This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.cer File: j9Jq1vkbpEcoFLrkhKjfH2NMM0E.cer (raw, json) Hash identifier: jh1G3C3k+zBd16nYlnfnne8P0FLFkieF1bgxPDtV2Hw= Subject key identifier: 8F:D2:6A:D6:F9:1B:A4:47:28:14:BA:E4:84:A8:DF:1F:63:4C:33:41 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA3B9D94837CF5ECD6F43F3D23409E7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/17/cdad8f-b919-45d1-af18-63742d19a012/1/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/17/cdad8f-b919-45d1-af18-63742d19a012/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:18:06 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 200019 IP: 176.123.0.0 -- 176.123.11.255 IP: 2001:678:6d4::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:b9:d9:48:37:cf:5e:cd:6f:43:f3:d2:34:09:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8fd26ad6f91ba4472814bae484a8df1f634c3341 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:15:8f:d5:f7:58:d3:ea:80:27:46:ad:ad:86: 6b:77:c3:a3:2e:72:b1:65:2d:17:10:b6:18:cb:ac: e1:81:05:e9:01:51:3c:c1:66:73:e1:be:50:b4:8a: bb:7e:c5:5e:30:e1:a8:8c:44:d0:c6:32:ff:bf:99: bd:1e:45:a2:92:f6:96:d8:da:6e:46:0d:8b:d9:d7: 7c:90:c5:b7:f3:f7:d9:df:27:d4:05:36:ac:75:b1: d7:9a:8f:af:02:55:a0:a9:e3:ee:76:59:e2:f3:eb: 37:0e:a6:d3:ef:7a:f7:77:4c:c3:88:96:2a:55:7a: f4:c6:38:80:cf:06:69:4c:a4:1f:cd:bd:57:52:a1: 97:04:ec:8a:28:31:6b:3e:5c:07:24:c5:ca:35:af: 6d:3b:bd:a3:02:dc:b0:b0:73:36:ab:2d:6a:ed:1f: 3b:34:9a:ab:23:c7:fd:42:24:40:3b:53:51:ab:8f: 83:2c:38:b7:4c:ac:d9:f6:1a:a6:86:ea:ad:bc:c1: 8b:06:63:d4:5c:31:71:d8:50:52:a2:a8:79:76:d6: 04:55:15:5c:11:00:37:89:ab:64:d2:57:d5:73:44: 23:2c:a5:56:fc:6e:69:28:34:f8:ab:28:19:3f:ae: a7:4a:5c:f7:73:b9:4b:54:cf:2f:de:8e:1b:23:7a: b2:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:D2:6A:D6:F9:1B:A4:47:28:14:BA:E4:84:A8:DF:1F:63:4C:33:41 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cdad8f-b919-45d1-af18-63742d19a012/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cdad8f-b919-45d1-af18-63742d19a012/1/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.123.0.0-176.123.11.255 IPv6: 2001:678:6d4::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 200019 Signature Algorithm: sha256WithRSAEncryption 78:17:3d:65:11:c0:7f:5b:05:0e:7f:39:48:2c:4c:e6:9e:b9: 1f:c8:4e:65:11:b5:5c:20:92:66:ca:b1:33:d1:a5:a1:c4:77: 8a:b8:17:b6:e8:ca:e6:91:fb:ea:8c:a7:ad:a6:81:e5:94:b0: ca:60:a6:4c:d9:92:74:80:6b:04:aa:f5:cd:2c:5e:1c:4c:fb: 0c:68:52:fa:ca:04:2f:64:0a:24:80:d2:3a:ea:ba:20:55:fc: 21:90:49:64:be:4e:68:7a:40:6e:05:10:16:5e:be:d5:15:60: 88:31:88:0d:b9:3f:67:17:c3:01:55:62:70:86:51:65:b2:83: eb:9c:65:b5:61:b4:71:b5:0c:e3:af:b4:33:4c:aa:cf:3c:a0: 0a:dd:e3:e3:eb:0a:2c:03:78:cb:3d:f0:04:97:96:1f:38:b7: b2:aa:7e:12:73:dd:4f:68:db:82:41:fd:2f:f2:e1:aa:42:1e: 69:26:65:51:1a:5c:64:2e:58:2a:c0:0b:91:8f:ad:a9:0e:3b: cd:de:6a:a5:e3:9a:50:bc:75:8b:43:86:f1:56:22:60:d0:45: a1:57:fb:a2:c7:16:26:1c:1c:e5:fb:ec:5e:73:e9:e5:8e:cd: fe:24:ae:40:00:26:c7:51:d3:9c:62:09:3b:c9:c7:44:3d:e1: 1e:b9:10:ff -----BEGIN CERTIFICATE----- MIIFrDCCBJSgAwIBAgISAZt7o7nZSDfPXs1vQ/PSNAnnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZmQyNmFkNmY5MWJhNDQ3MjgxNGJhZTQ4NGE4ZGYxZjYzNGMzMzQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBWP1fdY0+qAJ0atrYZrd8OjLnKx ZS0XELYYy6zhgQXpAVE8wWZz4b5QtIq7fsVeMOGojETQxjL/v5m9HkWikvaW2Npu Rg2L2dd8kMW38/fZ3yfUBTasdbHXmo+vAlWgqePudlni8+s3DqbT73r3d0zDiJYq VXr0xjiAzwZpTKQfzb1XUqGXBOyKKDFrPlwHJMXKNa9tO72jAtywsHM2qy1q7R87 NJqrI8f9QiRAO1NRq4+DLDi3TKzZ9hqmhuqtvMGLBmPUXDFx2FBSoqh5dtYEVRVc EQA3iatk0lfVc0QjLKVW/G5pKDT4qygZP66nSlz3c7lLVM8v3o4bI3qyuwIDAQAB o4ICuDCCArQwHQYDVR0OBBYEFI/Satb5G6RHKBS65ISo3x9jTDNBMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE3L2NkYWQ4 Zi1iOTE5LTQ1ZDEtYWYxOC02Mzc0MmQxOWEwMTIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTcvY2RhZDhm LWI5MTktNDVkMS1hZjE4LTYzNzQyZDE5YTAxMi8xL2o5SnExdmticEVjb0ZMcmto S2pmSDJOTU0wRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDcGCCsGAQUF BwEHAQH/BCgwJjATBAIAATANMAsDAwCwewMEArB7CDAPBAIAAjAJAwcAIAEGeAbU MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMNUzANBgkqhkiG9w0BAQsFAAOCAQEA eBc9ZRHAf1sFDn85SCxM5p65H8hOZRG1XCCSZsqxM9GlocR3irgXtujK5pH76oyn raaB5ZSwymCmTNmSdIBrBKr1zSxeHEz7DGhS+soEL2QKJIDSOuq6IFX8IZBJZL5O aHpAbgUQFl6+1RVgiDGIDbk/ZxfDAVVicIZRZbKD65xltWG0cbUM46+0M0yqzzyg Ct3j4+sKLAN4yz3wBJeWHzi3sqp+EnPdT2jbgkH9L/LhqkIeaSZlURpcZC5YKsAL kY+tqQ47zd5qpeOaULx1i0OG8VYiYNBFoVf7oscWJhwc5fvsXnPp5Y7N/iSuQAAm x1HTnGIJO8nHRD3hHrkQ/w== -----END CERTIFICATE-----Generated at Sun Jan 25 23:35:28 2026 by rpki-client