This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jl3HMsooNJc1R8eA4cOlq0eAW-A.cer File: jl3HMsooNJc1R8eA4cOlq0eAW-A.cer (raw, json) Hash identifier: ZmCkuHOYkSUtkjtCGr/SqXPXmPENzqdBjiJuqJWvUfg= Subject key identifier: 8E:5D:C7:32:CA:28:34:97:35:47:C7:80:E1:C3:A5:AB:47:80:5B:E0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F85484C16F00605E7E7EA51952BF533 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8c/6ef146-dac6-4ea5-be58-4ee69a777bbe/1/jl3HMsooNJc1R8eA4cOlq0eAW-A.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8c/6ef146-dac6-4ea5-be58-4ee69a777bbe/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:23:19 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 207492 IP: 94.231.194.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:48:4c:16:f0:06:05:e7:e7:ea:51:95:2b:f5:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:23:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8e5dc732ca2834973547c780e1c3a5ab47805be0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:12:32:37:06:a8:6a:db:e6:ce:c4:23:8d:6b: 8b:d9:22:91:34:fa:17:0d:b5:c9:b6:34:32:45:a4: 28:60:9c:5a:97:39:2f:7f:18:62:e5:68:a6:53:8f: fe:44:38:43:61:ae:de:c0:e1:ba:bc:c1:de:5b:ae: fb:39:1b:69:0e:69:51:ac:1b:f6:97:4a:e9:1f:4a: 36:a0:8b:60:f0:e9:e7:4d:e5:cb:06:b5:a6:b9:0d: 36:11:a2:84:aa:34:e4:13:b6:9f:52:6a:b7:21:8c: 21:fd:ba:8f:84:96:ed:37:11:c6:7d:c2:26:1b:df: fd:69:d7:67:1e:5a:bc:74:a5:d5:32:fa:5b:88:f3: e2:91:06:3d:1e:86:f4:0f:84:92:fc:87:cb:1b:d2: fc:72:9e:5b:70:3b:16:92:3a:f1:27:5d:e5:dd:11: 17:ba:20:e0:7c:b1:5d:ea:d3:f3:69:fe:f0:9b:93: 7b:fe:d4:36:8f:81:4f:84:e8:1d:4e:59:4f:27:b9: 1b:33:9f:c7:d0:0c:9a:30:15:2a:3f:b0:6b:54:94: 02:2e:23:67:04:a8:8e:74:f5:56:ab:c7:09:82:12: a0:03:8a:70:7c:cf:12:38:d9:b1:d8:13:35:02:63: 3a:54:58:9d:17:a4:62:45:7b:0b:be:fe:31:ff:a0: f8:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:5D:C7:32:CA:28:34:97:35:47:C7:80:E1:C3:A5:AB:47:80:5B:E0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/6ef146-dac6-4ea5-be58-4ee69a777bbe/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/6ef146-dac6-4ea5-be58-4ee69a777bbe/1/jl3HMsooNJc1R8eA4cOlq0eAW-A.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.231.194.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 207492 Signature Algorithm: sha256WithRSAEncryption 7e:91:bd:48:b5:d0:69:44:67:55:ff:16:db:f2:a3:10:c1:24: 8b:c2:dd:4f:c2:ce:73:64:67:ca:da:ae:4b:fc:c2:0c:a3:31: 06:0d:65:43:15:97:f1:61:73:a0:92:02:1c:a8:09:a1:94:fb: 09:37:45:d1:c2:ee:9e:56:35:7b:b7:7b:82:0e:ec:87:25:7a: 96:19:2c:b4:34:6d:35:50:e6:5f:89:1b:63:1d:81:09:f4:26: 57:58:0d:3a:36:5e:ec:15:5e:3d:56:d7:fa:41:28:48:1c:39: 77:3e:b2:70:25:d3:01:de:08:1d:5a:aa:30:f8:12:b2:a9:fe: 77:b6:52:b2:03:76:f6:57:d3:40:cc:fc:ad:37:43:2f:bc:c5: de:87:51:4b:08:5f:3c:08:11:d6:ed:03:53:93:61:f3:3b:77: 92:b8:25:35:c2:6a:8e:01:41:cf:18:96:f7:10:cf:92:63:75: 5a:0b:1a:17:d8:3e:c8:bf:c7:8f:53:95:42:5f:a5:c4:ad:25: 33:7e:86:7f:34:7f:87:02:f7:b1:d5:bf:89:34:5c:1a:82:d0: fd:bf:8e:98:a3:21:10:22:75:b1:91:ba:b0:b1:04:37:66:4b: 9e:ed:2e:04:fe:61:e3:7c:a6:a5:79:c6:ee:be:1d:46:6b:7b: 72:56:75:54 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt/hUhMFvAGBefn6lGVK/UzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMzE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZTVkYzczMmNhMjgzNDk3MzU0N2M3ODBlMWMzYTVhYjQ3ODA1YmUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6hIyNwaoatvmzsQjjWuL2SKRNPoX DbXJtjQyRaQoYJxalzkvfxhi5WimU4/+RDhDYa7ewOG6vMHeW677ORtpDmlRrBv2 l0rpH0o2oItg8OnnTeXLBrWmuQ02EaKEqjTkE7afUmq3IYwh/bqPhJbtNxHGfcIm G9/9addnHlq8dKXVMvpbiPPikQY9Hob0D4SS/IfLG9L8cp5bcDsWkjrxJ13l3REX uiDgfLFd6tPzaf7wm5N7/tQ2j4FPhOgdTllPJ7kbM5/H0AyaMBUqP7BrVJQCLiNn BKiOdPVWq8cJghKgA4pwfM8SONmx2BM1AmM6VFidF6RiRXsLvv4x/6D4+wIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFI5dxzLKKDSXNUfHgOHDpatHgFvgMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhjLzZlZjE0 Ni1kYWM2LTRlYTUtYmU1OC00ZWU2OWE3NzdiYmUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGMvNmVmMTQ2 LWRhYzYtNGVhNS1iZTU4LTRlZTY5YTc3N2JiZS8xL2psM0hNc29vTkpjMVI4ZUE0 Y09scTBlQVctQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAXufCMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMqhDANBgkqhkiG9w0BAQsFAAOCAQEAfpG9SLXQaURnVf8W2/KjEMEki8LdT8LO c2RnytquS/zCDKMxBg1lQxWX8WFzoJICHKgJoZT7CTdF0cLunlY1e7d7gg7shyV6 lhkstDRtNVDmX4kbYx2BCfQmV1gNOjZe7BVePVbX+kEoSBw5dz6ycCXTAd4IHVqq MPgSsqn+d7ZSsgN29lfTQMz8rTdDL7zF3odRSwhfPAgR1u0DU5Nh8zt3krglNcJq jgFBzxiW9xDPkmN1WgsaF9g+yL/Hj1OVQl+lxK0lM36GfzR/hwL3sdW/iTRcGoLQ /b+OmKMhECJ1sZG6sLEEN2ZLnu0uBP5h43ympXnG7r4dRmt7clZ1VA== -----END CERTIFICATE-----Generated at Mon Jan 26 06:05:04 2026 by rpki-client