This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jD9Tj4oB7dCnawCLTUXUH2eCG9I.cer File: jD9Tj4oB7dCnawCLTUXUH2eCG9I.cer (raw, json) Hash identifier: 0tsX6PXl0CMItrhyF+3taLIHtrbt7Mtp/Hiw3QJRNDA= Subject key identifier: 8C:3F:53:8F:8A:01:ED:D0:A7:6B:00:8B:4D:45:D4:1F:67:82:1B:D2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F15AA37CD906CB3739AB1EDE0473652 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6e/a1882e-0c4c-4696-885d-cd6a503163d6/1/jD9Tj4oB7dCnawCLTUXUH2eCG9I.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6e/a1882e-0c4c-4696-885d-cd6a503163d6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:24 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.25.92.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:aa:37:cd:90:6c:b3:73:9a:b1:ed:e0:47:36:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8c3f538f8a01edd0a76b008b4d45d41f67821bd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:0a:2f:a0:13:13:94:96:2d:80:c7:29:56:db: fc:4c:c7:08:f6:8f:90:1d:6a:c9:f6:bc:7c:c8:3d: 18:a6:51:fa:96:38:32:a0:20:b2:bf:e1:da:9b:3b: d9:09:e8:6e:91:de:3f:34:9c:b3:8c:02:3e:f7:b2: 71:e1:db:73:03:76:8f:8a:74:c2:57:15:9a:03:8f: 9b:c1:48:e9:85:e5:cf:9f:61:cd:4e:8b:10:16:85: 38:c4:4c:29:04:24:23:4c:96:fb:ca:b9:8c:60:d1: 97:84:bf:96:1e:a0:48:25:b3:2f:d4:83:ce:11:ac: 3a:72:bd:2b:b6:12:e7:e3:a9:16:4d:53:cf:d3:47: 5b:56:5b:5e:90:53:ea:2e:e5:74:2a:9a:91:40:d8: 20:ca:81:c3:73:dc:01:88:31:2a:0f:f8:b3:3c:11: 39:f5:e8:24:53:a6:99:48:34:93:04:b3:f3:52:a1: 79:ea:3d:1d:d5:a7:e8:58:ae:ef:4d:a6:bb:91:67: c1:ad:41:cf:8b:fb:3b:e1:c7:d9:09:e5:ce:4a:ae: ef:df:bf:d9:d7:3c:04:74:96:d2:d8:32:dc:13:b4: 3e:88:d1:6e:9e:b2:ce:66:77:35:e8:c6:ee:36:62: 4e:f6:78:e2:34:58:00:bc:f5:d6:81:43:d5:37:35: 67:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:3F:53:8F:8A:01:ED:D0:A7:6B:00:8B:4D:45:D4:1F:67:82:1B:D2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a1882e-0c4c-4696-885d-cd6a503163d6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a1882e-0c4c-4696-885d-cd6a503163d6/1/jD9Tj4oB7dCnawCLTUXUH2eCG9I.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.25.92.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:58:98:31:4c:dc:47:f8:40:51:67:1c:36:24:c0:62:e5:31: f2:9d:1e:82:fd:9f:e3:34:71:8e:76:73:a1:d8:38:5f:a3:43: a3:30:6d:71:33:b5:d4:7d:ab:b9:b8:cd:4a:64:0a:15:18:1c: 8a:24:10:9b:31:d2:f5:56:da:4f:0d:48:86:42:fe:d4:3f:5a: 4b:c2:0f:9f:5b:63:0f:94:7b:97:9c:ea:b7:12:69:5e:fb:76: d6:c6:3c:96:bd:0d:58:1c:8d:5e:34:ad:8a:0c:cc:25:c7:c9: 17:05:64:6b:d5:eb:81:f1:74:1d:f6:8f:20:8e:ed:20:d3:93: 6b:b0:72:b2:00:a4:25:09:84:c9:04:d9:5d:d0:bf:f5:c2:be: 75:7b:6e:86:e1:1e:ef:ee:a6:8e:a7:22:5f:37:5a:c2:c5:13: cd:97:52:77:99:68:dd:84:21:00:86:b9:c3:a0:e3:ea:f8:8f: c7:fc:e9:c9:19:99:dc:ed:7a:f5:d5:50:34:62:b5:16:cc:c6: ac:3a:87:de:81:4a:70:d9:59:68:1f:6b:29:92:d9:ff:41:86: 31:4c:52:9e:b5:48:31:cb:3a:30:ef:34:df:a5:cd:83:c2:09: f3:d9:86:12:ab:16:1d:93:c7:30:84:ae:79:b5:63:ac:c0:af: 57:c1:38:f1 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt/Fao3zZBss3Oase3gRzZSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YzNmNTM4ZjhhMDFlZGQwYTc2YjAwOGI0ZDQ1ZDQxZjY3ODIxYmQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwovoBMTlJYtgMcpVtv8TMcI9o+Q HWrJ9rx8yD0YplH6ljgyoCCyv+HamzvZCehukd4/NJyzjAI+97Jx4dtzA3aPinTC VxWaA4+bwUjpheXPn2HNTosQFoU4xEwpBCQjTJb7yrmMYNGXhL+WHqBIJbMv1IPO Eaw6cr0rthLn46kWTVPP00dbVltekFPqLuV0KpqRQNggyoHDc9wBiDEqD/izPBE5 9egkU6aZSDSTBLPzUqF56j0d1afoWK7vTaa7kWfBrUHPi/s74cfZCeXOSq7v37/Z 1zwEdJbS2DLcE7Q+iNFunrLOZnc16MbuNmJO9njiNFgAvPXWgUPVNzVnvwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFIw/U4+KAe3Qp2sAi01F1B9nghvSMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZlL2ExODgy ZS0wYzRjLTQ2OTYtODg1ZC1jZDZhNTAzMTYzZDYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmUvYTE4ODJl LTBjNGMtNDY5Ni04ODVkLWNkNmE1MDMxNjNkNi8xL2pEOVRqNG9CN2RDbmF3Q0xU VVhVSDJlQ0c5SS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAuRlcMA0GCSqGSIb3DQEBCwUAA4IBAQAeWJgx TNxH+EBRZxw2JMBi5THynR6C/Z/jNHGOdnOh2Dhfo0OjMG1xM7XUfau5uM1KZAoV GByKJBCbMdL1VtpPDUiGQv7UP1pLwg+fW2MPlHuXnOq3Emle+3bWxjyWvQ1YHI1e NK2KDMwlx8kXBWRr1euB8XQd9o8gju0g05NrsHKyAKQlCYTJBNld0L/1wr51e26G 4R7v7qaOpyJfN1rCxRPNl1J3mWjdhCEAhrnDoOPq+I/H/OnJGZnc7Xr11VA0YrUW zMasOofegUpw2VloH2spktn/QYYxTFKetUgxyzow7zTfpc2Dwgnz2YYSqxYdk8cw hK55tWOswK9XwTjx -----END CERTIFICATE-----Generated at Mon Feb 9 18:24:35 2026 by rpki-client