This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.cer File: J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.cer (raw, json) Hash identifier: V8gSzJNfHK2HWgtW1TKSHjGQ/jMUmsitbUBAi7Qr6kI= Subject key identifier: 27:94:55:63:95:B4:7B:F4:3E:0D:5D:55:6E:7E:25:5B:6C:8A:CC:C2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCB57CB44DF16B68E45A90E76E75ABB Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/88/a5b6f7-f551-441b-bb8f-79da7aaaa3b2/1/J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/88/a5b6f7-f551-441b-bb8f-79da7aaaa3b2/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:20:36 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.133.12.0/22 IP: 2a05:fe80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:57:cb:44:df:16:b6:8e:45:a9:0e:76:e7:5a:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:20:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2794556395b47bf43e0d5d556e7e255b6c8accc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:e8:be:6b:2e:f5:b0:92:b9:8c:7d:ee:8a:50: e8:20:42:c3:4d:96:16:92:43:2b:fe:e1:44:d1:ac: 07:dc:dd:44:f1:95:f9:cf:68:26:78:2c:73:c0:2b: c5:97:03:8e:16:66:b4:3a:e7:8f:79:80:52:52:f9: 9c:55:84:4f:5d:1c:3b:c1:02:29:f3:e3:48:f5:2e: cd:1e:be:a3:aa:0a:11:33:76:64:d7:55:d2:34:f1: 61:2f:9e:a8:f1:42:35:b2:15:1c:1f:37:39:0f:2e: b8:9e:2e:07:cf:64:91:72:c5:de:af:0b:3a:bb:93: cb:3d:13:1b:b8:13:cf:ad:73:8b:f1:6a:d6:da:58: fb:99:9b:fe:e0:d2:ef:50:b4:0c:23:c0:9b:1d:1f: d3:d5:ac:ef:b0:54:b0:4e:22:ff:ff:32:e2:4f:22: 4d:3d:b1:0d:cb:c8:37:20:31:f8:18:50:a9:19:bb: 01:02:e7:6b:e4:77:23:f9:bc:ee:9a:35:a9:0d:36: c1:dc:33:a3:64:96:a9:2c:5a:56:75:c1:70:b5:c8: f2:e9:42:ec:c7:f9:d2:88:b5:01:c9:99:4d:15:ef: ec:c9:bc:9a:d0:63:43:40:4f:fa:52:ca:df:a0:a9: 30:ef:75:80:84:77:51:38:75:c9:82:d8:9c:0e:fa: b8:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:94:55:63:95:B4:7B:F4:3E:0D:5D:55:6E:7E:25:5B:6C:8A:CC:C2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a5b6f7-f551-441b-bb8f-79da7aaaa3b2/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a5b6f7-f551-441b-bb8f-79da7aaaa3b2/1/J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.133.12.0/22 IPv6: 2a05:fe80::/29 Signature Algorithm: sha256WithRSAEncryption 8f:ae:95:1f:c4:6a:e9:ff:1e:50:71:fa:de:17:31:b1:84:e4: 7c:de:b7:e3:8c:e4:5d:ec:d0:5d:25:73:f1:ce:1b:0b:ac:29: ba:84:0b:1c:94:09:19:57:a6:5b:c2:57:bb:31:06:c3:95:03: 03:1c:44:66:0e:39:60:36:ee:6a:d9:8a:c2:d6:05:c0:cb:df: 1a:cf:ef:d7:ab:93:6a:5f:cf:3a:3b:c8:a6:cb:c5:a6:0b:78: 38:c1:6b:c9:9a:9a:85:e9:cf:32:ee:9a:37:ab:33:8a:9c:43: bc:97:07:75:f1:8d:f1:b2:b6:0e:87:05:84:99:67:0e:b5:4f: 8d:bc:cc:f7:c8:79:3f:90:25:20:52:dc:02:c0:2e:04:5e:b9: 0f:72:31:52:b1:ac:ba:14:0e:41:fd:79:a2:b8:8a:06:9d:82: db:37:ea:28:1f:d7:eb:83:80:5f:05:2f:b4:a2:d6:69:25:bb: 72:17:f0:3c:88:07:a6:f4:20:47:9d:92:da:ac:55:83:9a:a2: 3d:6e:0b:5a:2c:be:bf:a4:91:cb:97:63:da:d4:64:17:12:e9: 30:09:70:d3:4a:8a:db:fe:96:41:e9:fc:b5:d4:87:4c:68:34: 26:f0:92:de:9c:7b:bd:10:93:ba:5f:52:ef:1d:a2:4d:ff:33: d3:17:7f:ef -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt9y1fLRN8Wto5FqQ5251q7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgyMDM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNzk0NTU2Mzk1YjQ3YmY0M2UwZDVkNTU2ZTdlMjU1YjZjOGFjY2MyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Oi+ay71sJK5jH3uilDoIELDTZYW kkMr/uFE0awH3N1E8ZX5z2gmeCxzwCvFlwOOFma0OuePeYBSUvmcVYRPXRw7wQIp 8+NI9S7NHr6jqgoRM3Zk11XSNPFhL56o8UI1shUcHzc5Dy64ni4Hz2SRcsXerws6 u5PLPRMbuBPPrXOL8WrW2lj7mZv+4NLvULQMI8CbHR/T1azvsFSwTiL//zLiTyJN PbENy8g3IDH4GFCpGbsBAudr5Hcj+bzumjWpDTbB3DOjZJapLFpWdcFwtcjy6ULs x/nSiLUByZlNFe/sybya0GNDQE/6UsrfoKkw73WAhHdROHXJgticDvq4AQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFCeUVWOVtHv0Pg1dVW5+JVtsiszCMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg4L2E1YjZm Ny1mNTUxLTQ0MWItYmI4Zi03OWRhN2FhYWEzYjIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODgvYTViNmY3 LWY1NTEtNDQxYi1iYjhmLTc5ZGE3YWFhYTNiMi8xL0o1UlZZNVcwZV9RLURWMVZi bjRsVzJ5S3pNSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuYUMMA0EAgACMAcDBQMqBf6AMA0GCSqGSIb3 DQEBCwUAA4IBAQCPrpUfxGrp/x5QcfreFzGxhOR83rfjjORd7NBdJXPxzhsLrCm6 hAsclAkZV6Zbwle7MQbDlQMDHERmDjlgNu5q2YrC1gXAy98az+/Xq5NqX886O8im y8WmC3g4wWvJmpqF6c8y7po3qzOKnEO8lwd18Y3xsrYOhwWEmWcOtU+NvMz3yHk/ kCUgUtwCwC4EXrkPcjFSsay6FA5B/XmiuIoGnYLbN+ooH9frg4BfBS+0otZpJbty F/A8iAem9CBHnZLarFWDmqI9bgtaLL6/pJHLl2Pa1GQXEukwCXDTSorb/pZB6fy1 1IdMaDQm8JLenHu9EJO6X1LvHaJN/zPTF3/v -----END CERTIFICATE-----Generated at Tue Jan 27 14:27:56 2026 by rpki-client