This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/J5YqM_0jSHgawSOhJyKghu6Pun0.cer File: J5YqM_0jSHgawSOhJyKghu6Pun0.cer (raw, json) Hash identifier: GPRn0nj385FijpRP0fs51MFHj6Ql5zGE9vjhjFxpLkc= Subject key identifier: 27:96:2A:33:FD:23:48:78:1A:C1:23:A1:27:22:A0:86:EE:8F:BA:7D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C7F8A5FE8F6C6CF0C88B38AD884D8E9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ab/1145d2-b1bd-4a57-a44d-bb6bffe66ff3/1/J5YqM_0jSHgawSOhJyKghu6Pun0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ab/1145d2-b1bd-4a57-a44d-bb6bffe66ff3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:18:11 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 58081 IP: 37.75.240.0 -- 37.75.242.255 IP: 2a03:49c0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:8a:5f:e8:f6:c6:cf:0c:88:b3:8a:d8:84:d8:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=27962a33fd2348781ac123a12722a086ee8fba7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b7:d4:b8:eb:b0:fb:b0:d3:a6:8b:7d:03:75: 02:c6:c3:a3:2f:8e:49:9c:36:20:c1:97:5a:5b:49: 78:a0:9e:88:f3:0e:76:fa:0b:03:99:d1:ab:82:46: e6:b0:e3:64:9b:3f:74:8b:2c:6d:42:15:6e:4e:0d: 18:af:2f:43:6f:79:fb:75:85:fd:90:99:f9:90:f8: 2e:2e:b2:7a:e4:74:df:4f:10:26:fe:74:8b:51:5e: d3:07:c6:41:86:c3:fd:6a:5b:a7:d0:82:84:7c:34: 21:ef:39:f4:31:e0:a1:85:d3:1f:aa:d4:e7:56:e6: b2:48:3a:fe:bb:f8:e6:3d:20:71:53:61:30:44:71: b2:99:a9:16:6d:22:bb:91:65:a3:12:df:72:65:b7: f5:3a:77:79:34:f0:d2:e3:a9:41:0f:2d:c8:04:0c: 52:ae:2b:67:a1:cc:1d:e5:f4:a7:49:c9:bd:8a:35: ac:29:a9:71:ab:3e:4c:7b:f1:d7:a3:15:67:db:fd: 38:41:d0:14:c5:c0:29:8d:65:2d:85:7b:f5:20:63: bb:dd:ee:61:d3:b6:37:52:64:5e:e5:61:e1:bd:85: 94:e0:aa:05:79:84:24:5f:d1:58:d7:02:85:9e:1e: 97:dc:ce:8c:06:6a:c4:58:e3:c8:fd:1b:15:2c:c9: 37:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:96:2A:33:FD:23:48:78:1A:C1:23:A1:27:22:A0:86:EE:8F:BA:7D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/1145d2-b1bd-4a57-a44d-bb6bffe66ff3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/1145d2-b1bd-4a57-a44d-bb6bffe66ff3/1/J5YqM_0jSHgawSOhJyKghu6Pun0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.75.240.0-37.75.242.255 IPv6: 2a03:49c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 58081 Signature Algorithm: sha256WithRSAEncryption 96:7e:73:34:bc:f0:16:29:3f:e3:60:ad:46:5e:d5:26:3b:0c: 4c:c3:3c:7c:5a:0e:e6:1e:61:6d:7b:50:4c:20:4e:b4:5b:d4: 6d:fa:20:d6:64:c5:b6:55:ee:ac:ae:8a:1c:4e:a0:aa:f9:f2: 8f:08:3e:e3:93:02:6a:ea:62:39:ac:fc:52:db:60:06:bc:c0: 45:26:a4:97:3b:00:61:6d:7a:86:04:00:c9:9c:7a:2f:45:f7: 4a:f5:62:57:f0:ae:b7:55:ea:21:b8:95:6f:f4:a0:ad:40:76: 5c:44:a3:cd:57:6b:dc:94:7f:63:a0:43:dc:50:6a:62:83:ad: 03:c5:dd:64:af:96:ee:ed:de:e6:4e:5a:31:ff:0f:b9:a1:37: 8f:38:3e:79:e0:6a:5b:7b:80:1c:39:16:da:68:c7:6b:7f:8e: 14:74:9a:48:25:39:9e:0a:43:25:c6:56:20:8f:e1:21:6f:37: 46:db:e8:39:a7:8d:16:0c:27:ab:e6:78:2d:73:97:81:e8:52: dd:be:63:39:96:d8:42:9a:7d:76:0d:85:a2:90:73:5b:5e:31: ab:b6:fa:e6:6a:c4:79:8a:93:91:69:29:29:1c:5e:30:79:dd: eb:2e:6d:c4:88:83:b9:52:d6:22:0c:eb:c1:61:fe:31:5b:e7: 8d:cc:ce:3e -----BEGIN CERTIFICATE----- MIIFqzCCBJOgAwIBAgISAZt8f4pf6PbGzwyIs4rYhNjpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNzk2MmEzM2ZkMjM0ODc4MWFjMTIzYTEyNzIyYTA4NmVlOGZiYTdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLfUuOuw+7DTpot9A3UCxsOjL45J nDYgwZdaW0l4oJ6I8w52+gsDmdGrgkbmsONkmz90iyxtQhVuTg0Yry9Db3n7dYX9 kJn5kPguLrJ65HTfTxAm/nSLUV7TB8ZBhsP9alun0IKEfDQh7zn0MeChhdMfqtTn VuaySDr+u/jmPSBxU2EwRHGymakWbSK7kWWjEt9yZbf1Ond5NPDS46lBDy3IBAxS ritnocwd5fSnScm9ijWsKalxqz5Me/HXoxVn2/04QdAUxcApjWUthXv1IGO73e5h 07Y3UmRe5WHhvYWU4KoFeYQkX9FY1wKFnh6X3M6MBmrEWOPI/RsVLMk31QIDAQAB o4ICtzCCArMwHQYDVR0OBBYEFCeWKjP9I0h4GsEjoScioIbuj7p9MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FiLzExNDVk Mi1iMWJkLTRhNTctYTQ0ZC1iYjZiZmZlNjZmZjMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWIvMTE0NWQy LWIxYmQtNGE1Ny1hNDRkLWJiNmJmZmU2NmZmMy8xL0o1WXFNXzBqU0hnYXdTT2hK eUtnaHU2UHVuMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDYGCCsGAQUF BwEHAQH/BCcwJTAUBAIAATAOMAwDBAQlS/ADBAAlS/IwDQQCAAIwBwMFACoDScAw GgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAOLhMA0GCSqGSIb3DQEBCwUAA4IBAQCW fnM0vPAWKT/jYK1GXtUmOwxMwzx8Wg7mHmFte1BMIE60W9Rt+iDWZMW2Ve6srooc TqCq+fKPCD7jkwJq6mI5rPxS22AGvMBFJqSXOwBhbXqGBADJnHovRfdK9WJX8K63 VeohuJVv9KCtQHZcRKPNV2vclH9joEPcUGpig60Dxd1kr5bu7d7mTlox/w+5oTeP OD554Gpbe4AcORbaaMdrf44UdJpIJTmeCkMlxlYgj+EhbzdG2+g5p40WDCer5ngt c5eB6FLdvmM5lthCmn12DYWikHNbXjGrtvrmasR5ipORaSkpHF4wed3rLm3EiIO5 UtYiDOvBYf4xW+eNzM4+ -----END CERTIFICATE-----Generated at Mon Feb 9 15:14:26 2026 by rpki-client