This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rJCSu8LKyuJHd09isP29xEqXTPI.cer File: rJCSu8LKyuJHd09isP29xEqXTPI.cer (raw, json) Hash identifier: B02qdTIA289RcwOq84CowN2XPK+ZnbE65N1Nqn5xGNg= Subject key identifier: AC:90:92:BB:C2:CA:CA:E2:47:77:4F:62:B0:FD:BD:C4:4A:97:4C:F2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E38FC8306676CB0EDBA3AADCF35A4A8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:20:22 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 205800 IP: 185.206.124.0/22 IP: 2a0b:d3c0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:fc:83:06:67:6c:b0:ed:ba:3a:ad:cf:35:a4:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:20:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ac9092bbc2cacae247774f62b0fdbdc44a974cf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:15:9e:06:cc:51:4d:c9:43:b6:09:3e:d3:c7: 5c:16:fe:e9:c2:d6:5a:ca:a3:f1:ed:72:08:9a:bd: 2a:30:41:db:9f:f7:74:96:e1:55:da:ae:29:70:37: 7c:c0:a9:a0:f4:b7:3b:37:bf:cf:ea:a4:6d:a6:14: d5:9e:15:e6:fe:d2:27:d3:3e:93:3c:37:b2:d9:03: d8:ea:a4:f3:0f:c5:e1:4a:8a:39:15:49:52:27:9a: e3:2f:2f:86:95:a3:73:54:39:f9:0a:2b:7f:79:7c: c4:0a:5b:f8:cd:93:80:98:33:49:a2:be:4f:2a:68: 11:ff:c4:0a:c5:1a:6c:9c:93:f1:54:78:52:db:b2: 89:d9:20:dc:48:c4:35:e0:b3:cf:71:72:e6:41:19: 0b:36:97:d8:e3:b0:d9:bb:e2:e5:e6:44:5d:be:f2: 98:27:d3:c0:86:48:18:cb:aa:48:9d:25:19:48:dd: be:64:c5:ae:e9:88:2a:21:01:8a:f3:56:0c:46:5e: 61:9d:ba:7d:20:77:e9:b3:d9:af:aa:a0:6c:90:ce: 80:b6:05:c6:a0:80:07:1a:11:53:03:30:d9:1f:96: 58:9e:77:47:c2:ff:ec:eb:dc:85:7e:51:13:a2:12: 18:5f:a7:97:02:bb:cf:1a:2a:f2:c8:42:7a:24:d5: a3:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:90:92:BB:C2:CA:CA:E2:47:77:4F:62:B0:FD:BD:C4:4A:97:4C:F2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.206.124.0/22 IPv6: 2a0b:d3c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 205800 Signature Algorithm: sha256WithRSAEncryption a1:a0:79:d1:67:c8:1e:fd:0e:b2:84:ca:65:ac:a6:02:c7:71: d0:33:fa:05:a7:89:37:a5:5c:fe:82:34:7f:cf:f4:8b:ec:ac: a2:bd:c7:69:06:e2:79:69:0b:b6:b5:56:75:96:51:bb:8f:91: 93:48:33:22:f9:2b:a7:96:6c:8b:51:f2:c3:44:86:f9:4f:bc: bb:18:85:2c:1e:7f:d5:16:c0:ed:3f:5b:a3:1a:9b:5d:77:95: 19:fa:3a:3c:08:37:09:2b:1a:25:c3:99:e7:a9:df:52:1a:cd: d4:00:da:9a:25:ac:0b:c9:61:09:96:c6:79:e9:2f:42:15:8b: 01:72:d9:79:d3:1c:93:7c:bc:a2:a2:b8:73:61:d4:fa:1a:24: c0:97:5b:fc:b7:eb:fe:da:ea:21:4d:59:32:44:1a:64:ab:7a: 57:74:05:7d:fd:20:d2:00:83:34:20:56:9d:e6:dd:1c:ba:47: 69:6a:9a:51:cc:ed:81:e6:fc:ec:e2:31:9d:37:84:2a:a4:ee: 56:5f:83:e7:85:6e:c6:0b:96:58:fc:f3:60:2c:f2:85:31:0e: 11:58:29:13:b4:74:56:b7:7e:16:ea:59:ed:a2:ac:e3:bf:c4: e7:13:1a:a8:ec:8f:16:c9:ca:37:40:6f:48:8c:13:2c:b0:6b: 36:62:e7:38 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt+OPyDBmdssO26Oq3PNaSoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAyMDIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYzkwOTJiYmMyY2FjYWUyNDc3NzRmNjJiMGZkYmRjNDRhOTc0Y2YyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBWeBsxRTclDtgk+08dcFv7pwtZa yqPx7XIImr0qMEHbn/d0luFV2q4pcDd8wKmg9Lc7N7/P6qRtphTVnhXm/tIn0z6T PDey2QPY6qTzD8XhSoo5FUlSJ5rjLy+GlaNzVDn5Cit/eXzEClv4zZOAmDNJor5P KmgR/8QKxRpsnJPxVHhS27KJ2SDcSMQ14LPPcXLmQRkLNpfY47DZu+Ll5kRdvvKY J9PAhkgYy6pInSUZSN2+ZMWu6YgqIQGK81YMRl5hnbp9IHfps9mvqqBskM6AtgXG oIAHGhFTAzDZH5ZYnndHwv/s69yFflETohIYX6eXArvPGiryyEJ6JNWjEQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFKyQkrvCysriR3dPYrD9vcRKl0zyMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE0L2M5NjM0 OS0wYTIyLTQyNDctOTk0My1hM2ZjMTk2YWFiYjMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTQvYzk2MzQ5 LTBhMjItNDI0Ny05OTQzLWEzZmMxOTZhYWJiMy8xL3JKQ1N1OExLeXVKSGQwOWlz UDI5eEVxWFRQSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuc58MA0EAgACMAcDBQAqC9PAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMj6DANBgkqhkiG9w0BAQsFAAOCAQEAoaB50WfIHv0O soTKZaymAsdx0DP6BaeJN6Vc/oI0f8/0i+ysor3HaQbieWkLtrVWdZZRu4+Rk0gz Ivkrp5Zsi1Hyw0SG+U+8uxiFLB5/1RbA7T9boxqbXXeVGfo6PAg3CSsaJcOZ56nf UhrN1ADamiWsC8lhCZbGeekvQhWLAXLZedMck3y8oqK4c2HU+hokwJdb/Lfr/trq IU1ZMkQaZKt6V3QFff0g0gCDNCBWnebdHLpHaWqaUcztgeb87OIxnTeEKqTuVl+D 54VuxguWWPzzYCzyhTEOEVgpE7R0Vrd+FupZ7aKs47/E5xMaqOyPFsnKN0BvSIwT LLBrNmLnOA== -----END CERTIFICATE-----Generated at Sun Jan 25 12:11:19 2026 by rpki-client