This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JY9ajila0de0ih4RlYeQBStXolM.cer File: JY9ajila0de0ih4RlYeQBStXolM.cer (raw, json) Hash identifier: lXRB3fe6iPLUMKGUZiKwoo33aYnuGtxjiwQdS3r0+4w= Subject key identifier: 25:8F:5A:8E:29:5A:D1:D7:B4:8A:1E:11:95:87:90:05:2B:57:A2:53 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F80F9A648507E58A821CB08FCB8C8C0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3b/3719f3-22e1-4344-9a39-458a2736157a/1/JY9ajila0de0ih4RlYeQBStXolM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3b/3719f3-22e1-4344-9a39-458a2736157a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:18:37 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 8255 AS: 25117 IP: 145.226.0.0/16 IP: 185.228.228.0/22 IP: 2a03:7780::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:80:f9:a6:48:50:7e:58:a8:21:cb:08:fc:b8:c8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=258f5a8e295ad1d7b48a1e11958790052b57a253 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:7d:d2:58:c8:ff:cf:85:c1:81:c5:3e:cd:64: 4b:e7:f9:c1:28:6d:03:9b:57:67:8e:be:f9:1b:1b: 0f:7d:90:6d:23:89:ce:c6:58:73:47:98:93:cb:1f: e1:15:3a:56:95:ba:b0:bb:89:72:dc:fd:0e:90:b0: cf:27:6f:3f:4e:f2:6d:be:ee:c6:1e:25:75:70:07: 43:8a:87:dd:58:70:13:7b:24:0b:dd:ae:c6:a7:87: bb:ac:28:7a:de:ab:ee:04:d6:30:e4:6d:ea:52:d6: 65:df:ae:36:81:f4:fd:18:53:55:9c:38:b4:16:7a: e7:b8:40:78:8b:ca:c6:f5:b8:18:5a:b3:09:ee:a2: 65:9a:fb:78:8b:10:22:61:2f:91:4b:f4:97:89:b7: 2c:d4:a5:48:ae:bd:f4:d3:05:3b:5f:6c:ae:cf:fa: 6c:c2:60:a1:3d:23:6a:d3:39:f4:89:21:18:df:81: de:1f:f6:0f:21:e9:b5:7e:3c:b3:05:63:81:e7:af: ab:a3:95:bc:22:03:32:51:ea:55:b1:d5:91:7d:d4: 75:c0:08:89:f7:ae:12:57:51:b4:18:69:7d:bf:d5: 36:f0:b1:d4:ea:4e:2e:72:ab:d8:2f:1b:a1:65:63: 72:a4:b1:04:37:93:fd:7c:9a:6b:d9:99:37:c6:5f: f1:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:8F:5A:8E:29:5A:D1:D7:B4:8A:1E:11:95:87:90:05:2B:57:A2:53 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/3719f3-22e1-4344-9a39-458a2736157a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/3719f3-22e1-4344-9a39-458a2736157a/1/JY9ajila0de0ih4RlYeQBStXolM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 145.226.0.0/16 185.228.228.0/22 IPv6: 2a03:7780::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 8255 25117 Signature Algorithm: sha256WithRSAEncryption 75:c2:c5:f1:02:69:c0:aa:a1:41:26:31:27:a7:a9:6f:88:7f: f8:e7:0c:94:78:ee:68:2f:69:0c:32:fb:83:8d:a1:f8:11:8a: 8e:19:bc:af:1c:d4:5b:e4:3f:6c:f9:3a:7a:ca:b6:73:b4:64: 61:22:43:8b:c4:94:18:53:88:58:af:ed:8e:d3:58:da:41:d3: f3:78:af:d8:33:54:d9:a2:13:00:23:da:a3:df:0d:1c:5b:a5: 5b:f6:11:35:fb:c2:9a:57:48:e2:76:40:b7:a0:0a:b9:18:6e: 47:79:cc:ac:d2:1b:b0:92:d6:c4:ea:55:9a:4a:88:e7:65:2b: c0:e2:8f:34:d2:1b:a5:51:e2:19:a4:91:45:e5:9b:5b:04:4e: af:f4:a8:c9:45:ba:3d:80:3e:76:c3:50:77:69:3c:f9:a6:fd: d2:98:49:52:14:b7:d4:c4:e5:23:06:2c:17:74:63:38:8a:7f: 34:fb:3d:4c:34:10:9b:5b:67:23:e6:f0:e1:bc:e0:55:da:28: 08:ff:1f:96:39:9d:08:84:72:c6:9c:7d:c6:1c:64:96:ee:e0: 09:f9:cf:43:aa:a3:6b:3f:45:60:ae:25:71:2f:d8:63:48:35: 19:70:e1:dc:11:5c:21:6f:ca:24:ae:cd:1c:99:b0:da:8e:f7: 41:0c:36:8b -----BEGIN CERTIFICATE----- MIIFqzCCBJOgAwIBAgISAZt/gPmmSFB+WKghywj8uMjAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNThmNWE4ZTI5NWFkMWQ3YjQ4YTFlMTE5NTg3OTAwNTJiNTdhMjUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtX3SWMj/z4XBgcU+zWRL5/nBKG0D m1dnjr75GxsPfZBtI4nOxlhzR5iTyx/hFTpWlbqwu4ly3P0OkLDPJ28/TvJtvu7G HiV1cAdDiofdWHATeyQL3a7Gp4e7rCh63qvuBNYw5G3qUtZl3642gfT9GFNVnDi0 FnrnuEB4i8rG9bgYWrMJ7qJlmvt4ixAiYS+RS/SXibcs1KVIrr300wU7X2yuz/ps wmChPSNq0zn0iSEY34HeH/YPIem1fjyzBWOB56+ro5W8IgMyUepVsdWRfdR1wAiJ 964SV1G0GGl9v9U28LHU6k4ucqvYLxuhZWNypLEEN5P9fJpr2Zk3xl/xKwIDAQAB o4ICtzCCArMwHQYDVR0OBBYEFCWPWo4pWtHXtIoeEZWHkAUrV6JTMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNiLzM3MTlm My0yMmUxLTQzNDQtOWEzOS00NThhMjczNjE1N2EvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2IvMzcxOWYz LTIyZTEtNDM0NC05YTM5LTQ1OGEyNzM2MTU3YS8xL0pZOWFqaWxhMGRlMGloNFJs WWVRQlN0WG9sTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDMGCCsGAQUF BwEHAQH/BCQwIjARBAIAATALAwMAkeIDBAK55OQwDQQCAAIwBwMFAyoDd4AwHQYI KwYBBQUHAQgBAf8EDjAMoAowCAICID8CAmIdMA0GCSqGSIb3DQEBCwUAA4IBAQB1 wsXxAmnAqqFBJjEnp6lviH/45wyUeO5oL2kMMvuDjaH4EYqOGbyvHNRb5D9s+Tp6 yrZztGRhIkOLxJQYU4hYr+2O01jaQdPzeK/YM1TZohMAI9qj3w0cW6Vb9hE1+8Ka V0jidkC3oAq5GG5Hecys0huwktbE6lWaSojnZSvA4o800hulUeIZpJFF5ZtbBE6v 9KjJRbo9gD52w1B3aTz5pv3SmElSFLfUxOUjBiwXdGM4in80+z1MNBCbW2cj5vDh vOBV2igI/x+WOZ0IhHLGnH3GHGSW7uAJ+c9DqqNrP0VgriVxL9hjSDUZcOHcEVwh b8okrs0cmbDajvdBDDaL -----END CERTIFICATE-----Generated at Thu Jan 8 17:25:56 2026 by rpki-client