This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jgo5Gq64_HyDP4JX16nnSlWzOv4.cer File: jgo5Gq64_HyDP4JX16nnSlWzOv4.cer (raw, json) Hash identifier: 7voqO6fIT2QdYARkSw0xcNIz+Zid7e3OkqM+oNVFEfQ= Subject key identifier: 8E:0A:39:1A:AE:B8:FC:7C:83:3F:82:57:D7:A9:E7:4A:55:B3:3A:FE Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5CE248D77FBE6BE6D8D8B46A6DF793 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0a/f26501-6718-42bc-91df-edb43e1d4ee0/1/jgo5Gq64_HyDP4JX16nnSlWzOv4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0a/f26501-6718-42bc-91df-edb43e1d4ee0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:19:57 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.187.132.0/22 IP: 2a0b:a580::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:e2:48:d7:7f:be:6b:e6:d8:d8:b4:6a:6d:f7:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:19:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8e0a391aaeb8fc7c833f8257d7a9e74a55b33afe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:6a:1d:74:e0:c0:06:92:3a:22:a0:a7:a5:05: 55:7a:9c:97:ae:ca:87:c2:ee:ab:4e:9b:d6:ec:b7: 9a:dd:43:db:6a:6b:86:10:a2:f7:96:10:5a:66:3d: 24:08:df:e3:17:48:1f:28:e0:b0:f1:6d:0a:2c:f2: e3:a7:7c:92:06:19:32:a4:26:ea:c0:e9:04:ba:1a: 30:45:27:fb:f3:3e:6f:86:56:de:80:30:ad:20:18: 40:43:00:70:88:75:73:96:41:6f:83:20:42:c5:4e: b8:1c:42:02:a3:06:80:a2:f4:25:97:0a:d6:01:3b: fd:f3:4e:0e:7d:c0:b7:c6:41:a8:a7:f1:83:fc:61: 82:fd:c7:dc:89:1d:d1:4f:e2:36:0a:c9:37:25:54: ea:e8:46:b7:24:5e:39:d5:17:28:c6:96:a5:3e:db: 60:b5:47:71:c5:3c:dd:2d:8a:57:35:c1:1e:68:32: 84:68:f8:3f:5c:5e:20:26:dd:40:ed:ea:fd:44:16: 72:6b:ad:bf:a4:0b:4d:5a:83:c0:92:20:79:48:03: 21:11:66:df:05:d8:62:a5:1e:62:1e:78:01:3e:65: 69:86:21:2d:fe:12:ac:a1:86:5f:98:84:5a:bc:a3: 9e:b4:53:0b:2f:21:4c:b2:21:84:7d:7a:e7:3e:26: 49:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:0A:39:1A:AE:B8:FC:7C:83:3F:82:57:D7:A9:E7:4A:55:B3:3A:FE X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f26501-6718-42bc-91df-edb43e1d4ee0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f26501-6718-42bc-91df-edb43e1d4ee0/1/jgo5Gq64_HyDP4JX16nnSlWzOv4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.187.132.0/22 IPv6: 2a0b:a580::/29 Signature Algorithm: sha256WithRSAEncryption 6a:b4:1e:9d:15:8b:fa:0f:0a:c5:01:9c:0f:32:13:13:44:00: 8b:a5:45:1b:0e:89:5c:6a:a3:95:fe:17:4e:68:30:19:6a:94: 00:82:65:bd:ce:1c:31:c1:6b:e5:f4:96:8a:22:67:91:11:68: b1:b0:03:f3:28:97:e4:a7:26:cc:e6:e6:91:11:77:0a:e3:a5: 7a:a2:8e:2b:50:ee:2c:bc:df:85:49:26:fa:63:84:8c:7f:3a: f4:dd:54:24:6f:c3:ad:64:07:cb:50:5c:22:20:97:a3:ae:ae: a2:80:74:0a:85:47:d1:77:37:f5:33:0a:b4:aa:f5:1f:89:c5: 50:97:c7:61:b2:6b:a5:f3:02:c8:f4:21:55:cc:d4:a0:ec:85: 2f:eb:10:97:18:f5:73:0d:bf:4f:7c:bf:d7:3c:98:32:bc:57: a9:99:67:8b:0d:f8:0f:c7:f0:7b:7b:00:09:17:d9:8b:81:47: 06:15:62:51:9e:d5:ff:c1:14:41:f0:85:cc:86:45:7d:5a:8a: da:af:29:55:47:6c:87:c7:13:41:0e:a9:00:d8:ec:40:de:47: 86:e7:15:de:d9:b5:7c:8c:82:a8:e2:bd:31:e0:e7:5c:7b:ea: 8c:b5:41:2a:4f:41:42:c8:fd:cd:1c:96:59:94:2f:95:51:ed: ae:b3:23:4b -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt9XOJI13++a+bY2LRqbfeTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxOTU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZTBhMzkxYWFlYjhmYzdjODMzZjgyNTdkN2E5ZTc0YTU1YjMzYWZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGoddODABpI6IqCnpQVVepyXrsqH wu6rTpvW7Lea3UPbamuGEKL3lhBaZj0kCN/jF0gfKOCw8W0KLPLjp3ySBhkypCbq wOkEuhowRSf78z5vhlbegDCtIBhAQwBwiHVzlkFvgyBCxU64HEICowaAovQllwrW ATv9804OfcC3xkGop/GD/GGC/cfciR3RT+I2Csk3JVTq6Ea3JF451RcoxpalPttg tUdxxTzdLYpXNcEeaDKEaPg/XF4gJt1A7er9RBZya62/pAtNWoPAkiB5SAMhEWbf BdhipR5iHngBPmVphiEt/hKsoYZfmIRavKOetFMLLyFMsiGEfXrnPiZJkQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFI4KORquuPx8gz+CV9ep50pVszr+MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBhL2YyNjUw MS02NzE4LTQyYmMtOTFkZi1lZGI0M2UxZDRlZTAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGEvZjI2NTAx LTY3MTgtNDJiYy05MWRmLWVkYjQzZTFkNGVlMC8xL2pnbzVHcTY0X0h5RFA0Slgx Nm5uU2xXek92NC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCubuEMA0EAgACMAcDBQMqC6WAMA0GCSqGSIb3 DQEBCwUAA4IBAQBqtB6dFYv6DwrFAZwPMhMTRACLpUUbDolcaqOV/hdOaDAZapQA gmW9zhwxwWvl9JaKImeREWixsAPzKJfkpybM5uaREXcK46V6oo4rUO4svN+FSSb6 Y4SMfzr03VQkb8OtZAfLUFwiIJejrq6igHQKhUfRdzf1Mwq0qvUficVQl8dhsmul 8wLI9CFVzNSg7IUv6xCXGPVzDb9PfL/XPJgyvFepmWeLDfgPx/B7ewAJF9mLgUcG FWJRntX/wRRB8IXMhkV9WorarylVR2yHxxNBDqkA2OxA3keG5xXe2bV8jIKo4r0x 4Odce+qMtUEqT0FCyP3NHJZZlC+VUe2usyNL -----END CERTIFICATE-----Generated at Sun Jan 25 21:42:35 2026 by rpki-client