This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer File: j0znci-ZB12Uc4t-YQcEASaes9Y.cer (raw, json) Hash identifier: aYZBA+LJjAFO862cUb8PcyKAEUYEaPaNSUfBVAoWpJU= Subject key identifier: 8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B783CC09E011F2F39B14FE3C421207C33 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:26:46 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 62.192.172.0/22 IP: 77.83.252.0/22 IP: 85.209.16.0/22 IP: 185.181.0.0/22 IP: 193.163.127.0/24 IP: 212.102.114.0/24 IP: 2a06:fe00::/29 IP: 2a09:9f80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:3c:c0:9e:01:1f:2f:39:b1:4f:e3:c4:21:20:7c:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:26:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8f4ce7722f99075d94738b7e61070401269eb3d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ad:3c:58:db:88:1a:11:91:33:e7:cd:55:8e: 2d:88:5c:67:14:00:28:1d:c1:25:8b:37:39:c3:c3: fd:6f:64:54:90:7e:9d:b7:a8:b2:9f:70:9d:7d:1e: fe:fd:3c:ac:17:1c:b1:1a:c6:d4:61:07:19:b3:45: 99:1f:e9:9f:f1:2d:41:5e:ba:37:e7:82:83:15:8e: b0:bf:0d:ca:8b:b7:4b:06:ff:46:94:b3:36:57:a9: 97:f5:51:d9:76:11:6d:93:61:70:fc:92:c7:c5:e3: 45:d6:bf:3a:ea:94:6d:6b:6d:56:44:b4:58:21:dd: a9:af:ba:5a:13:44:e2:08:3d:0d:07:af:92:81:7d: 12:fe:42:d2:b5:86:8f:57:ec:b3:e5:9d:1f:c2:69: e4:43:24:45:69:66:a1:bb:ff:28:8f:3d:63:74:1b: ef:c1:f0:e6:64:3c:dd:21:75:97:90:4d:a5:98:f3: ca:31:73:8c:2c:02:82:b3:85:d7:a5:a0:d8:1d:79: a7:72:56:9d:f6:75:b7:fa:a0:81:cb:a9:da:1c:a8: aa:74:64:0f:e0:88:6f:f0:4f:76:41:5b:c3:96:87: a9:7e:64:b1:0c:72:72:75:c3:24:a7:56:3d:e6:0c: 13:9d:f3:be:cb:a0:52:30:57:0d:d2:fc:cc:20:41: c7:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.192.172.0/22 77.83.252.0/22 85.209.16.0/22 185.181.0.0/22 193.163.127.0/24 212.102.114.0/24 IPv6: 2a06:fe00::/29 2a09:9f80::/29 Signature Algorithm: sha256WithRSAEncryption 4b:1b:c1:17:1d:d6:e4:ba:86:de:7d:b8:93:94:0b:ff:ae:9e: 30:20:69:81:be:90:87:b2:29:2f:9d:fd:5a:1c:ba:33:e1:db: ad:65:52:39:98:03:54:b1:3c:4d:d7:1c:34:13:61:66:de:c8: cf:4d:b0:a8:2f:48:e5:43:09:c8:81:bd:d7:5a:4e:4c:54:0c: 7f:0d:59:2f:93:b4:96:3d:6a:be:6b:ab:cd:37:81:9a:c9:2b: 73:35:0f:d2:60:76:4f:1f:ac:c7:87:31:58:ed:d6:f2:4a:6c: a3:0a:0a:60:f6:f8:9a:89:e6:73:3c:3b:25:07:fe:40:ea:80: 5f:84:9b:de:33:7c:c8:ab:2a:5f:40:29:53:0e:d3:20:bf:a2: 62:d0:55:4d:a7:86:0e:7a:c3:f2:ab:8c:cc:0c:01:31:8a:3e: c6:1f:b7:e6:ec:76:0c:0b:ff:51:15:7e:44:ac:ed:fb:e7:4a: 7a:5a:6b:ba:2b:d0:b3:51:86:1c:7b:e4:c9:ab:68:bb:10:6e: ab:be:6c:77:6e:a5:29:64:1d:09:10:5e:a0:15:c7:de:0a:14: ed:34:67:79:c6:41:2c:57:e0:0c:0d:a0:43:d2:0c:25:68:4a: 8d:c7:9d:c3:e5:5e:96:d0:4d:dd:cd:2c:c2:c5:b2:21:85:8c: 31:f4:1d:84 -----BEGIN CERTIFICATE----- MIIFyDCCBLCgAwIBAgISAZt4PMCeAR8vObFP48QhIHwzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYyNjQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZjRjZTc3MjJmOTkwNzVkOTQ3MzhiN2U2MTA3MDQwMTI2OWViM2Q2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0a08WNuIGhGRM+fNVY4tiFxnFAAo HcElizc5w8P9b2RUkH6dt6iyn3CdfR7+/TysFxyxGsbUYQcZs0WZH+mf8S1BXro3 54KDFY6wvw3Ki7dLBv9GlLM2V6mX9VHZdhFtk2Fw/JLHxeNF1r866pRta21WRLRY Id2pr7paE0TiCD0NB6+SgX0S/kLStYaPV+yz5Z0fwmnkQyRFaWahu/8ojz1jdBvv wfDmZDzdIXWXkE2lmPPKMXOMLAKCs4XXpaDYHXmnclad9nW3+qCBy6naHKiqdGQP 4Ihv8E92QVvDloepfmSxDHJydcMkp1Y95gwTnfO+y6BSMFcN0vzMIEHHxQIDAQAB o4IC1DCCAtAwHQYDVR0OBBYEFI9M53IvmQddlHOLfmEHBAEmnrPWMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhOTc3 MTE1LTUxMTAtNDI1Ny05NGVmLTRkMmI0Mzg4NDA0MC8wLzCBiwYIKwYBBQUHMAqG f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWE5 NzcxMTUtNTExMC00MjU3LTk0ZWYtNGQyYjQzODg0MDQwLzAvOEY0Q0U3NzIyRjk5 MDc1RDk0NzM4QjdFNjEwNzA0MDEyNjlFQjNENi5tZnQwPAYIKwYBBQUHMA2GMGh0 dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjBTBggrBgEFBQcBBwEB/wREMEIwKgQCAAEwJAME Aj7ArAMEAk1T/AMEAlXREAMEArm1AAMEAMGjfwMEANRmcjAUBAIAAjAOAwUDKgb+ AAMFAyoJn4AwDQYJKoZIhvcNAQELBQADggEBAEsbwRcd1uS6ht59uJOUC/+unjAg aYG+kIeyKS+d/VocujPh261lUjmYA1SxPE3XHDQTYWbeyM9NsKgvSOVDCciBvdda TkxUDH8NWS+TtJY9ar5rq803gZrJK3M1D9Jgdk8frMeHMVjt1vJKbKMKCmD2+JqJ 5nM8OyUH/kDqgF+Em94zfMirKl9AKVMO0yC/omLQVU2nhg56w/KrjMwMATGKPsYf t+bsdgwL/1EVfkSs7fvnSnpaa7or0LNRhhx75MmraLsQbqu+bHdupSlkHQkQXqAV x94KFO00Z3nGQSxX4AwNoEPSDCVoSo3HncPlXpbQTd3NLMLFsiGFjDH0HYQ= -----END CERTIFICATE-----Generated at Sun Jan 25 09:20:00 2026 by rpki-client