This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JB7VjkJpdeKZh1iXyv-VUmQNnAk.cer File: JB7VjkJpdeKZh1iXyv-VUmQNnAk.cer (raw, json) Hash identifier: 6wZTkI7zYvghLbOoQljAZR8qmRgZTaLi+zAbCR4AbVQ= Subject key identifier: 24:1E:D5:8E:42:69:75:E2:99:87:58:97:CA:FF:95:52:64:0D:9C:09 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7910CA5528C44D63186336896C59C63D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/82/f5dc62-be68-4663-84de-5545b8901438/1/JB7VjkJpdeKZh1iXyv-VUmQNnAk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/82/f5dc62-be68-4663-84de-5545b8901438/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:22 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 15826 IP: 80.247.224.0/20 IP: 185.20.84.0/22 IP: 2a00:1a60::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:ca:55:28:c4:4d:63:18:63:36:89:6c:59:c6:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=241ed58e426975e299875897caff9552640d9c09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:02:05:8a:ba:5a:33:f3:9b:1a:33:2d:f0:8a: 38:58:8a:98:ee:e1:d1:eb:54:96:2e:60:d3:ec:55: 51:8d:ff:7f:9a:ac:48:b4:1f:e2:96:29:de:db:01: a3:3c:83:29:3d:4a:ae:70:03:06:90:2d:34:14:59: ee:df:52:56:bd:8c:bd:46:93:e7:b8:81:d0:f2:bc: c0:0d:fe:0c:3b:fd:a3:b9:fc:d2:79:aa:08:4b:04: 58:91:6f:62:ec:23:cd:0c:4a:a1:50:a3:e2:bf:93: 08:cf:3b:54:27:f3:e2:5b:be:1c:f2:b9:49:4b:d3: f5:03:66:f0:43:91:fe:19:73:13:9a:22:16:9f:d9: fd:85:3d:76:6f:9b:d9:6c:22:10:dc:e6:78:af:d3: d5:16:87:8c:5e:e4:ee:8f:80:01:2d:c8:5b:7b:7b: 4b:22:85:27:68:b9:1e:53:ed:ee:bd:56:dd:14:43: e4:d2:e7:97:fe:1c:34:20:fb:8e:4f:3b:5d:9d:b5: f2:ab:7f:d1:be:00:b2:ea:80:77:bd:53:18:b5:e2: 5a:63:c9:f4:4d:ba:c1:59:83:4c:9a:68:0b:77:ce: 7f:3b:0b:82:aa:db:e5:c1:df:8b:7b:a9:cb:9f:34: 18:be:68:14:29:1e:ed:e7:66:ea:ed:5f:ea:c8:b4: c8:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:1E:D5:8E:42:69:75:E2:99:87:58:97:CA:FF:95:52:64:0D:9C:09 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f5dc62-be68-4663-84de-5545b8901438/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f5dc62-be68-4663-84de-5545b8901438/1/JB7VjkJpdeKZh1iXyv-VUmQNnAk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.247.224.0/20 185.20.84.0/22 IPv6: 2a00:1a60::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 15826 Signature Algorithm: sha256WithRSAEncryption a3:60:aa:61:d9:24:fb:49:01:d3:e1:f1:d4:36:28:25:87:32: 18:a2:cd:ac:2f:8a:d7:4f:94:52:89:49:5d:9b:2c:33:62:e1: ee:ea:17:90:95:4e:64:16:6d:85:2c:73:6a:56:cd:f4:bd:4a: bf:e0:ec:4c:31:75:1f:19:0e:75:ba:c4:9a:c5:f9:94:ce:9a: 93:45:a9:eb:51:c2:b5:81:ba:e2:4e:14:14:17:9e:31:b9:8b: a0:e5:77:16:7b:0d:79:b6:59:70:d4:4e:ce:d2:00:ed:1a:5d: 89:d5:42:26:a6:78:b5:73:37:da:01:34:76:62:87:1d:5c:00: 2f:0e:4e:2d:69:a5:71:6c:36:5c:fe:eb:b1:9c:b8:0a:04:ef: 50:c5:f9:49:14:77:44:8b:87:f9:20:34:c5:ad:18:75:4c:90: 40:df:78:08:d7:d3:e7:d8:7c:6e:99:da:e9:6b:28:8e:92:44: a5:be:78:87:dd:07:11:bf:31:d4:5d:26:c0:c0:1f:38:6d:9f: 82:4d:ea:a2:d8:e7:dc:d8:ed:8f:40:e6:e5:42:6e:96:f2:f6: 9b:ae:e2:99:9b:8c:67:32:c9:4b:1c:ac:bc:28:48:be:4a:34: 25:38:25:d5:18:f0:dc:54:82:c1:c5:6c:4b:7a:28:a9:7c:d4: 9b:47:c7:17 -----BEGIN CERTIFICATE----- MIIFqDCCBJCgAwIBAgISAZt5EMpVKMRNYxhjNolsWcY9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNDFlZDU4ZTQyNjk3NWUyOTk4NzU4OTdjYWZmOTU1MjY0MGQ5YzA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgIFirpaM/ObGjMt8Io4WIqY7uHR 61SWLmDT7FVRjf9/mqxItB/iline2wGjPIMpPUqucAMGkC00FFnu31JWvYy9RpPn uIHQ8rzADf4MO/2jufzSeaoISwRYkW9i7CPNDEqhUKPiv5MIzztUJ/PiW74c8rlJ S9P1A2bwQ5H+GXMTmiIWn9n9hT12b5vZbCIQ3OZ4r9PVFoeMXuTuj4ABLchbe3tL IoUnaLkeU+3uvVbdFEPk0ueX/hw0IPuOTztdnbXyq3/RvgCy6oB3vVMYteJaY8n0 TbrBWYNMmmgLd85/OwuCqtvlwd+Le6nLnzQYvmgUKR7t52bq7V/qyLTIsQIDAQAB o4ICtDCCArAwHQYDVR0OBBYEFCQe1Y5CaXXimYdYl8r/lVJkDZwJMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgyL2Y1ZGM2 Mi1iZTY4LTQ2NjMtODRkZS01NTQ1Yjg5MDE0MzgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODIvZjVkYzYy LWJlNjgtNDY2My04NGRlLTU1NDViODkwMTQzOC8xL0pCN1Zqa0pwZGVLWmgxaVh5 di1WVW1RTm5Bay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQEUPfgAwQCuRRUMA0EAgACMAcDBQAqABpgMBkG CCsGAQUFBwEIAQH/BAowCKAGMAQCAj3SMA0GCSqGSIb3DQEBCwUAA4IBAQCjYKph 2ST7SQHT4fHUNiglhzIYos2sL4rXT5RSiUldmywzYuHu6heQlU5kFm2FLHNqVs30 vUq/4OxMMXUfGQ51usSaxfmUzpqTRanrUcK1gbriThQUF54xuYug5XcWew15tllw 1E7O0gDtGl2J1UImpni1czfaATR2YocdXAAvDk4taaVxbDZc/uuxnLgKBO9QxflJ FHdEi4f5IDTFrRh1TJBA33gI19Pn2HxumdrpayiOkkSlvniH3QcRvzHUXSbAwB84 bZ+CTeqi2Ofc2O2PQOblQm6W8vabruKZm4xnMslLHKy8KEi+SjQlOCXVGPDcVILB xWxLeiipfNSbR8cX -----END CERTIFICATE-----Generated at Mon Feb 9 15:09:17 2026 by rpki-client