This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jHr3naXytomGyDVkYKQ_pC0386Y.cer File: jHr3naXytomGyDVkYKQ_pC0386Y.cer (raw, json) Hash identifier: GvP0njVCYeCI76fFRpj4G1yg81T4LzXB45D3s/QJcpE= Subject key identifier: 8C:7A:F7:9D:A5:F2:B6:89:86:C8:35:64:60:A4:3F:A4:2D:37:F3:A6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C1276E604D1B6D1B4C907CFA9E0E0C8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f4/27086d-37f3-4130-8729-bcedbbd6e574/1/jHr3naXytomGyDVkYKQ_pC0386Y.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f4/27086d-37f3-4130-8729-bcedbbd6e574/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:19:03 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 48824 IP: 185.44.32.0/22 IP: 2a04:9880::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:76:e6:04:d1:b6:d1:b4:c9:07:cf:a9:e0:e0:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8c7af79da5f2b68986c8356460a43fa42d37f3a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d2:45:4e:c1:38:6b:ac:fe:d1:9d:c6:f6:2e: 2c:09:19:3f:0b:7e:ff:2f:46:91:b9:31:e2:77:44: eb:83:f3:3d:ef:86:8e:a1:b2:24:d4:09:31:a3:65: f3:8f:d5:2c:81:c8:d2:46:24:94:77:54:c3:08:14: 22:e0:60:2b:19:c6:77:47:7a:aa:e0:83:c8:8d:75: 52:16:2c:7f:96:f1:b7:34:a7:a0:1a:d8:73:35:be: d3:ba:2c:a1:18:9d:bb:c1:d2:d2:54:cc:e4:a4:fb: dc:aa:99:65:5d:55:d8:7f:fa:83:e2:a1:70:08:6c: 0e:7c:0e:4e:b1:59:0e:e6:69:7a:78:88:72:d4:bc: f7:ae:01:3f:69:04:a6:86:60:ec:ce:85:fe:a3:64: 25:f4:a6:a0:e7:90:c2:bf:d1:97:1c:50:a6:a9:03: 79:9f:be:de:5c:16:07:1b:7e:fa:66:30:15:7d:5d: 9f:1d:9c:80:f7:13:dd:e4:75:e4:db:3f:bd:b5:41: 1f:6c:c1:a9:63:81:f5:b2:c3:a1:98:69:45:21:05: 71:a8:4f:c8:67:bf:1e:60:db:70:25:ff:90:ad:e7: 90:6c:6e:e3:1c:84:1a:e1:81:08:e4:34:03:81:4c: 59:36:d9:76:2a:bc:ee:3f:37:70:eb:c6:96:37:ba: e8:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:7A:F7:9D:A5:F2:B6:89:86:C8:35:64:60:A4:3F:A4:2D:37:F3:A6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/27086d-37f3-4130-8729-bcedbbd6e574/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/27086d-37f3-4130-8729-bcedbbd6e574/1/jHr3naXytomGyDVkYKQ_pC0386Y.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.44.32.0/22 IPv6: 2a04:9880::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 48824 Signature Algorithm: sha256WithRSAEncryption 2c:14:9e:73:3f:c0:f4:e5:d7:00:7a:2b:af:f2:27:00:54:1b: 23:40:60:f9:b8:7b:3a:e8:ae:eb:7c:93:24:64:69:51:57:1b: 86:7f:90:0d:dd:1c:06:59:71:9d:9a:86:b7:57:bb:5e:7e:9f: 71:3c:50:b6:5a:0f:ed:b7:5c:f5:6b:6e:76:b1:ce:df:44:bf: 25:96:88:8c:93:a0:4e:fe:5f:9c:b1:a4:dc:21:c9:b0:62:15: 39:fa:1c:16:ef:f7:cc:af:0d:3d:8d:8d:a5:f5:46:0d:f9:b1: 3b:c4:da:ee:a6:b0:63:40:75:13:d1:03:5a:9d:4e:d7:aa:8e: 3a:b8:fe:38:77:05:93:80:30:c7:fa:76:8f:27:3d:5e:3d:49: 3f:ba:96:44:8f:3a:1f:4c:f6:c0:d6:97:df:6d:05:b3:5c:11: 61:0a:79:6f:83:32:a7:76:34:79:fc:04:a5:a7:ef:03:27:29: 4a:dd:6e:5a:cd:1a:76:85:32:cf:8c:8a:25:d7:6c:5e:a2:a1: 06:fe:70:74:0f:52:fc:4b:ca:42:35:03:96:bc:de:7f:3a:96: 4e:16:bf:f6:86:24:32:d8:70:6c:57:6c:58:57:08:b5:7c:a5: 43:26:32:67:97:26:c4:13:e2:30:19:c2:ad:92:7a:5d:89:76: 27:33:1a:8f -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt8EnbmBNG20bTJB8+p4ODIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YzdhZjc5ZGE1ZjJiNjg5ODZjODM1NjQ2MGE0M2ZhNDJkMzdmM2E2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9JFTsE4a6z+0Z3G9i4sCRk/C37/ L0aRuTHid0Trg/M974aOobIk1Akxo2Xzj9UsgcjSRiSUd1TDCBQi4GArGcZ3R3qq 4IPIjXVSFix/lvG3NKegGthzNb7TuiyhGJ27wdLSVMzkpPvcqpllXVXYf/qD4qFw CGwOfA5OsVkO5ml6eIhy1Lz3rgE/aQSmhmDszoX+o2Ql9Kag55DCv9GXHFCmqQN5 n77eXBYHG376ZjAVfV2fHZyA9xPd5HXk2z+9tUEfbMGpY4H1ssOhmGlFIQVxqE/I Z78eYNtwJf+QreeQbG7jHIQa4YEI5DQDgUxZNtl2KrzuPzdw68aWN7rovQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFIx6952l8raJhsg1ZGCkP6QtN/OmMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y0LzI3MDg2 ZC0zN2YzLTQxMzAtODcyOS1iY2VkYmJkNmU1NzQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjQvMjcwODZk LTM3ZjMtNDEzMC04NzI5LWJjZWRiYmQ2ZTU3NC8xL2pIcjNuYVh5dG9tR3lEVmtZ S1FfcEMwMzg2WS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuSwgMA0EAgACMAcDBQMqBJiAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwC+uDANBgkqhkiG9w0BAQsFAAOCAQEALBSecz/A9OXX AHorr/InAFQbI0Bg+bh7Ouiu63yTJGRpUVcbhn+QDd0cBllxnZqGt1e7Xn6fcTxQ tloP7bdc9WtudrHO30S/JZaIjJOgTv5fnLGk3CHJsGIVOfocFu/3zK8NPY2NpfVG DfmxO8Ta7qawY0B1E9EDWp1O16qOOrj+OHcFk4Awx/p2jyc9Xj1JP7qWRI86H0z2 wNaX320Fs1wRYQp5b4Myp3Y0efwEpafvAycpSt1uWs0adoUyz4yKJddsXqKhBv5w dA9S/EvKQjUDlrzefzqWTha/9oYkMthwbFdsWFcItXylQyYyZ5cmxBPiMBnCrZJ6 XYl2JzMajw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:50:55 2026 by rpki-client