This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jGktKawxLSq2Bh5Eqd4O03Ua6n4.cer File: jGktKawxLSq2Bh5Eqd4O03Ua6n4.cer (raw, json) Hash identifier: +GYj4BJTpwnwRA0pFlS8zTur9JKhQ2vGhiVGoUFYMCg= Subject key identifier: 8C:69:2D:29:AC:31:2D:2A:B6:06:1E:44:A9:DE:0E:D3:75:1A:EA:7E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C80AA6AD7D44149E4555D0DA5B9DDB1 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e0/bb7556-9fc7-406e-b38a-9262e53e1d10/1/jGktKawxLSq2Bh5Eqd4O03Ua6n4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e0/bb7556-9fc7-406e-b38a-9262e53e1d10/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:19:25 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 41916 IP: 195.138.196.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:aa:6a:d7:d4:41:49:e4:55:5d:0d:a5:b9:dd:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:19:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8c692d29ac312d2ab6061e44a9de0ed3751aea7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:18:25:5f:16:62:33:e3:cb:7d:bc:90:9f:c5: 29:64:17:09:8c:b1:04:d1:fb:ae:7a:a1:a2:f7:f1: 23:b7:a2:d9:51:38:e4:cb:46:56:66:0b:5d:a9:35: d2:23:e3:d2:7e:53:af:36:e2:17:41:78:cc:aa:69: 30:2e:3f:7d:52:51:37:cd:69:e8:18:8b:56:33:74: cd:d5:05:83:2f:15:e8:d0:8b:6b:d2:44:af:92:2f: 54:b0:65:1b:d2:e1:d4:30:2d:65:40:96:74:fd:1b: b6:a0:17:e4:d0:36:b3:b2:35:42:2e:9a:f3:4d:6f: d9:3c:af:69:a4:e1:c6:2a:c1:19:50:e9:b0:ea:fa: a0:23:00:2d:fb:0f:99:80:8c:3f:57:ab:51:4d:c7: 73:0e:e8:a1:7a:44:eb:1f:e0:ab:b3:a7:48:5d:1a: 93:62:d1:9c:73:99:a3:a5:6c:72:f3:18:35:04:e3: 89:6a:8d:57:c0:29:db:4a:03:80:43:ff:c9:70:2a: 8d:21:b0:c4:d0:f1:30:68:2c:61:50:c0:15:29:2a: e3:a7:c4:60:fa:02:09:2a:66:08:f8:c6:c3:72:d7: 5f:99:ae:dd:e1:ea:d7:08:53:4b:49:34:40:e6:f0: b5:ce:b2:21:79:69:1e:9c:5e:e4:15:82:4e:f2:76: 59:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:69:2D:29:AC:31:2D:2A:B6:06:1E:44:A9:DE:0E:D3:75:1A:EA:7E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/bb7556-9fc7-406e-b38a-9262e53e1d10/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/bb7556-9fc7-406e-b38a-9262e53e1d10/1/jGktKawxLSq2Bh5Eqd4O03Ua6n4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.138.196.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 41916 Signature Algorithm: sha256WithRSAEncryption 08:f3:9d:1d:5a:af:fe:77:21:48:b9:a0:6c:c3:08:65:56:b4: b3:60:08:bf:45:ac:14:3e:6a:98:a4:00:fe:24:4d:69:f5:db: 8f:ea:d4:15:dc:23:c8:d0:91:61:f7:6f:c3:07:d1:09:d3:ce: d4:b4:2e:f3:37:4e:74:cb:f4:2d:71:5c:1f:fe:01:0b:1c:75: 4e:a7:ec:29:47:8f:4d:62:4b:34:53:67:dd:35:5c:98:5b:6c: db:ba:08:d5:fc:b7:3b:56:a9:ca:b7:97:3d:9c:33:0f:97:d6: f4:6f:00:e5:27:46:5d:e9:c2:27:5f:6b:6d:02:40:15:89:ed: 63:c6:40:a9:a8:49:47:6d:85:22:6f:12:d5:0e:6e:18:5b:29: 44:76:02:66:8d:39:ec:d8:8c:0c:81:d6:1d:84:eb:25:c5:d7: ac:5b:fe:9f:ba:0e:d2:ba:00:09:c0:c7:db:71:6f:79:ad:24: f4:23:29:29:74:0d:a2:2a:49:eb:3f:8a:96:44:cc:23:a8:7d: 4b:99:1d:fe:ad:7b:11:53:42:c2:b8:ad:c9:4f:a9:34:75:39: 82:00:d6:9c:cc:69:17:c9:5a:c1:fa:bf:3e:d8:e5:3f:ea:59: 57:60:33:88:f9:85:82:82:8b:29:fa:d8:7d:c5:6a:6d:a0:60: 7a:c4:31:46 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt8gKpq19RBSeRVXQ2lud2xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxOTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YzY5MmQyOWFjMzEyZDJhYjYwNjFlNDRhOWRlMGVkMzc1MWFlYTdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4BglXxZiM+PLfbyQn8UpZBcJjLEE 0fuueqGi9/Ejt6LZUTjky0ZWZgtdqTXSI+PSflOvNuIXQXjMqmkwLj99UlE3zWno GItWM3TN1QWDLxXo0Itr0kSvki9UsGUb0uHUMC1lQJZ0/Ru2oBfk0DazsjVCLprz TW/ZPK9ppOHGKsEZUOmw6vqgIwAt+w+ZgIw/V6tRTcdzDuihekTrH+Crs6dIXRqT YtGcc5mjpWxy8xg1BOOJao1XwCnbSgOAQ//JcCqNIbDE0PEwaCxhUMAVKSrjp8Rg +gIJKmYI+MbDctdfma7d4erXCFNLSTRA5vC1zrIheWkenF7kFYJO8nZZbwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFIxpLSmsMS0qtgYeRKneDtN1Gup+MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2UwL2JiNzU1 Ni05ZmM3LTQwNmUtYjM4YS05MjYyZTUzZTFkMTAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTAvYmI3NTU2 LTlmYzctNDA2ZS1iMzhhLTkyNjJlNTNlMWQxMC8xL2pHa3RLYXd4TFNxMkJoNUVx ZDRPMDNVYTZuNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAw4rEMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwCjvDANBgkqhkiG9w0BAQsFAAOCAQEACPOdHVqv/nchSLmgbMMIZVa0s2AIv0Ws FD5qmKQA/iRNafXbj+rUFdwjyNCRYfdvwwfRCdPO1LQu8zdOdMv0LXFcH/4BCxx1 TqfsKUePTWJLNFNn3TVcmFts27oI1fy3O1apyreXPZwzD5fW9G8A5SdGXenCJ19r bQJAFYntY8ZAqahJR22FIm8S1Q5uGFspRHYCZo057NiMDIHWHYTrJcXXrFv+n7oO 0roACcDH23Fvea0k9CMpKXQNoipJ6z+KlkTMI6h9S5kd/q17EVNCwrityU+pNHU5 ggDWnMxpF8lawfq/PtjlP+pZV2AziPmFgoKLKfrYfcVqbaBgesQxRg== -----END CERTIFICATE-----Generated at Mon Feb 9 15:09:43 2026 by rpki-client