This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cjj7_qV2hHnIYwCQbnTrJU3LXGk.cer File: cjj7_qV2hHnIYwCQbnTrJU3LXGk.cer (raw, json) Hash identifier: CZ+djG/Y6aX+LmHiugFF8s8dJkdCT6l9Gft77RSS1LU= Subject key identifier: 72:38:FB:FE:A5:76:84:79:C8:63:00:90:6E:74:EB:25:4D:CB:5C:69 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5D03BFBEA01AA3ED7565A0759E8793 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ea/fb22ab-b546-4071-beb1-be10e8b4a00e/1/cjj7_qV2hHnIYwCQbnTrJU3LXGk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ea/fb22ab-b546-4071-beb1-be10e8b4a00e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:20:06 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 210333 IP: 185.202.96.0/22 IP: 213.109.144.0/24 IP: 2a11:6a40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:03:bf:be:a0:1a:a3:ed:75:65:a0:75:9e:87:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:20:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7238fbfea5768479c86300906e74eb254dcb5c69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:8d:50:3b:dd:8b:9c:ba:a8:6e:34:48:78:38: 60:ae:ab:49:d7:53:40:8d:e0:82:3e:2d:cc:34:f6: e8:ac:52:ad:ef:15:11:84:90:c2:c1:53:1d:f3:5f: d6:bb:6f:22:ac:67:ba:d4:22:58:e5:ff:02:67:35: 37:1c:32:0a:0b:c2:6a:c3:b2:96:60:d9:2b:d4:8e: 14:6b:0d:b3:0c:d5:05:6e:84:01:0b:9f:53:5b:36: c1:5f:1c:fd:29:d4:e8:64:81:c8:9c:2a:8b:6a:56: 86:62:36:fa:45:22:f3:5c:62:bd:c5:83:3f:f0:e8: 2e:b7:94:4e:3d:52:97:77:6c:c5:34:48:5d:af:f7: 11:38:aa:e3:de:cd:0d:8b:e0:82:11:1f:ea:de:34: eb:3c:49:ff:58:e0:b3:2d:4f:00:43:23:ff:61:7f: a6:28:72:32:a9:5c:0a:26:3b:c6:a4:78:06:3c:19: 3a:aa:b5:72:6d:9c:f0:07:47:84:e5:32:a5:df:c7: 3b:42:95:5b:a3:53:46:e4:8d:99:ba:f0:ef:65:68: c5:23:de:1b:65:e6:ff:ed:e7:ce:79:2a:2f:0a:00: 11:f3:09:d9:c8:7c:39:3c:78:0b:71:cf:fa:4b:cc: 3d:e8:1c:00:02:3b:db:2e:d0:93:b6:29:57:02:83: ea:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:38:FB:FE:A5:76:84:79:C8:63:00:90:6E:74:EB:25:4D:CB:5C:69 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/fb22ab-b546-4071-beb1-be10e8b4a00e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/fb22ab-b546-4071-beb1-be10e8b4a00e/1/cjj7_qV2hHnIYwCQbnTrJU3LXGk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.202.96.0/22 213.109.144.0/24 IPv6: 2a11:6a40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 210333 Signature Algorithm: sha256WithRSAEncryption 1f:70:8a:93:4e:3a:8e:4c:c1:6d:80:ee:8b:83:85:c1:35:eb: eb:fc:52:41:8f:9b:22:30:85:f7:13:2f:96:1c:d3:b0:03:1f: 07:82:75:15:2d:3e:3e:7e:47:15:af:97:e0:b2:89:41:a5:91: b9:ef:6e:9b:f8:1d:1a:3c:c6:27:90:e5:18:7a:44:d0:6f:f2: 6a:fc:83:73:09:7a:38:64:2c:6a:ab:17:af:cd:87:91:51:70: 7e:d5:5b:bb:2d:c9:7d:62:76:2a:78:ac:8b:6d:48:24:e4:1a: f8:6d:fb:8d:aa:ea:46:93:d7:95:98:b6:eb:65:9a:f0:4b:d8: 53:c4:3c:e1:58:cb:5f:2f:b9:86:d3:4d:72:a6:38:61:77:62: 19:25:f6:6e:e7:7b:67:af:be:6e:1a:80:cb:cf:fb:f9:a0:bd: 49:5e:ed:08:a9:4e:56:29:8a:34:db:1b:d5:20:cc:65:c0:34: 87:67:2e:2b:77:15:c6:1c:90:d7:c8:a3:1f:fe:16:e1:d0:c5: 63:ad:f2:2c:90:90:25:7b:8a:dd:02:21:54:b8:54:b5:6f:e8: 0d:bb:bb:fd:63:58:dd:e2:04:78:06:7f:15:4c:13:28:2b:19: 3a:ba:5b:28:27:d2:a5:2a:2c:24:55:f4:d0:ee:30:15:31:fc: 41:6e:67:c2 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt9XQO/vqAao+11ZaB1noeTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYyMDA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MjM4ZmJmZWE1NzY4NDc5Yzg2MzAwOTA2ZTc0ZWIyNTRkY2I1YzY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Y1QO92LnLqobjRIeDhgrqtJ11NA jeCCPi3MNPborFKt7xURhJDCwVMd81/Wu28irGe61CJY5f8CZzU3HDIKC8Jqw7KW YNkr1I4Uaw2zDNUFboQBC59TWzbBXxz9KdToZIHInCqLalaGYjb6RSLzXGK9xYM/ 8Ogut5ROPVKXd2zFNEhdr/cROKrj3s0Ni+CCER/q3jTrPEn/WOCzLU8AQyP/YX+m KHIyqVwKJjvGpHgGPBk6qrVybZzwB0eE5TKl38c7QpVbo1NG5I2ZuvDvZWjFI94b Zeb/7efOeSovCgAR8wnZyHw5PHgLcc/6S8w96BwAAjvbLtCTtilXAoPqOQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFHI4+/6ldoR5yGMAkG506yVNy1xpMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VhL2ZiMjJh Yi1iNTQ2LTQwNzEtYmViMS1iZTEwZThiNGEwMGUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWEvZmIyMmFi LWI1NDYtNDA3MS1iZWIxLWJlMTBlOGI0YTAwZS8xL2NqajdfcVYyaEhuSVl3Q1Fi blRySlUzTFhHay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCucpgAwQA1W2QMA0EAgACMAcDBQMqEWpAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwM1nTANBgkqhkiG9w0BAQsFAAOCAQEAH3CK k046jkzBbYDui4OFwTXr6/xSQY+bIjCF9xMvlhzTsAMfB4J1FS0+Pn5HFa+X4LKJ QaWRue9um/gdGjzGJ5DlGHpE0G/yavyDcwl6OGQsaqsXr82HkVFwftVbuy3JfWJ2 Knisi21IJOQa+G37jarqRpPXlZi262Wa8EvYU8Q84VjLXy+5htNNcqY4YXdiGSX2 bud7Z6++bhqAy8/7+aC9SV7tCKlOVimKNNsb1SDMZcA0h2cuK3cVxhyQ18ijH/4W 4dDFY63yLJCQJXuK3QIhVLhUtW/oDbu7/WNY3eIEeAZ/FUwTKCsZOrpbKCfSpSos JFX00O4wFTH8QW5nwg== -----END CERTIFICATE-----Generated at Mon Feb 9 21:04:26 2026 by rpki-client