This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jDTik43WiEm7QG6et5yJPmwSx4o.cer File: jDTik43WiEm7QG6et5yJPmwSx4o.cer (raw, json) Hash identifier: 8AwyPTwuunWOcIrtILdUJynqJyOZoBSzVxHl5rmPwC0= Subject key identifier: 8C:34:E2:93:8D:D6:88:49:BB:40:6E:9E:B7:9C:89:3E:6C:12:C7:8A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B359051EAF3642D2C8E9C446F81D518 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:17:46 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.237.200.0/22 IP: 2a03:e4c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:90:51:ea:f3:64:2d:2c:8e:9c:44:6f:81:d5:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8c34e2938dd68849bb406e9eb79c893e6c12c78a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:18:b0:a7:03:8e:5a:2e:77:f0:19:7e:59:52: 49:cf:36:25:04:cc:1a:40:27:b4:c1:10:17:02:8a: 10:ec:d4:af:9a:76:ce:cb:7b:b5:53:e5:88:46:5c: 3f:21:ca:b7:03:17:f3:06:25:b2:e8:a9:4a:04:4d: 5b:bf:58:87:c3:a4:5b:b3:00:64:5b:c0:f4:82:d8: 9a:7f:22:27:4b:a5:04:ee:c9:c5:3c:d1:08:d3:5b: a2:6d:48:28:25:b5:a1:d1:44:b5:15:3f:9f:bc:63: d8:5e:3b:3d:82:84:98:04:14:5c:fc:19:98:5c:b7: 77:c6:57:84:06:5d:f8:10:29:d4:61:6a:5c:d7:dc: 65:b4:40:cd:79:a8:f4:18:a8:13:d4:f7:a2:a2:e9: b6:75:53:5c:97:ef:66:a7:e7:74:5c:93:d1:01:91: ed:13:a0:09:55:57:7a:dc:7f:fc:b8:d3:3a:e3:11: 9c:f9:ab:1e:f4:e2:ed:40:57:83:6c:bf:4e:29:45: 2d:95:d6:cd:d4:e1:ec:38:09:d6:46:be:cf:44:e2: de:91:69:25:04:18:64:22:0d:1d:9f:75:a0:77:02: 92:24:b6:6e:2c:e8:0b:ff:9c:af:48:49:20:3f:08: c2:f3:85:5d:b8:ef:a2:d2:f4:09:f8:d7:37:ad:be: 67:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:34:E2:93:8D:D6:88:49:BB:40:6E:9E:B7:9C:89:3E:6C:12:C7:8A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.237.200.0/22 IPv6: 2a03:e4c0::/29 Signature Algorithm: sha256WithRSAEncryption 12:57:e3:5a:9a:49:5a:dc:18:c4:e5:6c:46:a4:96:61:7f:6d: 82:ea:f4:3c:c8:fc:3d:19:3c:52:fc:66:07:0a:0c:b8:12:24: de:19:a0:b4:2c:38:6a:06:d5:3a:08:0b:61:83:6a:97:cd:ff: ae:29:5f:fd:a7:c6:b0:ae:04:a7:fa:fb:8f:e5:d0:91:ab:2d: 27:0c:74:8f:fc:d9:ee:16:9f:ff:6a:f1:47:e7:d5:a2:54:e4: 93:4a:3f:c6:de:39:e4:67:b0:d7:bf:55:5b:fe:30:a9:29:94: 4f:48:d0:6d:e5:f8:3d:98:93:29:26:c4:fb:23:3e:11:fc:9f: a3:93:7a:e5:95:32:89:81:8d:ea:12:e1:86:a1:5f:2c:d2:9d: 3b:2e:31:c1:ee:0e:db:a8:dd:b9:63:45:3c:6f:2d:dd:24:76: fe:2a:35:98:97:84:42:9b:d6:56:e7:f0:a0:19:f5:48:ce:04: 21:b5:e4:1e:ac:f5:92:48:39:ed:90:d0:6f:f9:53:3b:3b:98: 01:43:19:32:ca:ec:ff:ba:fc:0a:b6:88:b7:9f:27:71:64:4f: f3:d6:72:8e:d5:d5:ca:78:8b:7b:8b:99:68:64:82:ed:bb:c2: 14:c0:d1:1a:bf:4b:7f:60:86:47:79:37:1c:f1:58:d3:22:1c: 42:5a:71:b0 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt7NZBR6vNkLSyOnERvgdUYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YzM0ZTI5MzhkZDY4ODQ5YmI0MDZlOWViNzljODkzZTZjMTJjNzhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBiwpwOOWi538Bl+WVJJzzYlBMwa QCe0wRAXAooQ7NSvmnbOy3u1U+WIRlw/Icq3AxfzBiWy6KlKBE1bv1iHw6RbswBk W8D0gtiafyInS6UE7snFPNEI01uibUgoJbWh0US1FT+fvGPYXjs9goSYBBRc/BmY XLd3xleEBl34ECnUYWpc19xltEDNeaj0GKgT1Peioum2dVNcl+9mp+d0XJPRAZHt E6AJVVd63H/8uNM64xGc+ase9OLtQFeDbL9OKUUtldbN1OHsOAnWRr7PROLekWkl BBhkIg0dn3WgdwKSJLZuLOgL/5yvSEkgPwjC84VduO+i0vQJ+Nc3rb5nXQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFIw04pON1ohJu0BunreciT5sEseKMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E0LzMyMDc5 Ny1iODEwLTRmOGUtOGU3Yy04M2MzOGI3Nzc0NzgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTQvMzIwNzk3 LWI4MTAtNGY4ZS04ZTdjLTgzYzM4Yjc3NzQ3OC8xL2pEVGlrNDNXaUVtN1FHNmV0 NXlKUG13U3g0by5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCue3IMA0EAgACMAcDBQMqA+TAMA0GCSqGSIb3 DQEBCwUAA4IBAQASV+Namkla3BjE5WxGpJZhf22C6vQ8yPw9GTxS/GYHCgy4EiTe GaC0LDhqBtU6CAthg2qXzf+uKV/9p8awrgSn+vuP5dCRqy0nDHSP/NnuFp//avFH 59WiVOSTSj/G3jnkZ7DXv1Vb/jCpKZRPSNBt5fg9mJMpJsT7Iz4R/J+jk3rllTKJ gY3qEuGGoV8s0p07LjHB7g7bqN25Y0U8by3dJHb+KjWYl4RCm9ZW5/CgGfVIzgQh teQerPWSSDntkNBv+VM7O5gBQxkyyuz/uvwKtoi3nydxZE/z1nKO1dXKeIt7i5lo ZILtu8IUwNEav0t/YIZHeTcc8VjTIhxCWnGw -----END CERTIFICATE-----Generated at Sun Jan 25 23:35:00 2026 by rpki-client