This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer File: jbNHdLAZeShP2edU_qaPo8YXg9A.cer (raw, json) Hash identifier: oXKAQUIPfYBLhm0cqvM9PtLHIAn3hYq9p9uR1SEbA/w= Subject key identifier: 8D:B3:47:74:B0:19:79:28:4F:D9:E7:54:FE:A6:8F:A3:C6:17:83:D0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C6B839A615E33EA887D77ACF5D227C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:17:50 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 61220 AS: 202505 AS: 210608 IP: 84.54.14.0/24 IP: 86.104.14.0/24 IP: 89.43.78.0/24 IP: 176.98.42.0/23 IP: 185.81.152.0/22 IP: 2a05:88c0::/29 IP: 2a06:f7c0::/29 IP: 2a10:3300::/29 IP: 2a10:7f40::/29 IP: 2a10:7fc0::/29 IP: 2a11:d100::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:b8:39:a6:15:e3:3e:a8:87:d7:7a:cf:5d:22:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8db34774b01979284fd9e754fea68fa3c61783d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:8f:19:75:fa:c2:16:51:fc:c9:ac:b6:84:96: 49:f1:3a:0b:40:b2:0d:94:e1:3e:dc:3a:fb:01:e2: 94:f2:8b:99:d7:a4:cc:61:c9:7c:8c:6d:63:85:65: 8c:41:bd:49:e3:88:61:9f:4e:60:b3:5e:96:30:28: af:ef:80:83:fd:b6:38:a1:6f:d5:b0:b3:4d:1c:a1: 0f:57:98:f8:21:98:18:b1:a1:49:f2:2a:b4:db:84: 8b:ea:4c:35:00:7a:3a:c9:ba:b3:f4:3b:4a:9b:e4: 5d:4e:f4:b1:1b:34:71:da:1a:52:a3:87:ac:7c:9e: b4:e9:74:04:7b:5e:b4:4e:5b:59:95:b8:23:70:7a: 1a:84:9b:6e:2c:25:fb:e2:4a:a8:ac:21:a9:c7:58: 71:a1:50:4d:24:a1:0d:f9:79:60:e6:38:8f:bf:91: 40:2a:0f:b5:4b:a8:9a:45:b5:ab:57:8d:98:9d:39: fe:a3:4d:25:27:be:3a:71:3d:46:57:66:06:e3:f5: 75:58:e7:67:66:f0:0c:ec:3a:82:8c:bd:f7:d7:0e: 6e:07:ec:f4:d0:31:d3:57:e5:12:0c:e8:01:a8:ca: 3d:50:6e:28:d1:c2:db:e0:59:22:83:11:d2:0f:dd: 54:9d:32:af:1d:6d:66:18:2b:17:78:b7:fb:df:01: be:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:B3:47:74:B0:19:79:28:4F:D9:E7:54:FE:A6:8F:A3:C6:17:83:D0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.54.14.0/24 86.104.14.0/24 89.43.78.0/24 176.98.42.0/23 185.81.152.0/22 IPv6: 2a05:88c0::/29 2a06:f7c0::/29 2a10:3300::/29 2a10:7f40::/29 2a10:7fc0::/29 2a11:d100::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 61220 202505 210608 Signature Algorithm: sha256WithRSAEncryption 0c:a5:d1:66:c0:6f:2e:85:fb:77:55:68:2a:c5:4b:48:a1:f4: f2:c2:6c:18:16:6c:12:0d:b8:25:ec:aa:a4:88:0c:af:c8:b8: d1:f3:a7:da:f9:61:20:a5:7c:85:98:2e:94:3f:84:33:63:14: b9:79:00:82:99:b2:4b:e6:15:f2:e6:1b:8a:98:33:c7:73:c0: 38:f4:0f:3e:7c:fd:ee:b9:f8:0c:1c:88:6c:0d:c4:15:fe:59: 7f:d7:3c:be:b5:07:a2:f6:6d:f5:e6:99:7d:2b:b9:b2:dd:56: 4c:95:f1:fa:96:85:3a:0a:07:29:66:39:ee:44:68:bb:4f:a2: 98:49:22:f2:12:5b:bf:e0:bb:66:6e:34:b8:3e:01:d1:30:dc: ef:75:e9:e2:5a:94:4c:4b:71:f4:03:f2:83:4c:f3:ad:62:84: 24:33:96:87:c3:0e:cc:ad:f9:5e:4f:9d:c1:26:62:45:0a:e9: 35:e1:15:ef:df:ed:ca:d0:2d:a2:a4:d5:a4:d4:02:05:6a:e2: 08:a4:c5:c9:07:9f:ff:c2:cc:6b:f4:15:f8:eb:de:7d:c3:77: 09:8a:cf:de:e4:d4:b8:09:e6:b1:bc:bb:a1:ee:f9:aa:48:7b: a0:2a:20:b5:2a:de:c1:53:bb:5a:56:e8:23:39:b1:d6:7d:5f: 40:63:fd:ce -----BEGIN CERTIFICATE----- MIIF6DCCBNCgAwIBAgISAZt3xrg5phXjPqiH13rPXSJ8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZGIzNDc3NGIwMTk3OTI4NGZkOWU3NTRmZWE2OGZhM2M2MTc4M2QwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA548ZdfrCFlH8yay2hJZJ8ToLQLIN lOE+3Dr7AeKU8ouZ16TMYcl8jG1jhWWMQb1J44hhn05gs16WMCiv74CD/bY4oW/V sLNNHKEPV5j4IZgYsaFJ8iq024SL6kw1AHo6ybqz9DtKm+RdTvSxGzRx2hpSo4es fJ606XQEe160TltZlbgjcHoahJtuLCX74kqorCGpx1hxoVBNJKEN+Xlg5jiPv5FA Kg+1S6iaRbWrV42YnTn+o00lJ746cT1GV2YG4/V1WOdnZvAM7DqCjL331w5uB+z0 0DHTV+USDOgBqMo9UG4o0cLb4FkigxHSD91UnTKvHW1mGCsXeLf73wG+CwIDAQAB o4IC9DCCAvAwHQYDVR0OBBYEFI2zR3SwGXkoT9nnVP6mj6PGF4PQMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM3LzcwYThm MS1kOGViLTQyYjUtYmRkYi02MjY1NTIxZjZkZjcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzcvNzBhOGYx LWQ4ZWItNDJiNS1iZGRiLTYyNjU1MjFmNmRmNy8xL2piTkhkTEFaZVNoUDJlZFVf cWFQbzhZWGc5QS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGkGCCsGAQUF BwEHAQH/BFowWDAkBAIAATAeAwQAVDYOAwQAVmgOAwQAWStOAwQBsGIqAwQCuVGY MDAEAgACMCoDBQMqBYjAAwUDKgb3wAMFAyoQMwADBQMqEH9AAwUDKhB/wAMFAyoR 0QAwJAYIKwYBBQUHAQgBAf8EFTAToBEwDwIDAO8kAgMDFwkCAwM2sDANBgkqhkiG 9w0BAQsFAAOCAQEADKXRZsBvLoX7d1VoKsVLSKH08sJsGBZsEg24JeyqpIgMr8i4 0fOn2vlhIKV8hZgulD+EM2MUuXkAgpmyS+YV8uYbipgzx3PAOPQPPnz97rn4DByI bA3EFf5Zf9c8vrUHovZt9eaZfSu5st1WTJXx+paFOgoHKWY57kRou0+imEki8hJb v+C7Zm40uD4B0TDc73Xp4lqUTEtx9APyg0zzrWKEJDOWh8MOzK35Xk+dwSZiRQrp NeEV79/tytAtoqTVpNQCBWriCKTFyQef/8LMa/QV+OvefcN3CYrP3uTUuAnmsby7 oe75qkh7oCogtSrewVO7WlboIzmx1n1fQGP9zg== -----END CERTIFICATE-----Generated at Sun Jan 25 22:18:31 2026 by rpki-client