This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JnlSD7gaRfy8QqbpNVgH65p2Qfk.cer File: JnlSD7gaRfy8QqbpNVgH65p2Qfk.cer (raw, json) Hash identifier: pOJq55FufjZzH/YtfW2NlqNYhRtyo3Fhnv6lQic4wX4= Subject key identifier: 26:79:52:0F:B8:1A:45:FC:BC:42:A6:E9:35:58:07:EB:9A:76:41:F9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F8505316886C24AEB9D90985D4F9182 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6f/80e6fc-3aba-45e1-b9ac-fa8239f6c6b3/1/JnlSD7gaRfy8QqbpNVgH65p2Qfk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6f/80e6fc-3aba-45e1-b9ac-fa8239f6c6b3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:23:02 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 204126 IP: 178.213.88.0/21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:05:31:68:86:c2:4a:eb:9d:90:98:5d:4f:91:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:23:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2679520fb81a45fcbc42a6e9355807eb9a7641f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:82:4b:24:9f:4b:b7:10:78:e2:ca:e6:07:7f: 1d:e8:87:20:d8:af:e6:37:bd:ff:a7:08:05:0d:ef: aa:3d:24:bf:a2:1f:8f:d1:f8:73:1e:11:01:7b:1b: 6a:4f:4e:b0:77:5c:52:e6:c3:d6:59:11:6b:ba:d9: ce:b2:cd:d9:82:37:c1:f8:85:6c:46:8c:99:af:1f: ab:f7:7c:f4:fc:c9:33:58:75:8d:ec:29:1e:63:71: 53:e5:a7:42:79:a0:9c:b2:ad:38:a3:4e:23:8d:52: aa:70:a2:26:6e:ba:06:99:9c:f2:bc:07:11:61:d4: 08:80:b6:ee:b2:b3:01:4f:c2:35:bf:b2:c5:57:e8: 57:c1:d4:83:30:91:63:08:1d:2f:2f:88:d7:81:fa: ed:ae:43:f0:9f:95:90:0b:14:7f:93:4a:e5:05:0e: 06:5c:08:da:0a:f4:c2:89:e8:0a:f9:de:af:46:70: ef:fd:2b:15:75:ed:65:61:a3:a9:f3:ca:ad:12:ff: c3:82:18:03:7d:05:55:6d:08:b7:50:9f:68:b2:d6: 39:a7:5c:42:ad:81:47:13:00:e4:e0:04:48:71:bd: f0:47:da:50:3c:69:a3:e1:86:65:78:ef:9f:a6:8a: b5:35:91:ac:32:c8:67:b6:ec:ab:eb:71:cd:51:db: 0f:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:79:52:0F:B8:1A:45:FC:BC:42:A6:E9:35:58:07:EB:9A:76:41:F9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/80e6fc-3aba-45e1-b9ac-fa8239f6c6b3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/80e6fc-3aba-45e1-b9ac-fa8239f6c6b3/1/JnlSD7gaRfy8QqbpNVgH65p2Qfk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.213.88.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 204126 Signature Algorithm: sha256WithRSAEncryption 42:eb:0b:40:b5:cc:b2:cf:34:f7:55:db:44:76:23:bb:7c:42: c5:d5:1d:92:84:03:d9:a8:d1:33:1d:1c:82:a0:53:88:84:e3: be:82:22:b0:55:8a:3f:c5:fc:b8:13:2b:11:fe:6b:4d:0e:98: 01:ab:6e:f7:6a:c9:22:81:4a:43:70:85:99:92:61:47:c0:ce: ed:66:8f:38:97:5f:e7:45:1e:97:7d:ac:61:b4:77:8b:09:5f: f6:6e:64:c2:d6:68:4c:7c:86:73:b9:ee:c6:85:aa:7d:23:a1: ec:a8:e5:53:8a:96:7c:b7:b3:de:71:a5:25:6a:01:f9:07:0e: 6c:2c:69:cb:81:21:6d:0b:c9:0a:61:8e:6b:2b:71:b1:f4:ec: 7b:e0:56:2f:f8:5a:9c:21:8c:38:90:5e:90:c8:bd:f9:6a:f0: 35:10:6a:5b:e0:7f:72:7b:47:c7:fa:3e:9c:ea:39:21:01:38: 7d:60:d8:ea:7e:c8:78:bb:9a:db:db:34:a4:0e:be:46:66:f5: 38:21:d2:a7:59:90:9f:81:ac:72:23:e1:6a:c4:a5:dc:f1:6d: 53:df:e1:7a:d5:38:7d:f8:79:64:3c:28:a7:13:78:10:2b:0f: 04:07:f4:b3:47:b5:4a:49:f3:62:50:04:44:b4:aa:02:cc:60: 56:57:44:a0 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt/hQUxaIbCSuudkJhdT5GCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMzAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNjc5NTIwZmI4MWE0NWZjYmM0MmE2ZTkzNTU4MDdlYjlhNzY0MWY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0YJLJJ9LtxB44srmB38d6Icg2K/m N73/pwgFDe+qPSS/oh+P0fhzHhEBextqT06wd1xS5sPWWRFrutnOss3ZgjfB+IVs RoyZrx+r93z0/MkzWHWN7CkeY3FT5adCeaCcsq04o04jjVKqcKImbroGmZzyvAcR YdQIgLbusrMBT8I1v7LFV+hXwdSDMJFjCB0vL4jXgfrtrkPwn5WQCxR/k0rlBQ4G XAjaCvTCiegK+d6vRnDv/SsVde1lYaOp88qtEv/DghgDfQVVbQi3UJ9ostY5p1xC rYFHEwDk4ARIcb3wR9pQPGmj4YZleO+fpoq1NZGsMshntuyr63HNUdsPNQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFCZ5Ug+4GkX8vEKm6TVYB+uadkH5MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZmLzgwZTZm Yy0zYWJhLTQ1ZTEtYjlhYy1mYTgyMzlmNmM2YjMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmYvODBlNmZj LTNhYmEtNDVlMS1iOWFjLWZhODIzOWY2YzZiMy8xL0pubFNEN2dhUmZ5OFFxYnBO VmdINjVwMlFmay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQDstVYMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMdXjANBgkqhkiG9w0BAQsFAAOCAQEAQusLQLXMss8091XbRHYju3xCxdUdkoQD 2ajRMx0cgqBTiITjvoIisFWKP8X8uBMrEf5rTQ6YAatu92rJIoFKQ3CFmZJhR8DO 7WaPOJdf50Uel32sYbR3iwlf9m5kwtZoTHyGc7nuxoWqfSOh7KjlU4qWfLez3nGl JWoB+QcObCxpy4EhbQvJCmGOaytxsfTse+BWL/hanCGMOJBekMi9+WrwNRBqW+B/ cntHx/o+nOo5IQE4fWDY6n7IeLua29s0pA6+Rmb1OCHSp1mQn4GsciPhasSl3PFt U9/hetU4ffh5ZDwopxN4ECsPBAf0s0e1SknzYlAERLSqAsxgVldEoA== -----END CERTIFICATE-----Generated at Mon Feb 9 15:07:31 2026 by rpki-client