This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0JU2Q5XM_YVDl3NY-ptx-ScVRPY.cer File: 0JU2Q5XM_YVDl3NY-ptx-ScVRPY.cer (raw, json) Hash identifier: A36wbV/5hsE5Gv/BHgJJaBfJGwORj8Yg/wdbJMDXJVI= Subject key identifier: D0:95:36:43:95:CC:FD:85:43:97:73:58:FA:9B:71:F9:27:15:44:F6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79EBB30D4246660287F6FBFB147E2BB2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/73/dac732-4aca-4bf8-a6db-e07952db967b/1/0JU2Q5XM_YVDl3NY-ptx-ScVRPY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/73/dac732-4aca-4bf8-a6db-e07952db967b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:17:28 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 81.163.88.0/21 IP: 176.104.168.0/21 IP: 195.191.194.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:eb:b3:0d:42:46:66:02:87:f6:fb:fb:14:7e:2b:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d095364395ccfd8543977358fa9b71f9271544f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:d0:9a:29:0e:14:8c:88:14:97:84:4a:ee:f7: 46:fa:3c:6a:39:db:9b:6f:23:98:02:20:13:d3:30: 57:42:10:0b:c4:d2:9a:33:ef:b9:0d:03:6c:cd:dc: bb:bc:a9:89:df:09:d1:84:3c:fd:36:02:cf:36:c9: d7:d7:b1:f9:fc:4a:0a:c9:cc:ea:dc:30:05:12:5f: 07:bd:eb:68:7f:4e:df:d7:71:18:2a:34:7f:f6:ba: 46:77:1c:45:e3:b5:05:f1:22:0c:38:9d:88:96:40: 40:99:89:32:38:dd:e4:d3:cf:d0:7a:a9:1f:d1:de: cf:29:a3:01:81:d0:fa:db:7c:c1:dc:aa:2e:e7:0d: 10:18:7e:cb:25:1f:a5:29:90:bf:d2:14:a7:cf:67: 77:66:e8:b0:c3:87:d8:67:cf:6f:74:d7:56:2f:96: 3b:c8:ac:3f:c0:36:88:dd:e0:d9:f4:3d:76:da:f3: b4:96:2d:36:e5:ba:28:da:b7:ba:9d:0a:e9:b3:98: 0c:bd:38:1a:c4:c5:33:51:1d:33:ba:c1:8f:a1:11: 32:3e:56:2f:99:e2:fa:aa:78:27:cc:46:53:fa:a5: 69:78:ab:d7:0e:b2:38:ec:ec:da:3c:e1:e6:33:df: 5a:35:8d:7c:3b:4b:97:d3:e0:ee:2d:d5:ff:75:30: ce:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:95:36:43:95:CC:FD:85:43:97:73:58:FA:9B:71:F9:27:15:44:F6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/dac732-4aca-4bf8-a6db-e07952db967b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/dac732-4aca-4bf8-a6db-e07952db967b/1/0JU2Q5XM_YVDl3NY-ptx-ScVRPY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.163.88.0/21 176.104.168.0/21 195.191.194.0/23 Signature Algorithm: sha256WithRSAEncryption 63:16:45:32:48:cf:91:65:0a:51:73:60:8b:3b:8b:6f:da:10: bc:70:6b:74:d7:ac:b7:87:3e:af:db:6c:1f:b8:8e:97:5c:ee: 3f:56:42:a5:43:20:f6:a0:8c:19:2e:68:bc:a0:1b:ea:73:a1: 9a:5c:b5:b5:58:d0:34:3c:08:16:a2:dc:59:90:fc:c5:7a:ae: a0:42:20:4e:fc:1b:9e:e3:7d:52:ed:ac:7a:8b:75:b0:a9:04: 12:1c:b6:1d:09:41:e2:65:3c:1f:b9:e2:60:74:a4:af:ce:9a: cf:4d:67:b9:c9:21:c4:84:30:c3:20:9e:fa:99:c5:67:e5:4c: bf:4d:6f:dc:ae:a3:f5:4e:b9:98:d6:17:9b:1c:15:db:14:4a: ed:ab:ac:18:57:6d:69:5c:00:cd:17:78:f7:08:59:db:df:9d: e5:e5:b3:06:62:24:da:7a:d9:a9:b2:76:f5:74:38:47:b4:05: 38:d2:ce:69:e1:96:ae:ea:50:51:c4:ac:e9:38:79:24:d1:13: 49:6a:a7:f3:a2:e8:a1:ab:ce:a4:a4:1c:e0:44:53:de:7b:70: de:b8:73:7b:57:fa:51:f6:48:cc:73:fa:e5:9e:82:68:f1:b7: 2b:a8:53:f3:a3:13:f8:04:7d:de:0a:c3:70:65:13:e6:39:a1: dc:ab:2e:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgISAZt567MNQkZmAof2+/sUfiuyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMDk1MzY0Mzk1Y2NmZDg1NDM5NzczNThmYTliNzFmOTI3MTU0NGY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdCaKQ4UjIgUl4RK7vdG+jxqOdub byOYAiAT0zBXQhALxNKaM++5DQNszdy7vKmJ3wnRhDz9NgLPNsnX17H5/EoKyczq 3DAFEl8Hvetof07f13EYKjR/9rpGdxxF47UF8SIMOJ2IlkBAmYkyON3k08/Qeqkf 0d7PKaMBgdD623zB3Kou5w0QGH7LJR+lKZC/0hSnz2d3Zuiww4fYZ89vdNdWL5Y7 yKw/wDaI3eDZ9D122vO0li025boo2re6nQrps5gMvTgaxMUzUR0zusGPoREyPlYv meL6qngnzEZT+qVpeKvXDrI47OzaPOHmM99aNY18O0uX0+DuLdX/dTDOCQIDAQAB o4ICkDCCAowwHQYDVR0OBBYEFNCVNkOVzP2FQ5dzWPqbcfknFUT2MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzczL2RhYzcz Mi00YWNhLTRiZjgtYTZkYi1lMDc5NTJkYjk2N2IvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzMvZGFjNzMy LTRhY2EtNGJmOC1hNmRiLWUwNzk1MmRiOTY3Yi8xLzBKVTJRNVhNX1lWRGwzTlkt cHR4LVNjVlJQWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUF BwEHAQH/BBwwGjAYBAIAATASAwQDUaNYAwQDsGioAwQBw7/CMA0GCSqGSIb3DQEB CwUAA4IBAQBjFkUySM+RZQpRc2CLO4tv2hC8cGt016y3hz6v22wfuI6XXO4/VkKl QyD2oIwZLmi8oBvqc6GaXLW1WNA0PAgWotxZkPzFeq6gQiBO/Bue431S7ax6i3Ww qQQSHLYdCUHiZTwfueJgdKSvzprPTWe5ySHEhDDDIJ76mcVn5Uy/TW/crqP1TrmY 1hebHBXbFErtq6wYV21pXADNF3j3CFnb353l5bMGYiTaetmpsnb1dDhHtAU40s5p 4Zau6lBRxKzpOHkk0RNJaqfzouihq86kpBzgRFPee3DeuHN7V/pR9kjMc/rlnoJo 8bcrqFPzoxP4BH3eCsNwZRPmOaHcqy4s -----END CERTIFICATE-----Generated at Tue Jan 27 05:37:49 2026 by rpki-client