This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JcX73HIgV6ZfqduxF_xL33LtwKc.cer File: JcX73HIgV6ZfqduxF_xL33LtwKc.cer (raw, json) Hash identifier: MBMi6hUORVFDoTGogqIt1h6CD8hhCzBvk7QSscHftwY= Subject key identifier: 25:C5:FB:DC:72:20:57:A6:5F:A9:DB:B1:17:FC:4B:DF:72:ED:C0:A7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA73DD1932B91949FF79EDAF332698E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:20:48 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 178.212.92.0/24 IP: 193.37.132.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:3d:d1:93:2b:91:94:9f:f7:9e:da:f3:32:69:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:20:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=25c5fbdc722057a65fa9dbb117fc4bdf72edc0a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:86:f1:ab:d3:95:8c:05:00:cc:40:64:40:6f: bd:f9:fb:58:3a:40:ad:e6:e6:60:27:28:d5:7a:91: 8a:02:24:15:fb:1e:6b:b2:fa:ab:26:4a:32:9b:01: e0:f2:5a:db:38:de:e4:2a:07:23:d0:f4:e5:98:f3: 50:f9:d6:f6:c4:a6:9b:81:a3:a9:e2:aa:d4:63:a4: ed:63:42:82:f9:a1:1b:eb:62:61:f2:9d:ca:ba:cf: bc:66:8d:ba:88:0e:f6:6b:b7:eb:9c:a9:27:02:d8: 87:37:14:3a:c2:fa:87:e1:62:ad:46:48:03:87:57: 7c:2c:b9:d9:d9:35:31:2c:d8:1b:15:18:70:7d:cd: 9e:bb:20:40:8d:a7:19:30:05:ec:21:3b:f6:d2:96: c2:0c:f7:d1:a9:01:46:ab:3e:20:b5:f4:6b:3c:42: a0:6d:6c:ae:03:17:95:fa:0f:7c:7e:90:a2:d7:19: 78:81:09:22:2c:0d:ca:b3:f2:08:2b:33:54:5c:7c: f0:ff:76:2d:5b:64:e4:ad:ac:37:b6:5d:41:0d:bb: d6:00:a7:63:61:b0:b0:b8:c1:51:94:21:b6:69:f1: 7c:49:1f:b2:e1:8c:02:94:db:af:17:8a:72:8c:bd: 44:74:2b:dc:88:f7:b9:d8:10:f4:6e:97:78:55:f4: c7:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:C5:FB:DC:72:20:57:A6:5F:A9:DB:B1:17:FC:4B:DF:72:ED:C0:A7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.212.92.0/24 193.37.132.0/24 Signature Algorithm: sha256WithRSAEncryption 06:c2:03:8e:6a:9d:bb:8c:32:5e:47:b7:ac:90:7d:5e:f1:35: b4:6e:7e:57:db:f7:04:fc:24:e4:af:19:d4:c7:9e:d7:e0:bf: 17:42:97:6f:f0:88:0b:c3:62:92:19:74:a6:22:7e:7b:f9:0d: 06:bc:9d:39:e0:37:f1:de:7c:5f:17:ba:76:b4:f8:c3:29:43: dd:b3:26:c3:83:52:34:81:e0:31:be:66:9e:41:df:a2:bb:47: d8:00:8a:12:fa:31:55:fd:6e:c9:d4:12:95:5f:37:18:1b:e5: 8a:8b:b6:43:ae:c5:3a:0f:76:d0:35:00:bb:81:4c:c7:90:cd: 06:81:c5:c1:63:ac:dc:e2:a7:b7:10:d6:d1:ee:b3:88:92:cf: 73:77:b3:d0:ba:37:eb:6d:f6:d3:c6:a2:7f:fc:01:12:06:2e: 50:46:5e:2e:c0:98:c2:d9:58:3b:3e:49:06:81:8a:66:a4:05: 10:cc:e6:20:51:12:df:5a:5c:0d:95:78:bb:d6:a5:70:e9:a7: f1:02:95:6d:36:48:93:d1:2f:e7:19:96:ef:f4:e2:7d:88:80: 04:b2:8a:b0:54:f8:7d:b5:2e:ba:d6:18:de:30:7e:c6:b9:23: 00:cd:7c:07:12:d8:ad:3b:91:eb:5f:36:e9:39:cc:04:fa:58: b3:04:a6:7a -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgISAZt+pz3RkyuRlJ/3ntrzMmmOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIyMDQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNWM1ZmJkYzcyMjA1N2E2NWZhOWRiYjExN2ZjNGJkZjcyZWRjMGE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIbxq9OVjAUAzEBkQG+9+ftYOkCt 5uZgJyjVepGKAiQV+x5rsvqrJkoymwHg8lrbON7kKgcj0PTlmPNQ+db2xKabgaOp 4qrUY6TtY0KC+aEb62Jh8p3Kus+8Zo26iA72a7frnKknAtiHNxQ6wvqH4WKtRkgD h1d8LLnZ2TUxLNgbFRhwfc2euyBAjacZMAXsITv20pbCDPfRqQFGqz4gtfRrPEKg bWyuAxeV+g98fpCi1xl4gQkiLA3Ks/IIKzNUXHzw/3YtW2Tkraw3tl1BDbvWAKdj YbCwuMFRlCG2afF8SR+y4YwClNuvF4pyjL1EdCvciPe52BD0bpd4VfTHKwIDAQAB o4ICijCCAoYwHQYDVR0OBBYEFCXF+9xyIFemX6nbsRf8S99y7cCnMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBkLzAxY2Zj NC1hMzlmLTRiM2ItOTBiZS1jZTY5NTU2NzYxYmQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGQvMDFjZmM0 LWEzOWYtNGIzYi05MGJlLWNlNjk1NTY3NjFiZC8xL0pjWDczSElnVjZaZnFkdXhG X3hMMzNMdHdLYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQAstRcAwQAwSWEMA0GCSqGSIb3DQEBCwUAA4IB AQAGwgOOap27jDJeR7eskH1e8TW0bn5X2/cE/CTkrxnUx57X4L8XQpdv8IgLw2KS GXSmIn57+Q0GvJ054Dfx3nxfF7p2tPjDKUPdsybDg1I0geAxvmaeQd+iu0fYAIoS +jFV/W7J1BKVXzcYG+WKi7ZDrsU6D3bQNQC7gUzHkM0GgcXBY6zc4qe3ENbR7rOI ks9zd7PQujfrbfbTxqJ//AESBi5QRl4uwJjC2Vg7PkkGgYpmpAUQzOYgURLfWlwN lXi71qVw6afxApVtNkiT0S/nGZbv9OJ9iIAEsoqwVPh9tS661hjeMH7GuSMAzXwH EtitO5HrXzbpOcwE+lizBKZ6 -----END CERTIFICATE-----Generated at Fri Jan 9 17:09:01 2026 by rpki-client