This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jJbGavMxyYW4WdQDs2l0wGMuHvI.cer File: jJbGavMxyYW4WdQDs2l0wGMuHvI.cer (raw, json) Hash identifier: /c4K5dA8oEeOkb272jCZEkGsUYcA3EAwdoEz10WSpNo= Subject key identifier: 8C:96:C6:6A:F3:31:C9:85:B8:59:D4:03:B3:69:74:C0:63:2E:1E:F2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5AE287A79E10F27D2FA8CFC1876016 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:18:55 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.233.67.0/24 IP: 188.241.52.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:e2:87:a7:9e:10:f2:7d:2f:a8:cf:c1:87:60:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8c96c66af331c985b859d403b36974c0632e1ef2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:29:fd:91:b6:eb:15:11:7f:bd:4a:c3:83:b6: 78:ef:fe:02:52:8d:18:8d:71:87:09:1b:39:64:8e: aa:58:70:b4:52:90:5d:f0:9c:77:03:fc:f0:f2:cc: 58:ca:5f:27:f9:85:b1:81:39:e3:9d:db:53:61:0b: b6:ec:84:09:4d:71:85:88:73:04:24:78:28:7b:70: 7c:d6:85:ba:a4:77:09:78:e2:96:d5:45:c2:72:4d: 87:66:5f:d0:fa:02:b8:e0:78:80:95:cc:6b:b2:0d: 16:a8:94:f7:d6:ad:4d:05:d5:97:c6:ab:a3:7e:a6: 36:06:9e:f4:e8:63:82:61:bf:bc:1d:5a:3b:f2:3f: 22:24:57:3d:31:02:ed:5e:c6:ff:56:99:b3:df:e9: a9:5b:e3:9e:c6:7f:37:a5:e7:aa:0e:6d:82:1f:3e: 67:6f:43:b4:81:88:c2:e8:c2:b4:3a:8b:0f:ff:73: 53:ae:b3:ce:66:a7:e9:69:78:fe:60:d5:d1:3c:3c: ca:73:4e:f8:cb:bc:03:90:7d:32:22:51:5c:b1:28: 18:3a:42:33:db:e3:e6:51:7f:6a:fc:98:59:c6:74: db:2d:36:20:80:ef:91:8f:a6:52:df:21:d2:58:d5: 88:01:1d:4c:d7:a3:de:65:e5:3f:d9:4e:69:03:cd: ac:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:96:C6:6A:F3:31:C9:85:B8:59:D4:03:B3:69:74:C0:63:2E:1E:F2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.233.67.0/24 188.241.52.0/24 Signature Algorithm: sha256WithRSAEncryption 8e:e3:14:b6:b2:92:ca:b2:e1:c9:2a:16:70:e9:fa:fc:38:a0: 3a:22:7a:da:be:e8:4b:da:12:2d:f3:ac:89:5d:6c:be:28:ea: 24:54:52:d6:cd:5e:0d:90:28:8f:c2:aa:2a:6e:62:7d:03:23: be:77:32:ce:b3:b8:a9:fc:7f:8d:5a:26:d2:79:3b:15:92:ed: 79:8f:5b:12:b1:4b:2b:3b:89:26:e4:bb:cc:53:70:1b:0d:2a: d6:41:31:a0:32:4d:86:de:38:64:04:38:10:a7:5d:e6:af:61: 43:8a:f6:82:86:70:10:58:73:37:3d:64:4c:4d:77:47:65:f1: 56:3f:fb:59:46:62:1b:d3:11:8b:e2:1c:e0:4e:31:ea:f0:fb: 78:bb:96:b7:76:0c:97:16:17:2e:a9:36:9f:64:02:fc:25:45: 17:6c:d2:dc:f9:a2:f2:72:32:1b:04:c9:ca:05:91:7a:13:38: 97:4d:b8:81:43:f9:62:2a:96:9a:05:ee:fd:db:9a:39:2c:dd: 7b:3f:ab:35:b0:9f:af:02:2b:e2:f5:ba:e5:63:88:14:54:4f: 47:45:a9:bf:4e:8f:10:e6:a4:35:e0:6c:fb:93:1c:04:e4:d7: 6d:91:b8:25:25:ba:58:34:3e:38:7d:78:5c:76:67:cf:3a:3f: 74:fd:21:95 -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgISAZt6WuKHp54Q8n0vqM/Bh2AWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Yzk2YzY2YWYzMzFjOTg1Yjg1OWQ0MDNiMzY5NzRjMDYzMmUxZWYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCn9kbbrFRF/vUrDg7Z47/4CUo0Y jXGHCRs5ZI6qWHC0UpBd8Jx3A/zw8sxYyl8n+YWxgTnjndtTYQu27IQJTXGFiHME JHgoe3B81oW6pHcJeOKW1UXCck2HZl/Q+gK44HiAlcxrsg0WqJT31q1NBdWXxquj fqY2Bp706GOCYb+8HVo78j8iJFc9MQLtXsb/Vpmz3+mpW+Oexn83peeqDm2CHz5n b0O0gYjC6MK0OosP/3NTrrPOZqfpaXj+YNXRPDzKc074y7wDkH0yIlFcsSgYOkIz 2+PmUX9q/JhZxnTbLTYggO+Rj6ZS3yHSWNWIAR1M16PeZeU/2U5pA82s0QIDAQAB o4ICijCCAoYwHQYDVR0OBBYEFIyWxmrzMcmFuFnUA7NpdMBjLh7yMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU0Lzk3ZTA1 Ny0wZjYwLTRhYWYtOWE0OC04M2E0NDMxMGE5NjQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTQvOTdlMDU3 LTBmNjAtNGFhZi05YTQ4LTgzYTQ0MzEwYTk2NC8xL2pKYkdhdk14eVlXNFdkUURz Mmwwd0dNdUh2SS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQAW+lDAwQAvPE0MA0GCSqGSIb3DQEBCwUAA4IB AQCO4xS2spLKsuHJKhZw6fr8OKA6InravuhL2hIt86yJXWy+KOokVFLWzV4NkCiP wqoqbmJ9AyO+dzLOs7ip/H+NWibSeTsVku15j1sSsUsrO4km5LvMU3AbDSrWQTGg Mk2G3jhkBDgQp13mr2FDivaChnAQWHM3PWRMTXdHZfFWP/tZRmIb0xGL4hzgTjHq 8Pt4u5a3dgyXFhcuqTafZAL8JUUXbNLc+aLycjIbBMnKBZF6EziXTbiBQ/liKpaa Be7925o5LN17P6s1sJ+vAivi9brlY4gUVE9HRam/To8Q5qQ14Gz7kxwE5Ndtkbgl JbpYND44fXhcdmfPOj90/SGV -----END CERTIFICATE-----Generated at Sun Jan 25 12:30:12 2026 by rpki-client