This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ctjb6kAj1p9H-JvSCC__skZt0qU.cer File: ctjb6kAj1p9H-JvSCC__skZt0qU.cer (raw, json) Hash identifier: 3wGcecz7GV8ZamYSIXjHIALNXnazK9cLbyGU6nXLd4A= Subject key identifier: 72:D8:DB:EA:40:23:D6:9F:47:F8:9B:D2:08:2F:FF:B2:46:6D:D2:A5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7910483088E93901A7226CCA0CA04DCE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/95/a9091f-27a2-42a3-952b-9ed1804f3282/1/ctjb6kAj1p9H-JvSCC__skZt0qU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/95/a9091f-27a2-42a3-952b-9ed1804f3282/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:17:48 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 204816 IP: 217.20.253.0/24 IP: 2a12:ffc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:48:30:88:e9:39:01:a7:22:6c:ca:0c:a0:4d:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=72d8dbea4023d69f47f89bd2082fffb2466dd2a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:a2:07:d6:a8:1d:e7:92:89:4b:92:3d:ea:46: 85:07:b9:8f:26:90:7c:90:70:13:38:1e:e9:d9:65: 38:f6:7c:8d:7d:24:1f:66:66:47:d4:5b:76:b4:2a: ae:15:1e:e2:a1:e2:8b:0c:52:f1:a9:8e:e7:56:38: 61:de:a9:ea:3d:d3:6c:84:6d:6c:b8:29:fa:b2:60: bb:ea:d6:26:3a:10:9a:a1:43:8f:3c:61:fd:5e:4e: ac:ae:c2:c4:9f:92:e7:ce:ee:85:06:76:6f:78:93: b9:ca:df:5a:63:13:65:59:c7:77:66:45:ab:6f:82: 86:23:8c:20:d8:c6:a1:3c:6e:a5:22:58:47:bd:f5: 73:40:ab:c2:a4:4b:0a:bd:77:f4:59:46:33:c9:f4: 0d:c0:13:12:da:39:52:50:4e:a4:b6:48:fd:e7:53: c0:23:2c:20:cb:ae:ac:14:03:1c:21:c3:74:01:b6: 53:aa:c7:51:3d:5e:d9:e3:b9:82:9f:25:b0:c7:97: 94:1e:49:b4:42:f8:81:d2:07:d4:07:06:2c:5b:82: fa:df:ae:20:e5:06:af:53:70:6e:56:f6:f4:92:15: 82:ce:12:5a:e3:38:b1:f5:dd:45:c4:99:27:03:45: d8:6e:39:f4:06:61:4a:db:e6:bc:15:34:41:8e:e0: bd:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:D8:DB:EA:40:23:D6:9F:47:F8:9B:D2:08:2F:FF:B2:46:6D:D2:A5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a9091f-27a2-42a3-952b-9ed1804f3282/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a9091f-27a2-42a3-952b-9ed1804f3282/1/ctjb6kAj1p9H-JvSCC__skZt0qU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.20.253.0/24 IPv6: 2a12:ffc0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 204816 Signature Algorithm: sha256WithRSAEncryption a7:ea:17:34:2a:fd:86:4b:e2:60:ca:f8:ca:b4:6a:0a:a9:87: 89:3c:b1:21:5f:d2:1a:e8:93:43:0d:64:a2:2a:38:94:fa:fd: 76:cc:fb:13:75:36:2b:e7:72:01:36:5d:f3:df:84:32:d4:22: 28:1d:d7:15:62:fb:6e:69:0d:f2:46:98:ea:db:8e:f4:58:00: a5:36:b6:a8:69:cc:33:fa:a6:0b:e8:14:23:28:a0:6e:ff:fd: 68:bf:3e:c6:69:cf:8f:5e:c8:e9:ec:99:c5:89:12:23:bf:24: 23:90:15:2f:64:c8:ec:75:25:8e:03:3d:45:6d:17:ad:29:85: 8a:0e:8a:d0:14:43:6f:71:a3:0b:ef:1d:64:d7:ba:1b:6c:04: 31:95:47:c5:41:e4:74:09:0a:95:ac:9e:8b:23:e6:bd:50:85: 6e:84:35:bf:7d:37:08:a7:76:5b:cf:ad:9f:11:56:31:5e:8c: fe:66:90:89:e6:11:4e:00:51:bb:ec:da:a7:b6:0e:30:c8:93: 41:03:81:73:d1:1a:f0:d4:f9:4a:11:fd:4a:8a:f9:98:7d:7d: 84:13:a4:b4:39:e2:00:46:bd:83:40:cd:66:5b:e6:f5:a7:8d: f5:aa:a0:06:f3:cf:04:73:d8:6f:8e:a1:e0:d5:28:18:ea:61: 0f:7e:e8:ce -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt5EEgwiOk5AacibMoMoE3OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MmQ4ZGJlYTQwMjNkNjlmNDdmODliZDIwODJmZmZiMjQ2NmRkMmE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4aIH1qgd55KJS5I96kaFB7mPJpB8 kHATOB7p2WU49nyNfSQfZmZH1Ft2tCquFR7ioeKLDFLxqY7nVjhh3qnqPdNshG1s uCn6smC76tYmOhCaoUOPPGH9Xk6srsLEn5Lnzu6FBnZveJO5yt9aYxNlWcd3ZkWr b4KGI4wg2MahPG6lIlhHvfVzQKvCpEsKvXf0WUYzyfQNwBMS2jlSUE6ktkj951PA Iywgy66sFAMcIcN0AbZTqsdRPV7Z47mCnyWwx5eUHkm0QviB0gfUBwYsW4L6364g 5QavU3BuVvb0khWCzhJa4zix9d1FxJknA0XYbjn0BmFK2+a8FTRBjuC9DQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFHLY2+pAI9afR/ib0ggv/7JGbdKlMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk1L2E5MDkx Zi0yN2EyLTQyYTMtOTUyYi05ZWQxODA0ZjMyODIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTUvYTkwOTFm LTI3YTItNDJhMy05NTJiLTllZDE4MDRmMzI4Mi8xL2N0amI2a0FqMXA5SC1KdlND Q19fc2tadDBxVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQA2RT9MA0EAgACMAcDBQMqEv/AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMgEDANBgkqhkiG9w0BAQsFAAOCAQEAp+oXNCr9hkvi YMr4yrRqCqmHiTyxIV/SGuiTQw1koio4lPr9dsz7E3U2K+dyATZd89+EMtQiKB3X FWL7bmkN8kaY6tuO9FgApTa2qGnMM/qmC+gUIyigbv/9aL8+xmnPj17I6eyZxYkS I78kI5AVL2TI7HUljgM9RW0XrSmFig6K0BRDb3GjC+8dZNe6G2wEMZVHxUHkdAkK layeiyPmvVCFboQ1v303CKd2W8+tnxFWMV6M/maQieYRTgBRu+zap7YOMMiTQQOB c9Ea8NT5ShH9Sor5mH19hBOktDniAEa9g0DNZlvm9aeN9aqgBvPPBHPYb46h4NUo GOphD37ozg== -----END CERTIFICATE-----Generated at Mon Feb 9 15:11:41 2026 by rpki-client