This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jDDYlvLF0HcPuNHJFAsFnxn_bOk.cer File: jDDYlvLF0HcPuNHJFAsFnxn_bOk.cer (raw, json) Hash identifier: Hy65SF9+VyMINoa3EPBDSVvJuKA48HQOm5kRlfDmoIM= Subject key identifier: 8C:30:D8:96:F2:C5:D0:77:0F:B8:D1:C9:14:0B:05:9F:19:FF:6C:E9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BFF0DDC6D8A7E842396F71EC3CCDD9002 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/68/d68f7b-2df7-4aff-bd16-7624dd6d7d30/1/jDDYlvLF0HcPuNHJFAsFnxn_bOk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/68/d68f7b-2df7-4aff-bd16-7624dd6d7d30/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Tue 27 Jan 2026 10:44:17 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 212399 IP: 185.209.242.0/24 IP: 2a10:f200::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 29 Jan 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ff:0d:dc:6d:8a:7e:84:23:96:f7:1e:c3:cc:dd:90:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 27 10:44:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8c30d896f2c5d0770fb8d1c9140b059f19ff6ce9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:97:09:f5:29:3e:4d:94:8d:c9:1b:af:7e:87: 1d:e2:38:79:82:fe:45:15:fb:af:51:fa:98:57:c2: e4:01:71:1d:11:27:33:d6:4c:b1:21:50:e2:ab:4f: e0:63:64:cd:09:ff:35:a5:a1:f5:2b:b3:c2:f6:ab: 4b:d5:c3:a8:c6:9a:f2:a1:9d:49:98:88:2a:c4:2c: 85:5d:55:6f:58:6d:91:dd:34:db:8d:13:1b:fb:a3: 8e:c6:7f:aa:a0:1b:38:f3:52:bb:55:28:44:ef:67: e4:c4:e1:75:ea:41:65:8a:99:6f:c5:70:0c:67:0d: 8f:1a:3e:3e:60:f9:ed:5f:cd:99:b9:6a:02:41:10: 70:41:9d:9e:26:49:fa:f5:f4:87:40:7c:fe:a2:52: 90:bf:4c:fb:0f:55:df:21:2a:b7:33:21:05:b1:23: 56:58:ba:32:82:51:dc:b1:18:89:cf:79:c2:16:f4: 6c:fd:ef:87:6f:c5:f2:70:bc:46:74:27:36:59:02: 10:72:58:b4:b2:df:46:76:9b:fb:de:11:b9:92:54: e2:66:b9:52:a0:17:cf:86:d8:23:2f:e5:a2:fd:6d: ce:5a:87:4d:6b:ea:15:ce:a2:56:a9:29:87:28:e7: 96:5f:35:8e:61:86:26:50:b9:49:64:42:55:05:41: 34:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:30:D8:96:F2:C5:D0:77:0F:B8:D1:C9:14:0B:05:9F:19:FF:6C:E9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/d68f7b-2df7-4aff-bd16-7624dd6d7d30/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/d68f7b-2df7-4aff-bd16-7624dd6d7d30/1/jDDYlvLF0HcPuNHJFAsFnxn_bOk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.209.242.0/24 IPv6: 2a10:f200::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 212399 Signature Algorithm: sha256WithRSAEncryption 8b:d4:22:c1:1f:2e:70:9a:4f:b4:10:f7:81:b0:e8:0b:32:f9: 4e:46:d0:d8:6b:1e:97:e9:de:00:75:8d:a0:3c:f0:55:ed:56: 45:19:8a:e8:6e:8d:ea:1e:04:cf:b9:34:18:b1:f5:62:31:4b: ef:2b:e5:c2:21:1c:64:6f:12:15:09:e3:ea:9c:60:14:34:db: 3c:09:dc:d4:b2:27:54:e6:60:3d:db:d1:d1:33:af:f2:15:17: fe:db:16:f6:1b:c4:09:29:61:af:11:07:8b:44:47:97:37:0d: ad:44:97:e4:ef:76:19:e0:c6:fa:a8:67:d2:28:33:53:5a:4b: 3e:ce:b3:d2:62:56:2b:6a:af:05:85:b9:47:1b:7a:fa:63:d4: ff:ae:1e:25:35:f0:76:5b:e3:a6:69:cb:fd:c9:7c:69:df:e5: 46:a4:74:81:d4:b6:2d:b9:37:c2:a1:c2:99:14:87:c1:37:9e: 4e:18:74:94:57:95:62:6e:bc:07:32:4f:a8:57:1e:f3:99:57: 1b:05:29:80:af:8e:8b:cd:bd:dc:07:db:83:f8:d7:63:d1:56: 01:7c:b7:7e:4b:c1:2f:f0:e7:59:be:b5:6d:6f:dd:11:fa:f3: c2:c1:41:bf:ea:fe:d0:70:d3:6b:52:28:16:65:3b:6b:20:48: 07:d3:5f:03 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZv/Ddxtin6EI5b3HsPM3ZACMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTI3MTA0NDE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YzMwZDg5NmYyYzVkMDc3MGZiOGQxYzkxNDBiMDU5ZjE5ZmY2Y2U5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppcJ9Sk+TZSNyRuvfocd4jh5gv5F FfuvUfqYV8LkAXEdEScz1kyxIVDiq0/gY2TNCf81paH1K7PC9qtL1cOoxpryoZ1J mIgqxCyFXVVvWG2R3TTbjRMb+6OOxn+qoBs481K7VShE72fkxOF16kFliplvxXAM Zw2PGj4+YPntX82ZuWoCQRBwQZ2eJkn69fSHQHz+olKQv0z7D1XfISq3MyEFsSNW WLoyglHcsRiJz3nCFvRs/e+Hb8XycLxGdCc2WQIQcli0st9Gdpv73hG5klTiZrlS oBfPhtgjL+Wi/W3OWodNa+oVzqJWqSmHKOeWXzWOYYYmULlJZEJVBUE0eQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFIww2JbyxdB3D7jRyRQLBZ8Z/2zpMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY4L2Q2OGY3 Yi0yZGY3LTRhZmYtYmQxNi03NjI0ZGQ2ZDdkMzAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjgvZDY4Zjdi LTJkZjctNGFmZi1iZDE2LTc2MjRkZDZkN2QzMC8xL2pERFlsdkxGMEhjUHVOSEpG QXNGbnhuX2JPay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAudHyMA0EAgACMAcDBQMqEPIAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM9rzANBgkqhkiG9w0BAQsFAAOCAQEAi9QiwR8ucJpP tBD3gbDoCzL5TkbQ2Gsel+neAHWNoDzwVe1WRRmK6G6N6h4Ez7k0GLH1YjFL7yvl wiEcZG8SFQnj6pxgFDTbPAnc1LInVOZgPdvR0TOv8hUX/tsW9hvECSlhrxEHi0RH lzcNrUSX5O92GeDG+qhn0igzU1pLPs6z0mJWK2qvBYW5Rxt6+mPU/64eJTXwdlvj pmnL/cl8ad/lRqR0gdS2Lbk3wqHCmRSHwTeeThh0lFeVYm68BzJPqFce85lXGwUp gK+Oi8293Afbg/jXY9FWAXy3fkvBL/DnWb61bW/dEfrzwsFBv+r+0HDTa1IoFmU7 ayBIB9NfAw== -----END CERTIFICATE-----Generated at Wed Jan 28 18:28:52 2026 by rpki-client