This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jLz5N0OA69GF0hGPVRyFWa4jNUE.cer File: jLz5N0OA69GF0hGPVRyFWa4jNUE.cer (raw, json) Hash identifier: x8GRaX7guVhDFMUES1ZG5b3GU2kvq/m05A8uGlth9oE= Subject key identifier: 8C:BC:F9:37:43:80:EB:D1:85:D2:11:8F:55:1C:85:59:AE:23:35:41 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5AA928C53BFEC30C7A0B6CE43B688C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/18/89a1f0-69dc-4c13-b97b-35203d6b0d57/1/jLz5N0OA69GF0hGPVRyFWa4jNUE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/18/89a1f0-69dc-4c13-b97b-35203d6b0d57/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:17:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 195.178.124.0/22 IP: 2a07:fe80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:a9:28:c5:3b:fe:c3:0c:7a:0b:6c:e4:3b:68:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8cbcf9374380ebd185d2118f551c8559ae233541 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:37:6f:d9:31:e2:5c:ca:a2:60:17:13:36:dc: dd:a2:dc:b2:42:b1:b3:77:03:1e:77:df:5d:f5:38: 78:03:ae:c6:5c:83:9c:de:2b:0b:b0:54:05:e1:0d: b6:14:ef:74:b4:3f:8e:4c:f4:be:c5:4f:8c:2e:1c: d6:39:03:cd:87:6a:94:9a:52:57:4b:69:11:4e:5a: 5f:4c:66:40:e0:67:2d:e0:05:4f:80:91:82:ae:a3: 18:5a:43:98:3d:ab:c6:76:6d:1c:2c:fe:ce:c6:5f: cc:e0:c8:61:8e:a6:d7:f7:33:a2:f2:d8:a2:c0:07: b1:f5:15:50:46:2e:57:f2:88:ac:82:eb:4a:95:71: bc:2a:32:3f:31:75:38:e2:e6:9d:a1:9e:6b:25:fb: cf:3e:96:cb:07:94:eb:aa:15:ce:2a:08:b9:72:b2: ba:37:f9:20:e1:d6:e0:ca:31:80:b6:05:91:66:58: d3:6b:9d:ad:96:8d:b6:6b:ea:c1:8b:50:b5:c0:97: a9:ea:f4:68:57:17:77:f1:a2:70:6b:71:1a:55:82: de:b5:25:12:38:48:7f:19:0c:07:7e:47:57:7f:3a: d2:6f:b4:19:8c:35:8c:79:fd:19:d0:38:db:2e:27: d0:fa:c8:9e:31:a8:65:b9:8e:67:5b:04:de:0a:91: 10:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:BC:F9:37:43:80:EB:D1:85:D2:11:8F:55:1C:85:59:AE:23:35:41 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/89a1f0-69dc-4c13-b97b-35203d6b0d57/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/89a1f0-69dc-4c13-b97b-35203d6b0d57/1/jLz5N0OA69GF0hGPVRyFWa4jNUE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.178.124.0/22 IPv6: 2a07:fe80::/29 Signature Algorithm: sha256WithRSAEncryption 34:f4:c3:a3:56:a1:8f:3f:f9:e6:d0:c0:d2:cf:2a:6b:90:3e: 75:3b:79:b0:f4:db:21:06:14:90:0c:66:73:f4:ac:8f:b3:de: 85:a3:b5:18:dc:cc:79:46:d2:ff:3f:f0:f6:78:8c:c6:ca:85: 7b:1e:7a:f1:8e:14:74:f8:8a:16:06:17:93:b4:21:88:61:48: 1d:e4:0f:a1:65:94:01:24:1f:ce:13:2e:bd:64:5f:ee:97:9e: 49:f6:2a:ae:ec:cf:72:39:bb:7f:7d:67:17:0c:0f:0a:2b:2f: 52:07:52:4b:e5:cc:89:f0:3b:2a:26:c1:44:e0:e3:19:b9:93: d4:00:10:0d:ce:c7:38:e2:4c:3d:a2:a9:a6:ff:9a:05:47:0d: a1:00:72:39:94:2c:2e:22:a0:40:29:f6:8c:db:b9:0f:8b:f8: 66:e2:72:24:b0:9b:d1:c6:bb:59:33:59:38:49:71:11:eb:fd: 2c:a7:ab:cf:b6:76:e6:1d:a2:3a:d8:e2:21:0b:fa:1b:76:f3: e2:3c:a0:fb:09:75:c1:02:4d:ff:da:6a:7a:f3:13:6d:1a:ba: e9:95:ca:7b:76:22:39:61:4c:5b:51:09:2d:9d:ec:74:11:79: af:7a:72:bf:8a:b0:d9:b4:8f:3b:21:db:75:b6:c4:0a:86:11: 3e:ec:3f:94 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt9WqkoxTv+wwx6C2zkO2iMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Y2JjZjkzNzQzODBlYmQxODVkMjExOGY1NTFjODU1OWFlMjMzNTQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTdv2THiXMqiYBcTNtzdotyyQrGz dwMed99d9Th4A67GXIOc3isLsFQF4Q22FO90tD+OTPS+xU+MLhzWOQPNh2qUmlJX S2kRTlpfTGZA4Gct4AVPgJGCrqMYWkOYPavGdm0cLP7Oxl/M4MhhjqbX9zOi8tii wAex9RVQRi5X8oisgutKlXG8KjI/MXU44uadoZ5rJfvPPpbLB5TrqhXOKgi5crK6 N/kg4dbgyjGAtgWRZljTa52tlo22a+rBi1C1wJep6vRoVxd38aJwa3EaVYLetSUS OEh/GQwHfkdXfzrSb7QZjDWMef0Z0DjbLifQ+sieMahluY5nWwTeCpEQqQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFIy8+TdDgOvRhdIRj1UchVmuIzVBMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE4Lzg5YTFm MC02OWRjLTRjMTMtYjk3Yi0zNTIwM2Q2YjBkNTcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTgvODlhMWYw LTY5ZGMtNGMxMy1iOTdiLTM1MjAzZDZiMGQ1Ny8xL2pMejVOME9BNjlHRjBoR1BW UnlGV2E0ak5VRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCw7J8MA0EAgACMAcDBQMqB/6AMA0GCSqGSIb3 DQEBCwUAA4IBAQA09MOjVqGPP/nm0MDSzyprkD51O3mw9NshBhSQDGZz9KyPs96F o7UY3Mx5RtL/P/D2eIzGyoV7HnrxjhR0+IoWBheTtCGIYUgd5A+hZZQBJB/OEy69 ZF/ul55J9iqu7M9yObt/fWcXDA8KKy9SB1JL5cyJ8DsqJsFE4OMZuZPUABANzsc4 4kw9oqmm/5oFRw2hAHI5lCwuIqBAKfaM27kPi/hm4nIksJvRxrtZM1k4SXER6/0s p6vPtnbmHaI62OIhC/obdvPiPKD7CXXBAk3/2mp68xNtGrrplcp7diI5YUxbUQkt nex0EXmvenK/irDZtI87Idt1tsQKhhE+7D+U -----END CERTIFICATE-----Generated at Mon Feb 9 16:51:08 2026 by rpki-client