This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/J32A8P4rQ9BGvrPXm6wZenmJwuQ.cer File: J32A8P4rQ9BGvrPXm6wZenmJwuQ.cer (raw, json) Hash identifier: af77dX8adj3cnLIqSJsTEWiG8FFn4rOCJlso5cW8DYU= Subject key identifier: 27:7D:80:F0:FE:2B:43:D0:46:BE:B3:D7:9B:AC:19:7A:79:89:C2:E4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC93F296358BEB65ADAC87E461A1707 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/66/190950-d41c-4d26-85bc-5184b55f1cff/1/J32A8P4rQ9BGvrPXm6wZenmJwuQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/66/190950-d41c-4d26-85bc-5184b55f1cff/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:19:27 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 50776 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:3f:29:63:58:be:b6:5a:da:c8:7e:46:1a:17:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:19:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=277d80f0fe2b43d046beb3d79bac197a7989c2e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:90:91:54:1f:2c:ca:ee:c0:1a:d4:4a:14:81: 35:d5:0e:7f:10:75:5a:83:de:30:69:4d:24:8d:9d: 00:d5:03:17:04:77:48:63:f3:78:1d:b0:81:7c:4c: 66:4a:ad:a0:76:71:2d:db:87:92:59:41:94:9a:b6: 43:9c:4f:a1:f8:4c:31:eb:e2:86:dd:cb:39:ed:ab: 55:57:3b:66:fb:fb:ec:c6:1e:1f:e4:f0:5c:39:c0: d4:91:51:ce:15:db:48:52:82:ab:ab:c2:4f:48:16: 40:6b:56:56:71:f9:d1:22:56:f7:04:2f:0b:2b:8d: d7:40:36:c6:06:8e:da:9d:24:e7:d9:f2:72:3c:9f: 51:1b:4b:cd:8d:89:94:56:cc:cc:e4:38:b8:1e:65: 88:d1:e5:b8:ef:c9:d9:a4:ae:a9:7d:79:4e:05:bc: 67:ec:d2:67:8c:81:83:50:2d:6b:e2:13:c4:70:06: 6b:cf:d8:53:1c:f3:d2:74:c3:60:81:03:f7:ab:ce: 18:aa:7d:3b:d9:65:4a:3a:6b:7a:ed:c2:8d:28:b0: 75:7b:14:fb:70:4f:f6:ce:34:e2:9c:c9:3c:1d:18: 35:e0:84:04:4d:4d:02:07:07:73:2f:28:07:72:94: 80:2c:f7:f8:d3:cf:df:e4:db:2a:a6:f0:be:6c:20: c2:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:7D:80:F0:FE:2B:43:D0:46:BE:B3:D7:9B:AC:19:7A:79:89:C2:E4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/190950-d41c-4d26-85bc-5184b55f1cff/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/190950-d41c-4d26-85bc-5184b55f1cff/1/J32A8P4rQ9BGvrPXm6wZenmJwuQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 50776 Signature Algorithm: sha256WithRSAEncryption 0b:80:d1:38:62:23:98:b3:2a:e2:b2:eb:3c:31:da:25:c0:84: af:33:d3:35:56:bd:c4:23:eb:c6:d0:b2:ee:48:17:f1:e0:65: ae:6c:fa:82:72:aa:7f:49:60:c7:9b:c8:a5:69:63:e4:fa:c5: 83:fa:95:86:90:b6:fd:0c:aa:5f:6d:45:f4:58:28:7d:12:04: b9:df:65:3a:01:25:dc:55:e8:57:a5:31:20:23:0b:cf:d9:6e: 32:9d:f5:e3:68:33:a8:b0:21:37:d2:c2:7f:35:97:34:ed:fe: f2:ca:3d:23:d3:fe:71:cb:10:0f:f9:e7:6c:ff:f2:03:49:d6: 77:ac:49:3e:9e:a7:f4:c6:2c:86:d4:62:10:e6:b6:80:d8:ae: e2:8d:e8:8c:45:a9:34:cc:98:31:07:00:40:48:5b:33:ec:a3: 00:9d:73:49:70:c2:fa:c3:ef:74:b2:fa:a2:c6:b1:13:ee:75: 9c:9d:02:97:a0:14:62:e1:47:cc:08:6e:02:44:56:43:7d:2e: f3:8a:29:65:2b:bf:d9:ed:dc:b2:af:85:1a:3d:80:f6:42:0a: 0c:c9:07:4e:a9:27:b6:0b:0b:cc:13:d8:19:9b:e9:e1:cf:ed: 17:a3:26:e3:5b:a2:18:8e:6f:49:e4:2c:fc:12:3c:ab:c7:c3: 61:5b:0c:be -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt6yT8pY1i+tlrayH5GGhcHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxOTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNzdkODBmMGZlMmI0M2QwNDZiZWIzZDc5YmFjMTk3YTc5ODljMmU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZCRVB8syu7AGtRKFIE11Q5/EHVa g94waU0kjZ0A1QMXBHdIY/N4HbCBfExmSq2gdnEt24eSWUGUmrZDnE+h+Ewx6+KG 3cs57atVVztm+/vsxh4f5PBcOcDUkVHOFdtIUoKrq8JPSBZAa1ZWcfnRIlb3BC8L K43XQDbGBo7anSTn2fJyPJ9RG0vNjYmUVszM5Di4HmWI0eW478nZpK6pfXlOBbxn 7NJnjIGDUC1r4hPEcAZrz9hTHPPSdMNggQP3q84Yqn072WVKOmt67cKNKLB1exT7 cE/2zjTinMk8HRg14IQETU0CBwdzLygHcpSALPf408/f5NsqpvC+bCDCSwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFCd9gPD+K0PQRr6z15usGXp5icLkMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY2LzE5MDk1 MC1kNDFjLTRkMjYtODViYy01MTg0YjU1ZjFjZmYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjYvMTkwOTUw LWQ0MWMtNGQyNi04NWJjLTUxODRiNTVmMWNmZi8xL0ozMkE4UDRyUTlCR3ZyUFht NndaZW5tSnd1US5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDGWDANBgkqhkiG9w0BAQsFAAOCAQEAC4DROGIjmLMq 4rLrPDHaJcCErzPTNVa9xCPrxtCy7kgX8eBlrmz6gnKqf0lgx5vIpWlj5PrFg/qV hpC2/QyqX21F9FgofRIEud9lOgEl3FXoV6UxICMLz9luMp3142gzqLAhN9LCfzWX NO3+8so9I9P+ccsQD/nnbP/yA0nWd6xJPp6n9MYshtRiEOa2gNiu4o3ojEWpNMyY MQcAQEhbM+yjAJ1zSXDC+sPvdLL6osaxE+51nJ0Cl6AUYuFHzAhuAkRWQ30u84op ZSu/2e3csq+FGj2A9kIKDMkHTqkntgsLzBPYGZvp4c/tF6Mm41uiGI5vSeQs/BI8 q8fDYVsMvg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:50:49 2026 by rpki-client