This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JovHlTH32BXSsrUin5rJ9vi_68o.cer File: JovHlTH32BXSsrUin5rJ9vi_68o.cer (raw, json) Hash identifier: PMHxmEgRg59ksUpbpQZ0kEsozKJbyg7l5kQJWrqhMZY= Subject key identifier: 26:8B:C7:95:31:F7:D8:15:D2:B2:B5:22:9F:9A:C9:F6:F8:BF:EB:CA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A30308F8FF7985D007248749A558E0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f1/2f07e0-075d-4548-9c9a-155b357bd880/1/JovHlTH32BXSsrUin5rJ9vi_68o.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f1/2f07e0-075d-4548-9c9a-155b357bd880/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:27 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 49611 IP: 91.213.58.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:03:08:f8:ff:79:85:d0:07:24:87:49:a5:58:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=268bc79531f7d815d2b2b5229f9ac9f6f8bfebca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:aa:0b:8f:73:1b:b6:39:63:b2:7a:63:1b:16: 09:98:db:73:77:03:51:64:52:e3:82:56:1a:96:7c: 3b:f8:56:4f:b6:42:97:8e:62:54:04:94:ee:2e:65: 6a:ea:37:05:9c:d9:e0:f8:be:ab:4f:5d:2a:75:c8: 83:98:b2:99:ae:39:8b:19:9b:89:fa:5f:44:fd:0b: d9:9c:60:69:73:a0:ee:4e:0a:29:73:fa:21:d3:8d: 57:22:0f:dc:4f:9f:b0:0f:6d:be:08:32:60:74:e0: 59:58:4c:b1:3a:9f:9c:c2:84:37:ce:f8:d8:dd:92: 10:33:a8:6c:b2:1c:00:14:05:06:7b:27:72:79:fe: 30:b3:1b:90:c2:4a:cc:83:a7:63:fc:2b:9f:f4:fa: dd:4e:6c:a3:b5:43:97:33:17:1d:6e:d2:a7:16:16: c9:d0:93:7c:36:a8:76:e9:3a:9b:3e:70:96:67:73: 29:66:ea:9c:7c:43:2e:d0:c9:7e:87:dc:ba:74:23: b2:55:a2:56:41:2e:8b:ef:25:af:16:78:24:26:64: b1:8c:37:b6:be:a9:8d:6d:6d:81:4b:c5:b2:22:12: ab:55:58:77:eb:6a:6f:7f:e4:bd:ff:bb:dc:72:20: f4:f9:c0:f2:4a:f4:62:d6:40:c9:10:1a:59:fc:8d: 85:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:8B:C7:95:31:F7:D8:15:D2:B2:B5:22:9F:9A:C9:F6:F8:BF:EB:CA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2f07e0-075d-4548-9c9a-155b357bd880/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2f07e0-075d-4548-9c9a-155b357bd880/1/JovHlTH32BXSsrUin5rJ9vi_68o.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.213.58.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 49611 Signature Algorithm: sha256WithRSAEncryption af:e6:ea:92:5a:bb:e6:60:ab:7a:18:6a:d6:35:e9:e4:f7:de: 9f:4c:39:be:f0:e7:2e:7a:f7:6d:ba:24:e2:c1:42:96:ca:60: 60:a4:3f:1f:bb:12:64:08:fc:00:9f:bd:74:6d:68:bb:93:0a: 54:da:b9:06:0e:1e:0d:dc:e5:80:91:c9:57:4e:2c:3c:29:87: 59:5d:32:cb:9c:1b:dc:10:4a:05:ed:2c:48:90:4a:9e:8a:37: 93:98:72:b7:d5:de:9d:65:c3:3f:82:4d:24:1f:4c:7b:90:34: 7b:95:a3:76:29:ba:c5:f4:4b:39:4b:24:25:21:dc:bb:29:a4: 35:7a:1b:f2:a1:c9:50:e2:0b:47:4c:f6:3e:62:b6:42:cd:86: b3:c7:24:6c:8f:b5:16:2e:12:2d:36:d7:e8:1e:c0:3b:7b:e4: cf:c3:5f:a8:58:29:dc:71:0a:10:e3:8a:91:0e:77:69:28:25: d7:5c:14:e0:eb:7c:a8:60:0a:0b:77:66:fa:f2:5d:b2:8f:f3: a2:fd:70:28:f2:51:51:1b:d5:56:15:9e:aa:63:b7:44:78:10: d5:d4:25:cc:85:0c:66:68:8a:38:3f:c0:8e:4f:42:16:12:ea: 68:26:cd:dd:3f:c6:a1:58:6c:31:6f:e4:bc:f0:6c:63:c3:16: dd:81:c1:68 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt4owMI+P95hdAHJIdJpVjgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNjhiYzc5NTMxZjdkODE1ZDJiMmI1MjI5ZjlhYzlmNmY4YmZlYmNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqoLj3MbtjljsnpjGxYJmNtzdwNR ZFLjglYalnw7+FZPtkKXjmJUBJTuLmVq6jcFnNng+L6rT10qdciDmLKZrjmLGZuJ +l9E/QvZnGBpc6DuTgopc/oh041XIg/cT5+wD22+CDJgdOBZWEyxOp+cwoQ3zvjY 3ZIQM6hsshwAFAUGeydyef4wsxuQwkrMg6dj/Cuf9PrdTmyjtUOXMxcdbtKnFhbJ 0JN8Nqh26TqbPnCWZ3MpZuqcfEMu0Ml+h9y6dCOyVaJWQS6L7yWvFngkJmSxjDe2 vqmNbW2BS8WyIhKrVVh362pvf+S9/7vcciD0+cDySvRi1kDJEBpZ/I2FdQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFCaLx5Ux99gV0rK1Ip+ayfb4v+vKMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YxLzJmMDdl MC0wNzVkLTQ1NDgtOWM5YS0xNTViMzU3YmQ4ODAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjEvMmYwN2Uw LTA3NWQtNDU0OC05YzlhLTE1NWIzNTdiZDg4MC8xL0pvdkhsVEgzMkJYU3NyVWlu NXJKOXZpXzY4by5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW9U6MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDByzANBgkqhkiG9w0BAQsFAAOCAQEAr+bqklq75mCrehhq1jXp5Pfen0w5vvDn Lnr3bbok4sFClspgYKQ/H7sSZAj8AJ+9dG1ou5MKVNq5Bg4eDdzlgJHJV04sPCmH WV0yy5wb3BBKBe0sSJBKnoo3k5hyt9XenWXDP4JNJB9Me5A0e5Wjdim6xfRLOUsk JSHcuymkNXob8qHJUOILR0z2PmK2Qs2Gs8ckbI+1Fi4SLTbX6B7AO3vkz8NfqFgp 3HEKEOOKkQ53aSgl11wU4Ot8qGAKC3dm+vJdso/zov1wKPJRURvVVhWeqmO3RHgQ 1dQlzIUMZmiKOD/Ajk9CFhLqaCbN3T/GoVhsMW/kvPBsY8MW3YHBaA== -----END CERTIFICATE-----Generated at Mon Feb 9 15:10:23 2026 by rpki-client