This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JbtUIFU5jKwh2yQH_Y59eVoQ9e0.cer File: JbtUIFU5jKwh2yQH_Y59eVoQ9e0.cer (raw, json) Hash identifier: CvL9ZS+9Vc47WHMgVmd/23v5hDbJ59bxx4KXNaV5C8A= Subject key identifier: 25:BB:54:20:55:39:8C:AC:21:DB:24:07:FD:8E:7D:79:5A:10:F5:ED Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79EC868EF98F3B241E78E198623DEC6B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/1/25BB542055398CAC21DB2407FD8E7D795A10F5ED.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/1/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:22 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 50104 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:86:8e:f9:8f:3b:24:1e:78:e1:98:62:3d:ec:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=25bb542055398cac21db2407fd8e7d795a10f5ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:36:c5:da:22:04:41:d0:f2:96:c6:81:ea:ab: be:72:d6:da:90:98:e0:00:d6:b8:22:b9:87:68:b1: 85:77:11:20:07:6d:b7:9a:de:f3:79:2e:ce:47:1c: 0e:4f:ca:7a:24:02:98:a1:38:10:99:fb:27:85:e1: 31:21:91:11:01:d7:93:5e:82:29:3d:36:55:f1:ac: c9:5a:32:b8:bd:f6:29:0e:54:e1:fe:08:b1:85:ef: 06:45:19:08:b6:41:1c:3e:90:a2:20:46:4a:36:36: f9:1c:65:c6:26:a6:6e:3a:80:3c:65:dc:9f:7a:50: 22:5c:2c:ab:f9:5b:4a:2e:03:20:7f:94:f1:53:9b: 83:15:02:cb:4c:1f:01:a5:b5:d4:72:07:3d:61:71: 57:54:06:30:50:72:14:2b:06:71:5c:67:62:26:43: 7f:26:73:ed:62:c8:88:55:19:82:25:af:b3:4a:68: 5d:27:8b:ea:d5:e9:2f:5e:5e:f1:b0:4c:81:0c:e1: ef:d7:b4:94:52:18:09:cb:e1:c2:66:7d:7c:bb:4f: f6:2d:e9:0e:ff:57:64:01:2d:40:b0:0d:1a:14:4e: 48:55:81:42:40:6c:44:6a:85:0b:24:53:82:46:31: da:95:80:55:d7:82:23:49:ed:2c:59:ea:22:cd:5d: 5b:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:BB:54:20:55:39:8C:AC:21:DB:24:07:FD:8E:7D:79:5A:10:F5:ED X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/1/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/1/25BB542055398CAC21DB2407FD8E7D795A10F5ED.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 50104 Signature Algorithm: sha256WithRSAEncryption 21:30:0d:6d:6e:83:41:b4:1d:8c:56:13:5e:13:c2:88:03:bf: 8a:8d:21:36:e9:32:16:41:0f:b6:d4:4f:ef:9b:55:21:7a:7d: d9:73:99:67:7d:e7:4b:48:ff:55:a9:7a:5b:6c:6e:96:f0:8e: 66:ec:2a:12:c5:12:77:34:e2:c1:ce:66:76:f4:26:30:b1:49: d1:f1:50:82:a0:4d:17:f4:64:fa:fd:09:df:7b:a5:c8:e8:33: a3:2a:76:49:d7:c3:d2:ea:c9:c8:a9:d5:cf:92:27:24:42:84: a6:a3:ba:4a:be:d1:59:10:23:b1:13:df:e3:3e:6f:b4:ee:e0: 16:0d:d4:a6:2d:b6:0e:44:a1:51:79:ad:f9:48:0c:f4:29:37: 87:f3:f2:db:f6:46:6b:f9:90:c2:7f:9d:7c:fd:49:cf:19:fd: 00:68:2d:97:a0:0e:21:6d:f7:07:3a:6d:ce:b6:aa:3e:cd:d1: f6:29:15:dd:02:f1:33:5f:26:78:06:10:f3:bc:5d:40:22:fd: 61:da:05:cd:01:3c:3d:30:3f:51:6b:1e:b8:45:a0:e3:83:2a: 26:ce:07:57:64:41:95:ff:c9:f5:8b:71:a8:f7:3a:e5:89:7a: 6a:ce:c5:0f:59:cb:fe:0d:dd:ea:55:e0:a3:cc:ad:f9:1f:f5: da:b3:d0:6f -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgISAZt57IaO+Y87JB544ZhiPexrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNWJiNTQyMDU1Mzk4Y2FjMjFkYjI0MDdmZDhlN2Q3OTVhMTBmNWVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5jbF2iIEQdDylsaB6qu+ctbakJjg ANa4IrmHaLGFdxEgB223mt7zeS7ORxwOT8p6JAKYoTgQmfsnheExIZERAdeTXoIp PTZV8azJWjK4vfYpDlTh/gixhe8GRRkItkEcPpCiIEZKNjb5HGXGJqZuOoA8Zdyf elAiXCyr+VtKLgMgf5TxU5uDFQLLTB8BpbXUcgc9YXFXVAYwUHIUKwZxXGdiJkN/ JnPtYsiIVRmCJa+zSmhdJ4vq1ekvXl7xsEyBDOHv17SUUhgJy+HCZn18u0/2LekO /1dkAS1AsA0aFE5IVYFCQGxEaoULJFOCRjHalYBV14IjSe0sWeoizV1bsQIDAQAB o4ICmzCCApcwHQYDVR0OBBYEFCW7VCBVOYysIdskB/2OfXlaEPXtMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzFiZDMw NmI0LWU1YzMtNDhmOS1iMmVlLTM2YTliZGRlZDhjNC8xLzCBiwYIKwYBBQUHMAqG f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMWJk MzA2YjQtZTVjMy00OGY5LWIyZWUtMzZhOWJkZGVkOGM0LzEvMjVCQjU0MjA1NTM5 OENBQzIxREIyNDA3RkQ4RTdENzk1QTEwRjVFRC5tZnQwPAYIKwYBBQUHMA2GMGh0 dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMAw7gw DQYJKoZIhvcNAQELBQADggEBACEwDW1ug0G0HYxWE14TwogDv4qNITbpMhZBD7bU T++bVSF6fdlzmWd950tI/1WpeltsbpbwjmbsKhLFEnc04sHOZnb0JjCxSdHxUIKg TRf0ZPr9Cd97pcjoM6MqdknXw9Lqycip1c+SJyRChKajukq+0VkQI7ET3+M+b7Tu 4BYN1KYttg5EoVF5rflIDPQpN4fz8tv2Rmv5kMJ/nXz9Sc8Z/QBoLZegDiFt9wc6 bc62qj7N0fYpFd0C8TNfJngGEPO8XUAi/WHaBc0BPD0wP1FrHrhFoOODKibOB1dk QZX/yfWLcaj3OuWJemrOxQ9Zy/4N3epV4KPMrfkf9dqz0G8= -----END CERTIFICATE-----Generated at Mon Feb 9 19:50:40 2026 by rpki-client