This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Jr1f-85r-HB_o-WWfg04tFXZ1OE.cer File: Jr1f-85r-HB_o-WWfg04tFXZ1OE.cer (raw, json) Hash identifier: aFFvtEQO1q2Q4Wh5/lseolb0GwnQDDQatAmgWq9MKt4= Subject key identifier: 26:BD:5F:FB:CE:6B:F8:70:7F:A3:E5:96:7E:0D:38:B4:55:D9:D4:E1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CECE05B16750CCAEB4A23BEE4718074 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/Jr1f-85r-HB_o-WWfg04tFXZ1OE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:17:37 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.169.176.0/22 IP: 2a0a:5500::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:e0:5b:16:75:0c:ca:eb:4a:23:be:e4:71:80:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=26bd5ffbce6bf8707fa3e5967e0d38b455d9d4e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:aa:2a:42:82:5d:0b:77:a7:97:b8:4e:46:30: fc:73:3a:da:20:c9:ca:a2:77:a1:f7:c3:7a:ff:e9: 08:c4:91:8b:18:6b:8d:4f:e4:59:42:67:62:14:05: 47:03:4a:ed:34:f7:25:77:3f:1e:f9:f0:c7:a3:d7: 20:8e:ab:92:c3:52:cc:8f:af:fb:19:d1:03:75:32: 75:ec:7f:7a:e2:33:a4:af:13:c8:43:84:dd:55:56: 85:f3:a0:39:28:fb:f8:81:d9:ea:fb:e9:7b:07:f4: 14:37:57:1e:26:7d:d8:a7:db:96:a8:b1:88:76:c8: fb:01:bc:97:68:6e:dd:b8:06:f5:b0:52:5a:69:54: 4b:c9:4f:3f:2b:82:34:05:2f:6c:9b:81:d3:9d:e6: ee:e0:b5:b5:65:f8:39:cb:4c:70:94:2a:83:71:68: 62:d1:2c:fa:17:c6:15:80:6e:b3:5a:77:05:3a:15: 29:ec:af:a8:2b:52:e7:55:fe:da:a2:9b:ce:06:12: a1:ac:c8:66:41:ba:87:0f:c2:36:93:f9:5e:cd:02: da:8e:12:d8:4d:bd:74:40:c6:d2:32:f9:ce:3e:79: a6:83:74:5c:c7:d0:10:03:03:75:83:3e:89:06:7b: 3b:3b:8c:68:27:57:f7:c7:7e:4d:ae:07:d8:7e:0d: 4c:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:BD:5F:FB:CE:6B:F8:70:7F:A3:E5:96:7E:0D:38:B4:55:D9:D4:E1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/Jr1f-85r-HB_o-WWfg04tFXZ1OE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.169.176.0/22 IPv6: 2a0a:5500::/29 Signature Algorithm: sha256WithRSAEncryption 61:cc:ac:f7:21:6c:cf:e5:c7:a1:12:bb:2e:04:92:84:8a:fe: cc:50:01:90:f0:86:21:64:dd:88:9b:a4:61:35:e1:45:4f:a5: 84:dc:f7:86:a9:1c:b2:f5:f2:2c:62:52:48:72:7c:e3:0f:b8: 91:18:4b:bb:10:88:e5:cc:61:9d:c5:d3:d9:02:69:7a:da:6c: cd:59:1a:12:f7:2e:8f:3d:8a:59:30:ef:d3:ad:00:c1:3f:04: 14:00:85:00:7a:82:34:76:0e:90:c9:b8:25:6b:95:46:18:3a: 30:53:c1:7c:f5:04:a8:cd:b8:07:10:8e:fe:7a:f9:55:0a:ca: c1:d2:55:db:55:6a:84:5a:a1:3f:99:1d:fa:7a:bb:a1:77:3e: 40:f1:e4:7d:d4:20:2a:98:3b:f3:00:13:69:a6:c1:99:15:77: 02:90:17:33:84:48:7c:54:3d:24:8a:eb:4d:cc:7d:3b:e9:39: 2d:a7:aa:98:ed:16:01:5b:5b:83:0f:79:72:be:5f:61:36:3f: 2a:34:90:41:66:aa:d3:29:47:ce:5e:93:fe:e3:fe:5d:6a:f4: 5c:d0:6a:71:5b:bf:fe:6e:f6:e0:3c:cd:9e:d2:c6:3c:c5:09: 83:4d:fd:27:b5:98:1f:e7:9e:fa:93:f6:26:3e:56:f7:e2:28: a8:5f:cf:e7 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt87OBbFnUMyutKI77kcYB0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNmJkNWZmYmNlNmJmODcwN2ZhM2U1OTY3ZTBkMzhiNDU1ZDlkNGUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKoqQoJdC3enl7hORjD8czraIMnK oneh98N6/+kIxJGLGGuNT+RZQmdiFAVHA0rtNPcldz8e+fDHo9cgjquSw1LMj6/7 GdEDdTJ17H964jOkrxPIQ4TdVVaF86A5KPv4gdnq++l7B/QUN1ceJn3Yp9uWqLGI dsj7AbyXaG7duAb1sFJaaVRLyU8/K4I0BS9sm4HTnebu4LW1Zfg5y0xwlCqDcWhi 0Sz6F8YVgG6zWncFOhUp7K+oK1LnVf7aopvOBhKhrMhmQbqHD8I2k/lezQLajhLY Tb10QMbSMvnOPnmmg3Rcx9AQAwN1gz6JBns7O4xoJ1f3x35NrgfYfg1MMQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFCa9X/vOa/hwf6Plln4NOLRV2dThMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M3L2Y0OThh Mi1kODZkLTRjNzUtYmZkMy1lOGM1NTljNzFkNjYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzcvZjQ5OGEy LWQ4NmQtNGM3NS1iZmQzLWU4YzU1OWM3MWQ2Ni8xL0pyMWYtODVyLUhCX28tV1dm ZzA0dEZYWjFPRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuamwMA0EAgACMAcDBQMqClUAMA0GCSqGSIb3 DQEBCwUAA4IBAQBhzKz3IWzP5cehErsuBJKEiv7MUAGQ8IYhZN2Im6RhNeFFT6WE 3PeGqRyy9fIsYlJIcnzjD7iRGEu7EIjlzGGdxdPZAml62mzNWRoS9y6PPYpZMO/T rQDBPwQUAIUAeoI0dg6Qybgla5VGGDowU8F89QSozbgHEI7+evlVCsrB0lXbVWqE WqE/mR36eruhdz5A8eR91CAqmDvzABNppsGZFXcCkBczhEh8VD0kiutNzH076Tkt p6qY7RYBW1uDD3lyvl9hNj8qNJBBZqrTKUfOXpP+4/5davRc0GpxW7/+bvbgPM2e 0sY8xQmDTf0ntZgf5576k/YmPlb34iioX8/n -----END CERTIFICATE-----Generated at Tue Jan 27 09:54:13 2026 by rpki-client