This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/j5D2t16RPyeC7VSetyFyxZzEevE.cer File: j5D2t16RPyeC7VSetyFyxZzEevE.cer (raw, json) Hash identifier: 9lRTVva7ZVnw9R7AQvE053VNWyc2l08VT1jzrahZEGE= Subject key identifier: 8F:90:F6:B7:5E:91:3F:27:82:ED:54:9E:B7:21:72:C5:9C:C4:7A:F1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C1290C5D65B0919F811CCCD3BEE1F1D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4d/3d3c3b-1a95-4b50-8974-c1d0acb7819a/1/j5D2t16RPyeC7VSetyFyxZzEevE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4d/3d3c3b-1a95-4b50-8974-c1d0acb7819a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:19:10 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 203924 IP: 85.117.252.0/22 IP: 185.113.144.0/22 IP: 185.146.36.0/22 IP: 185.216.120.0/22 IP: 193.105.0.0/24 IP: 2a06:6a40::/29 IP: 2a07:4d00::/29 IP: 2a0b:b640::/29 IP: 2a0d:b6c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:90:c5:d6:5b:09:19:f8:11:cc:cd:3b:ee:1f:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8f90f6b75e913f2782ed549eb72172c59cc47af1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:e4:fe:f4:88:f6:03:c5:43:9c:f2:17:9f:59: 0c:95:20:1a:70:ba:6e:21:f4:c9:a6:51:4a:b8:28: 38:38:fe:2b:1a:64:93:fb:a0:5f:7b:6c:a6:72:dc: bc:c9:55:18:72:0f:da:d3:51:6b:f1:f6:4d:ab:e5: 4a:e8:01:29:97:79:9d:db:2f:6e:2f:53:6d:a9:ae: b8:85:0c:fa:7c:d0:0c:9b:26:82:43:ac:9d:6c:87: f1:4c:9d:f0:cc:72:08:07:80:fe:10:cb:0a:5e:5b: 64:99:bf:a7:41:a1:79:b7:86:b9:4b:e9:79:25:e5: fb:a5:07:6d:3b:4a:69:60:5c:72:46:34:8e:f2:dd: fb:1f:5c:ce:9e:36:da:78:3b:90:ea:a8:99:a7:1f: 66:b5:6e:a7:1b:1f:77:d5:c1:a8:42:c4:b6:e2:70: db:27:e5:fd:57:91:9f:39:d4:b6:46:d9:2d:33:1b: f2:ae:51:3e:60:97:05:9a:c6:c3:25:57:d3:0a:a7: 87:ce:fb:64:6a:dc:d4:ef:7b:c5:2c:d2:47:1a:5e: ce:0b:30:11:80:20:b7:e9:47:bb:89:07:d9:66:77: a3:4c:6d:b7:b6:7f:01:ae:79:bd:8e:5a:00:c5:8a: e8:46:41:ae:a0:1a:84:50:51:58:12:b3:c0:b0:68: 6b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:90:F6:B7:5E:91:3F:27:82:ED:54:9E:B7:21:72:C5:9C:C4:7A:F1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/3d3c3b-1a95-4b50-8974-c1d0acb7819a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/3d3c3b-1a95-4b50-8974-c1d0acb7819a/1/j5D2t16RPyeC7VSetyFyxZzEevE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.117.252.0/22 185.113.144.0/22 185.146.36.0/22 185.216.120.0/22 193.105.0.0/24 IPv6: 2a06:6a40::/29 2a07:4d00::/29 2a0b:b640::/29 2a0d:b6c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 203924 Signature Algorithm: sha256WithRSAEncryption 55:c1:75:d5:36:99:2a:89:a7:9a:ad:fc:48:9e:9d:7b:b6:49: 73:96:59:3d:41:01:fa:3d:5f:b9:2b:8d:d1:f1:f5:60:6b:55: bf:0b:67:6a:6c:91:ec:0e:5e:08:79:3c:a6:2d:12:91:a5:09: e1:09:12:83:13:7f:36:3d:9f:71:19:a1:09:c3:32:01:e5:ee: 3a:1c:f4:4a:07:cb:9f:fd:3d:bd:1a:63:72:0e:48:b7:85:b4: 10:0f:f4:8e:22:86:35:24:ef:5d:e2:a5:86:6f:42:49:b3:75: ad:ce:7f:cc:f0:47:6e:7e:13:e7:ee:c9:c0:66:4c:77:d9:ad: 86:0c:9e:4f:5e:4a:36:64:fa:47:6c:7a:42:a3:e3:c1:7f:e6: 7a:0e:e4:03:e5:d6:a8:de:8a:c6:08:11:97:f9:25:56:8f:4d: a1:95:06:0c:09:b7:56:be:13:f1:d2:54:69:92:43:0c:88:56: 6a:e9:e5:03:c6:a2:31:ff:3c:e3:f8:83:6a:62:7d:6c:3b:09: e9:46:60:3f:5c:76:15:db:d2:72:90:77:97:41:69:ac:ce:d7: 36:f6:39:f3:1c:af:21:f0:41:ef:04:be:c2:f6:e3:b0:3c:76: e6:fa:a5:f2:b1:e7:4c:bd:27:51:3e:c4:3b:3e:86:cb:5b:0a: 48:45:66:d9 -----BEGIN CERTIFICATE----- MIIF0DCCBLigAwIBAgISAZt8EpDF1lsJGfgRzM077h8dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZjkwZjZiNzVlOTEzZjI3ODJlZDU0OWViNzIxNzJjNTljYzQ3YWYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAheT+9Ij2A8VDnPIXn1kMlSAacLpu IfTJplFKuCg4OP4rGmST+6Bfe2ymcty8yVUYcg/a01Fr8fZNq+VK6AEpl3md2y9u L1Ntqa64hQz6fNAMmyaCQ6ydbIfxTJ3wzHIIB4D+EMsKXltkmb+nQaF5t4a5S+l5 JeX7pQdtO0ppYFxyRjSO8t37H1zOnjbaeDuQ6qiZpx9mtW6nGx931cGoQsS24nDb J+X9V5GfOdS2RtktMxvyrlE+YJcFmsbDJVfTCqeHzvtkatzU73vFLNJHGl7OCzAR gCC36Ue7iQfZZnejTG23tn8Brnm9jloAxYroRkGuoBqEUFFYErPAsGhrxQIDAQAB o4IC3DCCAtgwHQYDVR0OBBYEFI+Q9rdekT8ngu1UnrchcsWcxHrxMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRkLzNkM2Mz Yi0xYTk1LTRiNTAtODk3NC1jMWQwYWNiNzgxOWEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGQvM2QzYzNi LTFhOTUtNGI1MC04OTc0LWMxZDBhY2I3ODE5YS8xL2o1RDJ0MTZSUHllQzdWU2V0 eUZ5eFp6RWV2RS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFsGCCsGAQUF BwEHAQH/BEwwSjAkBAIAATAeAwQCVXX8AwQCuXGQAwQCuZIkAwQCudh4AwQAwWkA MCIEAgACMBwDBQMqBmpAAwUDKgdNAAMFAyoLtkADBQMqDbbAMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwMclDANBgkqhkiG9w0BAQsFAAOCAQEAVcF11TaZKomnmq38 SJ6de7ZJc5ZZPUEB+j1fuSuN0fH1YGtVvwtnamyR7A5eCHk8pi0SkaUJ4QkSgxN/ Nj2fcRmhCcMyAeXuOhz0SgfLn/09vRpjcg5It4W0EA/0jiKGNSTvXeKlhm9CSbN1 rc5/zPBHbn4T5+7JwGZMd9mthgyeT15KNmT6R2x6QqPjwX/meg7kA+XWqN6KxggR l/klVo9NoZUGDAm3Vr4T8dJUaZJDDIhWaunlA8aiMf884/iDamJ9bDsJ6UZgP1x2 FdvScpB3l0FprM7XNvY58xyvIfBB7wS+wvbjsDx25vql8rHnTL0nUT7EOz6Gy1sK SEVm2Q== -----END CERTIFICATE-----Generated at Mon Feb 9 16:50:02 2026 by rpki-client