This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Js9NU-1cCkvT_iQiAalmZVyAzA4.cer File: Js9NU-1cCkvT_iQiAalmZVyAzA4.cer (raw, json) Hash identifier: Ru7VHqMirb72fDGL7iG3yjrYy8uVI1uj0EFNSeppfUM= Subject key identifier: 26:CF:4D:53:ED:5C:0A:4B:D3:FE:24:22:01:A9:66:65:5C:80:CC:0E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C7FECC1FD1FED191A1200F52B8DD282 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d7/3ebce5-73e3-4e3e-83b0-a788fdc70948/1/Js9NU-1cCkvT_iQiAalmZVyAzA4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d7/3ebce5-73e3-4e3e-83b0-a788fdc70948/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:18:37 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 202173 IP: 81.200.126.0/23 IP: 91.220.120.0/24 IP: 185.79.100.0/22 IP: 2a05:7280::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:ec:c1:fd:1f:ed:19:1a:12:00:f5:2b:8d:d2:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=26cf4d53ed5c0a4bd3fe242201a966655c80cc0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ec:b7:7d:38:7c:dc:6b:9a:04:66:f6:e8:56: 9a:a7:cf:20:56:00:01:bd:d5:ce:77:09:cb:1b:e7: a2:89:b5:cc:e8:3e:6f:a5:af:25:a7:69:b4:6a:e7: 56:64:69:61:86:c8:76:32:91:a6:fd:de:cc:d4:5a: a0:fa:d0:54:17:30:a5:bb:97:57:2b:d2:8a:c8:a9: c6:6f:1b:8d:be:e9:e3:3d:55:7e:28:16:ea:3a:16: 4d:c4:5e:41:89:32:f6:61:4c:f1:ea:52:88:8d:65: 87:f8:6f:28:da:4c:fb:57:e7:e3:42:05:9e:96:26: 09:95:f9:c0:b8:a7:08:f4:ee:da:af:43:3d:2c:c7: 5f:eb:00:3b:61:a4:4d:7d:11:99:3d:db:1c:d0:47: 84:37:a2:91:8f:b8:e6:e8:ce:84:53:4e:7a:24:4f: 1b:68:4c:3c:c1:dc:24:ce:80:d7:3b:7f:58:e1:a3: fa:ea:6b:27:26:d2:fd:94:38:ce:57:ed:77:ad:82: 5d:72:2e:22:27:74:43:12:ff:1d:c5:05:e6:06:14: 5c:d2:3e:11:0a:4d:2c:38:4e:5c:da:d4:36:81:c4: bf:36:2b:7c:98:53:e4:88:c1:35:76:3f:fa:4b:1a: 74:48:19:72:f8:fa:60:64:64:f2:ac:70:ec:92:81: db:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:CF:4D:53:ED:5C:0A:4B:D3:FE:24:22:01:A9:66:65:5C:80:CC:0E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/3ebce5-73e3-4e3e-83b0-a788fdc70948/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/3ebce5-73e3-4e3e-83b0-a788fdc70948/1/Js9NU-1cCkvT_iQiAalmZVyAzA4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.200.126.0/23 91.220.120.0/24 185.79.100.0/22 IPv6: 2a05:7280::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 202173 Signature Algorithm: sha256WithRSAEncryption ae:c9:99:f8:48:a4:e6:8e:46:2b:c5:94:b0:8f:90:74:6a:18: cf:56:54:a7:3e:ea:7c:b0:25:80:09:68:4f:46:cf:1b:72:12: 9e:d6:13:95:a9:0a:1d:8e:10:15:c8:06:4b:15:00:42:b6:2c: 41:7f:f6:c9:ae:ff:65:13:4f:ae:33:ea:59:f9:6c:37:85:79: 8f:4f:70:ec:c6:1f:1f:b7:00:eb:d0:d2:df:71:bb:b9:c3:b6: 2c:03:29:da:9b:9d:a3:38:a8:b3:d7:00:fd:93:9d:eb:af:3b: 49:f2:fd:da:0e:4c:f3:57:e5:e9:9a:41:3e:bd:b7:71:0f:b4: 96:82:20:ed:81:6b:39:66:75:b0:fe:52:3c:91:02:fc:6e:f7: 84:24:61:08:f9:e1:21:83:04:f1:09:f4:0d:58:e9:82:aa:5a: 56:3c:51:de:26:26:b6:1f:28:35:ea:87:bf:97:14:45:c2:71: f5:06:99:89:27:a8:9e:4f:eb:37:2c:d5:be:df:0d:e3:5f:02: 90:94:23:08:26:ab:bc:9e:b9:5d:53:26:b2:e5:a5:37:87:01: 8b:71:37:77:7f:ff:7f:06:6f:ff:ab:72:2e:e4:b0:ec:04:08: ca:b6:fb:4b:e3:43:78:ff:7d:6c:32:91:4f:16:ba:6e:06:30: 6f:c0:6f:8d -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISAZt8f+zB/R/tGRoSAPUrjdKCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNmNmNGQ1M2VkNWMwYTRiZDNmZTI0MjIwMWE5NjY2NTVjODBjYzBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruy3fTh83GuaBGb26Faap88gVgAB vdXOdwnLG+eiibXM6D5vpa8lp2m0audWZGlhhsh2MpGm/d7M1Fqg+tBUFzClu5dX K9KKyKnGbxuNvunjPVV+KBbqOhZNxF5BiTL2YUzx6lKIjWWH+G8o2kz7V+fjQgWe liYJlfnAuKcI9O7ar0M9LMdf6wA7YaRNfRGZPdsc0EeEN6KRj7jm6M6EU056JE8b aEw8wdwkzoDXO39Y4aP66msnJtL9lDjOV+13rYJdci4iJ3RDEv8dxQXmBhRc0j4R Ck0sOE5c2tQ2gcS/Nit8mFPkiME1dj/6Sxp0SBly+PpgZGTyrHDskoHbRwIDAQAB o4ICuzCCArcwHQYDVR0OBBYEFCbPTVPtXApL0/4kIgGpZmVcgMwOMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q3LzNlYmNl NS03M2UzLTRlM2UtODNiMC1hNzg4ZmRjNzA5NDgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDcvM2ViY2U1 LTczZTMtNGUzZS04M2IwLWE3ODhmZGM3MDk0OC8xL0pzOU5VLTFjQ2t2VF9pUWlB YWxtWlZ5QXpBNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQBUch+AwQAW9x4AwQCuU9kMA0EAgACMAcDBQMq BXKAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMVvTANBgkqhkiG9w0BAQsFAAOC AQEArsmZ+Eik5o5GK8WUsI+QdGoYz1ZUpz7qfLAlgAloT0bPG3ISntYTlakKHY4Q FcgGSxUAQrYsQX/2ya7/ZRNPrjPqWflsN4V5j09w7MYfH7cA69DS33G7ucO2LAMp 2pudozios9cA/ZOd6687SfL92g5M81fl6ZpBPr23cQ+0loIg7YFrOWZ1sP5SPJEC /G73hCRhCPnhIYME8Qn0DVjpgqpaVjxR3iYmth8oNeqHv5cURcJx9QaZiSeonk/r NyzVvt8N418CkJQjCCarvJ65XVMmsuWlN4cBi3E3d3//fwZv/6tyLuSw7AQIyrb7 S+NDeP99bDKRTxa6bgYwb8BvjQ== -----END CERTIFICATE-----Generated at Mon Feb 9 15:02:56 2026 by rpki-client