0.0/19 88.218.52.0/22 185.91.80.0/22 185.92.100.0/22 185.163.50.0/24 185.226.40.0/22 193.186.161.0/24 194.112.128.0/17 212.52.192.0/19 IPv6: 2a02:5e0::/29 2a02:940::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 3330 21013 61108 Signature Algorithm: sha256WithRSAEncryption 9b:39:08:61:df:2a:0a:0a:96:62:c7:d2:f6:6f:09:5b:1d:16: 51:f0:dc:bd:fc:df:08:7f:3b:47:5c:25:12:76:89:97:ce:63: 94:78:9a:db:04:2e:ee:3e:97:98:40:46:c2:d7:4e:d9:d2:1b: 83:08:fd:c7:d4:81:0e:c2:4c:2e:a4:c8:f0:19:ce:88:de:d9: 87:4a:dd:6f:7d:17:6a:41:74:ec:c1:ac:af:b2:aa:b4:c6:a6: 59:1c:f0:96:9b:db:fd:aa:e4:80:55:97:ec:8b:50:22:a3:46: 1d:85:26:22:5f:71:09:ca:c3:c3:bb:63:aa:ad:30:33:60:de: eb:44:b8:45:d2:bd:0d:9c:a6:f9:16:23:54:c0:ac:58:44:70: a7:0f:30:70:a7:b9:05:92:b1:c1:03:95:6c:95:65:2f:14:45: 6d:46:b6:57:c8:77:e0:32:4b:b4:8e:f2:fd:a0:fa:95:d6:20: 29:5e:21:d5:29:5e:c8:77:e8:fe:10:89:ee:6d:d9:81:9d:d1: cd:a2:da:26:c6:74:02:38:8b:da:89:04:d2:0c:e6:21:a5:84: 39:a5:46:fb:e7:89:18:0f:06:df:c8:e1:3a:08:e5:cb:42:e0: 23:1b:93:5f:59:58:6b:35:67:00:99:ee:b0:fb:d6:8a:94:a6: 0f:14:de:20 -----BEGIN CERTIFICATE----- MIIF7jCCBNagAwIBAgISAZt7NZ0zDmS9yMU0LHwEBYtCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YWQyNDA2MDNlYzZlYmNkNjJmNzJkNDZmMWRjMDBjYjdlMWYwYjJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8HNWWvzh7LIK1KngkXCamfspKKX 0hABUYByA1V91+anRoi2tgnn+i22Z4XDOG0LE6FtwBa1CvOUu59cVpeAYLIpriws EC1F1KUcabUkVIpuS1YqbGf7uF+59vSsoPdzosD21WrDgQ+sHaUXTPaozyTL6ITc HhllWDxUNNEaBWvJjTfLlJRgpUyKz56J6yJI3L9yGmsymIrYA/lQ1jQvQENYfHYw Z64t3cKsP9bvOEj1H6LN+QVEUazBMcVEPG5dVzpkKGq0+GFMfFWpo8LUEP3WOEdo FY4ExURfYPQG+CmZAauZNTFAi1ooGvMw+kLM4Z/co3EOT6SOH2OJoPwVQwIDAQAB o4IC+jCCAvYwHQYDVR0OBBYEFIrSQGA+xuvNYvctRvHcAMt+HwsuMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y3LzQyNTE0 OS05YzY4LTQxZmItODAzNS1kNzZjOGM3Mzk4NjEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjcvNDI1MTQ5 LTljNjgtNDFmYi04MDM1LWQ3NmM4YzczOTg2MS8xL2l0SkFZRDdHNjgxaTl5MUc4 ZHdBeTM0ZkN5NC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMHEGCCsGAQUF BwEHAQH/BGIwYDBIBAIAATBCAwQGPvlAAwQEUPOgAwQFVR8AAwQCWNo0AwQCuVtQ AwQCuVxkAwQAuaMyAwQCueIoAwQAwbqhAwQHwnCAAwQF1DTAMBQEAgACMA4DBQMq AgXgAwUDKgIJQDAiBggrBgEFBQcBCAEB/wQTMBGgDzANAgINAgICUhUCAwDutDAN BgkqhkiG9w0BAQsFAAOCAQEAmzkIYd8qCgqWYsfS9m8JWx0WUfDcvfzfCH87R1wl EnaJl85jlHia2wQu7j6XmEBGwtdO2dIbgwj9x9SBDsJMLqTI8BnOiN7Zh0rdb30X akF07MGsr7KqtMamWRzwlpvb/arkgFWX7ItQIqNGHYUmIl9xCcrDw7tjqq0wM2De 60S4RdK9DZym+RYjVMCsWERwpw8wcKe5BZKxwQOVbJVlLxRFbUa2V8h34DJLtI7y /aD6ldYgKV4h1SleyHfo/hCJ7m3ZgZ3RzaLaJsZ0AjiL2okE0gzmIaWEOaVG++eJ GA8G38jhOgjly0LgIxuTX1lYazVnAJnusPvWipSmDxTeIA== -----END CERTIFICATE-----Generated at Mon Jan 26 19:39:06 2026 by rpki-client