This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/J0iJxEELQxcvQcjBSuqJm7sq2r0.cer File: J0iJxEELQxcvQcjBSuqJm7sq2r0.cer (raw, json) Hash identifier: PmTVWi7DVdzEHtpc/cwpbGVCJ2UGN8S/pBp6icsRix4= Subject key identifier: 27:48:89:C4:41:0B:43:17:2F:41:C8:C1:4A:EA:89:9B:BB:2A:DA:BD Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F826D8C521A1092742D99E4752B966C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c6/62bacb-a95f-430b-aff9-19a3eda0524e/1/J0iJxEELQxcvQcjBSuqJm7sq2r0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c6/62bacb-a95f-430b-aff9-19a3eda0524e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:20:12 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 12785 IP: 91.223.230.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:6d:8c:52:1a:10:92:74:2d:99:e4:75:2b:96:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:20:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=274889c4410b43172f41c8c14aea899bbb2adabd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:d6:fe:4c:65:b8:e0:80:45:7e:f7:77:44:ec: 93:42:e8:b0:a2:a4:cf:85:20:9c:72:31:80:2a:78: 83:ae:f6:e4:3e:cd:18:de:be:0c:1a:6e:49:48:e0: c1:e3:dc:fe:49:1d:29:33:0d:5b:f7:63:1b:77:c0: dc:c6:f3:ec:4a:2e:b4:b8:82:f5:b4:14:55:46:fe: 33:55:36:c2:3a:cc:52:e2:53:b9:38:85:1a:84:58: 43:f6:a9:58:d5:84:39:7c:cd:17:de:3f:a8:c4:48: ee:f4:d1:08:21:94:44:6d:82:99:1f:b2:eb:b8:2c: 03:0a:5d:ad:96:bb:16:bc:f6:e3:ba:c1:db:69:d9: 53:de:c9:75:54:51:ff:5f:ba:fd:3f:e3:38:06:45: 27:35:cf:4c:33:d4:98:b3:a0:0c:d1:c7:11:c0:a4: 1f:da:f5:b4:e2:39:8f:b0:00:c6:cb:1c:c1:3d:da: d1:95:bc:5d:84:7f:bc:6d:2d:8a:96:7d:4a:5e:a8: 72:79:2e:52:fa:4f:13:2e:1b:b7:15:df:05:99:b7: 67:2c:71:96:af:f8:f1:81:13:69:c8:f7:51:f7:3f: 1e:09:84:de:5f:db:96:82:b0:4a:b6:45:a9:8c:06: 49:d6:5e:77:57:5e:16:76:b5:6e:8f:d8:78:5d:49: 9a:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:48:89:C4:41:0B:43:17:2F:41:C8:C1:4A:EA:89:9B:BB:2A:DA:BD X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/62bacb-a95f-430b-aff9-19a3eda0524e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/62bacb-a95f-430b-aff9-19a3eda0524e/1/J0iJxEELQxcvQcjBSuqJm7sq2r0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.223.230.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 12785 Signature Algorithm: sha256WithRSAEncryption 96:32:bc:75:96:f6:f2:41:30:86:58:76:a1:f2:50:7f:9b:f1: e9:30:55:b6:e6:d7:22:4d:00:b7:c9:92:14:40:08:53:f3:fd: 07:91:db:ce:cf:6b:1f:c5:a8:aa:79:d8:da:b0:e2:2f:63:3e: fc:70:89:6f:f4:aa:7f:2e:aa:56:0e:63:ce:4f:f4:bb:00:af: 4b:68:2e:4d:e8:06:7c:35:ec:3e:2d:1e:54:93:17:5f:01:45: ed:5e:90:62:2e:ba:ae:51:23:6c:c1:c5:13:a2:50:3c:7a:d7: 90:13:60:2e:60:fe:aa:c2:09:77:5f:5b:8c:50:0c:2f:e3:9b: 40:49:55:7a:67:74:4b:25:e5:73:44:80:26:b0:24:f0:d8:8f: 38:0b:da:06:96:39:62:05:e4:2c:29:7d:0d:5e:01:b0:2f:81: 84:11:37:f6:eb:07:6f:28:2b:8e:1e:86:a1:3d:64:45:ad:d3: 83:67:3c:fb:d8:ee:4b:32:cf:76:d9:85:18:53:58:be:12:ec: 45:fa:40:ed:d5:5a:fb:e7:e1:8b:c1:24:a6:d8:8f:68:5c:3a: b3:86:40:42:33:fa:f5:7d:9c:5c:ac:d7:06:fd:42:41:5e:12: 57:1d:6a:87:29:8c:94:a6:df:ca:21:88:30:b8:6f:22:68:54: 05:7d:50:1f -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISAZt/gm2MUhoQknQtmeR1K5ZsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMDEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNzQ4ODljNDQxMGI0MzE3MmY0MWM4YzE0YWVhODk5YmJiMmFkYWJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitb+TGW44IBFfvd3ROyTQuiwoqTP hSCccjGAKniDrvbkPs0Y3r4MGm5JSODB49z+SR0pMw1b92Mbd8DcxvPsSi60uIL1 tBRVRv4zVTbCOsxS4lO5OIUahFhD9qlY1YQ5fM0X3j+oxEju9NEIIZREbYKZH7Lr uCwDCl2tlrsWvPbjusHbadlT3sl1VFH/X7r9P+M4BkUnNc9MM9SYs6AM0ccRwKQf 2vW04jmPsADGyxzBPdrRlbxdhH+8bS2Kln1KXqhyeS5S+k8TLhu3Fd8FmbdnLHGW r/jxgRNpyPdR9z8eCYTeX9uWgrBKtkWpjAZJ1l53V14WdrVuj9h4XUmakQIDAQAB o4ICnzCCApswHQYDVR0OBBYEFCdIicRBC0MXL0HIwUrqiZu7Ktq9MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M2LzYyYmFj Yi1hOTVmLTQzMGItYWZmOS0xOWEzZWRhMDUyNGUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzYvNjJiYWNi LWE5NWYtNDMwYi1hZmY5LTE5YTNlZGEwNTI0ZS8xL0owaUp4RUVMUXhjdlFjakJT dXFKbTdzcTJyMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW9/mMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQC AjHxMA0GCSqGSIb3DQEBCwUAA4IBAQCWMrx1lvbyQTCGWHah8lB/m/HpMFW25tci TQC3yZIUQAhT8/0HkdvOz2sfxaiqedjasOIvYz78cIlv9Kp/LqpWDmPOT/S7AK9L aC5N6AZ8New+LR5UkxdfAUXtXpBiLrquUSNswcUTolA8eteQE2AuYP6qwgl3X1uM UAwv45tASVV6Z3RLJeVzRIAmsCTw2I84C9oGljliBeQsKX0NXgGwL4GEETf26wdv KCuOHoahPWRFrdODZzz72O5LMs922YUYU1i+EuxF+kDt1Vr75+GLwSSm2I9oXDqz hkBCM/r1fZxcrNcG/UJBXhJXHWqHKYyUpt/KIYgwuG8iaFQFfVAf -----END CERTIFICATE-----Generated at Mon Feb 9 15:13:28 2026 by rpki-client