This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jAg2PlwQZ60YjDgDkLCdCaYqFwk.cer File: jAg2PlwQZ60YjDgDkLCdCaYqFwk.cer (raw, json) Hash identifier: oIg4RcDgnGLg7c54DAWqXq9uurIwZxVD01H0F1iVI18= Subject key identifier: 8C:08:36:3E:5C:10:67:AD:18:8C:38:03:90:B0:9D:09:A6:2A:17:09 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F15690E40A54B65175A5E4309DF20A6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9d/e93311-fc3b-41bd-8cc6-b87ab6b0a029/1/jAg2PlwQZ60YjDgDkLCdCaYqFwk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9d/e93311-fc3b-41bd-8cc6-b87ab6b0a029/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:08 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 203.13.32.0/24 IP: 203.17.126.0/24 IP: 203.22.223.0/24 IP: 203.23.104.0/24 IP: 203.23.106.0/24 IP: 203.24.108.0/24 IP: 203.28.8.0/23 IP: 203.29.53.0/24 IP: 2a05:7880::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:69:0e:40:a5:4b:65:17:5a:5e:43:09:df:20:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8c08363e5c1067ad188c380390b09d09a62a1709 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ca:28:49:e6:65:5a:cd:29:00:45:fa:00:6c: cc:10:25:c1:e4:9d:61:c4:fb:07:ef:2c:37:ad:97: 08:83:4c:49:b6:eb:2f:43:50:66:fd:29:cd:1c:c1: 4e:83:f9:bf:80:9d:43:5b:3d:0e:69:1c:fc:f1:3e: 9b:ed:76:80:5d:68:46:56:09:5e:d0:a9:98:5c:b5: c4:ca:ba:c1:97:6c:e6:5e:62:39:cf:5c:c2:c4:ea: 25:b5:f6:22:53:55:d6:e7:c6:b7:b2:e0:0e:aa:32: dd:57:a4:3e:75:fb:14:b6:1a:39:8f:26:2e:cd:b1: 09:e5:fb:a5:74:93:48:73:91:67:14:a6:24:ab:64: 8d:6a:d8:1a:8f:c2:42:2c:0c:75:2c:c2:ca:87:69: f5:56:12:7c:8c:43:73:59:ab:3a:d3:5f:e2:c6:be: 70:66:af:20:19:04:b4:50:7e:6d:30:48:03:f1:f3: a6:1e:3d:40:10:51:f0:03:11:81:0a:a3:b2:93:64: 25:c3:86:b0:90:f5:bc:f5:c0:f0:b1:65:40:b4:d9: 4c:e2:5e:ce:30:76:89:15:93:ba:dc:c7:fe:77:12: f2:2d:86:fb:3c:91:fd:2f:21:df:79:d6:2d:47:a3: 68:90:17:b8:bc:53:b8:48:02:98:18:da:36:5d:56: 82:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:08:36:3E:5C:10:67:AD:18:8C:38:03:90:B0:9D:09:A6:2A:17:09 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/e93311-fc3b-41bd-8cc6-b87ab6b0a029/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/e93311-fc3b-41bd-8cc6-b87ab6b0a029/1/jAg2PlwQZ60YjDgDkLCdCaYqFwk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.13.32.0/24 203.17.126.0/24 203.22.223.0/24 203.23.104.0/24 203.23.106.0/24 203.24.108.0/24 203.28.8.0/23 203.29.53.0/24 IPv6: 2a05:7880::/32 Signature Algorithm: sha256WithRSAEncryption 9c:3d:72:35:dd:66:ec:5d:d1:a5:0f:d7:ef:e3:ae:8d:c5:f0: 35:6a:72:bb:b5:87:d5:bd:fa:7e:f3:d9:4d:a9:6b:48:91:25: da:1d:5e:2f:20:19:32:5f:d7:c0:4d:60:ae:99:95:59:c5:f0: c9:c6:06:ea:48:fd:33:38:61:02:7e:71:0d:3d:34:06:44:49: 1e:98:36:3c:80:c7:b1:64:d0:bc:77:77:c3:33:c7:13:07:3d: ef:e2:ce:71:8a:57:1f:a6:5c:84:91:a6:cb:79:d9:9f:11:4a: 66:4e:e6:c3:4a:cb:ab:c9:50:b5:29:45:31:61:2c:c9:02:f3: c4:f2:a1:82:13:77:d0:2b:d7:d5:66:b4:8d:0e:bf:8f:fd:99: da:5c:c3:78:ff:ae:7d:db:3d:84:6d:9c:86:9d:99:bc:82:ba: ae:4c:ce:c4:df:84:92:f6:e1:4e:52:c6:a0:37:bf:72:d4:3e: 40:18:2c:85:20:c6:bd:ac:08:73:d7:40:83:90:d7:fb:61:32: 03:31:c9:82:ee:47:86:e2:d4:43:bc:98:78:7d:b3:ab:80:2a: 0b:40:de:00:8a:95:6b:c9:95:e3:ca:03:96:13:ea:62:c7:99: 92:a5:38:e8:fe:99:4f:56:27:51:2e:78:e3:df:e3:c3:ad:0d: 8d:94:02:36 -----BEGIN CERTIFICATE----- MIIFsTCCBJmgAwIBAgISAZt/FWkOQKVLZRdaXkMJ3yCmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YzA4MzYzZTVjMTA2N2FkMTg4YzM4MDM5MGIwOWQwOWE2MmExNzA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMooSeZlWs0pAEX6AGzMECXB5J1h xPsH7yw3rZcIg0xJtusvQ1Bm/SnNHMFOg/m/gJ1DWz0OaRz88T6b7XaAXWhGVgle 0KmYXLXEyrrBl2zmXmI5z1zCxOoltfYiU1XW58a3suAOqjLdV6Q+dfsUtho5jyYu zbEJ5fuldJNIc5FnFKYkq2SNatgaj8JCLAx1LMLKh2n1VhJ8jENzWas601/ixr5w Zq8gGQS0UH5tMEgD8fOmHj1AEFHwAxGBCqOyk2Qlw4awkPW89cDwsWVAtNlM4l7O MHaJFZO63Mf+dxLyLYb7PJH9LyHfedYtR6NokBe4vFO4SAKYGNo2XVaCxwIDAQAB o4ICvTCCArkwHQYDVR0OBBYEFIwINj5cEGetGIw4A5CwnQmmKhcJMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzlkL2U5MzMx MS1mYzNiLTQxYmQtOGNjNi1iODdhYjZiMGEwMjkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWQvZTkzMzEx LWZjM2ItNDFiZC04Y2M2LWI4N2FiNmIwYTAyOS8xL2pBZzJQbHdRWjYwWWpEZ0Rr TENkQ2FZcUZ3ay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFgGCCsGAQUF BwEHAQH/BEkwRzA2BAIAATAwAwQAyw0gAwQAyxF+AwQAyxbfAwQAyxdoAwQAyxdq AwQAyxhsAwQByxwIAwQAyx01MA0EAgACMAcDBQAqBXiAMA0GCSqGSIb3DQEBCwUA A4IBAQCcPXI13WbsXdGlD9fv466NxfA1anK7tYfVvfp+89lNqWtIkSXaHV4vIBky X9fATWCumZVZxfDJxgbqSP0zOGECfnENPTQGREkemDY8gMexZNC8d3fDM8cTBz3v 4s5xilcfplyEkabLedmfEUpmTubDSsuryVC1KUUxYSzJAvPE8qGCE3fQK9fVZrSN Dr+P/ZnaXMN4/6592z2EbZyGnZm8grquTM7E34SS9uFOUsagN79y1D5AGCyFIMa9 rAhz10CDkNf7YTIDMcmC7keG4tRDvJh4fbOrgCoLQN4AipVryZXjygOWE+pix5mS pTjo/plPVidRLnjj3+PDrQ2NlAI2 -----END CERTIFICATE-----Generated at Tue Feb 10 00:11:42 2026 by rpki-client