This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/J2YrWWeEuugzz_s5qEg3yAb2S0Q.cer File: J2YrWWeEuugzz_s5qEg3yAb2S0Q.cer (raw, json) Hash identifier: wrQ/xivLQwS7MYycVba5T/W2mgmHep0Woly8gY8o5z8= Subject key identifier: 27:66:2B:59:67:84:BA:E8:33:CF:FB:39:A8:48:37:C8:06:F6:4B:44 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B364D1E8DF8787C50FF4D6F9100303184 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e8/45c285-0ff7-4748-a38d-62763612bf46/1/J2YrWWeEuugzz_s5qEg3yAb2S0Q.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e8/45c285-0ff7-4748-a38d-62763612bf46/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 19 Dec 2025 11:09:42 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 48601 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:4d:1e:8d:f8:78:7c:50:ff:4d:6f:91:00:30:31:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 19 11:09:42 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=27662b596784bae833cffb39a84837c806f64b44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:6b:6f:86:ee:09:8a:a8:54:d1:bd:37:20:31: 17:06:e3:23:fc:0d:84:59:04:6e:eb:9c:6f:d2:ee: f6:33:1c:eb:e0:ba:cb:25:77:ce:7e:23:55:5c:13: 78:9c:b3:0d:96:ca:c5:b6:d9:eb:2c:b0:99:10:33: 0e:b4:a2:a4:13:3f:2f:85:53:e8:b5:71:fe:d6:9b: eb:a7:17:39:95:22:a1:8f:72:0d:ef:c9:9d:a9:bc: 86:6f:91:7c:5e:09:a4:5a:1e:50:31:f0:b5:8b:e5: 42:a5:b2:de:a6:79:73:f7:87:ee:b9:a4:69:67:90: 74:3c:11:af:d4:ba:af:5b:3e:9d:a1:d9:6a:1d:97: db:54:48:8d:d5:0c:61:fc:13:80:c3:6f:21:bc:08: 89:e4:cf:fb:35:fc:f7:23:1f:ad:22:98:e3:32:a4: 2e:19:31:88:12:29:a6:d6:81:ce:9c:e6:b5:37:7d: b5:7a:25:f4:c2:fc:a0:dc:9b:d5:83:c6:63:57:93: 8f:ba:dc:c2:c5:45:d5:8f:b5:b3:7a:01:76:ca:52: 2a:fa:23:7f:2a:5a:fb:21:cc:34:84:cb:89:9e:ae: d4:b3:4a:98:00:06:61:a5:fc:3e:fe:9e:da:0d:e7: ae:e5:52:eb:0a:c6:ab:14:59:d6:33:db:75:e1:6b: 17:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:66:2B:59:67:84:BA:E8:33:CF:FB:39:A8:48:37:C8:06:F6:4B:44 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/45c285-0ff7-4748-a38d-62763612bf46/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/45c285-0ff7-4748-a38d-62763612bf46/1/J2YrWWeEuugzz_s5qEg3yAb2S0Q.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 48601 Signature Algorithm: sha256WithRSAEncryption 0c:4a:15:ca:c5:e4:37:03:52:7c:e9:f9:49:52:39:6b:8b:59: 34:c6:a3:48:98:63:2d:51:7f:4d:51:6f:bf:17:b8:1c:33:b4: 11:f7:99:aa:cb:31:1d:af:55:91:87:18:1e:da:59:4c:8e:f4: 0b:a2:5b:03:17:91:96:52:78:1f:36:a4:ca:ed:dc:96:db:02: d2:5c:05:34:29:b3:a8:38:91:1a:12:aa:e6:5e:d2:70:4d:31: 35:78:22:12:dc:f9:38:c6:79:0b:13:1b:17:1c:ff:07:7f:02: 67:9a:60:08:45:45:1c:df:b4:3b:f7:a3:4b:2f:77:86:7a:51: b8:92:36:d1:91:f5:0e:91:4d:88:9b:e7:07:63:42:8d:0a:9d: 02:9d:9d:4d:51:40:b6:8a:e3:95:d8:93:68:9d:b2:4f:54:f8: 74:69:ee:70:69:c3:8a:37:e9:7e:4d:e0:2a:3e:5a:1c:79:67: d6:2f:64:01:bb:92:18:ac:c8:69:fa:04:e0:e6:02:3b:6e:28: ba:6e:8c:1b:05:ad:87:ac:04:64:bf:57:d6:c7:ab:07:47:ec: 2f:28:e4:56:fb:bb:99:ae:03:a0:ef:e2:60:02:47:24:81:a2: f0:97:27:19:ed:17:f1:4a:42:ba:73:23:13:7f:80:e2:23:70: c6:c3:bc:79 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZs2TR6N+Hh8UP9Nb5EAMDGEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjE5MTEwOTQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNzY2MmI1OTY3ODRiYWU4MzNjZmZiMzlhODQ4MzdjODA2ZjY0YjQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWtvhu4JiqhU0b03IDEXBuMj/A2E WQRu65xv0u72Mxzr4LrLJXfOfiNVXBN4nLMNlsrFttnrLLCZEDMOtKKkEz8vhVPo tXH+1pvrpxc5lSKhj3IN78mdqbyGb5F8XgmkWh5QMfC1i+VCpbLepnlz94fuuaRp Z5B0PBGv1LqvWz6dodlqHZfbVEiN1Qxh/BOAw28hvAiJ5M/7Nfz3Ix+tIpjjMqQu GTGIEimm1oHOnOa1N321eiX0wvyg3JvVg8ZjV5OPutzCxUXVj7WzegF2ylIq+iN/ Klr7Icw0hMuJnq7Us0qYAAZhpfw+/p7aDeeu5VLrCsarFFnWM9t14WsXYQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFCdmK1lnhLroM8/7OahIN8gG9ktEMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U4LzQ1YzI4 NS0wZmY3LTQ3NDgtYTM4ZC02Mjc2MzYxMmJmNDYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTgvNDVjMjg1 LTBmZjctNDc0OC1hMzhkLTYyNzYzNjEyYmY0Ni8xL0oyWXJXV2VFdXVnenpfczVx RWczeUFiMlMwUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwC92TANBgkqhkiG9w0BAQsFAAOCAQEADEoVysXkNwNS fOn5SVI5a4tZNMajSJhjLVF/TVFvvxe4HDO0EfeZqssxHa9VkYcYHtpZTI70C6Jb AxeRllJ4Hzakyu3cltsC0lwFNCmzqDiRGhKq5l7ScE0xNXgiEtz5OMZ5CxMbFxz/ B38CZ5pgCEVFHN+0O/ejSy93hnpRuJI20ZH1DpFNiJvnB2NCjQqdAp2dTVFAtorj ldiTaJ2yT1T4dGnucGnDijfpfk3gKj5aHHln1i9kAbuSGKzIafoE4OYCO24oum6M GwWth6wEZL9X1serB0fsLyjkVvu7ma4DoO/iYAJHJIGi8JcnGe0X8UpCunMjE3+A 4iNwxsO8eQ== -----END CERTIFICATE-----Generated at Fri Dec 26 14:09:45 2025 by rpki-client