This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jo6Xer76Kh-ZXonJR_79Rja3lhw.cer File: jo6Xer76Kh-ZXonJR_79Rja3lhw.cer (raw, json) Hash identifier: rU158WfThJIfbzX7Sn8eNIUbIhVVZJp7o6lPxoYLTtM= Subject key identifier: 8E:8E:97:7A:BE:FA:2A:1F:99:5E:89:C9:47:FE:FD:46:36:B7:96:1C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A2557209E9A00BCE92A33579D95967 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9c/f3d572-3dc7-4b46-9269-3c30a0ad13f6/1/jo6Xer76Kh-ZXonJR_79Rja3lhw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9c/f3d572-3dc7-4b46-9269-3c30a0ad13f6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:17:43 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 48185 IP: 62.193.192.0/18 IP: 2a02:2b8::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:55:72:09:e9:a0:0b:ce:92:a3:35:79:d9:59:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8e8e977abefa2a1f995e89c947fefd4636b7961c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:7a:01:0e:b9:78:48:85:2d:92:3c:63:a9:57: 89:9f:f8:85:ab:aa:72:d2:d4:3b:42:5b:38:c9:2f: ef:9e:94:97:10:8f:bf:c5:e0:b7:1a:08:82:89:73: df:5b:4a:85:87:d7:6c:b0:08:10:c0:fa:a2:f3:f4: 92:b4:85:a5:62:0b:96:ea:ee:0e:5f:ee:67:49:db: 4e:ce:b1:5c:93:8e:fd:0b:61:ef:7e:3c:f8:88:38: 26:f9:ab:8b:6e:01:2d:79:b2:a4:d4:b6:d0:af:8a: 5d:64:a2:6e:fd:65:8f:2f:70:cd:13:b7:a4:32:5c: d8:3c:d1:17:d8:0e:43:4d:57:fb:b8:1c:5d:35:77: 02:3b:cd:8a:8a:33:ae:af:a2:6e:5b:16:12:d8:f3: 40:65:30:54:e1:31:9d:48:1f:d7:99:46:d1:4a:99: 6d:94:ac:a1:6c:42:92:3c:f2:e1:af:b7:7d:23:51: f4:7c:b8:4a:ab:bc:c1:3d:7e:73:9d:33:72:2f:df: 42:74:e3:f4:1a:af:91:01:df:b8:33:36:fb:36:09: ad:42:27:48:ad:19:e7:56:ff:ad:ae:8c:df:8a:09: 6f:29:9d:64:fd:8d:28:33:a7:91:8b:1a:8a:2d:fa: e0:0b:78:62:56:93:24:ca:b1:9b:57:b5:a1:ce:f0: a2:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:8E:97:7A:BE:FA:2A:1F:99:5E:89:C9:47:FE:FD:46:36:B7:96:1C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f3d572-3dc7-4b46-9269-3c30a0ad13f6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f3d572-3dc7-4b46-9269-3c30a0ad13f6/1/jo6Xer76Kh-ZXonJR_79Rja3lhw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.193.192.0/18 IPv6: 2a02:2b8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 48185 Signature Algorithm: sha256WithRSAEncryption 0a:02:4c:41:f3:9d:50:28:ce:7f:cb:74:2a:4b:f5:d1:0f:63: dc:3d:c7:06:f3:f1:30:91:e2:6f:b2:a3:0e:27:ad:ff:47:cd: db:77:03:ff:e0:13:c0:d8:4a:48:51:9f:50:3c:74:aa:ee:04: 2d:6c:ba:dd:7f:34:96:b5:9b:3d:35:8b:69:75:9d:4d:9c:32: 94:43:96:90:55:fe:4f:c2:ce:ce:bd:80:64:65:f3:a1:ee:b0: 39:85:7c:6e:f0:29:9a:53:eb:da:c5:02:ae:a3:69:a0:f9:80: 0b:3e:4b:cd:56:44:11:a9:a7:ce:95:6e:00:8f:35:de:4f:1a: 11:0c:f8:b5:a5:a3:f8:23:df:69:f2:d6:89:1d:c1:ee:54:8c: 87:6f:31:c1:d6:3f:ec:c5:a9:8a:dd:f2:45:a9:42:18:51:c1: 72:25:78:6b:9d:0b:24:f6:96:6e:fc:c7:6b:2b:94:2d:b4:c2: 62:fe:e8:01:0b:65:b2:0e:4f:fb:b5:69:ea:a0:fb:2b:c6:3b: 62:9e:e4:e1:8b:c9:b3:25:2f:51:84:4e:a6:8a:c0:0a:c5:e9: 24:f7:39:20:44:0b:cf:66:49:ce:38:5c:74:fb:07:d4:cb:89: 23:53:15:63:48:11:0c:fd:ef:7d:d0:b8:c1:f0:95:23:43:12: 4e:47:74:0b -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt4olVyCemgC86SozV52VlnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZThlOTc3YWJlZmEyYTFmOTk1ZTg5Yzk0N2ZlZmQ0NjM2Yjc5NjFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyXoBDrl4SIUtkjxjqVeJn/iFq6py 0tQ7Qls4yS/vnpSXEI+/xeC3GgiCiXPfW0qFh9dssAgQwPqi8/SStIWlYguW6u4O X+5nSdtOzrFck479C2Hvfjz4iDgm+auLbgEtebKk1LbQr4pdZKJu/WWPL3DNE7ek MlzYPNEX2A5DTVf7uBxdNXcCO82KijOur6JuWxYS2PNAZTBU4TGdSB/XmUbRSplt lKyhbEKSPPLhr7d9I1H0fLhKq7zBPX5znTNyL99CdOP0Gq+RAd+4Mzb7NgmtQidI rRnnVv+trozfiglvKZ1k/Y0oM6eRixqKLfrgC3hiVpMkyrGbV7WhzvCirwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFI6Ol3q++iofmV6JyUf+/UY2t5YcMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzljL2YzZDU3 Mi0zZGM3LTRiNDYtOTI2OS0zYzMwYTBhZDEzZjYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWMvZjNkNTcy LTNkYzctNGI0Ni05MjY5LTNjMzBhMGFkMTNmNi8xL2pvNlhlcjc2S2gtWlhvbkpS Xzc5UmphM2xody5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQGPsHAMA0EAgACMAcDBQAqAgK4MBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwC8OTANBgkqhkiG9w0BAQsFAAOCAQEACgJMQfOdUCjO f8t0Kkv10Q9j3D3HBvPxMJHib7KjDiet/0fN23cD/+ATwNhKSFGfUDx0qu4ELWy6 3X80lrWbPTWLaXWdTZwylEOWkFX+T8LOzr2AZGXzoe6wOYV8bvApmlPr2sUCrqNp oPmACz5LzVZEEamnzpVuAI813k8aEQz4taWj+CPfafLWiR3B7lSMh28xwdY/7MWp it3yRalCGFHBciV4a50LJPaWbvzHayuULbTCYv7oAQtlsg5P+7Vp6qD7K8Y7Yp7k 4YvJsyUvUYROporACsXpJPc5IEQLz2ZJzjhcdPsH1MuJI1MVY0gRDP3vfdC4wfCV I0MSTkd0Cw== -----END CERTIFICATE-----Generated at Mon Jan 26 06:22:51 2026 by rpki-client