This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer
File:                     jcaca76J58BHm2F3RKRCT2ZnSUQ.cer (raw, json)
Hash identifier:          BFz7JWS8pBhbOpOwDAUA3bVLcj2ffetEc6iVgi7fNfw=
Subject key identifier:   8D:C6:9C:6B:BE:89:E7:C0:47:9B:61:77:44:A4:42:4F:66:67:49:44
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B78A30DBEA3D67E14D9EF8BEBB6AE075E
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 08:18:30 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 199239
                          IP: 91.92.115.0/24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:a3:0d:be:a3:d6:7e:14:d9:ef:8b:eb:b6:ae:07:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 08:18:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8dc69c6bbe89e7c0479b617744a4424f66674944
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:5c:df:c4:ab:3d:83:25:bf:8f:27:74:cf:0a:
                    c9:1c:80:72:32:7a:65:1d:6f:eb:44:99:ae:61:31:
                    b2:37:7b:86:62:87:23:63:8c:69:57:45:71:5d:3d:
                    b6:e8:75:e2:31:94:6c:16:b2:cd:36:ec:82:f8:fe:
                    b8:35:e2:70:fe:ee:dc:58:a7:b1:d9:83:fd:2d:b1:
                    36:9b:b6:20:ad:24:16:88:96:3f:c8:d4:d4:f5:52:
                    6f:56:b6:8e:32:1d:09:db:fc:32:e0:37:31:1f:43:
                    18:87:8d:87:f2:75:76:b4:cb:30:33:64:43:cb:a2:
                    88:fb:6b:9a:2f:d2:fd:34:41:df:e0:fa:eb:8f:57:
                    e3:97:31:9e:a7:20:18:9d:56:f3:1d:22:b5:11:85:
                    6e:f9:79:50:56:51:fb:b4:12:c6:61:0d:e5:28:72:
                    17:00:61:47:9c:b2:62:01:c0:5c:95:1f:b1:eb:2c:
                    d2:37:d3:ad:8b:91:6a:b0:eb:22:24:23:c4:f1:ed:
                    17:8b:84:f5:7f:f9:9f:d5:41:eb:97:b8:b9:9c:9d:
                    58:f0:12:b9:37:e2:c9:92:85:5a:56:82:0b:b1:7a:
                    46:7c:f3:2f:15:0d:4c:7d:23:77:b5:aa:02:52:09:
                    5f:08:09:1f:24:66:01:0f:b6:33:c9:d8:11:3d:d6:
                    f3:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:C6:9C:6B:BE:89:E7:C0:47:9B:61:77:44:A4:42:4F:66:67:49:44
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.92.115.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  199239

    Signature Algorithm: sha256WithRSAEncryption
         82:14:d5:9b:1a:ac:ba:e2:de:60:51:33:50:c4:77:d0:4e:b1:
         83:63:d5:eb:43:e6:46:b3:43:d8:71:da:a9:72:e6:b5:d5:a6:
         fe:66:81:5b:ae:2f:e7:1b:19:66:70:e9:02:a8:f3:8e:44:e7:
         83:11:5b:c3:f9:65:a6:4f:95:5b:61:11:fd:3c:04:87:02:e6:
         2f:f8:df:f4:ac:06:cb:45:ed:0a:ea:50:d8:bf:f2:68:a6:48:
         4c:77:1d:a9:01:f3:e0:5f:5e:f0:7d:e9:18:ef:9c:af:7e:30:
         9a:87:c9:c6:a1:7b:3d:20:62:8c:75:24:44:21:44:9a:ec:5f:
         7c:bd:de:96:32:64:63:6a:b1:2f:93:3c:3a:56:58:0e:1a:65:
         82:b6:95:f1:7e:2a:ed:87:bc:95:eb:65:c2:70:fc:8f:4d:11:
         14:76:2a:c0:35:25:cc:fe:dd:19:60:f5:b8:2e:93:fe:bb:a2:
         35:5f:b4:87:6a:8d:82:d0:65:34:98:90:8f:8d:a4:d7:33:b0:
         d7:8f:18:42:7a:f7:1c:96:de:94:8a:77:d7:aa:5d:98:7e:db:
         ff:0b:7c:3e:ee:6e:9c:6b:30:81:ae:19:54:9a:d9:3d:c8:94:
         7c:bf:99:0f:1c:f6:bc:ce:04:d2:50:63:0d:51:2a:97:c3:18:
         c1:69:fd:cd
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAZt4ow2+o9Z+FNnvi+u2rgdeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMTAxMDgxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZGM2OWM2YmJlODllN2MwNDc5YjYxNzc0NGE0NDI0ZjY2Njc0OTQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA11zfxKs9gyW/jyd0zwrJHIByMnpl
HW/rRJmuYTGyN3uGYocjY4xpV0VxXT226HXiMZRsFrLNNuyC+P64NeJw/u7cWKex
2YP9LbE2m7YgrSQWiJY/yNTU9VJvVraOMh0J2/wy4DcxH0MYh42H8nV2tMswM2RD
y6KI+2uaL9L9NEHf4Prrj1fjlzGepyAYnVbzHSK1EYVu+XlQVlH7tBLGYQ3lKHIX
AGFHnLJiAcBclR+x6yzSN9Oti5FqsOsiJCPE8e0Xi4T1f/mf1UHrl7i5nJ1Y8BK5
N+LJkoVaVoILsXpGfPMvFQ1MfSN3taoCUglfCAkfJGYBD7YzydgRPdbz1QIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFI3GnGu+iefAR5thd0SkQk9mZ0lEMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNkLzIzZGI1
Yy0xYTEwLTQ0YzYtOWQ3Ny1iYjVjYWFjMmU5MDMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2QvMjNkYjVj
LTFhMTAtNDRjNi05ZDc3LWJiNWNhYWMyZTkwMy8xL2pjYWNhNzZKNThCSG0yRjNS
S1JDVDJablNVUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAW1xzMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwMKRzANBgkqhkiG9w0BAQsFAAOCAQEAghTVmxqsuuLeYFEzUMR30E6xg2PV60Pm
RrND2HHaqXLmtdWm/maBW64v5xsZZnDpAqjzjkTngxFbw/llpk+VW2ER/TwEhwLm
L/jf9KwGy0XtCupQ2L/yaKZITHcdqQHz4F9e8H3pGO+cr34wmofJxqF7PSBijHUk
RCFEmuxffL3eljJkY2qxL5M8OlZYDhplgraV8X4q7Ye8letlwnD8j00RFHYqwDUl
zP7dGWD1uC6T/ruiNV+0h2qNgtBlNJiQj42k1zOw148YQnr3HJbelIp316pdmH7b
/wt8Pu5unGswga4ZVJrZPciUfL+ZDxz2vM4E0lBjDVEql8MYwWn9zQ==
-----END CERTIFICATE-----
Generated at Sun Jan 25 23:35:37 2026 by rpki-client