This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jn-19ShH8hcOZ_zCWt8LXWhv-vw.cer File: jn-19ShH8hcOZ_zCWt8LXWhv-vw.cer (raw, json) Hash identifier: UZwiEnorvpjUZuh1+wCv3XW0Uvocq1+DBHLaym3YzRI= Subject key identifier: 8E:7F:B5:F5:28:47:F2:17:0E:67:FC:C2:5A:DF:0B:5D:68:6F:FA:FC Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F82BDE68F42C0A4A6BE4875AD5B57AB Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/39/ac770e-41da-4d36-97e2-1618d5eeaae8/1/jn-19ShH8hcOZ_zCWt8LXWhv-vw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/39/ac770e-41da-4d36-97e2-1618d5eeaae8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:20:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 49055 IP: 95.215.208.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:bd:e6:8f:42:c0:a4:a6:be:48:75:ad:5b:57:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:20:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8e7fb5f52847f2170e67fcc25adf0b5d686ffafc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d2:18:6d:d7:90:9b:b0:31:80:fd:84:88:04: 2a:49:00:83:32:2a:3e:0c:88:03:9d:a5:04:b1:c1: e6:fc:47:9b:10:e2:c0:35:e9:c0:da:23:43:18:97: 44:22:4a:ba:51:08:67:52:90:3e:f5:79:67:25:57: 6f:11:59:e1:9b:f0:8f:91:f3:6e:3f:c6:45:00:52: 2e:fd:d0:46:35:31:bb:96:c5:0c:3b:be:9a:25:17: 65:ae:3c:35:87:f3:d7:29:e2:10:01:bb:4b:93:df: a4:71:d3:9c:61:fa:9d:ae:2a:09:88:6d:99:de:7c: 0d:cf:e8:c0:7b:0b:4e:40:93:ba:4f:5b:0a:c8:49: 85:1b:65:4b:12:43:1e:36:1c:08:6c:12:3b:51:aa: 5a:35:8a:db:70:cb:22:0b:7b:f0:21:2d:b9:ab:82: 21:1a:61:00:e0:e2:36:20:28:a6:a9:e4:ef:b1:b4: 35:79:0b:b8:5e:e7:6a:fd:da:92:ea:40:c4:86:ae: 31:62:64:49:ec:8d:46:41:4e:24:26:62:9a:60:42: fe:15:6d:cb:58:a4:dc:60:fd:84:be:c6:2b:42:a3: 59:ce:40:82:3b:42:8a:c1:e8:08:1a:fb:f6:c5:30: 48:e4:33:f7:9a:13:2f:46:91:39:29:a2:3d:08:3f: d2:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:7F:B5:F5:28:47:F2:17:0E:67:FC:C2:5A:DF:0B:5D:68:6F:FA:FC X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/ac770e-41da-4d36-97e2-1618d5eeaae8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/ac770e-41da-4d36-97e2-1618d5eeaae8/1/jn-19ShH8hcOZ_zCWt8LXWhv-vw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.215.208.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 49055 Signature Algorithm: sha256WithRSAEncryption ab:f3:e8:10:a7:84:fa:13:b0:76:e7:b4:c6:e4:19:b5:6d:4f: 68:15:a1:3d:67:af:03:80:e9:46:11:4e:1d:05:0b:4e:1e:d0: 4e:5c:9b:01:e2:cf:16:9b:d6:92:79:17:19:cf:f5:05:fa:7b: 8c:14:b7:71:a6:dd:d9:5d:93:d8:45:96:45:ff:58:b1:09:11: 8d:ac:a0:44:54:bf:ce:b4:b0:60:f5:7b:81:9b:08:06:32:77: 46:26:b1:49:ab:0c:aa:45:b4:d6:e1:a2:60:8e:66:45:5c:6a: e9:6d:a1:99:eb:c5:8a:89:fd:1d:8c:e5:bd:9c:0b:c9:8f:46: ec:5f:b2:73:2e:05:e6:9a:6f:23:7a:38:4d:62:cf:83:bb:ab: 1b:c3:da:85:d8:91:2f:fa:86:5a:f1:81:be:7e:50:c7:13:7f: 30:d6:d3:19:f6:8b:f0:4f:39:9e:e7:12:f3:8d:6a:74:e8:12: ce:c4:1d:86:32:c9:27:47:76:d4:e6:48:28:e9:47:82:83:3c: b6:4a:7a:ec:78:0a:85:3d:90:11:43:1a:d4:25:db:b9:e4:41: 6e:1e:96:40:f4:b2:88:f9:ca:45:be:77:f0:da:b6:cb:df:17: fa:4b:a3:1f:30:30:40:39:1f:51:e4:f9:6b:b0:c0:9a:f7:a9: f0:96:aa:93 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt/gr3mj0LApKa+SHWtW1erMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMDMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZTdmYjVmNTI4NDdmMjE3MGU2N2ZjYzI1YWRmMGI1ZDY4NmZmYWZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtIYbdeQm7AxgP2EiAQqSQCDMio+ DIgDnaUEscHm/EebEOLANenA2iNDGJdEIkq6UQhnUpA+9XlnJVdvEVnhm/CPkfNu P8ZFAFIu/dBGNTG7lsUMO76aJRdlrjw1h/PXKeIQAbtLk9+kcdOcYfqdrioJiG2Z 3nwNz+jAewtOQJO6T1sKyEmFG2VLEkMeNhwIbBI7UapaNYrbcMsiC3vwIS25q4Ih GmEA4OI2ICimqeTvsbQ1eQu4Xudq/dqS6kDEhq4xYmRJ7I1GQU4kJmKaYEL+FW3L WKTcYP2EvsYrQqNZzkCCO0KKwegIGvv2xTBI5DP3mhMvRpE5KaI9CD/S6QIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFI5/tfUoR/IXDmf8wlrfC11ob/r8MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM5L2FjNzcw ZS00MWRhLTRkMzYtOTdlMi0xNjE4ZDVlZWFhZTgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzkvYWM3NzBl LTQxZGEtNGQzNi05N2UyLTE2MThkNWVlYWFlOC8xL2puLTE5U2hIOGhjT1pfekNX dDhMWFdodi12dy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCX9fQMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwC/nzANBgkqhkiG9w0BAQsFAAOCAQEAq/PoEKeE+hOwdue0xuQZtW1PaBWhPWev A4DpRhFOHQULTh7QTlybAeLPFpvWknkXGc/1Bfp7jBS3cabd2V2T2EWWRf9YsQkR jaygRFS/zrSwYPV7gZsIBjJ3RiaxSasMqkW01uGiYI5mRVxq6W2hmevFion9HYzl vZwLyY9G7F+ycy4F5ppvI3o4TWLPg7urG8PahdiRL/qGWvGBvn5QxxN/MNbTGfaL 8E85nucS841qdOgSzsQdhjLJJ0d21OZIKOlHgoM8tkp67HgKhT2QEUMa1CXbueRB bh6WQPSyiPnKRb538Nq2y98X+kujHzAwQDkfUeT5a7DAmvep8Jaqkw== -----END CERTIFICATE-----Generated at Mon Jan 26 00:18:53 2026 by rpki-client