This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jbK0TyPcypwGBL7WkPKKatkBeZk.cer File: jbK0TyPcypwGBL7WkPKKatkBeZk.cer (raw, json) Hash identifier: Zo9K0EP5/7s4zOrwMo5ItNdh9mPQd7IwaSY4SZh7Uho= Subject key identifier: 8D:B2:B4:4F:23:DC:CA:9C:06:04:BE:D6:90:F2:8A:6A:D9:01:79:99 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB155071D39C72F8D46B99A509DD9F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/19/227b53-473d-46af-8201-98e879ea3726/1/jbK0TyPcypwGBL7WkPKKatkBeZk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/19/227b53-473d-46af-8201-98e879ea3726/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:17:56 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 2001:678:1140::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:15:50:71:d3:9c:72:f8:d4:6b:99:a5:09:dd:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8db2b44f23dcca9c0604bed690f28a6ad9017999 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:c4:78:35:93:6f:95:97:82:c7:4f:6c:32:8f: 4f:4a:ef:76:56:c9:02:ba:75:56:fd:cd:19:bd:06: d9:3f:30:84:09:02:17:a3:f8:cd:79:2c:b0:d5:c3: c7:dc:de:19:ec:dd:ed:86:7c:af:b5:4d:02:ef:19: 31:d8:f3:17:2a:2d:b7:00:b7:1f:5e:79:76:93:8c: 8a:1b:97:a3:e5:d0:dd:8b:0b:d8:64:5b:af:23:92: 9c:0d:7a:53:1e:0c:fe:ac:6d:7f:a1:d9:5c:f2:c4: 5c:92:99:79:70:33:cb:4b:11:05:cf:89:4d:94:3e: 29:ae:91:64:82:e7:82:52:10:c2:87:01:d5:c8:9f: d5:f5:47:b3:94:0b:70:fc:15:a0:bd:ab:a2:b1:cc: fd:20:7c:bd:ec:dd:ad:fb:af:42:cc:d3:32:fd:b0: d0:ca:00:16:d1:38:eb:92:38:f0:59:52:f7:54:67: 30:70:ee:8e:b4:85:5c:35:1c:e8:eb:52:43:09:6a: 16:f2:5b:e6:33:15:25:34:ca:75:16:a1:ed:3f:ee: b3:dc:7a:7c:2b:84:13:27:af:40:de:c8:82:41:7b: b3:39:8a:5b:1d:14:47:01:d4:42:b4:b3:ab:83:61: 5f:e7:c9:9f:9a:ed:0e:46:6c:a8:0d:c1:8c:71:1e: a3:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:B2:B4:4F:23:DC:CA:9C:06:04:BE:D6:90:F2:8A:6A:D9:01:79:99 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/227b53-473d-46af-8201-98e879ea3726/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/227b53-473d-46af-8201-98e879ea3726/1/jbK0TyPcypwGBL7WkPKKatkBeZk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:1140::/48 Signature Algorithm: sha256WithRSAEncryption 87:df:90:fb:25:97:97:19:fe:1d:63:23:a2:07:ea:83:1c:db: 72:5a:e6:23:29:fd:18:08:f0:c1:13:b8:45:01:3d:f0:53:de: c9:91:d1:a8:aa:8f:f4:1a:78:06:53:62:de:ea:cc:bf:db:a6: 2a:ab:e9:ce:36:2f:42:a0:e1:2a:68:79:e2:80:91:c0:72:1a: 14:5c:17:ff:d5:77:c8:e7:40:2e:b6:11:35:b5:7e:3b:69:8a: 7c:35:f3:3f:89:ff:bc:5e:88:10:6c:c7:a4:6e:c1:8f:63:a8: 6d:cc:e9:c5:05:ad:38:33:7d:1b:2d:69:8a:1b:fd:1f:d1:88: 24:79:8f:33:c5:17:b3:cc:d2:d5:64:2f:86:34:69:11:4a:ba: 96:e0:5b:00:c3:74:8d:1b:95:f9:29:7e:52:c9:67:1c:70:a7: 7a:b5:f0:58:dc:60:bb:06:ec:5c:d7:13:9b:3b:0c:e8:b2:d6: fb:6e:e6:13:99:8c:19:44:bb:18:ff:d7:df:c0:0a:b7:8f:92: 2f:e5:24:08:e1:6c:4f:be:a3:b1:0c:00:73:9b:1a:ee:c6:fe: f4:e6:38:f5:b6:2d:f0:df:c9:11:5c:8d:fc:a6:1a:71:18:95: 0b:0d:cf:27:9d:af:25:9f:99:38:06:e8:ed:00:e8:ce:58:a5: fa:7c:96:f7 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgISAZt26xVQcdOccvjUa5mlCd2fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZGIyYjQ0ZjIzZGNjYTljMDYwNGJlZDY5MGYyOGE2YWQ5MDE3OTk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8R4NZNvlZeCx09sMo9PSu92VskC unVW/c0ZvQbZPzCECQIXo/jNeSyw1cPH3N4Z7N3thnyvtU0C7xkx2PMXKi23ALcf Xnl2k4yKG5ej5dDdiwvYZFuvI5KcDXpTHgz+rG1/odlc8sRckpl5cDPLSxEFz4lN lD4prpFkgueCUhDChwHVyJ/V9UezlAtw/BWgvauiscz9IHy97N2t+69CzNMy/bDQ ygAW0TjrkjjwWVL3VGcwcO6OtIVcNRzo61JDCWoW8lvmMxUlNMp1FqHtP+6z3Hp8 K4QTJ69A3siCQXuzOYpbHRRHAdRCtLOrg2Ff58mfmu0ORmyoDcGMcR6jGQIDAQAB o4IChzCCAoMwHQYDVR0OBBYEFI2ytE8j3MqcBgS+1pDyimrZAXmZMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE5LzIyN2I1 My00NzNkLTQ2YWYtODIwMS05OGU4NzllYTM3MjYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTkvMjI3YjUz LTQ3M2QtNDZhZi04MjAxLTk4ZTg3OWVhMzcyNi8xL2piSzBUeVBjeXB3R0JMN1dr UEtLYXRrQmVaay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeBFAMA0GCSqGSIb3DQEBCwUAA4IBAQCH 35D7JZeXGf4dYyOiB+qDHNtyWuYjKf0YCPDBE7hFAT3wU97JkdGoqo/0GngGU2Le 6sy/26Yqq+nONi9CoOEqaHnigJHAchoUXBf/1XfI50AuthE1tX47aYp8NfM/if+8 XogQbMekbsGPY6htzOnFBa04M30bLWmKG/0f0YgkeY8zxRezzNLVZC+GNGkRSrqW 4FsAw3SNG5X5KX5SyWcccKd6tfBY3GC7Buxc1xObOwzostb7buYTmYwZRLsY/9ff wAq3j5Iv5SQI4WxPvqOxDABzmxruxv705jj1ti3w38kRXI38phpxGJULDc8nna8l n5k4BujtAOjOWKX6fJb3 -----END CERTIFICATE-----Generated at Mon Jan 26 02:14:44 2026 by rpki-client