This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jDPdzqsVS99j54n0RDSErVVIZkw.cer File: jDPdzqsVS99j54n0RDSErVVIZkw.cer (raw, json) Hash identifier: XYtoB44yYR2bvvt3aXsOTh02EyZfkrj+0H85J+4XWWY= Subject key identifier: 8C:33:DD:CE:AB:15:4B:DF:63:E7:89:F4:44:34:84:AD:55:48:66:4C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797E6FE4EB09B1C22F339AC4E8E6C2C1 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/29/cc4516-1b94-45ab-b161-f2b0fd3c3137/1/jDPdzqsVS99j54n0RDSErVVIZkw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/29/cc4516-1b94-45ab-b161-f2b0fd3c3137/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:07 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 25445 IP: 193.178.184.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:6f:e4:eb:09:b1:c2:2f:33:9a:c4:e8:e6:c2:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8c33ddceab154bdf63e789f4443484ad5548664c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:f5:3b:d3:f2:fb:c9:ce:ab:43:63:f7:9a:18: 4c:0f:50:fe:63:ec:95:20:aa:b9:9e:28:34:e1:ed: 40:a9:de:f0:99:32:91:4d:59:0a:e3:60:ae:7c:91: 17:b2:20:6f:f3:00:19:5f:b7:6e:ff:40:2c:de:72: 99:96:49:81:b3:b6:95:95:c3:b6:f0:9a:8c:02:12: dc:ae:bc:58:2a:35:9a:dd:43:33:36:43:d5:57:53: c5:c1:42:9e:f2:5a:e1:9b:5c:25:2d:b7:8b:65:a4: bd:db:2b:b0:56:58:50:8f:52:05:da:a1:c7:97:87: 27:f8:da:1b:12:c4:b3:f5:90:8b:d4:09:63:8a:57: d1:13:75:4e:b8:22:bc:13:19:f4:94:2b:84:10:a1: 05:98:fe:f2:8a:27:0e:9a:2a:45:7d:72:ed:73:a7: bb:4d:10:b4:29:44:50:56:99:81:49:b8:3e:4d:9b: 51:c1:10:fb:c3:ee:83:4f:1a:17:60:a5:22:1b:66: 6e:95:c6:d2:1f:54:39:34:48:65:87:07:a2:9a:42: d7:82:6b:93:75:71:93:c1:2d:12:73:cc:da:97:be: 5a:95:f4:bc:1a:76:53:9e:67:73:13:c5:db:8a:7e: b3:c3:3c:0d:bc:b3:a4:7e:2a:40:50:5c:ec:07:fb: a8:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:33:DD:CE:AB:15:4B:DF:63:E7:89:F4:44:34:84:AD:55:48:66:4C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc4516-1b94-45ab-b161-f2b0fd3c3137/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc4516-1b94-45ab-b161-f2b0fd3c3137/1/jDPdzqsVS99j54n0RDSErVVIZkw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.178.184.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 25445 Signature Algorithm: sha256WithRSAEncryption 28:1f:a3:57:40:42:2d:e4:52:31:26:12:02:cf:39:64:bf:3b: e5:63:6e:61:b4:7d:18:1a:57:4c:e4:5e:89:8b:ea:9d:93:31: 84:d8:17:67:b0:c2:83:d9:c4:3f:e7:3d:d0:5f:90:06:d6:83: 24:87:37:6c:8f:a2:b5:5d:3a:cf:26:67:65:04:3b:49:ae:5e: 85:f2:c9:4c:27:81:2d:2d:a0:1d:4a:ec:ef:39:6b:ff:da:26: be:7e:95:c4:b5:f2:e9:48:f5:d3:22:bd:8f:6a:03:f1:87:1f: e2:5f:db:35:91:78:ee:f6:92:3f:e0:87:04:b3:3b:59:c8:6b: 15:c7:7f:7b:d6:df:8c:3d:29:e4:be:a2:e5:b0:3b:5d:dc:ca: 9a:43:fe:d3:77:a4:d9:c7:b9:c3:f5:98:79:55:8d:a0:65:0f: d8:b9:cb:52:64:d8:4a:ca:ce:41:2b:4e:b2:f0:b2:5c:fe:04: 9f:2f:51:4a:5a:34:b9:cb:c7:24:8f:6f:16:58:9f:8b:7c:02: 32:29:52:59:7d:a2:36:aa:f9:25:dd:d3:fd:36:71:f0:62:57: 89:30:38:02:85:5c:9e:4f:7b:48:1c:7e:ae:73:1f:84:64:d0: d0:d8:6d:c3:09:28:d1:f0:c6:76:f3:b3:7c:11:a5:77:83:12: d0:f3:af:5e -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISAZt5fm/k6wmxwi8zmsTo5sLBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YzMzZGRjZWFiMTU0YmRmNjNlNzg5ZjQ0NDM0ODRhZDU1NDg2NjRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2fU70/L7yc6rQ2P3mhhMD1D+Y+yV IKq5nig04e1Aqd7wmTKRTVkK42CufJEXsiBv8wAZX7du/0As3nKZlkmBs7aVlcO2 8JqMAhLcrrxYKjWa3UMzNkPVV1PFwUKe8lrhm1wlLbeLZaS92yuwVlhQj1IF2qHH l4cn+NobEsSz9ZCL1AljilfRE3VOuCK8Exn0lCuEEKEFmP7yiicOmipFfXLtc6e7 TRC0KURQVpmBSbg+TZtRwRD7w+6DTxoXYKUiG2ZulcbSH1Q5NEhlhweimkLXgmuT dXGTwS0Sc8zal75alfS8GnZTnmdzE8Xbin6zwzwNvLOkfipAUFzsB/uo7wIDAQAB o4ICnzCCApswHQYDVR0OBBYEFIwz3c6rFUvfY+eJ9EQ0hK1VSGZMMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI5L2NjNDUx Ni0xYjk0LTQ1YWItYjE2MS1mMmIwZmQzYzMxMzcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjkvY2M0NTE2 LTFiOTQtNDVhYi1iMTYxLWYyYjBmZDNjMzEzNy8xL2pEUGR6cXNWUzk5ajU0bjBS RFNFclZWSVprdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwbK4MBkGCCsGAQUFBwEIAQH/BAowCKAGMAQC AmNlMA0GCSqGSIb3DQEBCwUAA4IBAQAoH6NXQEIt5FIxJhICzzlkvzvlY25htH0Y GldM5F6Ji+qdkzGE2BdnsMKD2cQ/5z3QX5AG1oMkhzdsj6K1XTrPJmdlBDtJrl6F 8slMJ4EtLaAdSuzvOWv/2ia+fpXEtfLpSPXTIr2PagPxhx/iX9s1kXju9pI/4IcE sztZyGsVx3971t+MPSnkvqLlsDtd3MqaQ/7Td6TZx7nD9Zh5VY2gZQ/YuctSZNhK ys5BK06y8LJc/gSfL1FKWjS5y8ckj28WWJ+LfAIyKVJZfaI2qvkl3dP9NnHwYleJ MDgChVyeT3tIHH6ucx+EZNDQ2G3DCSjR8MZ287N8EaV3gxLQ869e -----END CERTIFICATE-----Generated at Mon Feb 9 15:11:23 2026 by rpki-client