This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/j5h_qG-uztjKekRir38AXqsneag.cer File: j5h_qG-uztjKekRir38AXqsneag.cer (raw, json) Hash identifier: DOv7ON/oHzJ0Yre0Na9BFjpauN/08KwjsR+0+KEMlas= Subject key identifier: 8F:98:7F:A8:6F:AE:CE:D8:CA:7A:44:62:AF:7F:00:5E:AB:27:79:A8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEE2172940CA0CC4CDBA84F366121A7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:59 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.223.102.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:21:72:94:0c:a0:cc:4c:db:a8:4f:36:61:21:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8f987fa86faeced8ca7a4462af7f005eab2779a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:9b:96:42:b6:de:d9:af:1d:c3:cb:a9:bb:c6: 75:b0:49:c3:fe:38:e8:17:2c:7f:b1:71:fb:56:33: 5b:39:97:3c:2d:5c:25:8a:4e:8b:fd:bf:74:9d:ee: f2:40:0e:0a:44:fd:19:b9:3e:97:fe:f9:4b:3f:c1: 55:bd:ca:3a:aa:24:88:a7:93:3c:9c:51:23:5d:09: 5a:99:55:12:9a:a4:15:45:c4:86:97:cb:d3:28:f7: 16:e7:aa:b3:2d:f1:26:ef:1e:de:c4:81:6b:55:08: 1c:76:bf:b0:cb:c2:c3:91:6a:bd:45:cc:99:b0:62: db:6f:40:64:55:3b:f1:96:4a:dd:1c:49:4a:0f:c8: 14:b7:6a:6f:95:fb:27:f6:5d:54:e8:5c:92:d6:e8: 90:89:4b:5c:c8:fe:04:09:cf:b6:c3:06:ed:16:eb: 0e:a6:c5:15:05:83:f0:0e:20:61:53:0d:67:0f:cc: 54:b7:b6:15:35:4a:16:f1:e5:23:3e:1e:59:2f:0f: 82:b7:d6:d0:03:0b:40:1a:43:fe:89:6b:23:8b:e3: 72:47:29:ad:e8:9c:23:f8:93:40:85:25:31:7b:d1: 02:00:ed:2b:62:90:11:2f:1c:e6:6a:14:36:aa:7a: 39:c1:c1:6b:7d:ae:bb:5d:26:53:b4:59:0d:25:cc: b6:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:98:7F:A8:6F:AE:CE:D8:CA:7A:44:62:AF:7F:00:5E:AB:27:79:A8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.223.102.0/24 Signature Algorithm: sha256WithRSAEncryption 24:9c:50:3b:30:6d:99:d2:77:7c:27:ee:a5:3b:82:17:07:ea: 5d:f6:96:d2:a3:39:d4:66:2c:7f:bc:11:04:15:dd:24:fa:80: a6:44:22:65:ea:a8:83:56:9f:64:1c:54:9f:55:40:41:21:6a: 3b:34:a0:96:7d:a7:4c:a7:87:c1:c8:1f:e6:29:f0:04:3d:57: 4a:98:dc:a0:73:a5:15:bd:1d:ac:4f:ab:6b:bb:b2:2a:b8:d2: 78:76:33:a9:48:73:03:b0:c6:cf:17:74:d4:a7:08:4f:1d:8a: 3b:53:53:33:5c:d9:62:96:10:59:64:f6:ed:58:0c:5b:c3:45: 07:f2:98:73:e6:87:94:ce:c3:1f:78:c6:dd:58:02:6c:b4:41: 47:f0:f6:8b:37:f5:b4:44:4e:70:0d:56:e5:04:dc:92:8e:e8: 04:45:4f:1b:b9:40:0f:53:66:e4:af:06:78:5f:79:f7:c5:04: ab:9c:cd:bc:1d:f5:40:a4:b9:e0:13:4c:33:f6:d6:60:bb:07: 3b:d8:8b:88:13:31:c3:d5:50:4f:ac:64:50:12:b4:8e:d0:8f: f1:8c:25:5d:93:fc:f7:e7:aa:4e:78:1e:03:b4:53:4d:eb:73: 68:b9:09:23:b7:cb:74:9f:a1:41:aa:61:f3:87:07:c5:30:f6: 9c:43:38:b3 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt87iFylAygzEzbqE82YSGnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Zjk4N2ZhODZmYWVjZWQ4Y2E3YTQ0NjJhZjdmMDA1ZWFiMjc3OWE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJuWQrbe2a8dw8upu8Z1sEnD/jjo Fyx/sXH7VjNbOZc8LVwlik6L/b90ne7yQA4KRP0ZuT6X/vlLP8FVvco6qiSIp5M8 nFEjXQlamVUSmqQVRcSGl8vTKPcW56qzLfEm7x7exIFrVQgcdr+wy8LDkWq9RcyZ sGLbb0BkVTvxlkrdHElKD8gUt2pvlfsn9l1U6FyS1uiQiUtcyP4ECc+2wwbtFusO psUVBYPwDiBhUw1nD8xUt7YVNUoW8eUjPh5ZLw+Ct9bQAwtAGkP+iWsji+NyRymt 6Jwj+JNAhSUxe9ECAO0rYpARLxzmahQ2qno5wcFrfa67XSZTtFkNJcy2CwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFI+Yf6hvrs7YynpEYq9/AF6rJ3moMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VkL2ZiNGM2 My1iZGIzLTRiODUtODJmMC02ZjZjNmM4MjE3ODEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWQvZmI0YzYz LWJkYjMtNGI4NS04MmYwLTZmNmM2YzgyMTc4MS8xL2o1aF9xRy11enRqS2VrUmly MzhBWHFzbmVhZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwd9mMA0GCSqGSIb3DQEBCwUAA4IBAQAknFA7 MG2Z0nd8J+6lO4IXB+pd9pbSoznUZix/vBEEFd0k+oCmRCJl6qiDVp9kHFSfVUBB IWo7NKCWfadMp4fByB/mKfAEPVdKmNygc6UVvR2sT6tru7IquNJ4djOpSHMDsMbP F3TUpwhPHYo7U1MzXNlilhBZZPbtWAxbw0UH8phz5oeUzsMfeMbdWAJstEFH8PaL N/W0RE5wDVblBNySjugERU8buUAPU2bkrwZ4X3n3xQSrnM28HfVApLngE0wz9tZg uwc72IuIEzHD1VBPrGRQErSO0I/xjCVdk/z356pOeB4DtFNN63NouQkjt8t0n6FB qmHzhwfFMPacQziz -----END CERTIFICATE-----Generated at Sun Jan 25 23:34:47 2026 by rpki-client