This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JNm7BTDf4yKPg7CGE5LihFk0tpg.cer File: JNm7BTDf4yKPg7CGE5LihFk0tpg.cer (raw, json) Hash identifier: B1SqZ6RcxBn2WG6R3VvrpLwdTwntFzaT2VBPUm2mAHg= Subject key identifier: 24:D9:BB:05:30:DF:E3:22:8F:83:B0:86:13:92:E2:84:59:34:B6:98 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78350B1DBC63721F961C1EAB6CD8843B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:20 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 204504 IP: 185.134.168.0/22 IP: 2a0e:3e80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:0b:1d:bc:63:72:1f:96:1c:1e:ab:6c:d8:84:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=24d9bb0530dfe3228f83b0861392e2845934b698 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:99:b6:80:19:0e:44:08:8c:4a:37:18:4e:4d: 81:67:e1:3c:42:81:ff:5c:01:ce:f1:fc:23:2a:3d: 8b:5c:85:55:06:67:16:78:49:7b:a5:0d:1f:99:33: 18:66:bc:b4:99:5d:bc:be:ca:1f:18:ac:ef:14:bc: 19:f7:74:e3:4e:bd:22:cc:ea:62:03:7b:a5:64:b4: 19:b1:d3:c0:64:01:3d:09:8f:29:2e:85:39:5a:d6: a3:9b:22:18:5b:1a:02:3f:db:55:aa:7b:64:ae:54: 08:00:3a:79:45:22:d5:07:9d:a9:f9:78:03:19:dc: 21:3e:f0:e0:de:7b:7a:3c:fa:75:e3:21:f4:89:59: ab:34:9f:14:d6:fd:36:00:a1:5c:fc:4f:f4:c0:5a: 99:14:c8:db:33:85:67:f4:bd:f4:3e:41:b3:49:91: d3:f5:da:0c:20:fa:60:1d:b5:bc:5a:dc:39:da:f9: 2b:69:82:74:ac:94:86:c4:73:2d:b2:14:1d:71:1a: 0f:be:5c:8a:4b:aa:03:6e:d3:86:74:5a:8c:4e:3e: 67:95:0e:70:bf:4a:0d:b7:7c:aa:c9:5e:a5:21:79: 97:30:2f:56:81:cd:f3:5e:08:79:67:d4:a9:3e:90: 80:85:3a:fa:94:f8:00:19:43:ac:96:23:16:10:54: 42:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:D9:BB:05:30:DF:E3:22:8F:83:B0:86:13:92:E2:84:59:34:B6:98 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.134.168.0/22 IPv6: 2a0e:3e80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 204504 Signature Algorithm: sha256WithRSAEncryption 4f:cd:46:86:bc:3b:5c:d4:e5:c5:b5:3f:b3:e1:43:16:f0:d5: 9b:04:58:ca:72:1e:02:58:a1:06:88:69:51:0f:40:a8:d6:a0: 4f:57:53:b8:aa:48:22:28:dc:7e:62:88:55:e5:20:ce:0b:e7: 10:1f:87:66:72:f4:20:7f:e7:49:42:79:b3:6c:54:f9:fb:78: 32:46:73:50:2e:84:02:07:18:ec:8e:e2:27:e9:10:75:80:3f: 47:86:a6:53:bf:b6:0c:a3:6f:b5:28:ce:e5:e7:7c:81:74:3a: d8:8f:1c:c7:1a:e4:63:a1:09:79:b2:ad:b1:7d:b0:42:86:58: d6:14:45:7f:31:e9:da:75:d8:49:5e:2a:7e:8b:11:c3:54:8d: 78:95:72:99:c0:e5:be:5c:cf:3c:e7:1d:30:0a:60:cf:ee:a7: d4:ca:c8:4a:7f:98:f5:2b:e8:51:1d:d9:11:6b:48:d7:6c:3b: a5:98:fa:00:c6:b1:5d:cd:22:f2:4b:3a:01:d0:76:c2:ea:3c: 31:b9:8f:c1:08:7d:0b:cb:fc:6a:0b:eb:ab:47:78:06:2e:3d: 1f:75:0d:e5:4d:db:46:80:d5:94:f7:0c:30:eb:d1:53:d2:07: 82:0e:c8:01:98:34:26:cb:34:e3:28:06:23:a9:d6:72:ed:c0: 95:f7:58:18 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt4NQsdvGNyH5YcHqts2IQ7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNGQ5YmIwNTMwZGZlMzIyOGY4M2IwODYxMzkyZTI4NDU5MzRiNjk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5m2gBkORAiMSjcYTk2BZ+E8QoH/ XAHO8fwjKj2LXIVVBmcWeEl7pQ0fmTMYZry0mV28vsofGKzvFLwZ93TjTr0izOpi A3ulZLQZsdPAZAE9CY8pLoU5WtajmyIYWxoCP9tVqntkrlQIADp5RSLVB52p+XgD GdwhPvDg3nt6PPp14yH0iVmrNJ8U1v02AKFc/E/0wFqZFMjbM4Vn9L30PkGzSZHT 9doMIPpgHbW8Wtw52vkraYJ0rJSGxHMtshQdcRoPvlyKS6oDbtOGdFqMTj5nlQ5w v0oNt3yqyV6lIXmXMC9Wgc3zXgh5Z9SpPpCAhTr6lPgAGUOsliMWEFRCbQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFCTZuwUw3+Mij4OwhhOS4oRZNLaYMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUzL2E5OTc5 Yy1kOTg5LTQ2ZmYtYjkxZS00ZWEzMDExZGFiNmMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTMvYTk5Nzlj LWQ5ODktNDZmZi1iOTFlLTRlYTMwMTFkYWI2Yy8xL0pObTdCVERmNHlLUGc3Q0dF NUxpaEZrMHRwZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuYaoMA0EAgACMAcDBQMqDj6AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMe2DANBgkqhkiG9w0BAQsFAAOCAQEAT81Ghrw7XNTl xbU/s+FDFvDVmwRYynIeAlihBohpUQ9AqNagT1dTuKpIIijcfmKIVeUgzgvnEB+H ZnL0IH/nSUJ5s2xU+ft4MkZzUC6EAgcY7I7iJ+kQdYA/R4amU7+2DKNvtSjO5ed8 gXQ62I8cxxrkY6EJebKtsX2wQoZY1hRFfzHp2nXYSV4qfosRw1SNeJVymcDlvlzP POcdMApgz+6n1MrISn+Y9SvoUR3ZEWtI12w7pZj6AMaxXc0i8ks6AdB2wuo8MbmP wQh9C8v8agvrq0d4Bi49H3UN5U3bRoDVlPcMMOvRU9IHgg7IAZg0Jss04ygGI6nW cu3AlfdYGA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:42:09 2026 by rpki-client