This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pJ9iZvYaHszU3uCUzHHG24a7s3s.cer File: pJ9iZvYaHszU3uCUzHHG24a7s3s.cer (raw, json) Hash identifier: Jo3oKXW0c24d04xbepDimPWM/GRf6elb9EMa2jDGTwI= Subject key identifier: A4:9F:62:66:F6:1A:1E:CC:D4:DE:E0:94:CC:71:C6:DB:86:BB:B3:7B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B367B593E506375831BEE6FBE6BD293 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:46 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 5.150.152.0/22 IP: 185.149.68.0/22 IP: 2a0a:8680::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:7b:59:3e:50:63:75:83:1b:ee:6f:be:6b:d2:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a49f6266f61a1eccd4dee094cc71c6db86bbb37b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:2b:39:bf:5f:c1:20:57:c2:7a:13:54:c8:26: ef:82:9b:1c:45:96:80:94:47:6a:9b:01:08:4e:c2: e1:d4:0a:0b:15:3a:52:79:05:77:4e:35:8c:81:64: a0:80:cc:9e:8f:67:0b:3c:a6:90:0f:b3:b3:33:1e: ae:21:db:35:00:0e:10:60:02:0b:29:8e:c5:e4:8e: a3:a6:f1:f1:f1:b3:8c:08:a5:9c:ef:e0:67:85:32: 30:d8:c0:fa:87:c8:04:5a:11:ad:74:38:86:b8:3f: d5:fe:b6:35:a1:af:0b:9c:02:7f:a5:2c:fd:35:34: 12:bf:e2:7c:d9:f2:ce:1e:8d:ec:8c:32:e6:53:f7: 66:ed:70:3d:7a:d8:23:d9:60:26:88:c3:80:49:a5: 6a:ba:e4:9c:1f:6c:87:a5:7e:7f:9d:c3:32:05:5b: c9:6e:2a:d9:f9:ad:ed:fb:fc:9e:02:bd:74:d5:67: da:b8:a2:b0:36:ea:1c:93:46:8b:12:22:ae:5a:0c: ae:90:b3:d5:b9:ec:e0:5f:53:f1:7f:ab:ce:ed:20: 26:fc:fe:32:de:96:e1:5b:43:0f:3d:27:88:ee:4a: 5d:c5:75:17:9a:4b:67:34:39:51:00:1c:8d:8c:64: 32:5e:35:26:db:45:ce:06:27:89:04:6e:5a:6f:bf: f4:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:9F:62:66:F6:1A:1E:CC:D4:DE:E0:94:CC:71:C6:DB:86:BB:B3:7B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.150.152.0/22 185.149.68.0/22 IPv6: 2a0a:8680::/29 Signature Algorithm: sha256WithRSAEncryption 9f:20:82:14:18:18:bb:04:10:63:51:da:d6:89:a0:f2:d3:f8: de:bd:6d:b8:d1:cb:e5:83:af:6e:dd:6e:2b:28:80:b7:92:3b: 2a:bb:50:67:df:98:14:44:e2:49:e9:ec:e4:b6:9a:7d:0e:b0: c4:9f:72:dc:cf:11:59:8c:97:c1:00:d8:32:ad:f6:d7:94:9b: 45:d3:84:36:ff:20:c5:dc:23:93:46:ae:7c:e0:53:a9:46:b3: 48:fd:e6:6c:b8:f9:51:86:7e:83:5e:c5:60:82:5f:bc:63:1f: cf:be:4f:56:8d:3e:b5:49:7d:ba:1c:60:18:17:29:93:4f:a8: 12:b0:54:51:2b:da:7f:a8:93:59:06:0c:c1:85:1d:d4:c7:7b: 35:f5:e1:1a:f2:8a:35:ea:c3:ce:fa:7c:64:2f:d6:a3:20:b6: 9a:3d:e9:f6:a4:01:c6:dd:2d:c8:a0:04:d6:6a:a8:69:bd:25: e8:b3:67:0a:37:bf:3e:ec:6f:9f:fa:51:b3:e5:c3:f8:80:c5: 50:8f:7a:cb:f5:75:3c:39:da:af:c4:aa:24:92:da:3d:ca:b0: 1d:ab:33:5a:8d:8e:35:ac:19:58:fc:61:a3:9b:1b:6e:c1:28: ff:10:a0:67:23:a3:d0:24:83:04:9b:6a:a6:0b:15:91:4b:08: f0:4f:e2:57 -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgISAZt7NntZPlBjdYMb7m++a9KTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNDlmNjI2NmY2MWExZWNjZDRkZWUwOTRjYzcxYzZkYjg2YmJiMzdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtis5v1/BIFfCehNUyCbvgpscRZaA lEdqmwEITsLh1AoLFTpSeQV3TjWMgWSggMyej2cLPKaQD7OzMx6uIds1AA4QYAIL KY7F5I6jpvHx8bOMCKWc7+BnhTIw2MD6h8gEWhGtdDiGuD/V/rY1oa8LnAJ/pSz9 NTQSv+J82fLOHo3sjDLmU/dm7XA9etgj2WAmiMOASaVquuScH2yHpX5/ncMyBVvJ birZ+a3t+/yeAr101WfauKKwNuock0aLEiKuWgyukLPVuezgX1Pxf6vO7SAm/P4y 3pbhW0MPPSeI7kpdxXUXmktnNDlRAByNjGQyXjUm20XOBieJBG5ab7/0CQIDAQAB o4ICmTCCApUwHQYDVR0OBBYEFKSfYmb2Gh7M1N7glMxxxtuGu7N7MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBhLzQ3NjI1 My0yNzg4LTQ1MTktYmViYS05OGJlMzM1ZjNjNTQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGEvNDc2MjUz LTI3ODgtNDUxOS1iZWJhLTk4YmUzMzVmM2M1NC8xL3BKOWladllhSHN6VTN1Q1V6 SEhHMjRhN3Mzcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCBZaYAwQCuZVEMA0EAgACMAcDBQMqCoaAMA0G CSqGSIb3DQEBCwUAA4IBAQCfIIIUGBi7BBBjUdrWiaDy0/jevW240cvlg69u3W4r KIC3kjsqu1Bn35gUROJJ6ezktpp9DrDEn3LczxFZjJfBANgyrfbXlJtF04Q2/yDF 3COTRq584FOpRrNI/eZsuPlRhn6DXsVggl+8Yx/Pvk9WjT61SX26HGAYFymTT6gS sFRRK9p/qJNZBgzBhR3Ux3s19eEa8oo16sPO+nxkL9ajILaaPen2pAHG3S3IoATW aqhpvSXos2cKN78+7G+f+lGz5cP4gMVQj3rL9XU8OdqvxKokkto9yrAdqzNajY41 rBlY/GGjmxtuwSj/EKBnI6PQJIMEm2qmCxWRSwjwT+JX -----END CERTIFICATE-----Generated at Sun Jan 25 20:52:19 2026 by rpki-client