This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JUn0XvILUG6o70y2gsLKJwGykLQ.cer File: JUn0XvILUG6o70y2gsLKJwGykLQ.cer (raw, json) Hash identifier: /G6Kc9Ex+X/CY4qpunweAZ4j7uJkAJHNdWv450Z9BgE= Subject key identifier: 25:49:F4:5E:F2:0B:50:6E:A8:EF:4C:B6:82:C2:CA:27:01:B2:90:B4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA4CA95AB97BAA30DA9CF6AC481D769 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e3/e7c7f2-5784-4265-84b3-a5431b07d09e/1/JUn0XvILUG6o70y2gsLKJwGykLQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e3/e7c7f2-5784-4265-84b3-a5431b07d09e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:18:07 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 205726 IP: 185.208.56.0/22 IP: 2a0b:31c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:ca:95:ab:97:ba:a3:0d:a9:cf:6a:c4:81:d7:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2549f45ef20b506ea8ef4cb682c2ca2701b290b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:51:e2:18:5e:dd:22:e7:cf:8a:4d:ab:da:64: 9b:d6:04:8c:a9:70:63:db:1e:36:70:07:d2:a3:f1: b6:b6:b4:ec:6a:cb:93:19:27:b7:24:1a:ed:58:59: 7e:27:bf:1b:57:9e:e6:4b:ea:68:d8:c3:ec:a7:47: 32:7f:59:e6:79:c0:88:40:eb:bc:ce:2a:8f:96:60: 8d:ab:92:71:f8:8d:76:5e:a2:bb:8c:eb:5e:5e:06: e8:21:d2:b0:e2:83:34:f9:c3:9e:4d:6d:fa:9b:ae: 74:63:c5:dc:7b:30:2f:f1:88:22:81:d1:a0:c3:5b: 4f:3c:b5:bc:c0:2d:cc:4c:80:18:fe:7b:de:de:87: 0d:2b:10:6b:66:70:e3:e2:e3:ef:af:3f:74:ee:52: 79:6e:34:fe:08:8a:e8:8a:56:13:ff:20:24:bd:5c: 41:6d:75:38:40:e5:3d:b6:e6:31:60:cf:bc:ae:d2: 96:c5:25:8f:a5:dc:8f:9e:db:12:1a:cb:3b:fa:d5: cf:06:0a:99:25:3e:d3:b6:82:c1:2e:54:81:87:73: ff:fe:01:6a:2b:3e:a7:8a:2a:ae:43:ba:a5:35:fc: bf:85:cf:32:df:3d:28:e6:39:af:fe:8a:41:c7:33: ca:5d:6a:90:4d:cc:80:e5:57:cf:16:3d:dc:5b:5e: 28:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:49:F4:5E:F2:0B:50:6E:A8:EF:4C:B6:82:C2:CA:27:01:B2:90:B4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/e7c7f2-5784-4265-84b3-a5431b07d09e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/e7c7f2-5784-4265-84b3-a5431b07d09e/1/JUn0XvILUG6o70y2gsLKJwGykLQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.208.56.0/22 IPv6: 2a0b:31c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 205726 Signature Algorithm: sha256WithRSAEncryption 28:14:06:81:6f:a8:b8:40:30:48:cd:01:2f:41:c8:77:6b:e1: 63:93:ee:58:8b:3b:76:28:6b:b5:02:96:ce:b1:34:d4:3e:b2: 12:81:c6:3f:1b:d4:19:eb:e4:4a:f1:ab:95:7c:4f:ad:f9:51: b4:cb:6b:03:47:d0:2f:25:e4:e1:98:e6:32:4d:60:14:09:2d: ee:bc:f5:6a:6c:30:6f:2a:da:21:e7:85:48:0d:bc:bc:0b:86: e3:59:56:ba:5e:ac:db:ea:67:63:26:30:bf:6e:00:3b:f5:b4: 59:be:35:9c:b6:b9:2e:4f:69:d3:4d:6e:bd:4c:8c:6c:cd:e4: ca:7c:10:be:75:9c:5b:cf:0a:9b:6b:65:4a:ed:c7:fd:bd:ef: fd:ef:be:4f:47:88:62:78:a4:c2:bc:8f:17:6c:46:bb:96:42: 1f:c6:5c:1c:06:dc:45:1b:e9:d0:5c:12:0c:35:21:94:0b:15: 49:3e:eb:a3:02:4f:65:f2:f1:0f:4a:5b:41:77:15:01:c3:ca: 82:cc:18:d3:9f:02:2b:e7:7e:1f:2a:45:fe:3f:ef:46:b3:36: 83:65:6e:ba:93:1e:4e:ed:42:08:d5:d1:da:8d:13:7f:e3:57: 1a:61:90:ec:f8:b7:4e:2f:ef:f9:d3:0f:6e:d7:91:94:a5:9d: b2:0c:10:b7 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt+pMqVq5e6ow2pz2rEgddpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNTQ5ZjQ1ZWYyMGI1MDZlYThlZjRjYjY4MmMyY2EyNzAxYjI5MGI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVHiGF7dIufPik2r2mSb1gSMqXBj 2x42cAfSo/G2trTsasuTGSe3JBrtWFl+J78bV57mS+po2MPsp0cyf1nmecCIQOu8 ziqPlmCNq5Jx+I12XqK7jOteXgboIdKw4oM0+cOeTW36m650Y8XcezAv8YgigdGg w1tPPLW8wC3MTIAY/nve3ocNKxBrZnDj4uPvrz907lJ5bjT+CIroilYT/yAkvVxB bXU4QOU9tuYxYM+8rtKWxSWPpdyPntsSGss7+tXPBgqZJT7TtoLBLlSBh3P//gFq Kz6niiquQ7qlNfy/hc8y3z0o5jmv/opBxzPKXWqQTcyA5VfPFj3cW14osQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFCVJ9F7yC1BuqO9MtoLCyicBspC0MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2UzL2U3Yzdm Mi01Nzg0LTQyNjUtODRiMy1hNTQzMWIwN2QwOWUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTMvZTdjN2Yy LTU3ODQtNDI2NS04NGIzLWE1NDMxYjA3ZDA5ZS8xL0pVbjBYdklMVUc2bzcweTJn c0xLSndHeWtMUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCudA4MA0EAgACMAcDBQMqCzHAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMjnjANBgkqhkiG9w0BAQsFAAOCAQEAKBQGgW+ouEAw SM0BL0HId2vhY5PuWIs7dihrtQKWzrE01D6yEoHGPxvUGevkSvGrlXxPrflRtMtr A0fQLyXk4ZjmMk1gFAkt7rz1amwwbyraIeeFSA28vAuG41lWul6s2+pnYyYwv24A O/W0Wb41nLa5Lk9p001uvUyMbM3kynwQvnWcW88Km2tlSu3H/b3v/e++T0eIYnik wryPF2xGu5ZCH8ZcHAbcRRvp0FwSDDUhlAsVST7rowJPZfLxD0pbQXcVAcPKgswY 058CK+d+HypF/j/vRrM2g2VuupMeTu1CCNXR2o0Tf+NXGmGQ7Pi3Ti/v+dMPbteR lKWdsgwQtw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:26:43 2026 by rpki-client