This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.cer File: JkJ6Jg1tlswRFczOipFK_7Dh0Ws.cer (raw, json) Hash identifier: nNDFtUGot3RubZtM5GZ4QmPEYraDM1CB7ysKkCh0omI= Subject key identifier: 26:42:7A:26:0D:6D:96:CC:11:15:CC:CE:8A:91:4A:FF:B0:E1:D1:6B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCA0EAB12F6B7F488BB1A5ADE7E8EF6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e9/f3fdf0-a1a5-45a1-8252-8528e5532c0e/1/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e9/f3fdf0-a1a5-45a1-8252-8528e5532c0e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:19:12 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 214134 IP: 2001:67c:f2c::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:0e:ab:12:f6:b7:f4:88:bb:1a:5a:de:7e:8e:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=26427a260d6d96cc1115ccce8a914affb0e1d16b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:b1:89:c2:c9:1b:7f:dc:af:26:40:72:31:44: f5:aa:ab:65:e5:c6:5b:36:40:7b:6e:70:1d:d0:7c: 0f:c0:d8:b7:f6:29:c4:39:32:b8:ec:a7:04:1c:75: e4:88:ff:74:b6:55:38:57:40:ce:4e:64:9d:bb:bf: 15:34:92:02:38:be:e5:aa:fb:f9:1b:1d:6a:67:09: be:c8:a8:42:d7:a8:60:c4:43:f2:fa:f4:2e:23:55: 62:06:e3:08:c9:22:9d:1c:91:d0:cd:59:98:fc:88: 24:05:7c:8f:8f:3c:76:e2:cc:3f:32:c8:85:75:13: 72:27:fe:5e:fc:78:77:e3:6b:94:85:91:3d:7b:8a: 75:31:dc:1d:14:13:b9:f1:5c:c7:ae:04:9a:2b:51: 4d:d9:df:c7:67:22:4b:4a:34:5f:18:8a:40:ad:29: a0:56:5f:ad:9c:db:8f:87:8e:d6:9a:ad:bb:6b:37: 0f:4f:8f:8f:bd:7a:fc:98:3b:62:8d:c9:1a:8d:89: 2c:71:ae:15:b3:1c:be:1c:94:28:6a:0e:08:4f:29: 4d:1e:a0:59:60:11:a4:7a:0a:53:ee:0e:66:9b:39: e1:72:9d:87:b6:8a:e4:68:16:3b:bf:5b:93:76:e6: 92:62:56:34:e4:a9:46:1d:31:df:c3:16:dd:1c:08: c5:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:42:7A:26:0D:6D:96:CC:11:15:CC:CE:8A:91:4A:FF:B0:E1:D1:6B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f3fdf0-a1a5-45a1-8252-8528e5532c0e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f3fdf0-a1a5-45a1-8252-8528e5532c0e/1/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:f2c::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 214134 Signature Algorithm: sha256WithRSAEncryption 0e:2d:b3:a3:62:b2:50:1a:dc:61:4b:8f:e4:8b:c7:2d:b0:f1: 1b:fb:7f:f0:b1:11:03:b5:b2:4c:f5:e0:a6:b2:33:99:51:23: d1:c1:70:c8:b5:4d:18:51:1c:ff:0d:7a:93:7b:b7:8a:f5:06: 5f:37:dc:02:4f:d3:06:6a:79:3e:ac:fb:60:3b:10:12:f3:ce: f8:9e:9f:49:4c:a4:ea:37:87:04:32:1e:e3:77:b1:74:d1:16: 6f:c3:64:2b:c7:da:c5:f7:0d:d5:00:e4:e8:33:eb:6f:53:60: 69:2c:1d:41:80:24:36:8e:58:1b:87:85:db:0f:09:d5:24:f4: 0c:cf:3c:ef:a1:74:7e:e8:08:43:c7:ab:ff:30:1d:20:d9:7e: 0b:79:e6:ae:7d:35:9f:f4:76:9f:f0:0e:e1:8a:f3:2c:78:fe: 40:24:79:4d:e2:4c:95:0a:7f:81:1d:6b:0c:31:b2:ee:1d:62: 1e:2d:46:34:58:b1:b1:76:5f:48:90:e2:8c:3e:1a:c0:86:10: 70:4f:44:53:73:0a:53:f4:7e:37:5c:22:67:5e:97:55:b5:fe: 40:5b:73:09:fa:94:95:c0:5d:8c:6e:ff:06:53:01:8b:61:54: d1:d1:ba:9d:b7:96:d7:92:9c:f5:b5:a2:39:f1:56:62:d0:ca: 64:15:0c:f2 -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZt9yg6rEva39Ii7Glrefo72MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNjQyN2EyNjBkNmQ5NmNjMTExNWNjY2U4YTkxNGFmZmIwZTFkMTZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLGJwskbf9yvJkByMUT1qqtl5cZb NkB7bnAd0HwPwNi39inEOTK47KcEHHXkiP90tlU4V0DOTmSdu78VNJICOL7lqvv5 Gx1qZwm+yKhC16hgxEPy+vQuI1ViBuMIySKdHJHQzVmY/IgkBXyPjzx24sw/MsiF dRNyJ/5e/Hh342uUhZE9e4p1MdwdFBO58VzHrgSaK1FN2d/HZyJLSjRfGIpArSmg Vl+tnNuPh47Wmq27azcPT4+PvXr8mDtijckajYksca4Vsxy+HJQoag4ITylNHqBZ YBGkegpT7g5mmznhcp2HtorkaBY7v1uTduaSYlY05KlGHTHfwxbdHAjFwQIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFCZCeiYNbZbMERXMzoqRSv+w4dFrMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U5L2YzZmRm MC1hMWE1LTQ1YTEtODI1Mi04NTI4ZTU1MzJjMGUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTkvZjNmZGYw LWExYTUtNDVhMS04MjUyLTg1MjhlNTUzMmMwZS8xL0prSjZKZzF0bHN3UkZjek9p cEZLXzdEaDBXcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfA8sMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwNEdjANBgkqhkiG9w0BAQsFAAOCAQEADi2zo2KyUBrcYUuP5IvHLbDxG/t/ 8LERA7WyTPXgprIzmVEj0cFwyLVNGFEc/w16k3u3ivUGXzfcAk/TBmp5Pqz7YDsQ EvPO+J6fSUyk6jeHBDIe43exdNEWb8NkK8faxfcN1QDk6DPrb1NgaSwdQYAkNo5Y G4eF2w8J1ST0DM8876F0fugIQ8er/zAdINl+C3nmrn01n/R2n/AO4YrzLHj+QCR5 TeJMlQp/gR1rDDGy7h1iHi1GNFixsXZfSJDijD4awIYQcE9EU3MKU/R+N1wiZ16X VbX+QFtzCfqUlcBdjG7/BlMBi2FU0dG6nbeW15Kc9bWiOfFWYtDKZBUM8g== -----END CERTIFICATE-----Generated at Mon Feb 9 19:50:56 2026 by rpki-client