This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jTQC6uAnq82SYJDMDd7_gKq5LDU.cer File: jTQC6uAnq82SYJDMDd7_gKq5LDU.cer (raw, json) Hash identifier: ZZc/NeM0SVBgDihphijJHlyDFBNBi89iAK4mDVlAjY0= Subject key identifier: 8D:34:02:EA:E0:27:AB:CD:92:60:90:CC:0D:DE:FF:80:AA:B9:2C:35 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ED3525535E6239C756A77CCEE37BC2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/45/558348-4912-4bc1-8e58-f92d7dc37d2e/1/jTQC6uAnq82SYJDMDd7_gKq5LDU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/45/558348-4912-4bc1-8e58-f92d7dc37d2e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:19:07 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 86.54.82.0/23 IP: 168.222.244.0/22 IP: 185.186.76.0/22 IP: 2a06:3e00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:35:25:53:5e:62:39:c7:56:a7:7c:ce:e3:7b:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8d3402eae027abcd926090cc0ddeff80aab92c35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:8f:e5:b2:b4:ce:cd:cd:a4:12:da:3e:32:dd: 7f:2c:f3:1f:bd:80:68:1d:fb:fd:ce:f1:7c:fe:83: f2:34:de:35:da:02:44:42:c3:64:18:d6:62:f1:f4: ee:d6:29:8b:42:7d:71:c4:53:cf:1c:18:85:e3:09: 2b:59:7c:6c:32:4b:74:5f:3c:82:11:50:8b:61:91: af:ad:d7:53:ab:c2:4e:27:8a:cd:7d:e4:68:3c:b9: a3:de:c8:ce:fb:25:6b:1e:bb:79:91:d0:f4:13:dc: 4e:b7:87:bf:03:9e:ec:98:92:77:fd:b5:7b:70:61: 02:8c:77:c8:16:df:94:94:43:79:d7:02:26:d4:77: a1:fd:40:41:ba:c6:f3:1f:83:e5:b5:1c:b3:e5:67: 42:1e:53:4b:eb:b3:7a:96:31:64:66:5b:71:b3:82: 8d:8e:85:9f:41:ba:63:ec:db:98:f5:99:54:16:b4: 28:17:19:e0:9a:12:d1:5b:a7:fa:93:da:83:6f:28: e8:b2:b1:c2:14:6e:91:87:01:71:eb:61:44:55:66: a5:17:75:29:a0:f5:55:71:ef:b3:99:e2:71:eb:e4: 4d:f9:36:a5:1d:e2:3c:2d:ee:b3:9d:89:38:cc:13: e3:33:90:42:ff:8e:fc:89:77:95:26:00:89:86:ee: 6d:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:34:02:EA:E0:27:AB:CD:92:60:90:CC:0D:DE:FF:80:AA:B9:2C:35 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/558348-4912-4bc1-8e58-f92d7dc37d2e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/558348-4912-4bc1-8e58-f92d7dc37d2e/1/jTQC6uAnq82SYJDMDd7_gKq5LDU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.54.82.0/23 168.222.244.0/22 185.186.76.0/22 IPv6: 2a06:3e00::/29 Signature Algorithm: sha256WithRSAEncryption 0e:ad:a8:40:42:5f:95:aa:63:e5:cf:45:5d:51:02:e0:ec:24: e9:ef:dc:e5:8e:d0:8c:35:b6:5e:8b:69:70:05:0f:e1:24:ec: 6d:09:0d:1a:d4:e7:a5:39:d3:b9:71:7e:2b:5d:db:77:64:2b: 6b:f6:73:a8:2e:f5:a1:72:f2:47:a5:f0:2a:de:d7:44:13:04: da:19:03:46:3d:29:c8:98:ed:a4:39:32:14:b7:98:b1:f0:14: cd:9e:dd:9d:9e:82:3e:38:f6:8e:63:c1:c1:7d:a3:5d:93:9a: 41:5f:14:61:ac:99:09:dc:3f:49:14:46:f8:3d:99:e3:90:61: c3:2b:af:d0:43:43:e0:02:df:ec:44:6e:90:80:b4:b2:0b:7c: 58:fe:ff:e3:37:af:7d:23:c2:3b:ae:8a:48:9b:3f:34:ea:cc: 3c:d1:b0:a6:12:e8:bc:a2:f5:6c:c3:11:d7:49:94:8b:5b:53: c2:73:5d:36:42:58:7d:92:d2:3e:fd:d5:5f:f8:00:46:42:b6: 3f:ad:9d:17:97:98:40:f3:34:9f:d1:82:1f:0e:e3:c1:5d:27: 2e:3a:5e:14:c9:75:05:46:3a:7b:67:fb:6b:bc:c5:6d:6c:35: b4:dd:d3:a9:03:d1:8e:56:89:d9:35:ed:ea:72:07:09:71:d9: 7d:58:19:48 -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISAZt57TUlU15iOcdWp3zO43vCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZDM0MDJlYWUwMjdhYmNkOTI2MDkwY2MwZGRlZmY4MGFhYjkyYzM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2o/lsrTOzc2kEto+Mt1/LPMfvYBo Hfv9zvF8/oPyNN412gJEQsNkGNZi8fTu1imLQn1xxFPPHBiF4wkrWXxsMkt0XzyC EVCLYZGvrddTq8JOJ4rNfeRoPLmj3sjO+yVrHrt5kdD0E9xOt4e/A57smJJ3/bV7 cGECjHfIFt+UlEN51wIm1Heh/UBBusbzH4PltRyz5WdCHlNL67N6ljFkZltxs4KN joWfQbpj7NuY9ZlUFrQoFxngmhLRW6f6k9qDbyjosrHCFG6RhwFx62FEVWalF3Up oPVVce+zmeJx6+RN+TalHeI8Le6znYk4zBPjM5BC/478iXeVJgCJhu5tNwIDAQAB o4ICnzCCApswHQYDVR0OBBYEFI00AurgJ6vNkmCQzA3e/4CquSw1MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ1LzU1ODM0 OC00OTEyLTRiYzEtOGU1OC1mOTJkN2RjMzdkMmUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDUvNTU4MzQ4 LTQ5MTItNGJjMS04ZTU4LWY5MmQ3ZGMzN2QyZS8xL2pUUUM2dUFucTgyU1lKRE1E ZDdfZ0txNUxEVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQBVjZSAwQCqN70AwQCubpMMA0EAgACMAcDBQMq Bj4AMA0GCSqGSIb3DQEBCwUAA4IBAQAOrahAQl+VqmPlz0VdUQLg7CTp79zljtCM NbZei2lwBQ/hJOxtCQ0a1OelOdO5cX4rXdt3ZCtr9nOoLvWhcvJHpfAq3tdEEwTa GQNGPSnImO2kOTIUt5ix8BTNnt2dnoI+OPaOY8HBfaNdk5pBXxRhrJkJ3D9JFEb4 PZnjkGHDK6/QQ0PgAt/sRG6QgLSyC3xY/v/jN699I8I7ropImz806sw80bCmEui8 ovVswxHXSZSLW1PCc102Qlh9ktI+/dVf+ABGQrY/rZ0Xl5hA8zSf0YIfDuPBXScu Ol4UyXUFRjp7Z/trvMVtbDW03dOpA9GOVonZNe3qcgcJcdl9WBlI -----END CERTIFICATE-----Generated at Sun Jan 25 19:42:03 2026 by rpki-client