This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Jjw1B3YMW4KVGjB875MrCk02s2M.cer File: Jjw1B3YMW4KVGjB875MrCk02s2M.cer (raw, json) Hash identifier: humgZ7oUwa3i0BRV6p831gXADYCRkDsArP3BU9t9sIc= Subject key identifier: 26:3C:35:07:76:0C:5B:82:95:1A:30:7C:EF:93:2B:0A:4D:36:B3:63 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5A6E41BB5B93B12914103D1EDD39A6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/83/01e613-9bb6-44d0-8e75-90b4f2d4c556/1/Jjw1B3YMW4KVGjB875MrCk02s2M.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/83/01e613-9bb6-44d0-8e75-90b4f2d4c556/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:18:25 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 29671 AS: 35041 AS: 60094 AS: 60376 AS: 199780 IP: 77.232.64.0/19 IP: 83.168.192.0/18 IP: 92.61.144.0/20 IP: 93.90.144.0/20 IP: 185.53.164.0/22 IP: 185.99.36.0/22 IP: 185.99.188.0/22 IP: 185.102.212.0/22 IP: 193.93.248.0/22 IP: 195.26.10.0/23 IP: 195.43.36.0/22 IP: 195.200.219.0/24 IP: 217.70.32.0/20 IP: 2a01:3b0::/29 IP: 2a02:4020::/32 IP: 2a05:4540::/29 IP: 2a06:1000::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:6e:41:bb:5b:93:b1:29:14:10:3d:1e:dd:39:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=263c3507760c5b82951a307cef932b0a4d36b363 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:0c:ed:d4:5a:28:b4:f1:de:ff:b5:df:05:03: 64:ff:c0:12:3f:af:1c:76:19:4b:89:2e:c2:b8:fe: 6d:4f:c9:a2:5a:aa:4c:be:db:7e:62:6c:9c:63:f1: 71:9d:f3:c9:ba:f9:61:90:e6:1a:5b:0d:fd:49:29: 54:59:1d:63:ad:81:d3:a3:2b:2c:e5:17:31:df:68: 25:50:83:fa:3a:be:22:31:ed:6c:5b:a1:d7:bd:05: c5:48:b9:24:23:d1:18:99:f3:6c:a3:d7:1f:6f:1e: d8:3f:4a:4b:55:44:1d:72:c9:d9:5b:f6:e1:b9:c3: 79:f4:59:0a:0c:9f:f8:00:80:0d:a7:a0:c6:36:db: 52:7a:64:64:21:b9:e3:34:55:e2:75:eb:40:3d:c7: ec:d7:37:86:e2:e1:b8:fa:9d:cb:4a:6c:35:db:a8: 83:fe:b4:dd:06:78:9b:da:f8:d1:f6:3a:65:7c:c1: aa:d3:30:13:74:3d:cb:73:3c:d9:3f:e7:4f:79:0c: 6e:54:26:6f:03:18:f6:44:0d:9b:a4:b6:6e:63:3c: 89:d1:33:13:6d:ef:fc:16:e5:77:70:46:26:60:a4: 5e:f9:ee:e3:1d:f6:52:cb:5a:7a:70:76:e4:65:7f: b6:bf:8b:ef:14:f2:80:ad:f8:73:c5:c7:63:4d:48: b1:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:3C:35:07:76:0C:5B:82:95:1A:30:7C:EF:93:2B:0A:4D:36:B3:63 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/01e613-9bb6-44d0-8e75-90b4f2d4c556/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/01e613-9bb6-44d0-8e75-90b4f2d4c556/1/Jjw1B3YMW4KVGjB875MrCk02s2M.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.232.64.0/19 83.168.192.0/18 92.61.144.0/20 93.90.144.0/20 185.53.164.0/22 185.99.36.0/22 185.99.188.0/22 185.102.212.0/22 193.93.248.0/22 195.26.10.0/23 195.43.36.0/22 195.200.219.0/24 217.70.32.0/20 IPv6: 2a01:3b0::/29 2a02:4020::/32 2a05:4540::/29 2a06:1000::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 29671 35041 60094 60376 199780 Signature Algorithm: sha256WithRSAEncryption 56:df:28:31:26:69:b1:7e:e5:32:11:23:14:33:8d:61:77:3e: 5d:ca:5f:01:25:54:47:a2:cf:1e:94:a7:bf:9b:b9:1d:d1:fb: c8:ad:ac:60:f4:78:26:76:b2:5c:e6:10:11:d3:d2:91:9f:aa: cb:e5:a5:e1:fe:64:a6:b6:9a:69:fa:c0:d4:56:85:69:0c:50: 7a:39:29:d1:e7:54:7a:db:c7:c6:d6:60:6c:24:65:3e:ec:12: 08:da:2d:70:d2:c1:04:3b:f7:4f:db:a1:cb:e4:fa:17:a3:79: ae:38:b5:d0:ed:6b:1f:2c:02:2b:84:32:f7:ed:63:ca:60:9d: 40:f2:03:09:f3:1b:fa:af:55:97:b0:bb:fb:93:7c:8a:dc:34: 07:a2:5f:62:c8:68:e2:f0:f3:dd:9e:9d:5e:93:9b:32:c0:22: b4:4b:3a:86:4a:36:f1:86:c0:f6:5d:9e:62:6a:f8:c8:5c:39: cc:97:ab:9a:3c:65:96:a4:07:b7:63:09:db:0b:d3:e6:ad:7d: d4:35:ba:2d:62:9e:2e:7f:e4:b2:dc:94:ab:ee:ec:6d:05:d3: d6:1f:ee:0a:ef:df:6c:e9:98:74:ad:d2:ba:3b:c7:02:2c:85: ee:83:c9:cf:10:78:be:b5:57:23:a3:9e:d8:21:82:22:42:bd: bb:40:5d:9e -----BEGIN CERTIFICATE----- MIIGFDCCBPygAwIBAgISAZt6Wm5Bu1uTsSkUED0e3TmmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNjNjMzUwNzc2MGM1YjgyOTUxYTMwN2NlZjkzMmIwYTRkMzZiMzYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAzt1FootPHe/7XfBQNk/8ASP68c dhlLiS7CuP5tT8miWqpMvtt+YmycY/FxnfPJuvlhkOYaWw39SSlUWR1jrYHToyss 5Rcx32glUIP6Or4iMe1sW6HXvQXFSLkkI9EYmfNso9cfbx7YP0pLVUQdcsnZW/bh ucN59FkKDJ/4AIANp6DGNttSemRkIbnjNFXidetAPcfs1zeG4uG4+p3LSmw126iD /rTdBnib2vjR9jplfMGq0zATdD3LczzZP+dPeQxuVCZvAxj2RA2bpLZuYzyJ0TMT be/8FuV3cEYmYKRe+e7jHfZSy1p6cHbkZX+2v4vvFPKArfhzxcdjTUixvwIDAQAB o4IDIDCCAxwwHQYDVR0OBBYEFCY8NQd2DFuClRowfO+TKwpNNrNjMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgzLzAxZTYx My05YmI2LTQ0ZDAtOGU3NS05MGI0ZjJkNGM1NTYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODMvMDFlNjEz LTliYjYtNDRkMC04ZTc1LTkwYjRmMmQ0YzU1Ni8xL0pqdzFCM1lNVzRLVkdqQjg3 NU1yQ2swMnMyTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGLBggrBgEF BQcBBwEB/wR8MHowVAQCAAEwTgMEBU3oQAMEBlOowAMEBFw9kAMEBF1akAMEArk1 pAMEArljJAMEArljvAMEArlm1AMEAsFd+AMEAcMaCgMEAsMrJAMEAMPI2wMEBNlG IDAiBAIAAjAcAwUDKgEDsAMFACoCQCADBQMqBUVAAwUDKgYQADAtBggrBgEFBQcB CAEB/wQeMBygGjAYAgJz5wIDAIjhAgMA6r4CAwDr2AIDAwxkMA0GCSqGSIb3DQEB CwUAA4IBAQBW3ygxJmmxfuUyESMUM41hdz5dyl8BJVRHos8elKe/m7kd0fvIraxg 9HgmdrJc5hAR09KRn6rL5aXh/mSmtppp+sDUVoVpDFB6OSnR51R628fG1mBsJGU+ 7BII2i1w0sEEO/dP26HL5PoXo3muOLXQ7WsfLAIrhDL37WPKYJ1A8gMJ8xv6r1WX sLv7k3yK3DQHol9iyGji8PPdnp1ek5sywCK0SzqGSjbxhsD2XZ5iavjIXDnMl6ua PGWWpAe3YwnbC9PmrX3UNbotYp4uf+Sy3JSr7uxtBdPWH+4K799s6Zh0rdK6O8cC LIXug8nPEHi+tVcjo57YIYIiQr27QF2e -----END CERTIFICATE-----Generated at Mon Feb 9 15:07:25 2026 by rpki-client