This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JqmLYSX1JD4-2DUBWWfN25cUjfE.cer File: JqmLYSX1JD4-2DUBWWfN25cUjfE.cer (raw, json) Hash identifier: 6qIOl6BuZNy3AJG3+p7nAInpqObMrpJcu0CjwhhP5fc= Subject key identifier: 26:A9:8B:61:25:F5:24:3E:3E:D8:35:01:59:67:CD:DB:97:14:8D:F1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7FF0647F91D69549C6F2541A10C7BD96 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 18:20:19 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 56895 IP: 81.161.16.0/20 IP: 91.227.210.0/23 IP: 91.227.228.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f0:64:7f:91:d6:95:49:c6:f2:54:1a:10:c7:bd:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 18:20:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=26a98b6125f5243e3ed835015967cddb97148df1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:de:fd:0e:9d:20:6a:db:06:d2:9e:ba:4b:d2: 8d:af:b6:a9:3d:90:40:15:70:bc:ab:18:e2:77:26: 19:01:44:2a:de:e1:7b:a0:b5:52:e8:da:b3:f7:36: 87:51:fe:5a:c5:b0:96:a7:8f:3b:16:5e:67:c0:8e: 35:a5:d2:30:21:93:f4:72:5a:37:19:a0:4f:a3:d3: 36:09:97:69:83:db:5b:65:18:8a:eb:a9:dd:f4:20: 66:96:dc:0d:c6:a0:4f:3f:91:c6:6b:89:b9:cf:80: 4b:e3:34:2e:33:9b:1e:b7:e1:26:59:54:7f:dc:4e: 10:3a:cc:e0:67:c4:34:37:94:d3:aa:11:17:6c:40: 80:9f:96:77:75:65:db:50:c5:91:41:1c:45:48:20: c1:c1:5c:74:ac:05:b2:7a:e0:42:57:0c:de:90:31: bb:6d:2f:5b:c4:d4:7f:7f:8e:bc:c2:35:8a:8f:b7: fb:e1:18:b9:7d:7f:2a:c4:af:89:49:e4:16:b6:8e: 99:7d:d3:e8:69:52:a3:5d:d5:9c:7f:66:df:95:96: 01:b7:58:38:68:a3:50:ae:3c:cd:ea:1b:92:0a:13: f7:8a:ee:69:d9:39:3d:38:0f:54:98:ca:eb:16:92: 56:f9:4b:d5:e8:19:2d:e3:4e:91:01:a1:2a:83:f5: ef:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:A9:8B:61:25:F5:24:3E:3E:D8:35:01:59:67:CD:DB:97:14:8D:F1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.161.16.0/20 91.227.210.0/23 91.227.228.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 56895 Signature Algorithm: sha256WithRSAEncryption 26:a3:8d:e8:5e:4a:6c:f0:e6:e1:b7:9e:fa:88:72:b9:1d:62: 50:c7:2b:f6:ab:89:ab:d6:69:5d:84:bd:0f:7b:87:f8:fb:c0: b4:c3:2c:68:80:77:6a:c3:09:ce:68:1b:7d:af:fe:f0:79:70: bb:a4:47:3a:b8:23:c7:0c:76:54:3c:4e:d7:25:e9:16:03:38: 73:c5:56:68:27:88:d1:0a:1d:c5:75:63:20:83:77:2e:28:64: be:92:2c:c9:b0:37:3c:f0:d8:31:3d:03:d2:bb:ff:0e:44:1b: 3b:d4:d5:41:7e:21:8e:c6:d0:22:3e:f4:0e:23:0c:67:4f:ac: a5:19:99:b2:06:e9:ce:08:b4:12:49:5a:91:6a:94:6d:9a:fa: 2e:45:88:d7:db:d0:8f:b3:39:37:90:b7:5a:c0:5d:67:88:17: b1:c3:28:e7:dc:b1:cd:99:63:dd:52:7b:62:69:73:60:56:b0: d9:97:97:0f:d1:ff:65:7c:a0:ac:78:3d:c6:ee:7f:0c:c3:67: 8c:3a:7c:3d:f4:ce:86:74:83:d4:ca:1a:3a:6a:a1:9b:3d:9f: 85:02:24:cb:1a:d6:f2:20:04:7e:5a:f6:a7:6b:3a:50:dd:30: 86:87:17:0b:bc:8e:c7:a7:48:a9:8a:cf:fb:e6:0a:e5:13:84: 6c:18:82:b2 -----BEGIN CERTIFICATE----- MIIFoDCCBIigAwIBAgISAZt/8GR/kdaVScbyVBoQx72WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTgyMDE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNmE5OGI2MTI1ZjUyNDNlM2VkODM1MDE1OTY3Y2RkYjk3MTQ4ZGYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs979Dp0gatsG0p66S9KNr7apPZBA FXC8qxjidyYZAUQq3uF7oLVS6Nqz9zaHUf5axbCWp487Fl5nwI41pdIwIZP0clo3 GaBPo9M2CZdpg9tbZRiK66nd9CBmltwNxqBPP5HGa4m5z4BL4zQuM5set+EmWVR/ 3E4QOszgZ8Q0N5TTqhEXbECAn5Z3dWXbUMWRQRxFSCDBwVx0rAWyeuBCVwzekDG7 bS9bxNR/f468wjWKj7f74Ri5fX8qxK+JSeQWto6ZfdPoaVKjXdWcf2bflZYBt1g4 aKNQrjzN6huSChP3iu5p2Tk9OA9UmMrrFpJW+UvV6Bkt406RAaEqg/XvwQIDAQAB o4ICrDCCAqgwHQYDVR0OBBYEFCapi2El9SQ+Ptg1AVlnzduXFI3xMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYzL2JkYmZi MC1mOTE0LTQwZDMtYjJlMi1iOTEzZTU5NjcwN2UvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjMvYmRiZmIw LWY5MTQtNDBkMy1iMmUyLWI5MTNlNTk2NzA3ZS8xL0pxbUxZU1gxSkQ0LTJEVUJX V2ZOMjVjVWpmRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUF BwEHAQH/BBwwGjAYBAIAATASAwQEUaEQAwQBW+PSAwQAW+PkMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwDePzANBgkqhkiG9w0BAQsFAAOCAQEAJqON6F5KbPDm4bee +ohyuR1iUMcr9quJq9ZpXYS9D3uH+PvAtMMsaIB3asMJzmgbfa/+8Hlwu6RHOrgj xwx2VDxO1yXpFgM4c8VWaCeI0QodxXVjIIN3LihkvpIsybA3PPDYMT0D0rv/DkQb O9TVQX4hjsbQIj70DiMMZ0+spRmZsgbpzgi0EklakWqUbZr6LkWI19vQj7M5N5C3 WsBdZ4gXscMo59yxzZlj3VJ7YmlzYFaw2ZeXD9H/ZXygrHg9xu5/DMNnjDp8PfTO hnSD1MoaOmqhmz2fhQIkyxrW8iAEflr2p2s6UN0whocXC7yOx6dIqYrP++YK5ROE bBiCsg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:26:18 2026 by rpki-client