This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jmNwTVUB7XWm4glm6_B6NlVbGrY.cer File: jmNwTVUB7XWm4glm6_B6NlVbGrY.cer (raw, json) Hash identifier: Y9WJZ/F9CJnghNZswn5t8DyDJMh5jei3yOBo0M1X1tA= Subject key identifier: 8E:63:70:4D:55:01:ED:75:A6:E2:09:66:EB:F0:7A:36:55:5B:1A:B6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7834E459C52A4819F54D1AA6930DCBAC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/50/79721f-f40b-41d2-ac0e-c947e16c2c61/1/jmNwTVUB7XWm4glm6_B6NlVbGrY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/50/79721f-f40b-41d2-ac0e-c947e16c2c61/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:10 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.247.124.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:e4:59:c5:2a:48:19:f5:4d:1a:a6:93:0d:cb:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8e63704d5501ed75a6e20966ebf07a36555b1ab6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c0:a2:52:ac:72:4c:6b:b2:c7:57:e4:0a:18: 57:d4:3d:0d:25:50:74:f8:03:ab:39:61:17:6d:59: 10:41:d3:d0:02:55:f0:f3:b7:1b:ad:ac:e9:bb:70: ca:7a:3d:5f:64:d4:30:a7:78:d7:17:d2:4d:67:6d: 14:98:45:46:c9:0b:80:61:07:f0:d3:d1:17:fd:1d: d8:1d:3e:55:3f:46:6b:6d:3d:c6:cf:3c:3c:e4:88: 32:4b:f9:05:50:c6:e2:9d:ea:cc:c8:66:b8:af:a2: 32:5a:ca:67:35:36:82:10:f9:05:3e:8c:bf:71:aa: a1:c1:da:6a:75:54:46:f8:34:3d:94:da:f8:4a:1f: b7:0e:e0:3d:1d:1c:a9:a9:54:b2:96:07:79:66:30: b8:8a:ba:e2:1a:2b:f6:9a:8f:1c:d9:8e:fd:55:ae: 74:be:f5:63:af:c1:95:8a:9b:cd:09:e7:38:a3:5b: 3d:e1:7f:66:c0:98:5e:19:66:33:a5:11:70:ca:19: c6:d6:d6:37:b9:c8:fb:ca:98:ae:c4:0b:55:0d:6f: 47:8e:68:bc:0b:9a:11:1b:1e:ca:9e:45:c2:b3:19: 8d:da:96:cc:04:e3:ce:5d:fb:84:22:a4:fd:cf:09: 53:4d:fe:fc:83:3a:b2:c5:9d:40:1f:87:ca:f9:ce: 1c:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:63:70:4D:55:01:ED:75:A6:E2:09:66:EB:F0:7A:36:55:5B:1A:B6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/79721f-f40b-41d2-ac0e-c947e16c2c61/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/79721f-f40b-41d2-ac0e-c947e16c2c61/1/jmNwTVUB7XWm4glm6_B6NlVbGrY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.247.124.0/23 Signature Algorithm: sha256WithRSAEncryption 03:58:ce:e2:df:7d:b0:a0:6c:61:ed:31:94:4e:3d:9a:21:79: dc:20:d1:6c:e7:d3:af:72:77:f1:7a:58:ed:09:20:2c:bf:78: 79:c8:e9:f3:9e:ae:c3:f7:3b:2f:f4:2d:34:24:7a:dc:44:29: 87:92:37:43:70:b2:63:33:66:07:03:ef:33:0f:a3:39:c6:84: 4a:2c:a8:7a:ff:7e:66:8f:d1:04:c6:fd:28:fb:a0:47:bc:af: 04:79:1b:9a:34:fb:05:d7:82:be:d9:62:bc:09:7a:d1:5a:f5: 24:2d:b5:b6:27:9e:3a:db:cb:62:d1:b6:fa:d6:15:64:eb:e0: 2f:79:22:39:cf:f2:48:38:13:db:fe:2b:42:6d:b9:a5:cc:d5: 78:81:b2:46:b3:e0:23:f5:06:38:14:5f:9c:d7:f7:3c:2e:36: 8a:15:db:18:5d:38:bf:f7:53:e0:11:7d:d7:82:97:9d:b3:d6: 3e:48:40:0f:36:48:7f:26:81:5c:27:72:e0:3e:df:af:73:f5: d7:b6:8a:69:17:15:03:a3:3b:61:ce:b4:cc:65:88:69:c9:16: 87:8a:78:7a:70:ab:96:ee:eb:d1:1d:d3:56:7a:ec:f5:9e:e7: 44:19:ea:b0:14:5b:64:6a:7a:5f:b7:5f:ec:dd:af:e1:96:47: d4:22:ae:ac -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt4NORZxSpIGfVNGqaTDcusMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZTYzNzA0ZDU1MDFlZDc1YTZlMjA5NjZlYmYwN2EzNjU1NWIxYWI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsCiUqxyTGuyx1fkChhX1D0NJVB0 +AOrOWEXbVkQQdPQAlXw87cbrazpu3DKej1fZNQwp3jXF9JNZ20UmEVGyQuAYQfw 09EX/R3YHT5VP0ZrbT3Gzzw85IgyS/kFUMbinerMyGa4r6IyWspnNTaCEPkFPoy/ caqhwdpqdVRG+DQ9lNr4Sh+3DuA9HRypqVSylgd5ZjC4irriGiv2mo8c2Y79Va50 vvVjr8GVipvNCec4o1s94X9mwJheGWYzpRFwyhnG1tY3ucj7ypiuxAtVDW9Hjmi8 C5oRGx7KnkXCsxmN2pbMBOPOXfuEIqT9zwlTTf78gzqyxZ1AH4fK+c4c0wIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFI5jcE1VAe11puIJZuvwejZVWxq2MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUwLzc5NzIx Zi1mNDBiLTQxZDItYWMwZS1jOTQ3ZTE2YzJjNjEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTAvNzk3MjFm LWY0MGItNDFkMi1hYzBlLWM5NDdlMTZjMmM2MS8xL2ptTndUVlVCN1hXbTRnbG02 X0I2TmxWYkdyWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQBwfd8MA0GCSqGSIb3DQEBCwUAA4IBAQADWM7i 332woGxh7TGUTj2aIXncINFs59OvcnfxeljtCSAsv3h5yOnznq7D9zsv9C00JHrc RCmHkjdDcLJjM2YHA+8zD6M5xoRKLKh6/35mj9EExv0o+6BHvK8EeRuaNPsF14K+ 2WK8CXrRWvUkLbW2J54628ti0bb61hVk6+AveSI5z/JIOBPb/itCbbmlzNV4gbJG s+Aj9QY4FF+c1/c8LjaKFdsYXTi/91PgEX3Xgpeds9Y+SEAPNkh/JoFcJ3LgPt+v c/XXtoppFxUDozthzrTMZYhpyRaHinh6cKuW7uvRHdNWeuz1nudEGeqwFFtkanpf t1/s3a/hlkfUIq6s -----END CERTIFICATE-----Generated at Sun Jan 25 23:34:49 2026 by rpki-client