This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.cer File: jnnO9FjeUDkuPAK2kYLzTGAUjSQ.cer (raw, json) Hash identifier: 9zjH4wClwioRKdA9nLuLyC2zHzNEOapcrhio99GNCSI= Subject key identifier: 8E:79:CE:F4:58:DE:50:39:2E:3C:02:B6:91:82:F3:4C:60:14:8D:24 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A21075624433C0BF9AF6E4EC687B29 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1e/334d54-4943-4deb-891c-cc1208148729/1/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1e/334d54-4943-4deb-891c-cc1208148729/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:17:25 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.23.144.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:10:75:62:44:33:c0:bf:9a:f6:e4:ec:68:7b:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:17:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8e79cef458de50392e3c02b69182f34c60148d24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:44:24:91:d7:59:3a:12:f3:22:cd:d3:24:b0: d4:ab:84:39:f7:5d:09:36:3e:b8:13:bc:dc:da:f4: da:07:c4:24:0a:4a:e2:e0:80:ed:b8:cd:7a:9c:d0: 11:15:47:5e:5b:9f:df:53:18:ab:24:24:f7:6c:a5: ab:9a:51:1e:e4:a6:e9:3a:7e:75:8e:6b:3e:08:d8: d0:e9:76:ec:12:b3:e1:e0:60:a1:18:be:bc:cb:ef: 3c:95:93:c4:22:0e:de:cc:88:0e:4e:b7:54:1d:8e: 42:73:7a:2d:da:58:0f:bd:71:a3:de:4d:d9:8e:a5: 87:d9:bc:e8:c4:b0:ba:b5:a6:9d:f5:8b:ce:0f:26: 51:73:6b:9b:46:41:15:b6:8c:42:5b:05:ed:ac:ca: 39:2b:b3:78:25:68:31:fc:9c:1f:2e:87:05:7e:c2: 24:5e:71:29:5f:11:16:2c:cd:c2:ae:df:46:7f:22: bb:44:bb:cc:36:f1:40:e7:f3:4d:b1:36:6c:92:ec: d8:b4:43:04:e8:48:7c:1f:3c:a3:4f:bb:c3:51:03: 0b:74:89:a5:07:66:7b:b3:b0:03:72:83:e6:aa:a9: e9:b9:ef:30:44:12:8f:10:18:89:62:d0:74:ac:7a: 51:2b:ba:a5:3f:8c:fe:89:c6:02:ab:3e:74:ce:4d: 66:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:79:CE:F4:58:DE:50:39:2E:3C:02:B6:91:82:F3:4C:60:14:8D:24 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/334d54-4943-4deb-891c-cc1208148729/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/334d54-4943-4deb-891c-cc1208148729/1/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.23.144.0/22 Signature Algorithm: sha256WithRSAEncryption 17:36:2b:ad:c1:58:ee:a0:63:31:57:fa:28:93:97:e3:3b:8d: ed:41:34:a2:6e:f6:be:9b:8b:3c:0a:d4:5a:73:bc:a6:96:af: 0d:58:ca:35:0a:10:c4:11:3c:61:61:2d:d9:ce:89:40:af:a7: 72:33:c5:f2:44:b0:ad:e6:00:01:ae:c8:7a:a4:3c:f9:12:32: ef:9a:27:42:e9:81:f7:8b:c7:bf:69:94:38:28:68:c2:ca:8c: 20:19:2a:b4:85:1a:da:42:19:0a:17:91:63:8d:74:df:6c:91: 79:ae:2f:59:0d:93:16:66:85:c5:97:74:c3:f5:a9:e6:37:df: d2:a2:81:48:45:81:2a:41:8b:06:bf:a3:a6:f2:dc:21:50:61: a9:a5:d2:86:eb:e9:59:26:90:8d:22:2b:b7:e3:65:d1:96:e8: 17:d3:c6:64:5b:1f:c4:e4:fd:54:ac:04:bf:e9:56:8c:ea:ea: 1f:ad:fb:b5:07:b1:28:ad:ff:84:e2:4c:3d:aa:b7:be:5c:1e: 48:f4:03:c6:00:76:eb:7d:a6:27:ac:04:86:d6:9a:ba:80:81: 90:87:aa:b9:64:99:ff:0d:36:20:8f:5c:25:5f:dd:5c:a1:39: 07:40:55:e1:8d:bf:1e:36:52:a4:e9:ae:7f:57:7c:4a:bc:ae: e2:02:49:ae -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt4ohB1YkQzwL+a9uTsaHspMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxNzI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZTc5Y2VmNDU4ZGU1MDM5MmUzYzAyYjY5MTgyZjM0YzYwMTQ4ZDI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEQkkddZOhLzIs3TJLDUq4Q5910J Nj64E7zc2vTaB8QkCkri4IDtuM16nNARFUdeW5/fUxirJCT3bKWrmlEe5KbpOn51 jms+CNjQ6XbsErPh4GChGL68y+88lZPEIg7ezIgOTrdUHY5Cc3ot2lgPvXGj3k3Z jqWH2bzoxLC6taad9YvODyZRc2ubRkEVtoxCWwXtrMo5K7N4JWgx/JwfLocFfsIk XnEpXxEWLM3Crt9GfyK7RLvMNvFA5/NNsTZskuzYtEME6Eh8HzyjT7vDUQMLdIml B2Z7s7ADcoPmqqnpue8wRBKPEBiJYtB0rHpRK7qlP4z+icYCqz50zk1mTQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFI55zvRY3lA5LjwCtpGC80xgFI0kMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFlLzMzNGQ1 NC00OTQzLTRkZWItODkxYy1jYzEyMDgxNDg3MjkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWUvMzM0ZDU0 LTQ5NDMtNGRlYi04OTFjLWNjMTIwODE0ODcyOS8xL2pubk85RmplVURrdVBBSzJr WUx6VEdBVWpTUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCuReQMA0GCSqGSIb3DQEBCwUAA4IBAQAXNiut wVjuoGMxV/ook5fjO43tQTSibva+m4s8CtRac7ymlq8NWMo1ChDEETxhYS3ZzolA r6dyM8XyRLCt5gABrsh6pDz5EjLvmidC6YH3i8e/aZQ4KGjCyowgGSq0hRraQhkK F5FjjXTfbJF5ri9ZDZMWZoXFl3TD9anmN9/SooFIRYEqQYsGv6Om8twhUGGppdKG 6+lZJpCNIiu342XRlugX08ZkWx/E5P1UrAS/6VaM6uofrfu1B7Eorf+E4kw9qre+ XB5I9APGAHbrfaYnrASG1pq6gIGQh6q5ZJn/DTYgj1wlX91coTkHQFXhjb8eNlKk 6a5/V3xKvK7iAkmu -----END CERTIFICATE-----Generated at Sun Jan 25 22:34:07 2026 by rpki-client