This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Jr3a4E28sfgvVbB4MHuksIS5lLs.cer File: Jr3a4E28sfgvVbB4MHuksIS5lLs.cer (raw, json) Hash identifier: HA3jEBfvOqcG3RUMshPR8AsARqu+ABukFCy3fAWxYoY= Subject key identifier: 26:BD:DA:E0:4D:BC:B1:F8:2F:55:B0:78:30:7B:A4:B0:84:B9:94:BB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB9D5E18EA4BCD3032F95F10471940 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/Jr3a4E28sfgvVbB4MHuksIS5lLs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:31 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 43233 AS: 49596 IP: 103.231.136.0/22 IP: 185.137.108.0/22 IP: 2a07:380::/29 IP: 2a0a:40c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:9d:5e:18:ea:4b:cd:30:32:f9:5f:10:47:19:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=26bddae04dbcb1f82f55b078307ba4b084b994bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:94:3a:24:c2:6d:84:65:d0:62:5f:6b:94:83: 15:50:7b:ee:a4:e7:54:44:35:12:dc:c6:61:af:f8: eb:88:f0:9a:4c:7a:ee:33:24:0c:34:a1:29:91:e3: 1d:a4:77:07:e6:ec:e8:44:25:38:70:a0:91:78:8e: 0a:eb:de:f3:85:29:44:42:f1:62:0c:8e:db:8d:90: ff:96:3a:0e:2d:5a:ed:c3:16:8b:5a:48:23:62:fa: 87:6f:37:be:10:2c:10:46:55:a2:6b:1f:e3:0f:59: 4b:15:d5:d4:e6:b8:76:aa:35:ea:ed:cd:a3:82:e4: aa:8c:9f:a8:66:7d:7b:4f:72:20:19:3b:0d:2c:5e: 10:79:a0:5a:e2:f5:b3:d0:0d:29:35:dc:bc:fd:64: 62:0f:a1:65:22:df:1b:55:c5:fd:45:c5:98:fa:a3: c7:39:c8:7b:22:4c:90:c4:fc:af:2b:82:26:e8:4a: af:a0:56:b4:38:55:18:bc:c2:1b:a7:e6:f2:1d:ae: cd:b5:0f:53:c0:d0:44:d2:c0:ec:31:de:87:43:2d: 8b:63:bc:f7:57:5a:45:9c:83:bf:71:b7:d9:67:ce: 57:29:64:f6:27:23:08:ec:a2:0f:f5:27:14:4d:00: 3d:00:20:1f:12:bf:b3:66:cd:cd:0f:22:25:b6:1e: f0:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:BD:DA:E0:4D:BC:B1:F8:2F:55:B0:78:30:7B:A4:B0:84:B9:94:BB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/Jr3a4E28sfgvVbB4MHuksIS5lLs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.231.136.0/22 185.137.108.0/22 IPv6: 2a07:380::/29 2a0a:40c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 43233 49596 Signature Algorithm: sha256WithRSAEncryption 26:83:02:c6:d1:2f:56:67:76:82:61:c9:36:ce:79:f6:95:d7: a7:74:3f:7c:e6:a4:8a:15:9a:00:54:8f:c7:26:1f:65:71:ed: 20:92:52:5d:fb:d3:5d:51:92:1b:9b:34:52:97:3e:aa:f1:bf: de:61:52:5d:9f:ad:b4:d8:73:03:cb:33:4c:aa:53:97:ee:3f: 4e:34:29:c5:a7:25:ca:74:9e:52:55:c5:af:f9:db:08:e3:87: 7c:a9:ab:2c:22:d9:0b:36:f8:da:06:29:de:20:12:41:e4:59: e9:54:39:a0:64:d9:ae:70:5b:72:54:ba:27:d7:d4:e6:1f:62: 31:3c:f8:a9:28:84:39:1e:2c:d0:59:a8:d7:8b:0a:55:bf:db: 0e:f2:ee:6e:60:9f:7b:fa:ed:d5:87:59:87:cf:8a:23:f8:b0: 4b:c0:54:31:12:70:cc:9a:61:61:3a:8d:39:d7:48:5f:83:b5: 5b:19:54:1d:84:10:b6:6f:59:06:9e:ed:da:21:33:2c:9e:21: f1:e6:17:65:d7:b2:e8:02:95:d1:68:0b:ef:6a:63:ad:0b:d9: 1b:97:5d:82:ca:2f:e7:29:f5:d5:12:7c:17:a9:1d:78:50:7d: 30:56:e2:c2:d7:93:af:25:78:91:9f:85:25:52:9b:ba:44:be: 6e:00:26:94 -----BEGIN CERTIFICATE----- MIIFtTCCBJ2gAwIBAgISAZt2651eGOpLzTAy+V8QRxlAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNmJkZGFlMDRkYmNiMWY4MmY1NWIwNzgzMDdiYTRiMDg0Yjk5NGJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpQ6JMJthGXQYl9rlIMVUHvupOdU RDUS3MZhr/jriPCaTHruMyQMNKEpkeMdpHcH5uzoRCU4cKCReI4K697zhSlEQvFi DI7bjZD/ljoOLVrtwxaLWkgjYvqHbze+ECwQRlWiax/jD1lLFdXU5rh2qjXq7c2j guSqjJ+oZn17T3IgGTsNLF4QeaBa4vWz0A0pNdy8/WRiD6FlIt8bVcX9RcWY+qPH Och7IkyQxPyvK4Im6EqvoFa0OFUYvMIbp+byHa7NtQ9TwNBE0sDsMd6HQy2LY7z3 V1pFnIO/cbfZZ85XKWT2JyMI7KIP9ScUTQA9ACAfEr+zZs3NDyIlth7whQIDAQAB o4ICwTCCAr0wHQYDVR0OBBYEFCa92uBNvLH4L1WweDB7pLCEuZS7MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q2L2ZlYjNi YS1lZTkwLTRmMDMtOWUwMC1mNjE3OWE5MTBiMTUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDYvZmViM2Jh LWVlOTAtNGYwMy05ZTAwLWY2MTc5YTkxMGIxNS8xL0pyM2E0RTI4c2ZndlZiQjRN SHVrc0lTNWxMcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDsGCCsGAQUF BwEHAQH/BCwwKjASBAIAATAMAwQCZ+eIAwQCuYlsMBQEAgACMA4DBQMqBwOAAwUD KgpAwDAfBggrBgEFBQcBCAEB/wQQMA6gDDAKAgMAqOECAwDBvDANBgkqhkiG9w0B AQsFAAOCAQEAJoMCxtEvVmd2gmHJNs559pXXp3Q/fOakihWaAFSPxyYfZXHtIJJS XfvTXVGSG5s0Upc+qvG/3mFSXZ+ttNhzA8szTKpTl+4/TjQpxaclynSeUlXFr/nb COOHfKmrLCLZCzb42gYp3iASQeRZ6VQ5oGTZrnBbclS6J9fU5h9iMTz4qSiEOR4s 0Fmo14sKVb/bDvLubmCfe/rt1YdZh8+KI/iwS8BUMRJwzJphYTqNOddIX4O1WxlU HYQQtm9ZBp7t2iEzLJ4h8eYXZdey6AKV0WgL72pjrQvZG5ddgsov5yn11RJ8F6kd eFB9MFbiwteTryV4kZ+FJVKbukS+bgAmlA== -----END CERTIFICATE-----Generated at Mon Feb 9 20:50:37 2026 by rpki-client