This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Jqwzv336i9kGGrnml_STFk5JxFg.cer File: Jqwzv336i9kGGrnml_STFk5JxFg.cer (raw, json) Hash identifier: 05Jmf9SPZjE7oAFmnbEN4ACnhEMbrbPeuQtA9oy62ls= Subject key identifier: 26:AC:33:BF:7D:FA:8B:D9:06:1A:B9:E6:97:F4:93:16:4E:49:C4:58 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BFA4D4ED6812BA28B9C8EC824E3F47C1D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/94/1a6489-959d-44c7-81cd-420eb6f0b286/1/Jqwzv336i9kGGrnml_STFk5JxFg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/94/1a6489-959d-44c7-81cd-420eb6f0b286/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Mon 26 Jan 2026 12:35:29 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 38989 IP: 193.138.68.0/24 IP: 195.254.158.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:4d:4e:d6:81:2b:a2:8b:9c:8e:c8:24:e3:f4:7c:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 26 12:35:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=26ac33bf7dfa8bd9061ab9e697f493164e49c458 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:98:c7:08:c4:b4:27:11:a7:fc:5d:f9:21:ae: 95:2e:3b:bc:47:fd:30:45:f0:39:f6:6f:ae:27:4e: 4a:09:4e:4c:bf:e6:d8:ea:50:f8:fa:e4:d8:f6:e0: 89:c1:17:51:d1:0e:59:b9:b9:b7:62:1b:45:ac:8e: 59:0b:27:ee:9e:82:39:e7:3c:f1:e8:e2:51:e6:75: d0:1d:d3:e5:dd:a6:ca:fc:1d:e0:4a:1d:99:b6:95: 44:69:b8:32:3f:cd:06:38:82:97:d4:1e:b1:bc:53: 0f:02:ab:6f:52:f6:1b:68:2e:97:1d:b2:a6:7e:0b: 87:f7:46:d1:9c:d7:b3:aa:d3:79:e0:da:35:46:07: b1:63:c1:64:f6:8b:d5:4c:3d:06:a4:38:5d:27:97: c2:53:16:5c:e6:0a:ca:60:02:57:82:2f:ed:87:51: 4a:86:28:fd:e4:44:88:27:cc:f5:d3:64:f9:3d:9f: fa:05:d7:9d:33:74:9d:a1:51:9b:06:31:a3:f9:58: 3e:53:75:25:de:55:88:b6:8c:6d:03:51:e1:be:4a: 44:48:ee:70:18:3b:61:9d:25:17:27:9b:1f:e4:2a: 96:bf:43:c2:1f:f0:ef:dc:a0:14:d5:bb:07:77:07: fc:8c:02:b6:2b:02:9c:e0:3b:d4:fc:a3:e8:dc:db: 02:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:AC:33:BF:7D:FA:8B:D9:06:1A:B9:E6:97:F4:93:16:4E:49:C4:58 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/1a6489-959d-44c7-81cd-420eb6f0b286/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/1a6489-959d-44c7-81cd-420eb6f0b286/1/Jqwzv336i9kGGrnml_STFk5JxFg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.138.68.0/24 195.254.158.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 38989 Signature Algorithm: sha256WithRSAEncryption 4a:d9:82:df:21:f9:48:99:7a:8d:c2:20:d8:9d:e4:16:dc:37: e4:fe:38:70:3b:c4:85:05:90:18:3b:87:fd:f0:7d:d8:d3:fd: 12:2f:b6:c8:65:5c:f4:96:ec:0f:07:74:ef:8c:67:3f:94:2f: 63:a3:58:db:8d:24:0b:aa:bf:ca:e9:ed:76:99:e5:2c:a6:4e: 0b:b0:af:00:a7:17:e0:e1:b8:ab:48:13:44:a1:65:bd:41:59: d0:4e:6f:51:93:6b:2d:7f:5d:84:21:43:c8:a5:18:79:78:aa: 13:91:0b:52:5e:72:d5:72:90:18:ee:72:9c:31:55:27:d2:e9: b2:76:97:84:e0:2f:be:49:dc:ad:da:48:f9:9c:b6:9e:7b:f1: 20:64:a2:35:40:9d:5b:42:90:a7:0b:f2:0e:a9:5f:13:83:cd: 79:1a:e8:2a:3b:23:e2:ef:71:2f:95:f3:3e:09:71:c6:70:c3: f7:e9:7e:3f:a6:75:38:19:f9:58:fa:42:ec:d1:e0:d5:fa:1b: 1d:f1:9d:23:af:32:88:f1:f7:1a:bb:8f:06:e7:20:71:64:62: e0:ce:32:f2:e5:51:7a:7a:bd:95:ae:85:82:ee:89:1d:e0:09: 45:69:6f:10:06:b6:d9:6e:82:d5:5b:77:f8:83:8b:fd:72:ea: f8:3e:9f:f7 -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZv6TU7WgSuii5yOyCTj9HwdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTI2MTIzNTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNmFjMzNiZjdkZmE4YmQ5MDYxYWI5ZTY5N2Y0OTMxNjRlNDljNDU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZjHCMS0JxGn/F35Ia6VLju8R/0w RfA59m+uJ05KCU5Mv+bY6lD4+uTY9uCJwRdR0Q5Zubm3YhtFrI5ZCyfunoI55zzx 6OJR5nXQHdPl3abK/B3gSh2ZtpVEabgyP80GOIKX1B6xvFMPAqtvUvYbaC6XHbKm fguH90bRnNezqtN54No1RgexY8Fk9ovVTD0GpDhdJ5fCUxZc5grKYAJXgi/th1FK hij95ESIJ8z102T5PZ/6BdedM3SdoVGbBjGj+Vg+U3Ul3lWItoxtA1HhvkpESO5w GDthnSUXJ5sf5CqWv0PCH/Dv3KAU1bsHdwf8jAK2KwKc4DvU/KPo3NsC9wIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFCasM799+ovZBhq55pf0kxZOScRYMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk0LzFhNjQ4 OS05NTlkLTQ0YzctODFjZC00MjBlYjZmMGIyODYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTQvMWE2NDg5 LTk1OWQtNDRjNy04MWNkLTQyMGViNmYwYjI4Ni8xL0pxd3p2MzM2aTlrR0dybm1s X1NURms1SnhGZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQAwYpEAwQBw/6eMBoGCCsGAQUFBwEIAQH/BAsw CaAHMAUCAwCYTTANBgkqhkiG9w0BAQsFAAOCAQEAStmC3yH5SJl6jcIg2J3kFtw3 5P44cDvEhQWQGDuH/fB92NP9Ei+2yGVc9JbsDwd074xnP5QvY6NY240kC6q/yunt dpnlLKZOC7CvAKcX4OG4q0gTRKFlvUFZ0E5vUZNrLX9dhCFDyKUYeXiqE5ELUl5y 1XKQGO5ynDFVJ9LpsnaXhOAvvkncrdpI+Zy2nnvxIGSiNUCdW0KQpwvyDqlfE4PN eRroKjsj4u9xL5XzPglxxnDD9+l+P6Z1OBn5WPpC7NHg1fobHfGdI68yiPH3GruP BucgcWRi4M4y8uVRenq9la6Fgu6JHeAJRWlvEAa22W6C1Vt3+IOL/XLq+D6f9w== -----END CERTIFICATE-----Generated at Mon Feb 9 16:48:30 2026 by rpki-client