This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/J_UYD5uTrnVzwIqJS9RSvXfOVs0.cer File: J_UYD5uTrnVzwIqJS9RSvXfOVs0.cer (raw, json) Hash identifier: X8cSmMiNchcgj8+Wv84DBEZZw8US7sYEnJht4z2pA0k= Subject key identifier: 27:F5:18:0F:9B:93:AE:75:73:C0:8A:89:4B:D4:52:BD:77:CE:56:CD Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BDB8DE833804E9D4BDCAAD61FD9EA67BD Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d2/e1b84b-39a6-4ac8-be63-30fee27e84cb/1/J_UYD5uTrnVzwIqJS9RSvXfOVs0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d2/e1b84b-39a6-4ac8-be63-30fee27e84cb/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Tue 20 Jan 2026 13:17:48 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 6732 AS: 15623 IP: 5.252.136.0/22 IP: 62.12.128.0/17 IP: 193.246.253.0/24 IP: 193.247.146.0/24 IP: 193.247.205.0/24 IP: 195.144.160.0/19 IP: 195.226.0.0/19 IP: 212.45.192.0/19 IP: 212.55.192.0/19 IP: 213.158.128.0/19 IP: 213.189.128.0/19 IP: 217.14.64.0/20 IP: 217.75.16.0/20 IP: 2001:8a8::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:db:8d:e8:33:80:4e:9d:4b:dc:aa:d6:1f:d9:ea:67:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 20 13:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=27f5180f9b93ae7573c08a894bd452bd77ce56cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ab:05:93:ce:af:c7:af:02:3e:46:95:6d:a2: 8f:93:92:d2:b4:81:d0:dc:29:ef:ca:39:35:79:4c: e2:65:92:bb:0e:c1:87:bc:be:0c:59:e5:86:54:f2: 6b:52:79:68:01:be:f3:2c:73:4f:f0:72:2a:2b:59: f9:1f:69:ab:29:a7:b9:a2:fa:33:fd:f9:99:5c:b8: 24:12:d8:b5:d8:9d:f0:e6:80:d1:49:ea:4c:80:a6: 58:91:ef:85:e2:0e:c7:66:22:c4:d0:f3:33:2e:45: 23:3c:d2:27:93:3a:95:1c:8c:90:32:e1:ab:c1:f5: b9:5d:d3:28:e8:cd:00:7c:bd:92:15:92:5f:36:ec: f0:46:f2:5a:f5:9f:7a:4c:22:a6:9c:14:e4:c1:5d: 0e:dc:3a:b4:72:41:c3:11:ec:82:6e:63:c5:d1:18: fa:86:7b:bd:a1:9b:2b:22:49:7c:26:f4:f5:a3:36: 56:96:a6:71:de:a5:ce:47:87:4a:9a:30:cd:15:2e: eb:89:54:ea:5d:b9:fb:d6:90:39:e2:b4:46:63:76: 93:eb:5f:a5:18:e3:12:40:45:31:30:18:d2:a1:93: cb:f8:f9:06:3f:e0:48:d7:49:35:1f:fd:4b:17:35: 62:ef:c8:70:d9:d3:f1:6c:06:6e:84:7a:e4:08:b4: b1:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:F5:18:0F:9B:93:AE:75:73:C0:8A:89:4B:D4:52:BD:77:CE:56:CD X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e1b84b-39a6-4ac8-be63-30fee27e84cb/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e1b84b-39a6-4ac8-be63-30fee27e84cb/1/J_UYD5uTrnVzwIqJS9RSvXfOVs0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.252.136.0/22 62.12.128.0/17 193.246.253.0/24 193.247.146.0/24 193.247.205.0/24 195.144.160.0/19 195.226.0.0/19 212.45.192.0/19 212.55.192.0/19 213.158.128.0/19 213.189.128.0/19 217.14.64.0/20 217.75.16.0/20 IPv6: 2001:8a8::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 6732 15623 Signature Algorithm: sha256WithRSAEncryption 1e:f0:9e:9c:1b:5b:c1:4f:6b:51:20:3b:f5:37:45:6e:c9:ad: 58:19:80:2f:f1:1c:ad:e3:b5:ff:0d:e8:90:f8:86:25:6c:ae: 40:af:fe:88:ee:33:cc:1d:1c:8e:4b:b4:1e:9c:3e:9a:67:74: d1:cd:19:bf:ea:45:1b:2a:54:ff:98:cd:85:63:f5:0f:2b:1b: 7b:7b:88:69:e1:d8:05:90:68:bb:5e:38:36:f1:96:75:b2:ff: f6:c7:3d:74:21:ea:70:fe:9f:4c:2a:9b:b6:65:f0:93:4c:bb: 54:07:42:76:6c:48:6b:a7:f6:f3:a4:4e:21:ee:29:e8:29:e3: 5b:f9:85:bf:35:13:2c:7c:bc:fe:21:15:bd:7d:67:33:66:a2: ac:99:a5:3c:ae:67:7b:8a:f7:10:dd:0b:fc:18:3d:e1:0a:53: f4:1f:5b:2a:ae:39:de:c1:c7:54:50:c3:14:52:25:97:66:1f: 2a:f5:eb:d0:e8:0e:89:5e:91:b3:cd:b9:03:a4:c8:b0:c3:c0: a0:20:7c:44:41:b6:2a:50:4f:6b:ad:2b:64:ef:d2:b5:36:8a: 2d:fa:da:57:09:70:c2:8b:d9:14:66:89:55:26:4f:e6:7b:5a: 50:cf:3c:d5:8e:41:dd:38:c9:6e:93:f1:bd:78:bf:4b:65:0f: bb:24:5a:96 -----BEGIN CERTIFICATE----- MIIF7jCCBNagAwIBAgISAZvbjegzgE6dS9yq1h/Z6me9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTIwMTMxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyN2Y1MTgwZjliOTNhZTc1NzNjMDhhODk0YmQ0NTJiZDc3Y2U1NmNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqsFk86vx68CPkaVbaKPk5LStIHQ 3Cnvyjk1eUziZZK7DsGHvL4MWeWGVPJrUnloAb7zLHNP8HIqK1n5H2mrKae5ovoz /fmZXLgkEti12J3w5oDRSepMgKZYke+F4g7HZiLE0PMzLkUjPNInkzqVHIyQMuGr wfW5XdMo6M0AfL2SFZJfNuzwRvJa9Z96TCKmnBTkwV0O3Dq0ckHDEeyCbmPF0Rj6 hnu9oZsrIkl8JvT1ozZWlqZx3qXOR4dKmjDNFS7riVTqXbn71pA54rRGY3aT61+l GOMSQEUxMBjSoZPL+PkGP+BI10k1H/1LFzVi78hw2dPxbAZuhHrkCLSxIwIDAQAB o4IC+jCCAvYwHQYDVR0OBBYEFCf1GA+bk651c8CKiUvUUr13zlbNMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2QyL2UxYjg0 Yi0zOWE2LTRhYzgtYmU2My0zMGZlZTI3ZTg0Y2IvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDIvZTFiODRi LTM5YTYtNGFjOC1iZTYzLTMwZmVlMjdlODRjYi8xL0pfVVlENXVUcm5WendJcUpT OVJTdlhmT1ZzMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMHYGCCsGAQUF BwEHAQH/BGcwZTBUBAIAATBOAwQCBfyIAwQHPgyAAwQAwfb9AwQAwfeSAwQAwffN AwQFw5CgAwQFw+IAAwQF1C3AAwQF1DfAAwQF1Z6AAwQF1b2AAwQE2Q5AAwQE2UsQ MA0EAgACMAcDBQMgAQioMB0GCCsGAQUFBwEIAQH/BA4wDKAKMAgCAhpMAgI9BzAN BgkqhkiG9w0BAQsFAAOCAQEAHvCenBtbwU9rUSA79TdFbsmtWBmAL/EcreO1/w3o kPiGJWyuQK/+iO4zzB0cjku0Hpw+mmd00c0Zv+pFGypU/5jNhWP1Dysbe3uIaeHY BZBou144NvGWdbL/9sc9dCHqcP6fTCqbtmXwk0y7VAdCdmxIa6f286ROIe4p6Cnj W/mFvzUTLHy8/iEVvX1nM2airJmlPK5ne4r3EN0L/Bg94QpT9B9bKq453sHHVFDD FFIll2YfKvXr0OgOiV6Rs825A6TIsMPAoCB8REG2KlBPa60rZO/StTaKLfraVwlw wovZFGaJVSZP5ntaUM881Y5B3TjJbpPxvXi/S2UPuyRalg== -----END CERTIFICATE-----Generated at Tue Jan 27 06:05:33 2026 by rpki-client