This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jj8WY5lr4XB2Ef3OHd6okg3TmKM.cer File: jj8WY5lr4XB2Ef3OHd6okg3TmKM.cer (raw, json) Hash identifier: +Ip9yubvbOcSvJW0jP17/yUrnu0IEhQ42g8kjk6jWl8= Subject key identifier: 8E:3F:16:63:99:6B:E1:70:76:11:FD:CE:1D:DE:A8:92:0D:D3:98:A3 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B35778D8BBF1071BEFA0909B1210E95 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/jj8WY5lr4XB2Ef3OHd6okg3TmKM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:17:40 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 45.139.208.0/22 IP: 2a01:e300::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:77:8d:8b:bf:10:71:be:fa:09:09:b1:21:0e:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8e3f1663996be1707611fdce1ddea8920dd398a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:b0:d6:4c:7e:dc:33:07:e4:13:96:f9:53:de: b0:0c:19:6f:78:2c:6b:e6:f5:c8:ee:0d:31:4d:f4: 3b:f7:4d:97:96:c4:93:88:47:e6:a5:37:5d:8c:7b: b3:b2:3c:11:ca:50:6f:f4:2f:e6:42:a8:71:6e:fe: 96:1e:de:86:f7:d7:c6:2f:c2:6c:aa:68:da:0f:f1: 2d:a5:a0:ab:65:f8:42:e1:54:9b:33:92:0f:8f:30: c2:23:0f:e1:9e:1d:82:19:5f:e1:0c:bc:69:67:7f: 1f:76:ee:0c:e2:02:92:93:40:ea:c0:18:e9:ea:48: c8:b2:ca:9b:b0:f7:4b:ec:9f:f4:99:96:3e:d2:13: 94:44:54:13:01:64:05:c4:9a:b2:3e:d9:3d:11:8f: c5:f3:8b:a1:73:d5:7c:a7:b7:15:f5:81:9c:d7:1b: b4:18:25:cc:b8:ad:81:c7:07:3e:5e:2d:47:ea:21: b3:36:f5:56:98:6b:13:71:1b:1c:9c:d1:c2:39:b2: 6c:44:79:79:32:6c:d9:88:f3:d2:01:3b:c3:8a:a2: 48:7d:ba:ea:cc:e5:4c:46:43:5d:fa:60:64:32:d3: 4a:c1:27:8a:f7:55:71:a9:a7:45:ff:a7:1a:69:6a: 0b:23:f9:29:d7:db:db:33:92:87:4a:e7:ed:e3:d0: 7d:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:3F:16:63:99:6B:E1:70:76:11:FD:CE:1D:DE:A8:92:0D:D3:98:A3 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/jj8WY5lr4XB2Ef3OHd6okg3TmKM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.139.208.0/22 IPv6: 2a01:e300::/29 Signature Algorithm: sha256WithRSAEncryption 5d:cf:b9:63:5a:a3:8c:bb:29:55:34:80:16:3f:78:18:91:4a: 23:30:2c:5f:af:27:82:e3:35:95:0a:b5:4b:e7:ff:7c:44:d2: fc:a3:cf:5e:c3:d4:01:0e:f7:5d:ff:62:59:4b:f8:e5:7a:7b: 02:f9:15:90:4a:47:53:31:b3:4a:90:ed:1e:15:5d:b5:cd:7c: 10:59:12:8d:7e:17:39:35:15:2e:36:2d:2f:75:84:cd:f8:5b: 85:4c:ea:3d:95:fe:11:76:c6:75:88:a1:ef:20:58:2b:f3:a4: 6b:8d:6f:d1:71:26:f5:1b:3a:a2:c8:c5:44:e4:bd:a5:27:b8: 62:dd:ac:0c:58:23:61:89:0f:f2:6c:ff:ae:8f:1b:45:b5:1f: aa:09:bf:27:96:ea:0f:85:10:14:7a:48:20:95:90:ae:0b:02: c4:b9:e9:d9:f3:3c:70:fa:68:b2:70:9f:ea:ce:64:51:6a:0a: 5c:54:cf:33:48:46:8b:8d:b3:33:6e:c8:57:1a:bc:76:de:3d: 92:30:ff:56:89:19:06:3b:ce:4c:98:8e:9f:14:e8:53:19:9c: e6:d6:a9:1e:f2:04:52:c1:05:90:df:89:ef:07:57:da:6e:36: c9:76:a0:8a:ec:65:aa:88:83:73:56:be:52:30:d7:9d:a8:7d: 86:95:60:1d -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt7NXeNi78Qcb76CQmxIQ6VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZTNmMTY2Mzk5NmJlMTcwNzYxMWZkY2UxZGRlYTg5MjBkZDM5OGEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7rDWTH7cMwfkE5b5U96wDBlveCxr 5vXI7g0xTfQ7902XlsSTiEfmpTddjHuzsjwRylBv9C/mQqhxbv6WHt6G99fGL8Js qmjaD/EtpaCrZfhC4VSbM5IPjzDCIw/hnh2CGV/hDLxpZ38fdu4M4gKSk0DqwBjp 6kjIssqbsPdL7J/0mZY+0hOURFQTAWQFxJqyPtk9EY/F84uhc9V8p7cV9YGc1xu0 GCXMuK2Bxwc+Xi1H6iGzNvVWmGsTcRscnNHCObJsRHl5MmzZiPPSATvDiqJIfbrq zOVMRkNd+mBkMtNKwSeK91VxqadF/6caaWoLI/kp19vbM5KHSuft49B9OwIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFI4/FmOZa+FwdhH9zh3eqJIN05ijMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZlL2NkOTdj Yy1jZTJiLTQyNjQtOWU3OS1jOGY5YmU3ZDE5ZGYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmUvY2Q5N2Nj LWNlMmItNDI2NC05ZTc5LWM4ZjliZTdkMTlkZi8xL2pqOFdZNWxyNFhCMkVmM09I ZDZva2czVG1LTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCLYvQMA0EAgACMAcDBQMqAeMAMA0GCSqGSIb3 DQEBCwUAA4IBAQBdz7ljWqOMuylVNIAWP3gYkUojMCxfryeC4zWVCrVL5/98RNL8 o89ew9QBDvdd/2JZS/jlensC+RWQSkdTMbNKkO0eFV21zXwQWRKNfhc5NRUuNi0v dYTN+FuFTOo9lf4RdsZ1iKHvIFgr86RrjW/RcSb1GzqiyMVE5L2lJ7hi3awMWCNh iQ/ybP+ujxtFtR+qCb8nluoPhRAUekgglZCuCwLEuenZ8zxw+miycJ/qzmRRagpc VM8zSEaLjbMzbshXGrx23j2SMP9WiRkGO85MmI6fFOhTGZzm1qke8gRSwQWQ34nv B1fabjbJdqCK7GWqiINzVr5SMNedqH2GlWAd -----END CERTIFICATE-----Generated at Sun Jan 25 12:10:48 2026 by rpki-client