This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/J4c6_mMwt66e5WLgyYjp_V6o9Wc.cer File: J4c6_mMwt66e5WLgyYjp_V6o9Wc.cer (raw, json) Hash identifier: fHRLHHlTeVm4/aMd8DNk56LH+Cp29pu/ujTWXV6Qskw= Subject key identifier: 27:87:3A:FE:63:30:B7:AE:9E:E5:62:E0:C9:88:E9:FD:5E:A8:F5:67 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797F080B598AE478BEAB23C03401C1B2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/15/d39416-f46a-4f82-b1e1-e0d1f7cacff1/1/J4c6_mMwt66e5WLgyYjp_V6o9Wc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/15/d39416-f46a-4f82-b1e1-e0d1f7cacff1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:46 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 57094 IP: 141.8.232.0/21 IP: 2a13:8cc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:08:0b:59:8a:e4:78:be:ab:23:c0:34:01:c1:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=27873afe6330b7ae9ee562e0c988e9fd5ea8f567 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:34:56:7d:76:f3:25:7d:bf:13:b8:5f:4d:2e: 7c:93:90:c2:0f:f5:6a:57:df:04:94:57:e2:3c:8e: c6:4c:b9:58:bd:4d:39:a2:55:0b:c6:66:fb:1e:42: c1:54:ac:d9:e9:bc:b3:26:b0:84:e5:d4:67:fa:23: ca:72:c1:42:89:5d:1a:b4:61:db:b1:4b:99:ea:d0: 4c:23:1f:6a:2d:fd:30:1f:8f:36:32:0e:7d:a0:d9: 66:6c:f1:fa:19:e0:de:0e:72:07:1d:23:53:1d:15: 31:3e:8b:da:74:38:1e:cc:8d:c6:a2:79:5a:db:82: 22:ae:b0:3b:c8:03:e1:b5:4c:29:70:c4:81:6a:61: da:cf:b2:ce:ba:d2:cf:f5:38:5e:1d:3a:ce:a3:d6: 7e:38:a8:99:b1:d3:0e:40:1f:c8:11:5b:89:a8:f1: ca:0a:e0:00:68:72:bd:8b:36:06:4c:00:0d:9b:83: ef:8a:f4:f6:fa:0a:cd:98:63:f8:24:22:d4:9c:b5: 6c:91:13:46:df:06:87:59:30:94:93:96:a9:48:e2: 2c:66:f9:9e:16:ab:5b:6d:74:20:4b:c6:54:6c:50: 93:56:8f:9b:8c:bd:d0:4c:67:7b:ba:a4:4d:9d:1b: fe:57:b4:11:8d:e7:41:bf:c2:22:2c:1b:8b:30:8c: eb:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:87:3A:FE:63:30:B7:AE:9E:E5:62:E0:C9:88:E9:FD:5E:A8:F5:67 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d39416-f46a-4f82-b1e1-e0d1f7cacff1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d39416-f46a-4f82-b1e1-e0d1f7cacff1/1/J4c6_mMwt66e5WLgyYjp_V6o9Wc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.8.232.0/21 IPv6: 2a13:8cc0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 57094 Signature Algorithm: sha256WithRSAEncryption 8c:5c:43:dc:d5:4b:ce:89:7c:00:16:2c:5e:ca:c0:be:fc:28: 76:4b:70:d1:47:30:a2:43:07:34:17:6a:ca:31:11:5f:f2:63: 27:6c:90:69:c8:5d:44:74:e8:1b:4f:1c:9c:33:1d:e7:d2:2e: 4d:72:99:58:1f:4a:bd:0b:8e:bd:3f:dd:21:d4:c9:0f:63:a5: f9:5b:a3:0a:eb:b5:52:dd:dd:0f:16:cc:68:62:59:ab:36:8d: 62:6b:34:ce:a6:23:ab:9b:13:9f:4b:6c:ce:07:40:d5:19:97: c8:f6:5b:c9:2d:8d:73:a6:ce:13:dd:00:4a:3e:a7:5d:60:96: 35:27:e7:65:0c:c0:e4:0b:d4:c5:e9:9e:97:5f:d0:4a:95:d8: 74:d3:ff:3e:66:f7:d4:8c:9f:10:52:21:f5:90:2e:6c:b1:17: 69:66:ed:d4:32:30:76:2e:04:ea:83:d3:86:87:d0:dc:a4:b3: 05:db:55:ff:98:f8:f8:e9:1f:bf:8e:a2:57:48:a0:85:d6:89: ca:df:00:79:b7:f2:65:7e:5a:e0:79:d4:f7:28:23:fc:ca:1e: e4:09:ff:e6:4a:02:bb:a9:dc:3f:de:a9:7b:80:f8:22:97:ec: 14:69:85:1a:2c:8b:13:d3:1d:f1:31:4f:05:93:c7:9b:33:b6: e2:2c:99:82 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt5fwgLWYrkeL6rI8A0AcGyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNzg3M2FmZTYzMzBiN2FlOWVlNTYyZTBjOTg4ZTlmZDVlYThmNTY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozRWfXbzJX2/E7hfTS58k5DCD/Vq V98ElFfiPI7GTLlYvU05olULxmb7HkLBVKzZ6byzJrCE5dRn+iPKcsFCiV0atGHb sUuZ6tBMIx9qLf0wH482Mg59oNlmbPH6GeDeDnIHHSNTHRUxPovadDgezI3Gonla 24IirrA7yAPhtUwpcMSBamHaz7LOutLP9TheHTrOo9Z+OKiZsdMOQB/IEVuJqPHK CuAAaHK9izYGTAANm4PvivT2+grNmGP4JCLUnLVskRNG3waHWTCUk5apSOIsZvme FqtbbXQgS8ZUbFCTVo+bjL3QTGd7uqRNnRv+V7QRjedBv8IiLBuLMIzrNQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFCeHOv5jMLeunuVi4MmI6f1eqPVnMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE1L2QzOTQx Ni1mNDZhLTRmODItYjFlMS1lMGQxZjdjYWNmZjEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTUvZDM5NDE2 LWY0NmEtNGY4Mi1iMWUxLWUwZDFmN2NhY2ZmMS8xL0o0YzZfbU13dDY2ZTVXTGd5 WWpwX1Y2bzlXYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQDjQjoMA0EAgACMAcDBQMqE4zAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDfBjANBgkqhkiG9w0BAQsFAAOCAQEAjFxD3NVLzol8 ABYsXsrAvvwodktw0UcwokMHNBdqyjERX/JjJ2yQachdRHToG08cnDMd59IuTXKZ WB9KvQuOvT/dIdTJD2Ol+VujCuu1Ut3dDxbMaGJZqzaNYms0zqYjq5sTn0tszgdA 1RmXyPZbyS2Nc6bOE90ASj6nXWCWNSfnZQzA5AvUxemel1/QSpXYdNP/Pmb31Iyf EFIh9ZAubLEXaWbt1DIwdi4E6oPThofQ3KSzBdtV/5j4+Okfv46iV0ighdaJyt8A ebfyZX5a4HnU9ygj/Moe5An/5koCu6ncP96pe4D4IpfsFGmFGiyLE9Md8TFPBZPH mzO24iyZgg== -----END CERTIFICATE-----Generated at Mon Feb 9 20:55:29 2026 by rpki-client