This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jAfs12ZszvkegvfsvOC6KFM2-0U.cer File: jAfs12ZszvkegvfsvOC6KFM2-0U.cer (raw, json) Hash identifier: mlox6G18jDiYuz5qD+SW3C78jmni6PtrI19dgKP3WWQ= Subject key identifier: 8C:07:EC:D7:66:6C:CE:F9:1E:82:F7:EC:BC:E0:BA:28:53:36:FB:45 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA44D866E355F63AE218DC4C7DC181D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/73/848406-5826-4dbc-b93e-5d27c75aae6f/1/jAfs12ZszvkegvfsvOC6KFM2-0U.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/73/848406-5826-4dbc-b93e-5d27c75aae6f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:18:43 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 48303 IP: 185.199.104.0/22 IP: 2a0a:9bc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:4d:86:6e:35:5f:63:ae:21:8d:c4:c7:dc:18:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8c07ecd7666ccef91e82f7ecbce0ba285336fb45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:2c:34:50:fb:99:e9:e1:db:3c:86:c6:75:68: 81:c9:86:39:ec:6f:69:f5:4b:30:a1:5b:37:63:bf: cc:ca:f0:44:56:36:a1:39:48:d3:d4:6f:54:60:8d: 73:67:de:33:f2:7d:ed:9e:4e:f0:4a:c8:78:23:2a: 20:f3:03:f4:b4:bb:dc:f1:42:75:e2:d1:74:91:aa: e3:8a:38:c7:13:41:55:bd:98:43:ef:91:51:20:52: e5:e0:5a:e2:aa:ea:1a:18:b5:ae:7f:ba:e5:19:48: de:d8:3f:62:63:68:bd:11:04:cb:a6:72:6a:8c:f0: 63:a5:60:f4:fc:40:1e:26:db:26:30:af:74:d5:d4: b7:4e:e4:bc:f1:26:eb:b6:57:02:2d:00:31:89:16: bc:be:70:b5:48:d6:ae:c3:89:e8:19:01:3c:ef:8a: 41:95:ac:21:2d:c7:b4:dc:90:11:28:9d:c5:de:06: 6c:96:be:99:ea:5d:52:a0:1c:59:47:37:cb:90:27: 37:bc:a7:f6:0c:08:85:31:00:94:8f:6f:d2:a0:5d: 1b:92:89:49:6e:45:2b:33:e2:bc:97:14:3e:3d:d9: 3d:30:3d:f0:39:7b:60:e9:45:1f:61:cb:1f:ec:b4: 57:27:f3:d9:18:4e:c9:36:b6:cf:52:69:5f:b5:dd: 62:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:07:EC:D7:66:6C:CE:F9:1E:82:F7:EC:BC:E0:BA:28:53:36:FB:45 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/848406-5826-4dbc-b93e-5d27c75aae6f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/848406-5826-4dbc-b93e-5d27c75aae6f/1/jAfs12ZszvkegvfsvOC6KFM2-0U.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.199.104.0/22 IPv6: 2a0a:9bc0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 48303 Signature Algorithm: sha256WithRSAEncryption 6f:f4:49:48:65:07:56:ce:45:ff:36:e5:e4:73:f1:28:05:9e: e7:79:f5:5b:64:fe:3c:26:08:0f:4a:e4:90:42:b8:45:d2:5a: 09:fd:1c:d8:36:36:6d:f9:03:c2:b7:96:0b:a0:14:e1:b9:c3: 98:5a:9c:19:b3:f8:b3:6b:c3:00:59:5e:d1:e9:a3:20:57:74: 99:7d:5c:cc:83:bb:ec:cf:76:80:ac:a2:e0:c9:45:30:48:c4: a7:2d:bd:ee:d1:67:da:04:a3:c9:88:51:79:cf:25:b2:ad:a5: 1e:5b:58:53:cb:7a:df:56:6b:fa:4c:0f:9c:cf:9b:c9:bf:08: c1:08:36:1d:99:4e:55:ad:41:40:5c:e3:53:a2:bc:a6:ea:02: fc:65:60:b0:80:ec:24:3c:c1:fd:49:1b:66:7a:50:a7:a6:87: 8e:34:d4:21:d3:38:da:0b:4f:4c:4c:60:b7:e0:75:59:28:c2: 1b:3b:40:98:c6:31:4a:98:44:00:d9:de:4d:ec:32:6d:e1:d6: 87:b3:24:ba:06:b9:49:fa:f2:0a:ee:b7:ec:59:f5:ca:bb:c5: 5a:aa:20:83:88:b7:5e:e1:d5:49:f7:09:cb:a2:3e:b4:32:2a: 09:5c:ba:c1:53:1d:fc:6e:16:12:14:54:00:50:50:f1:e0:fb: 37:10:c8:7e -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt7pE2GbjVfY64hjcTH3BgdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YzA3ZWNkNzY2NmNjZWY5MWU4MmY3ZWNiY2UwYmEyODUzMzZmYjQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoiw0UPuZ6eHbPIbGdWiByYY57G9p 9UswoVs3Y7/MyvBEVjahOUjT1G9UYI1zZ94z8n3tnk7wSsh4Iyog8wP0tLvc8UJ1 4tF0karjijjHE0FVvZhD75FRIFLl4FriquoaGLWuf7rlGUje2D9iY2i9EQTLpnJq jPBjpWD0/EAeJtsmMK901dS3TuS88SbrtlcCLQAxiRa8vnC1SNauw4noGQE874pB lawhLce03JARKJ3F3gZslr6Z6l1SoBxZRzfLkCc3vKf2DAiFMQCUj2/SoF0bkolJ bkUrM+K8lxQ+Pdk9MD3wOXtg6UUfYcsf7LRXJ/PZGE7JNrbPUmlftd1iZQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFIwH7NdmbM75HoL37LzguihTNvtFMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzczLzg0ODQw Ni01ODI2LTRkYmMtYjkzZS01ZDI3Yzc1YWFlNmYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzMvODQ4NDA2 LTU4MjYtNGRiYy1iOTNlLTVkMjdjNzVhYWU2Zi8xL2pBZnMxMlpzenZrZWd2ZnN2 T0M2S0ZNMi0wVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCucdoMA0EAgACMAcDBQMqCpvAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwC8rzANBgkqhkiG9w0BAQsFAAOCAQEAb/RJSGUHVs5F /zbl5HPxKAWe53n1W2T+PCYID0rkkEK4RdJaCf0c2DY2bfkDwreWC6AU4bnDmFqc GbP4s2vDAFle0emjIFd0mX1czIO77M92gKyi4MlFMEjEpy297tFn2gSjyYhRec8l sq2lHltYU8t631Zr+kwPnM+byb8IwQg2HZlOVa1BQFzjU6K8puoC/GVgsIDsJDzB /UkbZnpQp6aHjjTUIdM42gtPTExgt+B1WSjCGztAmMYxSphEANneTewybeHWh7Mk uga5SfryCu637Fn1yrvFWqogg4i3XuHVSfcJy6I+tDIqCVy6wVMd/G4WEhRUAFBQ 8eD7NxDIfg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:51:01 2026 by rpki-client