This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CJu7CaX772E1wtkgvye7YfXC4J0.cer File: CJu7CaX772E1wtkgvye7YfXC4J0.cer (raw, json) Hash identifier: bqiVtvyNqY/fuAPlm7l1kDFfh0DyaGgP1qqP181yVbs= Subject key identifier: 08:9B:BB:09:A5:FB:EF:61:35:C2:D9:20:BF:27:BB:61:F5:C2:E0:9D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC88C8FCF5355ECEC2688003AB7BCFC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:18:42 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 49820 IP: 5.35.176.0/21 IP: 195.93.224.0/23 IP: 2001:67c:1e8::/48 IP: 2a10:87c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:8c:8f:cf:53:55:ec:ec:26:88:00:3a:b7:bc:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=089bbb09a5fbef6135c2d920bf27bb61f5c2e09d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:56:25:98:52:a2:3a:dd:a3:ed:2d:50:12:de: 18:c1:80:69:25:50:46:a8:6e:88:d2:c0:d5:7f:8e: 23:11:0b:b1:17:f0:59:f0:34:63:59:35:eb:56:df: 2c:5d:45:a1:55:8a:c7:04:cc:db:f7:2b:37:11:76: 5d:b8:d6:77:a3:2b:66:82:c0:ce:79:af:fa:c8:ca: 0e:15:b0:ef:19:c0:50:ae:cc:4a:63:84:8a:7f:cd: cd:dd:c2:c0:a4:92:fc:59:fd:98:2c:32:b6:72:c1: 4d:70:8f:92:3a:b8:2c:62:cd:1f:b2:f5:ec:93:90: 93:b4:05:5b:00:9d:5a:f5:e4:87:f8:54:23:d8:82: 35:cc:49:dc:1f:92:b6:06:c8:b4:f4:b4:7d:0e:ef: ae:f3:fe:1f:2a:fa:2c:c7:59:3f:20:09:98:c0:df: 10:01:10:98:f9:28:fd:22:65:19:05:6f:c4:03:20: 1f:a1:d8:ef:00:65:b4:c3:77:28:06:20:29:2d:3c: da:5e:f9:b5:18:f1:7d:7b:b5:d0:fc:0f:a1:74:68: ff:4c:c3:15:18:16:af:d7:b4:62:a7:d2:a8:9d:d8: b0:08:33:61:1d:02:cd:e1:63:f3:2d:20:27:ac:98: 3a:03:e8:4c:33:7d:7e:25:c3:30:e7:e6:6a:bc:3a: 58:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:9B:BB:09:A5:FB:EF:61:35:C2:D9:20:BF:27:BB:61:F5:C2:E0:9D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.35.176.0/21 195.93.224.0/23 IPv6: 2001:67c:1e8::/48 2a10:87c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 49820 Signature Algorithm: sha256WithRSAEncryption 28:cb:9f:bc:38:84:6f:d7:ff:69:44:1a:06:3b:18:83:cc:e1: 2f:2a:32:ee:0c:73:a7:7a:b1:58:76:d0:11:65:3d:07:f2:15: a7:a6:b1:46:d4:8a:ee:f7:07:4e:9a:bc:3c:9e:65:b1:2c:75: 46:e1:e7:d4:e5:ca:43:0f:0d:df:06:32:e9:de:79:61:a6:7e: 4a:38:35:a8:52:a2:34:79:53:93:8b:3a:f2:d8:2a:4d:0a:58: da:63:ed:5f:98:09:ac:35:79:f0:e0:63:6a:3a:4a:6c:3a:ff: 8d:b3:4a:a0:26:28:61:bc:d9:a2:7e:f6:cc:13:08:24:0d:a1: c4:d5:1b:bf:9c:09:a3:95:a1:69:78:e0:68:b3:55:fb:66:70: 03:2e:3f:f0:43:6f:3c:c2:b8:85:70:52:19:e4:8e:45:5f:49: 99:1a:f6:56:ba:2a:5a:32:3e:a6:86:1f:a7:33:f3:8d:0a:a5: eb:4e:6f:4e:bc:a4:e5:25:e8:fd:58:03:e9:bb:6d:72:e4:60: ab:0f:25:83:6a:f3:b9:3f:8c:d7:90:80:5e:aa:15:e7:92:4d: 13:40:3a:48:79:16:55:e8:5b:dd:6b:12:25:d7:13:2a:bb:e0: e5:b4:30:cc:d0:b1:8d:d0:6a:fb:bd:72:b2:01:4a:d3:02:70: ea:5f:e2:7a -----BEGIN CERTIFICATE----- MIIFsjCCBJqgAwIBAgISAZt6yIyPz1NV7OwmiAA6t7z8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwODliYmIwOWE1ZmJlZjYxMzVjMmQ5MjBiZjI3YmI2MWY1YzJlMDlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxlYlmFKiOt2j7S1QEt4YwYBpJVBG qG6I0sDVf44jEQuxF/BZ8DRjWTXrVt8sXUWhVYrHBMzb9ys3EXZduNZ3oytmgsDO ea/6yMoOFbDvGcBQrsxKY4SKf83N3cLApJL8Wf2YLDK2csFNcI+SOrgsYs0fsvXs k5CTtAVbAJ1a9eSH+FQj2II1zEncH5K2Bsi09LR9Du+u8/4fKvosx1k/IAmYwN8Q ARCY+Sj9ImUZBW/EAyAfodjvAGW0w3coBiApLTzaXvm1GPF9e7XQ/A+hdGj/TMMV GBav17Rip9KondiwCDNhHQLN4WPzLSAnrJg6A+hMM31+JcMw5+ZqvDpYYwIDAQAB o4ICvjCCArowHQYDVR0OBBYEFAibuwml++9hNcLZIL8nu2H1wuCdMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFkLzVjY2I4 Zi01MTQ4LTQ3MDYtYTA0MC0yZjliMDBmZGM1ZDMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWQvNWNjYjhm LTUxNDgtNDcwNi1hMDQwLTJmOWIwMGZkYzVkMy8xL0NKdTdDYVg3NzJFMXd0a2d2 eWU3WWZYQzRKMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMD0GCCsGAQUF BwEHAQH/BC4wLDASBAIAATAMAwQDBSOwAwQBw13gMBYEAgACMBADBwAgAQZ8AegD BQMqEIfAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDCnDANBgkqhkiG9w0BAQsF AAOCAQEAKMufvDiEb9f/aUQaBjsYg8zhLyoy7gxzp3qxWHbQEWU9B/IVp6axRtSK 7vcHTpq8PJ5lsSx1RuHn1OXKQw8N3wYy6d55YaZ+Sjg1qFKiNHlTk4s68tgqTQpY 2mPtX5gJrDV58OBjajpKbDr/jbNKoCYoYbzZon72zBMIJA2hxNUbv5wJo5WhaXjg aLNV+2ZwAy4/8ENvPMK4hXBSGeSORV9JmRr2VroqWjI+poYfpzPzjQql605vTryk 5SXo/VgD6bttcuRgqw8lg2rzuT+M15CAXqoV55JNE0A6SHkWVehb3WsSJdcTKrvg 5bQwzNCxjdBq+71ysgFK0wJw6l/ieg== -----END CERTIFICATE-----Generated at Mon Feb 9 15:06:17 2026 by rpki-client