This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JurAxmWyB9bxXkEjRXUFxTH2FuI.cer File: JurAxmWyB9bxXkEjRXUFxTH2FuI.cer (raw, json) Hash identifier: HiXrutLEGnB0uIz57CJh2sEhlYtlilnGI7wlnQemMpk= Subject key identifier: 26:EA:C0:C6:65:B2:07:D6:F1:5E:41:23:45:75:05:C5:31:F6:16:E2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB812A08BBC3643FB1052CF72A7060 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/4c9acece-d05b-4f73-9c6e-d8785d1789c3/0/26EAC0C665B207D6F15E4123457505C531F616E2.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/4c9acece-d05b-4f73-9c6e-d8785d1789c3/0/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:24 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 214575 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:81:2a:08:bb:c3:64:3f:b1:05:2c:f7:2a:70:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=26eac0c665b207d6f15e4123457505c531f616e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:5d:ce:a3:09:4a:12:d4:91:63:d9:14:a8:2a: a0:fe:d2:f1:c2:c2:7d:5c:1d:0d:78:25:3d:11:07: cd:77:82:d5:2c:d7:06:cf:72:8d:56:33:29:f3:eb: 5d:1c:7b:55:d6:98:06:19:5b:0b:99:8b:f9:c2:7e: aa:89:d4:eb:e3:66:5d:f9:a8:53:3b:4a:2e:76:2f: 3a:4f:34:97:8e:8c:69:47:4c:13:b2:81:60:88:d1: b5:91:90:52:2a:ff:18:88:0e:ed:6f:52:6b:4f:a9: 6f:b0:cb:c7:92:e7:19:ef:f4:ab:2b:f7:d4:5a:18: d1:e2:e1:76:3b:38:67:7b:e1:e7:2c:58:33:6a:41: 55:d0:dc:3b:5c:16:1a:fa:cf:57:64:f1:c5:67:23: 53:8b:5e:c1:38:58:1b:b5:22:b3:a8:cd:79:34:93: 6d:ab:6c:0b:85:f3:c6:3c:d0:a9:4c:44:d2:09:cf: 7b:73:62:c7:61:07:f3:8f:a6:31:ee:a3:e2:d9:c1: e4:b2:41:3e:98:4c:7a:ed:91:09:cb:c1:d6:6f:0f: 55:82:49:60:b7:b8:dd:ac:08:b8:02:42:a6:07:cd: 11:75:37:c6:ab:a1:c2:af:96:92:58:52:00:15:16: d1:5f:84:39:9c:9c:e3:a5:bf:92:a2:a7:63:c1:7a: ee:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:EA:C0:C6:65:B2:07:D6:F1:5E:41:23:45:75:05:C5:31:F6:16:E2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/4c9acece-d05b-4f73-9c6e-d8785d1789c3/0/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/4c9acece-d05b-4f73-9c6e-d8785d1789c3/0/26EAC0C665B207D6F15E4123457505C531F616E2.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 214575 Signature Algorithm: sha256WithRSAEncryption 16:1e:53:2e:89:03:65:ba:9c:ab:8c:4b:4e:21:da:48:06:98: 4d:bf:9b:5a:89:b9:87:3f:9e:43:e3:4d:99:a1:11:ab:02:1a: 0f:c2:ff:10:89:88:9a:89:9f:38:e5:fa:36:88:20:31:40:e8: e3:5f:4f:2f:b7:fc:fe:d8:da:9b:05:c0:30:64:58:76:40:01: 8d:56:da:3d:94:32:b9:2f:71:d9:9f:6f:5c:b8:c8:0b:a9:cf: 89:71:a0:45:bb:ae:66:55:7c:50:90:cb:95:74:08:4f:86:2b: 62:22:c8:38:07:8a:bb:f8:5a:e4:b4:f2:a1:44:ae:e3:05:9e: 04:06:15:86:a8:e8:ec:fd:9a:b6:c4:34:8f:5b:a3:35:86:d4: bf:c5:3d:9d:a5:6c:a9:02:8c:e3:65:f0:87:0c:09:c3:a8:18: 8e:45:4a:1e:d9:46:f8:1d:3f:b6:ac:9a:e4:67:6e:61:77:84: fb:56:39:35:65:14:44:2f:5d:6c:64:a5:28:14:f2:aa:7f:e2: e0:ca:ff:d8:84:53:68:2b:89:74:2a:4a:f5:11:42:b7:8a:57: 27:1a:b7:3e:5f:85:df:13:14:8a:5e:57:53:5f:bf:25:0c:85: e5:a0:96:4e:3f:5e:2c:af:d4:f2:04:ef:72:80:83:57:85:a7: 7e:2c:48:63 -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgISAZt264EqCLvDZD+xBSz3KnBgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNmVhYzBjNjY1YjIwN2Q2ZjE1ZTQxMjM0NTc1MDVjNTMxZjYxNmUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwV3OowlKEtSRY9kUqCqg/tLxwsJ9 XB0NeCU9EQfNd4LVLNcGz3KNVjMp8+tdHHtV1pgGGVsLmYv5wn6qidTr42Zd+ahT O0oudi86TzSXjoxpR0wTsoFgiNG1kZBSKv8YiA7tb1JrT6lvsMvHkucZ7/SrK/fU WhjR4uF2Ozhne+HnLFgzakFV0Nw7XBYa+s9XZPHFZyNTi17BOFgbtSKzqM15NJNt q2wLhfPGPNCpTETSCc97c2LHYQfzj6Yx7qPi2cHkskE+mEx67ZEJy8HWbw9Vgklg t7jdrAi4AkKmB80RdTfGq6HCr5aSWFIAFRbRX4Q5nJzjpb+SoqdjwXruwwIDAQAB o4ICmzCCApcwHQYDVR0OBBYEFCbqwMZlsgfW8V5BI0V1BcUx9hbiMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzRjOWFj ZWNlLWQwNWItNGY3My05YzZlLWQ4Nzg1ZDE3ODljMy8wLzCBiwYIKwYBBQUHMAqG f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNGM5 YWNlY2UtZDA1Yi00ZjczLTljNmUtZDg3ODVkMTc4OWMzLzAvMjZFQUMwQzY2NUIy MDdENkYxNUU0MTIzNDU3NTA1QzUzMUY2MTZFMi5tZnQwPAYIKwYBBQUHMA2GMGh0 dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDRi8w DQYJKoZIhvcNAQELBQADggEBABYeUy6JA2W6nKuMS04h2kgGmE2/m1qJuYc/nkPj TZmhEasCGg/C/xCJiJqJnzjl+jaIIDFA6ONfTy+3/P7Y2psFwDBkWHZAAY1W2j2U Mrkvcdmfb1y4yAupz4lxoEW7rmZVfFCQy5V0CE+GK2IiyDgHirv4WuS08qFEruMF ngQGFYao6Oz9mrbENI9bozWG1L/FPZ2lbKkCjONl8IcMCcOoGI5FSh7ZRvgdP7as muRnbmF3hPtWOTVlFEQvXWxkpSgU8qp/4uDK/9iEU2griXQqSvURQreKVycatz5f hd8TFIpeV1NfvyUMheWglk4/Xiyv1PIE73KAg1eFp34sSGM= -----END CERTIFICATE-----Generated at Mon Feb 9 15:06:53 2026 by rpki-client