This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jCgv8-x8uBt45iinNRdkjWIpyrc.cer File: jCgv8-x8uBt45iinNRdkjWIpyrc.cer (raw, json) Hash identifier: 0Kfb8RCrR8xIk+hXMIeQdqqr3K71LZ3fofQWR40zp4E= Subject key identifier: 8C:28:2F:F3:EC:7C:B8:1B:78:E6:28:A7:35:17:64:8D:62:29:CA:B7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F84FF060C1B2A8F06D33761B6DBB65D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fb/9f5f13-8f97-4210-acae-6ca3e9d3e78d/1/jCgv8-x8uBt45iinNRdkjWIpyrc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fb/9f5f13-8f97-4210-acae-6ca3e9d3e78d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:23:01 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.180.96.0/22 IP: 195.137.169.0/24 IP: 2a0b:6d80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Feb 2026 08:50:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:ff:06:0c:1b:2a:8f:06:d3:37:61:b6:db:b6:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:23:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8c282ff3ec7cb81b78e628a73517648d6229cab7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:7a:a7:6e:d4:e8:4d:9e:85:69:d2:10:88:1e: af:c6:48:4b:5d:20:f9:3a:32:63:f8:3c:4f:71:ee: e3:0f:b4:c4:88:08:51:ff:f0:fb:ce:58:89:6a:40: e0:f8:9f:27:55:c8:7d:8e:6f:5c:f9:d6:1f:41:e0: b3:ac:8f:29:c8:4d:d9:37:ff:f2:c1:8a:16:06:8c: 7a:33:37:48:55:b4:c2:7c:93:ad:cd:8c:c0:83:90: 1d:15:79:09:cf:d4:50:4b:3c:60:7e:01:53:a1:f3: 2e:cd:b6:a1:6c:87:6d:dd:01:2b:a5:5f:39:48:1c: c6:c6:a3:5c:84:bd:d3:27:71:af:fb:07:df:7e:41: b3:e2:32:1e:43:4e:c6:f1:fd:61:d5:d6:fd:23:30: 58:47:7b:81:ae:da:ae:ee:db:43:ea:75:75:f1:e3: 9b:57:a5:e3:da:d8:d2:13:52:4c:1f:06:9f:09:83: 5b:33:16:ee:a0:b5:e8:40:a2:89:56:1c:77:4e:d6: e9:9f:d6:ad:1e:b0:9d:b8:4a:04:9b:77:e8:79:91: 83:0c:ef:cd:9e:b7:56:5a:b7:50:eb:29:4c:f0:09: 46:25:66:93:73:c0:f9:b4:b3:19:bc:de:c1:b8:ee: 8a:41:69:8c:11:81:98:4a:47:07:ee:47:7c:61:5e: 51:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:28:2F:F3:EC:7C:B8:1B:78:E6:28:A7:35:17:64:8D:62:29:CA:B7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9f5f13-8f97-4210-acae-6ca3e9d3e78d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9f5f13-8f97-4210-acae-6ca3e9d3e78d/1/jCgv8-x8uBt45iinNRdkjWIpyrc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.180.96.0/22 195.137.169.0/24 IPv6: 2a0b:6d80::/29 Signature Algorithm: sha256WithRSAEncryption 54:a6:e0:fe:cd:0b:1f:a4:2f:f7:d1:b1:fc:91:c2:32:68:c6: 06:49:f8:58:2d:da:8a:94:29:ff:38:d0:8c:75:b3:f9:ff:12: d8:03:fb:0c:40:5e:75:79:b7:b1:20:65:3a:5a:95:c8:77:11: 23:9e:7c:f4:94:3f:f3:de:86:79:8f:d3:33:c6:60:4e:46:13: 34:0a:3e:1b:e8:72:1e:e4:6c:2c:94:cd:fb:c2:ab:00:95:16: 0c:77:69:34:09:da:3a:37:0c:b8:b4:03:5f:b8:b9:55:e2:e2: 93:b7:1c:ac:2f:a8:3f:ef:a2:54:24:02:a1:91:19:77:b4:90: 68:43:7a:f0:69:2b:1a:a7:24:e6:9b:61:a7:79:e7:a5:bb:74: 43:3d:b6:44:d9:9d:69:f9:ae:ff:86:d0:7c:66:79:ca:dc:fc: 1f:33:8d:8e:45:8b:a0:bb:f7:52:09:ad:6e:b4:f6:1b:9b:00: ae:40:7a:f9:54:da:57:36:6d:3f:37:97:16:b8:e6:7b:17:6d: e4:21:d9:85:62:27:87:74:62:25:29:2f:f6:a6:08:c5:ef:7e: a4:56:d9:45:4a:02:56:03:89:58:76:f5:13:c8:c8:ec:e7:7c: 02:7e:69:63:a0:e9:05:a4:57:f1:90:06:77:16:91:71:2e:97: db:e8:35:71 -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgISAZt/hP8GDBsqjwbTN2G227ZdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMzAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YzI4MmZmM2VjN2NiODFiNzhlNjI4YTczNTE3NjQ4ZDYyMjljYWI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9HqnbtToTZ6FadIQiB6vxkhLXSD5 OjJj+DxPce7jD7TEiAhR//D7zliJakDg+J8nVch9jm9c+dYfQeCzrI8pyE3ZN//y wYoWBox6MzdIVbTCfJOtzYzAg5AdFXkJz9RQSzxgfgFTofMuzbahbIdt3QErpV85 SBzGxqNchL3TJ3Gv+wfffkGz4jIeQ07G8f1h1db9IzBYR3uBrtqu7ttD6nV18eOb V6Xj2tjSE1JMHwafCYNbMxbuoLXoQKKJVhx3Ttbpn9atHrCduEoEm3foeZGDDO/N nrdWWrdQ6ylM8AlGJWaTc8D5tLMZvN7BuO6KQWmMEYGYSkcH7kd8YV5RhwIDAQAB o4ICmTCCApUwHQYDVR0OBBYEFIwoL/PsfLgbeOYopzUXZI1iKcq3MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZiLzlmNWYx My04Zjk3LTQyMTAtYWNhZS02Y2EzZTlkM2U3OGQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmIvOWY1ZjEz LThmOTctNDIxMC1hY2FlLTZjYTNlOWQzZTc4ZC8xL2pDZ3Y4LXg4dUJ0NDVpaW5O UmRraldJcHlyYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCubRgAwQAw4mpMA0EAgACMAcDBQMqC22AMA0G CSqGSIb3DQEBCwUAA4IBAQBUpuD+zQsfpC/30bH8kcIyaMYGSfhYLdqKlCn/ONCM dbP5/xLYA/sMQF51ebexIGU6WpXIdxEjnnz0lD/z3oZ5j9MzxmBORhM0Cj4b6HIe 5GwslM37wqsAlRYMd2k0Cdo6Nwy4tANfuLlV4uKTtxysL6g/76JUJAKhkRl3tJBo Q3rwaSsapyTmm2Gneeelu3RDPbZE2Z1p+a7/htB8ZnnK3PwfM42ORYugu/dSCa1u tPYbmwCuQHr5VNpXNm0/N5cWuOZ7F23kIdmFYieHdGIlKS/2pgjF736kVtlFSgJW A4lYdvUTyMjs53wCfmljoOkFpFfxkAZ3FpFxLpfb6DVx -----END CERTIFICATE-----Generated at Wed Feb 4 10:55:49 2026 by rpki-client