This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jJ3M-eLzfrEHSWp6rxOJTsR243U.cer File: jJ3M-eLzfrEHSWp6rxOJTsR243U.cer (raw, json) Hash identifier: 3zcFd7K+e3YkLa0UCNk+x0XtS7FZW9YNRQF8dh2DR3w= Subject key identifier: 8C:9D:CC:F9:E2:F3:7E:B1:07:49:6A:7A:AF:13:89:4E:C4:76:E3:75 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7FF07E12B0A3FC942BAF975CD79064B5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c1/bd55ee-c7a6-41b8-bb31-6a8c3b676b57/1/jJ3M-eLzfrEHSWp6rxOJTsR243U.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c1/bd55ee-c7a6-41b8-bb31-6a8c3b676b57/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 18:20:25 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 188.64.16.0/21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f0:7e:12:b0:a3:fc:94:2b:af:97:5c:d7:90:64:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 18:20:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8c9dccf9e2f37eb107496a7aaf13894ec476e375 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:0c:cb:f5:be:6a:e0:76:9e:c8:c9:02:97:ae: 46:20:45:e3:08:15:2f:bc:ea:af:52:62:6c:7a:48: 34:6f:3e:d4:16:b1:47:46:b1:16:1c:34:d9:33:d1: d7:de:9a:95:26:ad:9d:49:44:1c:39:a7:0f:81:78: 97:7f:45:7f:0d:59:72:89:68:ba:cd:3d:57:d3:90: 05:54:f6:fe:cb:d1:a8:e4:87:e8:e0:2c:c9:8a:3b: 92:74:6e:11:98:1c:04:56:6e:08:4e:64:a7:89:99: 93:2f:f4:81:ec:80:68:7d:73:84:2f:da:a0:f6:8f: d9:ea:86:84:40:26:af:ed:05:aa:d2:1a:3b:c7:fa: 90:ff:3a:0d:e7:8d:37:36:60:f7:b7:f3:5d:31:a4: 7c:9d:6a:97:ea:3f:39:f1:04:f2:33:45:10:ae:31: f2:ef:29:30:5d:60:a1:b4:59:f1:1c:4d:86:36:63: f7:24:7f:5a:a9:e0:cf:a4:e1:b3:18:f7:a9:dd:1f: e3:59:8f:27:07:50:b9:46:ea:02:54:1a:55:d7:52: 89:94:5e:06:33:35:74:3e:f5:f9:ee:6b:de:83:ef: 2e:4d:97:81:30:84:ce:c9:c1:62:f5:96:ce:43:ab: ff:d9:7d:55:64:af:3e:71:a3:b1:c9:6d:a7:c4:0d: 94:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:9D:CC:F9:E2:F3:7E:B1:07:49:6A:7A:AF:13:89:4E:C4:76:E3:75 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/bd55ee-c7a6-41b8-bb31-6a8c3b676b57/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/bd55ee-c7a6-41b8-bb31-6a8c3b676b57/1/jJ3M-eLzfrEHSWp6rxOJTsR243U.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.64.16.0/21 Signature Algorithm: sha256WithRSAEncryption 9f:c2:70:1a:e6:d3:0b:a6:90:f5:ac:6c:3d:91:cb:eb:7e:62: 0a:07:f1:9b:76:d3:7a:02:06:98:ce:3c:31:40:c3:22:8c:e3: 3e:2c:24:21:5a:9c:06:a5:53:5b:4b:aa:94:34:9e:79:7c:94: 3b:a5:35:c8:13:79:c5:e1:d3:b7:bc:94:a9:3b:99:6d:8f:95: 5a:06:0b:07:72:e7:87:a2:a9:56:58:79:9f:10:11:8e:5b:2f: 72:63:ff:51:31:3f:2c:69:9b:3c:f9:9a:a9:18:e2:7b:37:5d: 1c:6f:77:a6:22:20:80:db:8a:12:20:2a:c0:bb:88:65:fc:a5: 5a:10:6d:5f:3f:c7:53:26:2f:fa:9a:18:eb:08:a7:e1:12:6a: 2b:82:23:1e:e5:2b:23:31:fb:c0:10:23:b6:1b:3c:5b:6e:56: 18:ea:b2:21:44:5f:cc:fc:be:96:9e:05:77:1c:17:49:a0:bc: 24:91:fd:73:12:8b:00:69:c2:45:dd:55:5d:9b:a8:58:e5:91: 66:b5:b0:02:ec:7b:3a:ab:e3:63:39:dd:7b:15:ad:c0:de:6e: 9d:99:77:9f:b2:01:0b:28:11:32:43:44:22:08:e8:2a:b8:9d: 03:7e:d9:52:82:4d:82:77:8f:ef:17:ca:f9:ce:ba:c6:a5:fd: f1:89:8b:0f -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt/8H4SsKP8lCuvl1zXkGS1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTgyMDI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YzlkY2NmOWUyZjM3ZWIxMDc0OTZhN2FhZjEzODk0ZWM0NzZlMzc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAzL9b5q4HaeyMkCl65GIEXjCBUv vOqvUmJsekg0bz7UFrFHRrEWHDTZM9HX3pqVJq2dSUQcOacPgXiXf0V/DVlyiWi6 zT1X05AFVPb+y9Go5Ifo4CzJijuSdG4RmBwEVm4ITmSniZmTL/SB7IBofXOEL9qg 9o/Z6oaEQCav7QWq0ho7x/qQ/zoN5403NmD3t/NdMaR8nWqX6j858QTyM0UQrjHy 7ykwXWChtFnxHE2GNmP3JH9aqeDPpOGzGPep3R/jWY8nB1C5RuoCVBpV11KJlF4G MzV0PvX57mveg+8uTZeBMITOycFi9ZbOQ6v/2X1VZK8+caOxyW2nxA2UVQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFIydzPni836xB0lqeq8TiU7EduN1MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2MxL2JkNTVl ZS1jN2E2LTQxYjgtYmIzMS02YThjM2I2NzZiNTcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzEvYmQ1NWVl LWM3YTYtNDFiOC1iYjMxLTZhOGMzYjY3NmI1Ny8xL2pKM00tZUx6ZnJFSFNXcDZy eE9KVHNSMjQzVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQDvEAQMA0GCSqGSIb3DQEBCwUAA4IBAQCfwnAa 5tMLppD1rGw9kcvrfmIKB/GbdtN6AgaYzjwxQMMijOM+LCQhWpwGpVNbS6qUNJ55 fJQ7pTXIE3nF4dO3vJSpO5ltj5VaBgsHcueHoqlWWHmfEBGOWy9yY/9RMT8saZs8 +ZqpGOJ7N10cb3emIiCA24oSICrAu4hl/KVaEG1fP8dTJi/6mhjrCKfhEmorgiMe 5SsjMfvAECO2GzxbblYY6rIhRF/M/L6WngV3HBdJoLwkkf1zEosAacJF3VVdm6hY 5ZFmtbAC7Hs6q+NjOd17Fa3A3m6dmXefsgELKBEyQ0QiCOgquJ0DftlSgk2Cd4/v F8r5zrrGpf3xiYsP -----END CERTIFICATE-----Generated at Sun Jan 25 16:44:11 2026 by rpki-client