This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jSmNY5cKsDzfv1FPoOjtITEJhfE.cer File: jSmNY5cKsDzfv1FPoOjtITEJhfE.cer (raw, json) Hash identifier: L6sOzNoDIzPpWlfmwaMFYewOz8+dcxakB5xX5g3Ke3M= Subject key identifier: 8D:29:8D:63:97:0A:B0:3C:DF:BF:51:4F:A0:E8:ED:21:31:09:85:F1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA66E4AF9065A965CEABBBBDFB10D59 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:19:55 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 46.16.162.0/23 IP: 46.16.165.0/24 IP: 46.16.167.0/24 IP: 185.27.144.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:6e:4a:f9:06:5a:96:5c:ea:bb:bb:df:b1:0d:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:19:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8d298d63970ab03cdfbf514fa0e8ed21310985f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:fa:c9:b4:54:52:c6:a2:1e:cc:52:c0:82:6d: 22:80:9e:27:60:8b:bc:09:24:b6:cf:48:15:95:1f: 8b:2f:6e:dd:d7:d1:db:c2:f6:8a:9b:7f:8b:32:50: 75:40:5a:8e:55:3c:36:22:81:f8:01:38:56:d8:22: 9a:3b:d0:54:28:60:e4:19:42:67:8b:59:da:1f:9d: e6:fb:7e:7a:cf:59:59:16:7a:6d:28:b1:ba:8d:98: cb:29:09:1d:ba:ee:14:35:6a:f4:94:18:27:e2:2d: 48:0f:3d:9d:91:96:26:12:61:a7:17:cf:4d:c0:5f: 6f:ca:33:a4:84:e8:28:0b:d1:1c:51:6e:da:12:29: bf:0d:b6:be:1a:96:f3:aa:b5:59:ab:d4:eb:6b:15: 91:af:f3:e7:7f:cc:94:58:aa:19:e9:87:a8:2b:ea: e9:8c:96:be:44:12:bc:d7:a0:31:e3:47:8e:6d:be: 91:fe:b5:7d:33:44:15:66:74:7c:38:9f:f8:32:02: 28:2d:f4:ee:f8:06:41:db:3f:4a:e3:b7:6c:f8:ce: 56:56:cc:1a:b5:9a:1c:3b:cf:a7:d3:f5:e3:94:a8: c1:8d:70:80:12:0c:54:3f:8f:2a:df:ff:16:72:61: 68:dc:e7:f1:b7:74:1f:61:15:25:3d:82:c4:79:cf: 9d:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:29:8D:63:97:0A:B0:3C:DF:BF:51:4F:A0:E8:ED:21:31:09:85:F1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.16.162.0/23 46.16.165.0/24 46.16.167.0/24 185.27.144.0/22 Signature Algorithm: sha256WithRSAEncryption 8c:fd:6e:90:fc:41:46:ce:28:c8:e5:c3:30:be:bd:d3:6d:52: 3e:73:d0:62:f1:f3:55:f9:57:0f:56:45:2c:63:0a:12:0f:60: 93:06:3e:68:bd:9a:3a:03:ae:db:b9:3f:09:99:58:a2:de:b0: 21:a1:bb:b1:5c:bb:4a:ff:18:e9:f2:94:85:f5:18:cc:1a:71: ae:37:7a:4a:83:9b:8a:5a:78:8e:d4:4f:56:34:b5:7b:13:17: 2d:a9:52:d5:8b:e5:58:a6:58:77:17:95:b7:2b:e7:22:67:e8: 1c:23:15:7a:15:07:1c:8d:54:0f:35:0b:d2:95:91:6f:3b:a3: f0:6b:93:c0:79:81:a6:b5:5c:4c:3c:df:87:46:1b:9a:bb:7c: 92:a1:b1:db:ec:aa:ba:e7:12:75:63:69:54:8e:6e:cc:ee:96: f3:d8:0a:52:b0:2b:13:2e:3e:7d:23:77:d1:fd:42:5f:f9:5d: a5:30:b4:a1:c7:d9:b4:cc:d6:9c:c3:9b:ee:a8:9e:17:3d:3a: d2:46:3f:5e:aa:da:63:e1:59:95:09:3f:70:6c:39:a5:81:44: be:d5:37:f8:74:12:4a:73:1f:ea:9c:57:87:ce:02:f3:eb:a6: 7a:81:1c:f0:83:77:ce:56:1c:4e:af:f3:44:b6:94:73:8b:9c: 81:22:eb:2a -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgISAZt+pm5K+QZallzqu7vfsQ1ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIxOTU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZDI5OGQ2Mzk3MGFiMDNjZGZiZjUxNGZhMGU4ZWQyMTMxMDk4NWYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3/rJtFRSxqIezFLAgm0igJ4nYIu8 CSS2z0gVlR+LL27d19HbwvaKm3+LMlB1QFqOVTw2IoH4AThW2CKaO9BUKGDkGUJn i1naH53m+356z1lZFnptKLG6jZjLKQkduu4UNWr0lBgn4i1IDz2dkZYmEmGnF89N wF9vyjOkhOgoC9EcUW7aEim/Dba+GpbzqrVZq9TraxWRr/Pnf8yUWKoZ6YeoK+rp jJa+RBK816Ax40eObb6R/rV9M0QVZnR8OJ/4MgIoLfTu+AZB2z9K47ds+M5WVswa tZocO8+n0/XjlKjBjXCAEgxUP48q3/8WcmFo3Ofxt3QfYRUlPYLEec+d4QIDAQAB o4ICljCCApIwHQYDVR0OBBYEFI0pjWOXCrA8379RT6Do7SExCYXxMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y2LzdkMDBl MC1jZjQxLTQxNDItOTlkMi00OTQ3MTNhOTk2M2EvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjYvN2QwMGUw LWNmNDEtNDE0Mi05OWQyLTQ5NDcxM2E5OTYzYS8xL2pTbU5ZNWNLc0R6ZnYxRlBv T2p0SVRFSmhmRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDEGCCsGAQUF BwEHAQH/BCIwIDAeBAIAATAYAwQBLhCiAwQALhClAwQALhCnAwQCuRuQMA0GCSqG SIb3DQEBCwUAA4IBAQCM/W6Q/EFGzijI5cMwvr3TbVI+c9Bi8fNV+VcPVkUsYwoS D2CTBj5ovZo6A67buT8JmVii3rAhobuxXLtK/xjp8pSF9RjMGnGuN3pKg5uKWniO 1E9WNLV7ExctqVLVi+VYplh3F5W3K+ciZ+gcIxV6FQccjVQPNQvSlZFvO6Pwa5PA eYGmtVxMPN+HRhuau3ySobHb7Kq65xJ1Y2lUjm7M7pbz2ApSsCsTLj59I3fR/UJf +V2lMLShx9m0zNacw5vuqJ4XPTrSRj9eqtpj4VmVCT9wbDmlgUS+1Tf4dBJKcx/q nFeHzgLz66Z6gRzwg3fOVhxOr/NEtpRzi5yBIusq -----END CERTIFICATE-----Generated at Sun Jan 25 19:43:35 2026 by rpki-client