This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.cer File: jT5ZS7JunAjm_Ec2yqXTwgCFTeo.cer (raw, json) Hash identifier: jPaK8UzD0dQ3To0fHEe/C9womJd31XWGLXJzbXAcXpM= Subject key identifier: 8D:3E:59:4B:B2:6E:9C:08:E6:FC:47:36:CA:A5:D3:C2:00:85:4D:EA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77593095F4D1CC623E9BC0B5BF928F73 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8b/c75317-d5fd-4a24-8714-e7dee9a7cad5/1/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8b/c75317-d5fd-4a24-8714-e7dee9a7cad5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:18:12 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 209247 IP: 185.149.52.0/22 IP: 2a07:6500::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:30:95:f4:d1:cc:62:3e:9b:c0:b5:bf:92:8f:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8d3e594bb26e9c08e6fc4736caa5d3c200854dea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:a9:31:d6:e8:5e:ae:82:32:0c:53:6b:58:24: 3b:d8:fa:6d:4d:cd:b6:48:bb:18:ce:c9:62:b6:65: 35:de:7d:47:f3:6b:8a:f2:2d:72:00:12:9c:b9:05: 2d:96:dc:92:24:50:a9:db:47:9b:e1:49:3a:0d:c7: f7:d8:cf:79:0e:1a:7b:52:24:f9:8b:a1:e3:fd:30: 84:f0:e6:a7:3b:b8:f7:cc:b3:41:ce:82:a2:ff:44: 60:7d:5b:08:96:0d:a5:79:b3:be:ed:c9:8c:f6:ab: 2d:bb:f0:b1:34:5e:06:d7:bb:4c:30:25:fc:58:69: 6c:7c:85:84:7c:68:63:a7:36:ae:1c:6e:07:c5:34: 7c:7c:5d:df:3c:47:54:9e:ce:bc:45:ec:f6:c8:10: 55:16:e2:2b:20:41:1f:93:82:36:34:90:6c:bd:49: 76:e6:5e:d7:4c:dd:e9:0d:9f:1e:33:40:ae:b0:92: fe:f4:d9:a6:50:69:72:c9:ba:be:1b:d0:fc:4e:5a: 0e:45:92:ab:83:c2:1c:61:23:39:75:15:08:23:79: 83:d0:9b:14:fb:58:54:2d:ec:17:38:ed:b0:b7:18: 26:b2:e2:d5:47:73:cd:b3:1e:1b:83:1f:6b:74:ef: 2d:f8:06:44:44:5b:97:f1:9a:03:b2:77:07:88:8e: c6:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:3E:59:4B:B2:6E:9C:08:E6:FC:47:36:CA:A5:D3:C2:00:85:4D:EA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c75317-d5fd-4a24-8714-e7dee9a7cad5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c75317-d5fd-4a24-8714-e7dee9a7cad5/1/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.149.52.0/22 IPv6: 2a07:6500::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 209247 Signature Algorithm: sha256WithRSAEncryption 34:a0:28:e4:d3:2d:fe:6d:6c:5e:4b:b4:bb:13:cf:e3:21:cb: 3d:90:58:a1:a6:ae:7f:a3:ce:ad:66:64:e2:60:a3:4f:c9:cd: 9b:bc:95:9b:1f:4c:db:d6:be:a3:70:16:07:67:02:39:60:ab: 6a:84:ba:61:80:8c:47:c3:21:1e:a3:42:b6:00:71:26:0e:03: 3a:1c:65:c5:97:6b:11:66:97:7b:2f:3f:da:fe:27:d4:80:2f: 2f:a1:dc:dd:50:b0:b4:d3:ce:d7:de:e9:c9:15:84:c5:e7:e4: 5d:45:d5:14:e8:05:96:1b:01:84:ce:57:81:c4:8e:c4:32:d4: cb:6b:b4:47:ab:fa:ff:90:dc:0d:f3:b0:1b:eb:c4:bd:62:0a: 5e:61:17:1e:99:b3:74:59:ee:94:6c:3f:35:21:19:ec:50:6e: 7b:26:4c:22:db:e9:7f:30:87:bd:5f:38:41:7e:0f:8f:0e:d4: 64:7f:72:b1:51:08:fd:8c:19:69:31:04:8d:9f:ce:14:b7:cc: b7:7f:91:86:d3:56:f6:96:d3:ee:ae:7e:26:f4:71:ca:70:d0: b3:cf:12:19:ea:c8:f8:9f:3d:14:07:4c:0a:cb:58:d5:9f:82: fa:f5:e7:7c:49:9f:26:ed:99:ae:f8:16:4d:c4:34:12:77:43: 4e:b6:b0:e5 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt3WTCV9NHMYj6bwLW/ko9zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZDNlNTk0YmIyNmU5YzA4ZTZmYzQ3MzZjYWE1ZDNjMjAwODU0ZGVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiakx1uheroIyDFNrWCQ72PptTc22 SLsYzslitmU13n1H82uK8i1yABKcuQUtltySJFCp20eb4Uk6Dcf32M95Dhp7UiT5 i6Hj/TCE8OanO7j3zLNBzoKi/0RgfVsIlg2lebO+7cmM9qstu/CxNF4G17tMMCX8 WGlsfIWEfGhjpzauHG4HxTR8fF3fPEdUns68Rez2yBBVFuIrIEEfk4I2NJBsvUl2 5l7XTN3pDZ8eM0CusJL+9NmmUGlyybq+G9D8TloORZKrg8IcYSM5dRUII3mD0JsU +1hULewXOO2wtxgmsuLVR3PNsx4bgx9rdO8t+AZERFuX8ZoDsncHiI7GfwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFI0+WUuybpwI5vxHNsql08IAhU3qMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhiL2M3NTMx Ny1kNWZkLTRhMjQtODcxNC1lN2RlZTlhN2NhZDUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGIvYzc1MzE3 LWQ1ZmQtNGEyNC04NzE0LWU3ZGVlOWE3Y2FkNS8xL2pUNVpTN0p1bkFqbV9FYzJ5 cVhUd2dDRlRlby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuZU0MA0EAgACMAcDBQMqB2UAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMxXzANBgkqhkiG9w0BAQsFAAOCAQEANKAo5NMt/m1s Xku0uxPP4yHLPZBYoaauf6POrWZk4mCjT8nNm7yVmx9M29a+o3AWB2cCOWCraoS6 YYCMR8MhHqNCtgBxJg4DOhxlxZdrEWaXey8/2v4n1IAvL6Hc3VCwtNPO197pyRWE xefkXUXVFOgFlhsBhM5XgcSOxDLUy2u0R6v6/5DcDfOwG+vEvWIKXmEXHpmzdFnu lGw/NSEZ7FBueyZMItvpfzCHvV84QX4Pjw7UZH9ysVEI/YwZaTEEjZ/OFLfMt3+R htNW9pbT7q5+JvRxynDQs88SGerI+J89FAdMCstY1Z+C+vXnfEmfJu2ZrvgWTcQ0 EndDTraw5Q== -----END CERTIFICATE-----Generated at Sun Jan 25 12:11:10 2026 by rpki-client