This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jRvvcwUnquHs-PswhWWdb9_u15c.cer File: jRvvcwUnquHs-PswhWWdb9_u15c.cer (raw, json) Hash identifier: cnFvf+Hm+gqFKPw1RGF5MdnrrjysZh1AXFIFyinWHsc= Subject key identifier: 8D:1B:EF:73:05:27:AA:E1:EC:F8:FB:30:85:65:9D:6F:DF:EE:D7:97 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA737F7975CA54AE46A9F480E5350F4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4f/b716ad-ed04-4de4-b994-4aab2d68fa5a/1/jRvvcwUnquHs-PswhWWdb9_u15c.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4f/b716ad-ed04-4de4-b994-4aab2d68fa5a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:20:46 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 216285 IP: 194.153.116.0/24 IP: 2a14:4280::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:37:f7:97:5c:a5:4a:e4:6a:9f:48:0e:53:50:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:20:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8d1bef730527aae1ecf8fb3085659d6fdfeed797 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:71:e7:de:c1:78:59:1e:97:11:11:3b:58:d1: d1:48:b9:7a:1c:26:53:96:9c:b2:1a:84:a9:26:99: f7:73:25:06:b2:51:a3:9f:55:1c:5d:70:30:8b:f4: ce:8c:52:1a:01:80:09:83:c4:79:bf:bd:31:30:0d: 4b:8a:20:1b:f1:12:47:ff:24:27:4e:8b:6d:ab:0d: bd:33:37:a7:c7:9b:f5:ff:36:33:2b:06:a2:32:26: f6:34:4d:2a:46:f7:33:5a:67:e9:71:e9:d9:c5:11: ce:5b:17:fc:0e:50:e7:df:c8:c5:56:a4:db:93:77: 05:f2:0c:5b:d3:79:4b:30:a8:da:b7:30:15:27:7b: b6:54:6f:4d:37:a6:74:88:c1:1a:43:23:3c:f8:57: 67:a9:9a:f1:1a:00:6b:6b:59:07:41:01:69:4e:2d: ba:00:e2:54:4b:16:13:08:8b:64:ca:05:cb:a1:3e: 7d:30:86:4e:52:86:a8:77:ba:98:3d:f6:fa:9f:dd: 6e:fa:6d:5b:fc:94:32:b5:28:a5:24:3b:6e:a4:d3: e0:16:74:22:89:0a:e2:04:60:91:53:90:f9:47:62: 6b:2b:2d:aa:e9:d6:63:1e:f4:26:d3:67:6a:29:26: 43:2e:fe:93:87:a7:09:f9:0f:20:be:f5:3d:60:85: bd:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:1B:EF:73:05:27:AA:E1:EC:F8:FB:30:85:65:9D:6F:DF:EE:D7:97 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b716ad-ed04-4de4-b994-4aab2d68fa5a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b716ad-ed04-4de4-b994-4aab2d68fa5a/1/jRvvcwUnquHs-PswhWWdb9_u15c.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.153.116.0/24 IPv6: 2a14:4280::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 216285 Signature Algorithm: sha256WithRSAEncryption 4b:47:1e:ce:b9:c0:11:9a:a3:de:0a:dd:8c:a9:96:7e:76:57: ea:d9:7b:92:2c:df:c0:bb:a4:d7:ff:98:1e:58:66:9d:04:99: 65:ed:f6:b8:ea:02:3a:f4:f3:f2:f0:bc:d2:78:bf:09:fa:35: 94:7f:7e:51:81:88:3a:eb:d4:e7:62:dc:b7:50:26:46:11:38: 66:1d:d7:31:c9:24:89:ff:0b:ab:7b:e2:09:36:7c:be:2b:32: 20:3f:a6:a9:ad:0d:43:8e:14:38:92:55:c7:b5:8a:e0:fd:7b: 57:b1:48:8d:8f:c3:6a:8b:d9:c6:d7:99:45:ea:ff:f8:38:d3: 3c:f6:93:d1:17:8c:e7:a4:ba:bc:ad:13:06:75:b1:d7:47:85: 81:3e:91:92:80:5c:f4:9f:6e:f7:26:dc:01:f0:29:d1:c6:35: b4:aa:93:cf:b6:23:fa:5f:73:f1:f0:dd:36:eb:29:54:93:65: d6:ae:a9:92:90:ec:18:7a:26:c5:5c:7b:82:54:98:33:bf:79: 92:5f:3c:5d:41:b1:dd:c6:7c:c1:e8:a1:15:0d:43:c4:5f:e3: 3e:10:d7:23:96:8d:da:1c:97:52:6f:a7:69:67:11:3f:f9:05: 05:f5:6c:ae:ea:28:eb:b5:4a:26:ba:0f:e7:be:a5:d2:d7:da: 85:6a:3a:0b -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt+pzf3l1ylSuRqn0gOU1D0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIyMDQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZDFiZWY3MzA1MjdhYWUxZWNmOGZiMzA4NTY1OWQ2ZmRmZWVkNzk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHHn3sF4WR6XERE7WNHRSLl6HCZT lpyyGoSpJpn3cyUGslGjn1UcXXAwi/TOjFIaAYAJg8R5v70xMA1LiiAb8RJH/yQn Tottqw29Mzenx5v1/zYzKwaiMib2NE0qRvczWmfpcenZxRHOWxf8DlDn38jFVqTb k3cF8gxb03lLMKjatzAVJ3u2VG9NN6Z0iMEaQyM8+FdnqZrxGgBra1kHQQFpTi26 AOJUSxYTCItkygXLoT59MIZOUoaod7qYPfb6n91u+m1b/JQytSilJDtupNPgFnQi iQriBGCRU5D5R2JrKy2q6dZjHvQm02dqKSZDLv6Th6cJ+Q8gvvU9YIW98wIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFI0b73MFJ6rh7Pj7MIVlnW/f7teXMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRmL2I3MTZh ZC1lZDA0LTRkZTQtYjk5NC00YWFiMmQ2OGZhNWEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGYvYjcxNmFk LWVkMDQtNGRlNC1iOTk0LTRhYWIyZDY4ZmE1YS8xL2pSdnZjd1VucXVIcy1Qc3do V1dkYjlfdTE1Yy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAwpl0MA0EAgACMAcDBQMqFEKAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNM3TANBgkqhkiG9w0BAQsFAAOCAQEAS0cezrnAEZqj 3grdjKmWfnZX6tl7kizfwLuk1/+YHlhmnQSZZe32uOoCOvTz8vC80ni/Cfo1lH9+ UYGIOuvU52Lct1AmRhE4Zh3XMckkif8Lq3viCTZ8visyID+mqa0NQ44UOJJVx7WK 4P17V7FIjY/DaovZxteZRer/+DjTPPaT0ReM56S6vK0TBnWx10eFgT6RkoBc9J9u 9ybcAfAp0cY1tKqTz7Yj+l9z8fDdNuspVJNl1q6pkpDsGHomxVx7glSYM795kl88 XUGx3cZ8weihFQ1DxF/jPhDXI5aN2hyXUm+naWcRP/kFBfVsruoo67VKJroP576l 0tfahWo6Cw== -----END CERTIFICATE-----Generated at Mon Jan 26 03:09:38 2026 by rpki-client