This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/J0QWBf3rXZw96r7i9dfGZ9lv2OA.cer File: J0QWBf3rXZw96r7i9dfGZ9lv2OA.cer (raw, json) Hash identifier: H7rXvB4FAGfMr15FWbsd/7le0p+BiaIDkwjspc7jqbQ= Subject key identifier: 27:44:16:05:FD:EB:5D:9C:3D:EA:BE:E2:F5:D7:C6:67:D9:6F:D8:E0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA688A4F6F71E2FD1AAD1A9AEBF02E2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/61/36db54-c043-4554-8492-752c95c9cf79/1/J0QWBf3rXZw96r7i9dfGZ9lv2OA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/61/36db54-c043-4554-8492-752c95c9cf79/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:20:01 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 207026 IP: 185.168.104.0/22 IP: 2a0b:fe00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:88:a4:f6:f7:1e:2f:d1:aa:d1:a9:ae:bf:02:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:20:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=27441605fdeb5d9c3deabee2f5d7c667d96fd8e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ac:1b:b5:2d:39:4a:aa:88:45:d0:bc:97:21: 07:b4:e7:12:32:44:85:95:98:af:36:3d:ed:e9:87: 9c:84:64:95:c3:0a:3e:71:2d:de:ea:e9:4c:de:46: e6:c8:ba:89:46:6f:ed:ae:18:dc:4e:ab:45:0f:d0: 6c:36:ed:4f:52:a2:8c:fa:2f:2c:f4:38:31:82:73: 53:71:3b:1f:6b:d7:09:e4:3f:4e:af:11:e3:0c:86: fc:bd:63:ae:f9:e3:ca:b5:7b:46:69:f0:b7:a2:4f: 8d:5e:96:58:da:a2:c3:39:77:8c:75:e5:57:ab:8f: 64:c4:5c:e6:e6:a4:66:78:57:95:ef:14:14:ee:1e: da:b1:98:2c:69:20:8b:81:f9:ce:54:54:74:23:77: 29:7d:f1:0a:3e:04:56:be:53:af:e7:b9:5c:01:9e: b1:db:b3:6a:dd:61:70:d3:4f:cd:4a:d9:b1:45:fe: c4:e3:9e:ac:50:5f:75:23:e0:01:07:1b:21:33:2a: 03:f3:d3:71:69:f7:2f:33:93:f4:03:33:3f:8b:58: 3f:1d:ea:0b:01:72:2d:ab:2a:74:8a:41:ed:1c:43: c9:8e:26:dc:03:83:9b:f0:2d:91:11:2a:07:64:5e: 65:6b:8d:80:17:3c:cd:96:cb:0a:48:cd:67:da:f4: b1:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:44:16:05:FD:EB:5D:9C:3D:EA:BE:E2:F5:D7:C6:67:D9:6F:D8:E0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/36db54-c043-4554-8492-752c95c9cf79/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/36db54-c043-4554-8492-752c95c9cf79/1/J0QWBf3rXZw96r7i9dfGZ9lv2OA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.168.104.0/22 IPv6: 2a0b:fe00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 207026 Signature Algorithm: sha256WithRSAEncryption b0:c7:3e:2a:44:28:0d:0f:b7:f7:41:c6:54:b9:7c:9b:74:39: b6:05:2e:96:27:bd:e9:ac:bb:80:26:65:7f:b5:e6:4b:0c:36: e6:dc:2b:39:a0:90:b1:f1:36:c0:c7:b2:c1:d9:00:7d:5d:e1: f0:2f:d5:27:81:74:82:7c:0e:f0:bf:ac:9d:28:35:42:6b:f7: 42:d8:b4:12:91:21:9e:a9:d1:23:ed:b5:48:0c:42:b1:c9:e9: 8f:13:50:98:df:64:39:cb:c2:5e:b4:7f:78:a9:2f:a7:af:f1: 18:ce:6b:b4:e7:4a:db:7a:6d:f5:c4:73:fc:2f:15:74:03:1d: 31:b1:a3:d5:58:16:03:a2:8f:92:07:e4:b8:98:ea:f3:00:23: f1:85:21:df:f4:f3:f8:37:c3:8e:98:f2:90:3c:a9:0c:6d:8c: 8f:54:c5:c0:70:b4:e4:6c:6c:3d:f6:9e:7d:4c:dc:19:c8:d2: aa:f4:10:1f:ee:ac:5a:d6:8d:d4:cf:50:d1:0a:94:92:be:03: 26:ba:3d:bc:cc:d3:08:08:d5:5e:65:26:cb:ca:22:a8:96:22: 71:82:4c:72:d0:21:bb:3f:16:c9:8d:ab:a6:48:75:73:d1:76: 2b:45:a5:6a:fd:c6:69:16:d4:33:f9:54:49:a6:d7:6a:03:3f: c0:2f:e1:dc -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt+poik9vceL9Gq0amuvwLiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIyMDAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNzQ0MTYwNWZkZWI1ZDljM2RlYWJlZTJmNWQ3YzY2N2Q5NmZkOGUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKwbtS05SqqIRdC8lyEHtOcSMkSF lZivNj3t6YechGSVwwo+cS3e6ulM3kbmyLqJRm/trhjcTqtFD9BsNu1PUqKM+i8s 9DgxgnNTcTsfa9cJ5D9OrxHjDIb8vWOu+ePKtXtGafC3ok+NXpZY2qLDOXeMdeVX q49kxFzm5qRmeFeV7xQU7h7asZgsaSCLgfnOVFR0I3cpffEKPgRWvlOv57lcAZ6x 27Nq3WFw00/NStmxRf7E456sUF91I+ABBxshMyoD89NxafcvM5P0AzM/i1g/HeoL AXItqyp0ikHtHEPJjibcA4Ob8C2RESoHZF5la42AFzzNlssKSM1n2vSxawIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFCdEFgX9612cPeq+4vXXxmfZb9jgMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYxLzM2ZGI1 NC1jMDQzLTQ1NTQtODQ5Mi03NTJjOTVjOWNmNzkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjEvMzZkYjU0 LWMwNDMtNDU1NC04NDkyLTc1MmM5NWM5Y2Y3OS8xL0owUVdCZjNyWFp3OTZyN2k5 ZGZHWjlsdjJPQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuahoMA0EAgACMAcDBQMqC/4AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMosjANBgkqhkiG9w0BAQsFAAOCAQEAsMc+KkQoDQ+3 90HGVLl8m3Q5tgUulie96ay7gCZlf7XmSww25twrOaCQsfE2wMeywdkAfV3h8C/V J4F0gnwO8L+snSg1Qmv3Qti0EpEhnqnRI+21SAxCscnpjxNQmN9kOcvCXrR/eKkv p6/xGM5rtOdK23pt9cRz/C8VdAMdMbGj1VgWA6KPkgfkuJjq8wAj8YUh3/Tz+DfD jpjykDypDG2Mj1TFwHC05GxsPfaefUzcGcjSqvQQH+6sWtaN1M9Q0QqUkr4DJro9 vMzTCAjVXmUmy8oiqJYicYJMctAhuz8WyY2rpkh1c9F2K0Wlav3GaRbUM/lUSabX agM/wC/h3A== -----END CERTIFICATE-----Generated at Mon Feb 9 19:47:06 2026 by rpki-client