This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jTQC6uAnq82SYJDMDd7_gKq5LDU.cer File: jTQC6uAnq82SYJDMDd7_gKq5LDU.cer (raw, json) Hash identifier: diBOklHduQP+7HGX4nLTrKzHHOg44KQeNke0N84K3/c= Subject key identifier: 8D:34:02:EA:E0:27:AB:CD:92:60:90:CC:0D:DE:FF:80:AA:B9:2C:35 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019A81D8E278E7451FA23D2BD30BF5427A1D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/45/558348-4912-4bc1-8e58-f92d7dc37d2e/1/jTQC6uAnq82SYJDMDd7_gKq5LDU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/45/558348-4912-4bc1-8e58-f92d7dc37d2e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 14 Nov 2025 10:11:05 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: IP: 86.54.82.0/23 IP: 168.222.244.0/22 IP: 185.186.76.0/22 IP: 2a06:3e00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:81:d8:e2:78:e7:45:1f:a2:3d:2b:d3:0b:f5:42:7a:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Nov 14 10:11:05 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8d3402eae027abcd926090cc0ddeff80aab92c35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:8f:e5:b2:b4:ce:cd:cd:a4:12:da:3e:32:dd: 7f:2c:f3:1f:bd:80:68:1d:fb:fd:ce:f1:7c:fe:83: f2:34:de:35:da:02:44:42:c3:64:18:d6:62:f1:f4: ee:d6:29:8b:42:7d:71:c4:53:cf:1c:18:85:e3:09: 2b:59:7c:6c:32:4b:74:5f:3c:82:11:50:8b:61:91: af:ad:d7:53:ab:c2:4e:27:8a:cd:7d:e4:68:3c:b9: a3:de:c8:ce:fb:25:6b:1e:bb:79:91:d0:f4:13:dc: 4e:b7:87:bf:03:9e:ec:98:92:77:fd:b5:7b:70:61: 02:8c:77:c8:16:df:94:94:43:79:d7:02:26:d4:77: a1:fd:40:41:ba:c6:f3:1f:83:e5:b5:1c:b3:e5:67: 42:1e:53:4b:eb:b3:7a:96:31:64:66:5b:71:b3:82: 8d:8e:85:9f:41:ba:63:ec:db:98:f5:99:54:16:b4: 28:17:19:e0:9a:12:d1:5b:a7:fa:93:da:83:6f:28: e8:b2:b1:c2:14:6e:91:87:01:71:eb:61:44:55:66: a5:17:75:29:a0:f5:55:71:ef:b3:99:e2:71:eb:e4: 4d:f9:36:a5:1d:e2:3c:2d:ee:b3:9d:89:38:cc:13: e3:33:90:42:ff:8e:fc:89:77:95:26:00:89:86:ee: 6d:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:34:02:EA:E0:27:AB:CD:92:60:90:CC:0D:DE:FF:80:AA:B9:2C:35 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/558348-4912-4bc1-8e58-f92d7dc37d2e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/558348-4912-4bc1-8e58-f92d7dc37d2e/1/jTQC6uAnq82SYJDMDd7_gKq5LDU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.54.82.0/23 168.222.244.0/22 185.186.76.0/22 IPv6: 2a06:3e00::/29 Signature Algorithm: sha256WithRSAEncryption 65:2c:ae:53:5e:95:80:17:30:78:e5:b1:79:e6:9e:19:e0:da: 1b:79:de:25:04:69:c2:22:04:e7:f8:34:6e:7e:a2:b2:2c:95: 8c:e4:9a:ff:d4:11:39:eb:87:c7:56:c9:ec:3f:c0:48:64:8d: 50:b8:80:f8:70:6d:79:a0:01:93:c8:d4:cd:e3:06:72:67:32: 10:01:dc:74:db:e2:61:28:54:e4:aa:f5:f1:b9:3a:f2:12:ea: a0:c9:9d:46:4f:0a:4d:31:05:e9:0e:40:9c:d3:61:af:1c:26: 0c:ff:cb:8f:d6:56:7e:7b:64:a7:d2:91:bf:92:e6:c7:9b:bc: 32:6b:d4:3e:fa:a8:3c:dd:7f:9d:d9:d6:23:f0:22:b5:f9:73: 15:c1:c9:04:55:65:86:0c:3d:4d:09:6c:6b:5b:ca:62:80:bb: f0:2d:98:d9:8a:48:b9:49:63:aa:11:94:92:36:4f:14:02:b2: 97:2d:1d:3f:97:d9:16:f3:4e:1a:00:d9:55:3d:d7:6a:11:71: 41:d3:75:ae:1a:b3:33:f6:e2:f8:a9:1d:61:b4:99:9c:f5:69: 16:94:75:0e:43:4a:49:7b:8c:c0:bc:91:55:09:e0:c5:7a:79: 77:24:ee:7b:82:15:7d:30:c6:09:e0:fe:32:85:8d:90:e9:04: 6d:40:c2:da -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISAZqB2OJ450Ufoj0r0wv1QnodMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMTE0MTAxMTA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZDM0MDJlYWUwMjdhYmNkOTI2MDkwY2MwZGRlZmY4MGFhYjkyYzM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2o/lsrTOzc2kEto+Mt1/LPMfvYBo Hfv9zvF8/oPyNN412gJEQsNkGNZi8fTu1imLQn1xxFPPHBiF4wkrWXxsMkt0XzyC EVCLYZGvrddTq8JOJ4rNfeRoPLmj3sjO+yVrHrt5kdD0E9xOt4e/A57smJJ3/bV7 cGECjHfIFt+UlEN51wIm1Heh/UBBusbzH4PltRyz5WdCHlNL67N6ljFkZltxs4KN joWfQbpj7NuY9ZlUFrQoFxngmhLRW6f6k9qDbyjosrHCFG6RhwFx62FEVWalF3Up oPVVce+zmeJx6+RN+TalHeI8Le6znYk4zBPjM5BC/478iXeVJgCJhu5tNwIDAQAB o4ICnzCCApswHQYDVR0OBBYEFI00AurgJ6vNkmCQzA3e/4CquSw1MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ1LzU1ODM0 OC00OTEyLTRiYzEtOGU1OC1mOTJkN2RjMzdkMmUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDUvNTU4MzQ4 LTQ5MTItNGJjMS04ZTU4LWY5MmQ3ZGMzN2QyZS8xL2pUUUM2dUFucTgyU1lKRE1E ZDdfZ0txNUxEVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQBVjZSAwQCqN70AwQCubpMMA0EAgACMAcDBQMq Bj4AMA0GCSqGSIb3DQEBCwUAA4IBAQBlLK5TXpWAFzB45bF55p4Z4Nobed4lBGnC IgTn+DRufqKyLJWM5Jr/1BE564fHVsnsP8BIZI1QuID4cG15oAGTyNTN4wZyZzIQ Adx02+JhKFTkqvXxuTryEuqgyZ1GTwpNMQXpDkCc02GvHCYM/8uP1lZ+e2Sn0pG/ kubHm7wya9Q++qg83X+d2dYj8CK1+XMVwckEVWWGDD1NCWxrW8pigLvwLZjZiki5 SWOqEZSSNk8UArKXLR0/l9kW804aANlVPddqEXFB03WuGrMz9uL4qR1htJmc9WkW lHUOQ0pJe4zAvJFVCeDFenl3JO57ghV9MMYJ4P4yhY2Q6QRtQMLa -----END CERTIFICATE-----Generated at Sat Dec 6 07:04:58 2025 by rpki-client