This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jsSmfb7XRE3dJ-gA-2whATpbEcY.cer File: jsSmfb7XRE3dJ-gA-2whATpbEcY.cer (raw, json) Hash identifier: 1rPwjZyW0nUBpTJJO9C/wRoiVdd2W+EnH8Imy8vqC5w= Subject key identifier: 8E:C4:A6:7D:BE:D7:44:4D:DD:27:E8:00:FB:6C:21:01:3A:5B:11:C6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77591E680BBEDA7B3A5D8DF564736E99 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/jsSmfb7XRE3dJ-gA-2whATpbEcY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:18:07 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 30742 IP: 2.59.32.0/22 IP: 80.245.132.0 -- 80.245.143.255 IP: 82.198.192.0/19 IP: 176.118.180.0/22 IP: 185.43.24.0/22 IP: 185.48.224.0/22 IP: 185.106.184.0/22 IP: 185.115.80.0/22 IP: 185.139.112.0/22 IP: 192.145.112.0/22 IP: 193.176.72.0/22 IP: 194.146.0.0/22 IP: 2a01:9b60::/32 IP: 2a03:9980::/29 IP: 2a06:7480::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:1e:68:0b:be:da:7b:3a:5d:8d:f5:64:73:6e:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8ec4a67dbed7444ddd27e800fb6c21013a5b11c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f2:59:cd:59:d0:5f:d4:89:15:b1:7b:60:8b: a1:75:6b:f4:4a:0c:32:20:49:5c:3a:c4:a7:54:4d: 05:a7:a5:1a:60:eb:73:20:f9:57:7c:12:b9:06:95: 69:7d:70:96:1c:20:8b:ca:cc:d2:6f:ae:0e:8f:9d: f2:4c:d0:a5:65:26:74:4a:d7:ec:07:96:fd:aa:fd: 10:ab:5b:24:8b:00:de:57:5f:2d:96:b5:76:53:66: 0b:a6:96:96:65:ea:fa:97:43:0c:2b:cc:e5:75:23: ab:1d:70:33:c6:eb:d6:81:05:be:7c:6b:10:8e:27: da:05:5f:7e:c6:13:ec:0f:8a:ac:ec:d1:db:3c:f9: 03:f0:cb:3e:f4:96:9a:8a:8d:18:e0:4c:c4:71:80: 22:75:a4:52:76:76:a5:f2:a8:08:c0:ee:2a:99:cd: ca:a9:cc:22:c4:22:68:ef:eb:ca:75:b5:61:9a:c7: f6:38:30:06:98:99:72:74:3b:03:56:bd:22:92:3d: 8e:ba:af:32:00:5d:f5:a7:fd:a9:c0:70:22:00:6a: f0:f7:2f:6d:5b:c0:35:dc:f6:e8:95:61:85:2c:e9: e5:30:cd:71:1d:88:af:89:1e:e1:43:47:77:96:67: e3:12:2b:a3:f4:67:2c:62:ce:a2:ae:26:86:74:42: f1:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:C4:A6:7D:BE:D7:44:4D:DD:27:E8:00:FB:6C:21:01:3A:5B:11:C6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/jsSmfb7XRE3dJ-gA-2whATpbEcY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.59.32.0/22 80.245.132.0-80.245.143.255 82.198.192.0/19 176.118.180.0/22 185.43.24.0/22 185.48.224.0/22 185.106.184.0/22 185.115.80.0/22 185.139.112.0/22 192.145.112.0/22 193.176.72.0/22 194.146.0.0/22 IPv6: 2a01:9b60::/32 2a03:9980::/29 2a06:7480::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 30742 Signature Algorithm: sha256WithRSAEncryption 75:62:32:37:8a:27:38:aa:d1:78:91:df:11:4a:ed:59:98:22: 4f:1c:3e:ac:ee:d7:dc:2c:73:4c:ef:b8:86:ed:e5:dc:73:ea: dd:15:af:05:cc:41:d8:78:ef:7a:c8:49:a2:d1:ee:7f:54:fa: 49:06:9e:aa:df:36:b2:73:79:94:d6:2b:0b:0e:60:9b:77:01: 26:a2:c3:3b:df:44:a6:06:9f:fc:c1:af:ca:6a:75:db:14:03: bb:97:6c:4d:9a:2a:73:64:91:9b:69:15:68:4e:6f:ff:40:43: 2d:3a:51:c5:f4:df:a9:93:9b:d0:4f:6d:c0:40:67:2b:d5:23: 76:95:59:6f:69:21:0b:ac:4b:54:27:87:79:ba:69:89:5a:05: cc:1b:4b:37:7d:91:fe:69:4b:96:64:f6:16:48:b3:8f:d0:89: e6:6d:ab:a0:87:11:f2:a7:64:26:18:f4:c5:bb:f4:fe:c0:23: 40:62:b6:51:65:9d:b1:54:57:94:7a:c1:e4:f9:64:b8:37:77: 9b:2e:70:28:27:7d:1b:f9:45:78:b3:34:57:74:29:cf:23:57: ed:70:d0:3c:91:08:66:dd:89:54:33:9c:f8:26:42:87:d7:ee: de:a5:74:d5:3e:c2:eb:a1:f7:7d:51:6e:eb:10:3f:47:09:4b: 41:95:b7:28 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgISAZt3WR5oC77aezpdjfVkc26ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZWM0YTY3ZGJlZDc0NDRkZGQyN2U4MDBmYjZjMjEwMTNhNWIxMWM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/JZzVnQX9SJFbF7YIuhdWv0Sgwy IElcOsSnVE0Fp6UaYOtzIPlXfBK5BpVpfXCWHCCLyszSb64Oj53yTNClZSZ0Stfs B5b9qv0Qq1skiwDeV18tlrV2U2YLppaWZer6l0MMK8zldSOrHXAzxuvWgQW+fGsQ jifaBV9+xhPsD4qs7NHbPPkD8Ms+9Jaaio0Y4EzEcYAidaRSdnal8qgIwO4qmc3K qcwixCJo7+vKdbVhmsf2ODAGmJlydDsDVr0ikj2Ouq8yAF31p/2pwHAiAGrw9y9t W8A13PbolWGFLOnlMM1xHYiviR7hQ0d3lmfjEiuj9GcsYs6iriaGdELxXQIDAQAB o4IDBzCCAwMwHQYDVR0OBBYEFI7Epn2+10RN3SfoAPtsIQE6WxHGMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzcwL2U3YTJm MS0yZTEwLTRlYmUtOTFiMy0wY2VmNTEyZjUwMDkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzAvZTdhMmYx LTJlMTAtNGViZS05MWIzLTBjZWY1MTJmNTAwOS8xL2pzU21mYjdYUkUzZEotZ0Et MndoQVRwYkVjWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGGBggrBgEF BQcBBwEB/wR3MHUwVgQCAAEwUAMEAgI7IDAMAwQCUPWEAwQEUPWAAwQFUsbAAwQC sHa0AwQCuSsYAwQCuTDgAwQCuWq4AwQCuXNQAwQCuYtwAwQCwJFwAwQCwbBIAwQC wpIAMBsEAgACMBUDBQAqAZtgAwUDKgOZgAMFAyoGdIAwGQYIKwYBBQUHAQgBAf8E CjAIoAYwBAICeBYwDQYJKoZIhvcNAQELBQADggEBAHViMjeKJziq0XiR3xFK7VmY Ik8cPqzu19wsc0zvuIbt5dxz6t0VrwXMQdh473rISaLR7n9U+kkGnqrfNrJzeZTW KwsOYJt3ASaiwzvfRKYGn/zBr8pqddsUA7uXbE2aKnNkkZtpFWhOb/9AQy06UcX0 36mTm9BPbcBAZyvVI3aVWW9pIQusS1Qnh3m6aYlaBcwbSzd9kf5pS5Zk9hZIs4/Q ieZtq6CHEfKnZCYY9MW79P7AI0BitlFlnbFUV5R6weT5ZLg3d5sucCgnfRv5RXiz NFd0Kc8jV+1w0DyRCGbdiVQznPgmQofX7t6ldNU+wuuh931RbusQP0cJS0GVtyg= -----END CERTIFICATE-----Generated at Mon Jan 26 20:02:18 2026 by rpki-client