This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jNnWH4Pg1-gwimzeTdMV3XV1bAM.cer File: jNnWH4Pg1-gwimzeTdMV3XV1bAM.cer (raw, json) Hash identifier: YT2u3jd0ZqhQHO0eSu/BHJExt61SmdJxnLd4lhYphek= Subject key identifier: 8C:D9:D6:1F:83:E0:D7:E8:30:8A:6C:DE:4D:D3:15:DD:75:75:6C:03 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77588E97F8F6475BEE352FCDB2E99700 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8a/86c946-14cb-4935-88e3-d2d57843a27d/1/jNnWH4Pg1-gwimzeTdMV3XV1bAM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8a/86c946-14cb-4935-88e3-d2d57843a27d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:17:31 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 205493 IP: 185.215.192.0/22 IP: 2a0b:ad40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:8e:97:f8:f6:47:5b:ee:35:2f:cd:b2:e9:97:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8cd9d61f83e0d7e8308a6cde4dd315dd75756c03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:10:c8:6f:20:3e:36:47:27:ab:cc:24:57:73: a1:ba:10:ae:15:9a:73:1d:14:76:75:93:ad:32:2c: 55:d6:dc:16:9b:86:02:d4:42:cf:0c:94:bb:74:0a: 5d:32:d4:06:c2:ef:22:0e:7a:b9:15:b7:04:12:78: 33:43:0f:38:58:72:54:25:dc:28:df:bd:9f:13:72: a4:38:41:3a:dc:18:8e:68:6e:62:ec:a2:bd:38:ee: 16:f2:25:51:6a:e1:d7:55:b3:8f:47:f6:ac:54:df: 7d:49:e5:4e:c7:4b:dc:53:56:4f:7f:0d:be:8e:bf: 9d:e2:f5:60:79:41:69:2b:e4:e7:01:fa:8e:aa:d3: 8e:29:d6:85:9b:9a:ac:d4:65:a9:96:96:8d:ec:27: e0:3a:5f:95:51:33:af:05:cf:38:94:bf:91:4e:cb: 4e:dc:d3:77:d7:78:fe:e8:40:2c:40:d6:11:ab:47: 3f:ca:da:6b:73:f3:4f:74:7b:29:60:7f:3c:ac:45: 5e:a9:9b:82:c5:75:c9:74:79:bc:5f:a0:60:d7:37: c0:cd:bc:15:3e:11:01:57:82:a7:49:d2:27:e2:8f: 72:10:e6:2a:e5:19:38:26:27:c5:22:fc:b2:6d:aa: 67:45:9f:76:90:cc:e0:6b:0b:a6:02:4d:a5:36:c8: a2:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:D9:D6:1F:83:E0:D7:E8:30:8A:6C:DE:4D:D3:15:DD:75:75:6C:03 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/86c946-14cb-4935-88e3-d2d57843a27d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/86c946-14cb-4935-88e3-d2d57843a27d/1/jNnWH4Pg1-gwimzeTdMV3XV1bAM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.215.192.0/22 IPv6: 2a0b:ad40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 205493 Signature Algorithm: sha256WithRSAEncryption 49:db:9c:64:b2:7c:11:1b:4a:e1:91:2f:41:5d:46:fd:de:2f: bc:9b:2e:35:e9:a5:7c:54:65:8b:f5:c1:5c:6e:a4:dd:dc:56: 48:0d:76:9f:81:92:71:7f:60:68:e9:e9:38:6c:34:26:04:37: 9e:4c:57:ad:4c:c0:cd:38:ae:89:07:4c:bb:ba:d4:cd:8b:dc: af:0d:64:e6:cb:ca:64:b3:10:a1:f8:c7:e9:74:02:2a:db:8d: 10:e3:0a:39:e6:f0:21:ce:99:1e:61:dd:60:da:da:cb:68:cc: 56:78:70:b9:b6:0e:41:72:3c:e7:32:e8:79:c3:df:cf:9c:56: 4e:58:a4:af:1d:cd:f5:60:5e:83:41:5a:19:1a:6a:b1:ad:75: 5e:4d:00:bc:70:3f:18:05:0e:32:ab:41:b7:ba:9c:9f:99:07: 3a:9e:24:70:fc:9c:6f:18:18:09:16:9f:01:9c:54:52:ed:86: 9e:72:08:30:20:c6:fe:b2:65:24:89:03:52:bc:3e:3a:d9:9f: 78:6f:36:0f:d1:dc:e7:4b:02:8a:c7:59:a6:1b:38:c6:bd:90: 8b:ad:8f:4a:0b:74:7c:39:69:b3:d1:4c:7e:a2:23:0f:6d:e7: 6d:66:78:f2:d4:01:84:31:66:4a:fb:24:da:e2:1c:58:d4:e9: 03:10:12:d6 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt3WI6X+PZHW+41L82y6ZcAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Y2Q5ZDYxZjgzZTBkN2U4MzA4YTZjZGU0ZGQzMTVkZDc1NzU2YzAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxDIbyA+Nkcnq8wkV3OhuhCuFZpz HRR2dZOtMixV1twWm4YC1ELPDJS7dApdMtQGwu8iDnq5FbcEEngzQw84WHJUJdwo 372fE3KkOEE63BiOaG5i7KK9OO4W8iVRauHXVbOPR/asVN99SeVOx0vcU1ZPfw2+ jr+d4vVgeUFpK+TnAfqOqtOOKdaFm5qs1GWplpaN7CfgOl+VUTOvBc84lL+RTstO 3NN313j+6EAsQNYRq0c/ytprc/NPdHspYH88rEVeqZuCxXXJdHm8X6Bg1zfAzbwV PhEBV4KnSdIn4o9yEOYq5Rk4JifFIvyybapnRZ92kMzgawumAk2lNsii7QIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFIzZ1h+D4NfoMIps3k3TFd11dWwDMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhhLzg2Yzk0 Ni0xNGNiLTQ5MzUtODhlMy1kMmQ1Nzg0M2EyN2QvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGEvODZjOTQ2 LTE0Y2ItNDkzNS04OGUzLWQyZDU3ODQzYTI3ZC8xL2pObldINFBnMS1nd2ltemVU ZE1WM1hWMWJBTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCudfAMA0EAgACMAcDBQMqC61AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMitTANBgkqhkiG9w0BAQsFAAOCAQEASducZLJ8ERtK 4ZEvQV1G/d4vvJsuNemlfFRli/XBXG6k3dxWSA12n4GScX9gaOnpOGw0JgQ3nkxX rUzAzTiuiQdMu7rUzYvcrw1k5svKZLMQofjH6XQCKtuNEOMKOebwIc6ZHmHdYNra y2jMVnhwubYOQXI85zLoecPfz5xWTlikrx3N9WBeg0FaGRpqsa11Xk0AvHA/GAUO MqtBt7qcn5kHOp4kcPycbxgYCRafAZxUUu2GnnIIMCDG/rJlJIkDUrw+OtmfeG82 D9Hc50sCisdZphs4xr2Qi62PSgt0fDlps9FMfqIjD23nbWZ48tQBhDFmSvsk2uIc WNTpAxAS1g== -----END CERTIFICATE-----Generated at Mon Feb 9 19:42:44 2026 by rpki-client