This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/J4AmhdpzSxV6LbnM_3bdTkiRGSg.cer File: J4AmhdpzSxV6LbnM_3bdTkiRGSg.cer (raw, json) Hash identifier: 4CWfLD6oYvujx+KMqt1MvTIaZk6+yWGwtPlYACIAwzE= Subject key identifier: 27:80:26:85:DA:73:4B:15:7A:2D:B9:CC:FF:76:DD:4E:48:91:19:28 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F81AD2A17445D6C46F70A6A3B99857D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/J4AmhdpzSxV6LbnM_3bdTkiRGSg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:19:23 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 50872 IP: 79.110.144.0/20 IP: 176.123.208.0/21 IP: 193.243.168.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:81:ad:2a:17:44:5d:6c:46:f7:0a:6a:3b:99:85:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:19:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=27802685da734b157a2db9ccff76dd4e48911928 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:fc:de:6f:5d:84:3a:01:1b:09:dc:ae:23:7e: e3:de:14:7f:74:20:fd:61:d1:94:10:4b:cb:7f:13: 17:e0:94:6d:3f:80:69:16:43:7c:b0:df:d6:4f:e5: 5e:3c:d6:62:3c:7c:61:6c:15:a4:8a:65:8c:15:3e: 4c:62:b7:4a:00:c1:03:3a:a6:ad:b4:79:db:7f:d6: 54:c4:49:85:7b:c9:64:c0:b1:d1:26:cc:95:2a:54: d9:0f:fb:11:53:76:7f:89:a2:cf:55:34:a9:66:dd: 7c:20:ae:01:14:67:68:ea:ed:48:a0:c6:80:eb:b2: 18:e7:80:0c:c0:45:a2:b7:df:2a:c5:a9:57:3e:a1: e5:e1:5f:b0:9f:ed:65:54:5d:8a:aa:66:4c:69:93: a5:9f:84:34:ca:29:a8:92:bb:ea:ff:e5:91:11:bc: 1a:3c:b7:bc:c6:d1:94:49:75:9a:4d:13:62:d5:63: d5:d0:e4:3c:aa:62:ef:e0:b2:f9:f0:e0:9e:a1:78: ed:aa:d9:1e:5a:d1:84:2a:f4:f1:e5:02:da:34:fc: 28:c5:7f:79:6d:a5:73:dc:f3:93:c6:2a:f5:b9:96: 76:a5:5d:ce:77:46:72:a7:94:1d:9b:ce:da:d7:27: e0:ad:b8:c3:e3:b0:ef:ba:10:bf:a3:15:b0:63:69: 4f:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:80:26:85:DA:73:4B:15:7A:2D:B9:CC:FF:76:DD:4E:48:91:19:28 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/J4AmhdpzSxV6LbnM_3bdTkiRGSg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.110.144.0/20 176.123.208.0/21 193.243.168.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 50872 Signature Algorithm: sha256WithRSAEncryption 5e:3f:c2:1f:dd:f7:96:46:50:4d:c9:f6:0c:ab:36:61:71:51: c1:6d:fa:68:29:44:ea:70:1c:d9:04:43:f0:83:03:5e:ec:e3: 19:cc:d4:af:ca:0d:a5:cf:ce:60:85:25:47:45:a6:23:c5:de: 15:20:68:8a:a3:ae:63:74:3a:56:a3:4e:7b:47:4a:a4:9c:85: ef:ec:f0:7e:84:d3:77:2f:29:d6:13:ff:80:9a:df:70:0f:8f: 39:53:14:4d:a9:07:24:fb:b5:50:68:c4:79:88:60:ce:ff:a3: d2:2f:88:13:c8:92:27:8c:ae:de:b6:76:31:e4:ed:b0:a5:56: ea:47:77:41:d3:fd:5e:2c:a9:98:f8:c9:98:a9:66:80:ad:d5: 68:87:c8:1c:03:b9:92:77:62:66:cc:95:af:25:92:34:36:2f: c5:18:01:7d:d3:e8:91:f2:79:cd:56:2e:ce:f1:f4:7e:ed:56: 05:27:e2:c2:76:35:06:6d:ad:19:10:c1:7e:b4:c3:41:a7:c9: db:5e:ef:af:6e:d0:bc:f4:4f:be:84:c7:d2:5a:ea:be:e5:a6: 0b:bc:5a:83:72:f4:cf:fd:4c:6d:34:f1:90:c7:09:5e:50:6c: d9:3e:b8:e3:87:8a:90:76:75:07:dc:49:80:3b:01:3c:0d:3f: 3b:f8:d5:5a -----BEGIN CERTIFICATE----- MIIFoDCCBIigAwIBAgISAZt/ga0qF0RdbEb3Cmo7mYV9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYxOTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNzgwMjY4NWRhNzM0YjE1N2EyZGI5Y2NmZjc2ZGQ0ZTQ4OTExOTI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfzeb12EOgEbCdyuI37j3hR/dCD9 YdGUEEvLfxMX4JRtP4BpFkN8sN/WT+VePNZiPHxhbBWkimWMFT5MYrdKAMEDOqat tHnbf9ZUxEmFe8lkwLHRJsyVKlTZD/sRU3Z/iaLPVTSpZt18IK4BFGdo6u1IoMaA 67IY54AMwEWit98qxalXPqHl4V+wn+1lVF2KqmZMaZOln4Q0yimokrvq/+WREbwa PLe8xtGUSXWaTRNi1WPV0OQ8qmLv4LL58OCeoXjtqtkeWtGEKvTx5QLaNPwoxX95 baVz3POTxir1uZZ2pV3Od0Zyp5Qdm87a1yfgrbjD47DvuhC/oxWwY2lPwQIDAQAB o4ICrDCCAqgwHQYDVR0OBBYEFCeAJoXac0sVei25zP923U5IkRkoMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFiLzhlNWQ2 NS01OTEyLTQxOGUtOWMwMS0xMjNhODZkOTQ4MTgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWIvOGU1ZDY1 LTU5MTItNDE4ZS05YzAxLTEyM2E4NmQ5NDgxOC8xL0o0QW1oZHB6U3hWNkxibk1f M2JkVGtpUkdTZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUF BwEHAQH/BBwwGjAYBAIAATASAwQET26QAwQDsHvQAwQCwfOoMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwDGuDANBgkqhkiG9w0BAQsFAAOCAQEAXj/CH933lkZQTcn2 DKs2YXFRwW36aClE6nAc2QRD8IMDXuzjGczUr8oNpc/OYIUlR0WmI8XeFSBoiqOu Y3Q6VqNOe0dKpJyF7+zwfoTTdy8p1hP/gJrfcA+POVMUTakHJPu1UGjEeYhgzv+j 0i+IE8iSJ4yu3rZ2MeTtsKVW6kd3QdP9XiypmPjJmKlmgK3VaIfIHAO5kndiZsyV ryWSNDYvxRgBfdPokfJ5zVYuzvH0fu1WBSfiwnY1Bm2tGRDBfrTDQafJ217vr27Q vPRPvoTH0lrqvuWmC7xag3L0z/1MbTTxkMcJXlBs2T6444eKkHZ1B9xJgDsBPA0/ O/jVWg== -----END CERTIFICATE-----Generated at Mon Feb 9 15:06:43 2026 by rpki-client