This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/j8HWvjunicXa61l6E13l7Myrj5U.cer File: j8HWvjunicXa61l6E13l7Myrj5U.cer (raw, json) Hash identifier: E6bJ707LUvcbfHJoDUUuPUp9zRv6qeKwtfv0JHTeQ5g= Subject key identifier: 8F:C1:D6:BE:3B:A7:89:C5:DA:EB:59:7A:13:5D:E5:EC:CC:AB:8F:95 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB18E0664DCDC6526D8405E0E8BA19 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a6/44ee8d-2ae8-4844-a935-d24c2ce23ab7/1/j8HWvjunicXa61l6E13l7Myrj5U.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a6/44ee8d-2ae8-4844-a935-d24c2ce23ab7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:17:57 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.46.61.0/24 IP: 193.104.108.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:18:e0:66:4d:cd:c6:52:6d:84:05:e0:e8:ba:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8fc1d6be3ba789c5daeb597a135de5ecccab8f95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ef:a7:d4:8b:fa:61:4c:22:98:7a:6c:9b:61: b2:17:10:6d:a3:96:24:fa:b9:d2:3e:36:c8:2e:55: 50:3d:07:0b:39:de:97:db:a2:af:03:1a:e3:41:55: 18:42:3a:34:01:cd:53:f1:60:55:78:32:26:44:29: 96:b8:71:9c:c9:6f:49:9d:a8:8f:9a:9a:ac:ad:a9: af:96:d2:29:af:fe:46:8b:8c:6e:1f:b0:8a:ea:0a: f9:f5:22:fd:8b:c8:f6:3a:f9:02:10:0c:0f:cd:a9: 88:b6:5b:f0:7e:da:08:ad:1c:20:08:7d:37:26:84: cc:1c:2f:24:50:23:e7:3f:dc:f6:a1:8b:a8:f9:7d: 2b:a2:ec:75:a4:5c:f2:27:46:0c:6b:d7:74:fe:c5: 61:5e:5d:cf:80:f7:7b:f0:51:f8:6b:bd:17:68:41: 55:32:bd:4e:f8:12:e2:62:11:de:7a:d3:f2:f8:5b: 01:2f:ea:a1:0c:32:52:d8:83:d1:05:dd:46:f2:d3: c9:a7:32:b7:bc:09:1d:07:25:64:3e:5f:42:67:9d: 8c:ee:5d:5e:26:d1:04:3b:dc:fa:4d:d7:31:36:b3: 80:0a:aa:2b:b1:03:50:6b:c4:24:ec:8c:f0:36:79: 8e:54:97:2c:71:0f:ed:59:e7:05:e9:b6:09:ea:47: 50:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:C1:D6:BE:3B:A7:89:C5:DA:EB:59:7A:13:5D:E5:EC:CC:AB:8F:95 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/44ee8d-2ae8-4844-a935-d24c2ce23ab7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/44ee8d-2ae8-4844-a935-d24c2ce23ab7/1/j8HWvjunicXa61l6E13l7Myrj5U.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.46.61.0/24 193.104.108.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:39:2f:02:e4:43:20:d7:82:f8:81:b4:ac:b7:85:a7:ef:7a: 02:06:d2:bc:0c:6f:b9:bb:8a:68:80:e1:55:c3:68:09:a2:85: 40:b4:83:92:0e:af:6c:b2:88:6d:ac:c1:1b:51:a0:48:62:2e: e0:27:cd:83:5c:15:aa:46:16:37:d1:13:45:25:1e:b8:06:44: 15:f6:0e:fe:69:fc:01:4e:22:ba:7b:04:88:05:e0:4c:40:d0: 52:cb:59:2c:8c:fd:66:26:ba:1c:fd:7c:01:78:63:7d:92:1c: 06:ef:f3:d1:f7:8b:00:31:8a:f9:39:27:d0:d0:38:6a:b2:dc: fc:55:4e:3e:33:4d:38:24:b3:7d:37:a8:18:f7:4d:48:8e:a8: 7c:bf:d4:d7:8d:d0:ed:f7:78:d5:b4:d3:cc:57:99:b8:a2:87: a3:40:00:bb:cf:44:a5:81:fd:df:48:3f:a1:fc:d2:58:f8:58: 91:a3:e1:70:de:fe:e4:06:e5:54:40:fc:68:9f:43:e6:25:4e: d3:9d:79:2b:d9:6e:02:9b:7d:5c:20:4b:70:b5:bd:de:b1:fc: 97:fc:31:cb:d5:18:58:a2:a5:b1:ea:d1:8f:ae:15:71:f2:b8: 6e:c8:af:1f:b8:be:aa:b6:a8:06:81:dd:e4:19:59:77:7a:ac: 2b:f3:30:9c -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgISAZt26xjgZk3NxlJthAXg6LoZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZmMxZDZiZTNiYTc4OWM1ZGFlYjU5N2ExMzVkZTVlY2NjYWI4Zjk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp++n1Iv6YUwimHpsm2GyFxBto5Yk +rnSPjbILlVQPQcLOd6X26KvAxrjQVUYQjo0Ac1T8WBVeDImRCmWuHGcyW9JnaiP mpqsramvltIpr/5Gi4xuH7CK6gr59SL9i8j2OvkCEAwPzamItlvwftoIrRwgCH03 JoTMHC8kUCPnP9z2oYuo+X0roux1pFzyJ0YMa9d0/sVhXl3PgPd78FH4a70XaEFV Mr1O+BLiYhHeetPy+FsBL+qhDDJS2IPRBd1G8tPJpzK3vAkdByVkPl9CZ52M7l1e JtEEO9z6TdcxNrOACqorsQNQa8Qk7IzwNnmOVJcscQ/tWecF6bYJ6kdQWwIDAQAB o4ICijCCAoYwHQYDVR0OBBYEFI/B1r47p4nF2utZehNd5ezMq4+VMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E2LzQ0ZWU4 ZC0yYWU4LTQ4NDQtYTkzNS1kMjRjMmNlMjNhYjcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTYvNDRlZThk LTJhZTgtNDg0NC1hOTM1LWQyNGMyY2UyM2FiNy8xL2o4SFd2anVuaWNYYTYxbDZF MTNsN015cmo1VS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQAwS49AwQAwWhsMA0GCSqGSIb3DQEBCwUAA4IB AQB+OS8C5EMg14L4gbSst4Wn73oCBtK8DG+5u4pogOFVw2gJooVAtIOSDq9ssoht rMEbUaBIYi7gJ82DXBWqRhY30RNFJR64BkQV9g7+afwBTiK6ewSIBeBMQNBSy1ks jP1mJroc/XwBeGN9khwG7/PR94sAMYr5OSfQ0Dhqstz8VU4+M004JLN9N6gY901I jqh8v9TXjdDt93jVtNPMV5m4ooejQAC7z0Slgf3fSD+h/NJY+FiRo+Fw3v7kBuVU QPxon0PmJU7TnXkr2W4Cm31cIEtwtb3esfyX/DHL1RhYoqWx6tGPrhVx8rhuyK8f uL6qtqgGgd3kGVl3eqwr8zCc -----END CERTIFICATE-----Generated at Mon Feb 9 15:08:03 2026 by rpki-client