This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer File: jRrIPuOj-WjWatL99GFue7Hk0dc.cer (raw, json) Hash identifier: vGYWIIMx9SeAabQJgbL4VBwL1Xrx8W0KwgOANe/GNJA= Subject key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7910555E2DCD745A0883AC96E1788EFA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:17:52 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 62.233.59.0/24 IP: 91.225.224.0/22 IP: 185.164.175.0/24 IP: 185.227.7.0/24 IP: 188.191.96.0/20 IP: 193.3.20.0/24 IP: 2a0f:a100::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:55:5e:2d:cd:74:5a:08:83:ac:96:e1:78:8e:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:de:f4:7e:da:c1:15:97:3e:e8:58:95:1d:80: 99:8d:de:26:a5:a1:51:9d:bd:87:3d:e6:7a:d2:8a: ea:70:bf:42:8e:8a:15:ef:72:00:1d:d7:8f:ba:be: 7c:bb:c9:dc:c3:68:93:84:8e:61:51:ce:b6:b8:97: 78:ae:79:1a:c7:6e:8a:c4:52:bd:72:01:c2:ca:14: 92:1f:af:d6:9d:3a:e1:a3:7b:be:ba:5c:02:54:5c: 57:12:b1:d9:4a:28:9d:c5:e6:bd:07:38:64:db:3b: 38:f8:71:67:30:1f:d1:a5:74:fd:6e:c9:6a:c2:ca: c9:a4:0e:d4:78:1b:96:17:af:2c:53:53:4e:f1:c1: 78:a8:1a:1d:48:88:88:63:fe:e4:99:5d:2a:40:57: 00:ed:27:a8:5a:8e:8e:9d:72:b0:de:0d:19:6c:66: e7:2e:7c:64:bc:fd:2a:e3:d8:21:e3:59:a7:ba:e7: 6f:b4:c3:25:9c:e6:bd:4b:83:6b:19:5b:61:b2:40: 9a:56:40:0e:06:c8:92:7e:dc:1f:94:6b:47:e7:ec: f1:88:b2:07:70:b4:e3:7d:a8:cc:1e:82:b1:e7:97: 5a:e2:7f:30:7c:65:91:c8:6c:ea:dc:7a:21:ff:ba: 93:a6:10:dd:b8:07:c5:1d:8c:cb:d0:0b:4a:9e:57: a9:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.233.59.0/24 91.225.224.0/22 185.164.175.0/24 185.227.7.0/24 188.191.96.0/20 193.3.20.0/24 IPv6: 2a0f:a100::/29 Signature Algorithm: sha256WithRSAEncryption 95:7c:54:62:36:66:95:63:10:5b:1a:30:66:e8:1b:59:e4:7e: 8b:ab:ab:53:6e:c5:c0:8d:3b:99:2f:af:8d:f3:6f:5c:29:af: 86:a6:2e:c7:68:ac:ea:94:a2:08:76:8b:b8:e9:18:03:5d:5c: 6f:75:47:d0:79:82:b9:22:42:29:a9:0b:2c:fc:30:53:c6:2d: 33:48:2a:e1:5d:7e:62:a9:5d:5f:8c:47:00:cb:9f:45:f8:80: 4e:c9:22:6b:25:03:6d:33:5b:7b:ab:d4:1d:27:e3:4e:42:76: 3c:21:2d:9c:8e:1f:45:92:92:3f:7c:7a:f9:ff:ca:4d:96:c3: 2b:3a:2f:14:c9:af:10:a3:8f:73:d5:07:e5:58:8d:b5:d2:f2: 40:f5:8e:5d:c8:3a:48:10:a4:89:ad:d2:02:7c:bb:3e:83:69: 4f:a5:7a:7c:5a:28:5c:af:84:27:b7:6b:a8:02:db:7c:be:24: 26:07:78:de:30:70:17:cb:fd:cb:e9:e6:a1:2f:34:7d:8e:1d: c9:32:85:c8:99:cb:d0:9f:16:a7:07:44:23:14:74:14:da:4d: e8:f5:1d:9f:04:36:b2:86:1f:91:f9:9d:fa:52:82:64:c2:85: 4e:93:db:ff:63:a8:ae:ff:f1:3b:83:f5:c7:2c:ea:b0:6d:43: c2:0a:49:e7 -----BEGIN CERTIFICATE----- MIIFpTCCBI2gAwIBAgISAZt5EFVeLc10WgiDrJbheI76MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZDFhYzgzZWUzYTNmOTY4ZDY2YWQyZmRmNDYxNmU3YmIxZTRkMWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjt70ftrBFZc+6FiVHYCZjd4mpaFR nb2HPeZ60orqcL9CjooV73IAHdePur58u8ncw2iThI5hUc62uJd4rnkax26KxFK9 cgHCyhSSH6/WnTrho3u+ulwCVFxXErHZSiidxea9Bzhk2zs4+HFnMB/RpXT9bslq wsrJpA7UeBuWF68sU1NO8cF4qBodSIiIY/7kmV0qQFcA7SeoWo6OnXKw3g0ZbGbn LnxkvP0q49gh41mnuudvtMMlnOa9S4NrGVthskCaVkAOBsiSftwflGtH5+zxiLIH cLTjfajMHoKx55da4n8wfGWRyGzq3Hoh/7qTphDduAfFHYzL0AtKnlepZwIDAQAB o4ICsTCCAq0wHQYDVR0OBBYEFI0ayD7jo/lo1mrS/fRhbnux5NHXMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzViLzRhYmYz Zi0xNThmLTRmNjItYTllYi1kZGY1NjdlZGVkMDMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWIvNGFiZjNm LTE1OGYtNGY2Mi1hOWViLWRkZjU2N2VkZWQwMy8xL2pScklQdU9qLVdqV2F0TDk5 R0Z1ZTdIazBkYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEwGCCsGAQUF BwEHAQH/BD0wOzAqBAIAATAkAwQAPuk7AwQCW+HgAwQAuaSvAwQAueMHAwQEvL9g AwQAwQMUMA0EAgACMAcDBQMqD6EAMA0GCSqGSIb3DQEBCwUAA4IBAQCVfFRiNmaV YxBbGjBm6BtZ5H6Lq6tTbsXAjTuZL6+N829cKa+Gpi7HaKzqlKIIdou46RgDXVxv dUfQeYK5IkIpqQss/DBTxi0zSCrhXX5iqV1fjEcAy59F+IBOySJrJQNtM1t7q9Qd J+NOQnY8IS2cjh9FkpI/fHr5/8pNlsMrOi8Uya8Qo49z1QflWI210vJA9Y5dyDpI EKSJrdICfLs+g2lPpXp8Wihcr4Qnt2uoAtt8viQmB3jeMHAXy/3L6eahLzR9jh3J MoXImcvQnxanB0QjFHQU2k3o9R2fBDayhh+R+Z36UoJkwoVOk9v/Y6iu//E7g/XH LOqwbUPCCknn -----END CERTIFICATE-----Generated at Sun Jan 25 12:11:18 2026 by rpki-client