This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.cer File: jOsj4sXZ8sc0SIkEUFg17ygJ-zs.cer (raw, json) Hash identifier: hon7MYnijvfZqvvuU+8Z5F91IwAlRDjG+KqP91G28G4= Subject key identifier: 8C:EB:23:E2:C5:D9:F2:C7:34:48:89:04:50:58:35:EF:28:09:FB:3B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA489A7D0DC7421BB9C96E79751CE36 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:17:51 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 49813 AS: 51497 AS: 57231 AS: 60525 IP: 5.63.128.0/21 IP: 109.105.128.0/19 IP: 185.47.156.0/22 IP: 185.149.172.0/22 IP: 2a07:6700::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:89:a7:d0:dc:74:21:bb:9c:96:e7:97:51:ce:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8ceb23e2c5d9f2c734488904505835ef2809fb3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:18:c2:41:c8:9f:fb:a6:95:9f:7b:a7:92:21: 55:07:d9:b3:e6:7c:44:d8:62:52:8c:50:ee:08:b8: ee:39:f2:e6:62:af:b2:ec:2f:43:2c:24:ec:aa:37: 32:58:7d:86:67:d3:84:66:b3:4a:ca:6b:b3:d3:18: e2:a4:6f:83:8f:6d:12:5a:7b:4b:f3:de:04:54:19: 93:7e:64:bf:0d:89:04:3e:39:41:97:72:60:ea:af: 8d:14:eb:4c:65:d4:30:85:ae:e2:03:b3:24:ea:92: df:39:b2:1c:9b:01:f2:6a:cc:a5:65:34:43:0b:f1: e5:55:63:51:f6:84:af:4c:d4:31:ff:0d:7d:0a:ac: d5:15:ad:0b:6c:3d:1f:fb:24:e0:57:4b:6e:9d:0e: 03:48:fe:ac:6b:83:3d:db:ef:75:d7:fa:f9:02:a5: 79:96:29:70:50:64:c4:f5:aa:a0:99:ec:de:4a:8a: f0:f4:44:1a:21:fd:7c:9c:7d:28:84:7b:a5:cb:29: 31:27:2e:02:d3:d2:79:e8:77:26:f5:1a:f1:ff:99: a5:47:9c:9b:cb:a1:f9:fc:b8:cf:b4:a0:22:c3:65: 96:2a:00:ab:28:d3:c4:67:5d:06:37:10:a1:19:ca: 98:e7:81:d3:37:d5:fa:a5:9b:03:45:75:35:80:02: 1f:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:EB:23:E2:C5:D9:F2:C7:34:48:89:04:50:58:35:EF:28:09:FB:3B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.63.128.0/21 109.105.128.0/19 185.47.156.0/22 185.149.172.0/22 IPv6: 2a07:6700::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 49813 51497 57231 60525 Signature Algorithm: sha256WithRSAEncryption 76:0e:3c:8a:a1:07:70:c9:69:3f:5a:93:5e:1e:fb:f7:13:79: 89:07:c0:73:35:71:0d:8f:e9:47:24:39:86:b9:a1:e1:ff:c7: de:98:08:af:85:1c:2b:a3:ac:28:dd:20:59:1e:51:47:c0:cc: 93:a4:84:14:ca:7b:95:b6:94:d2:93:da:36:0b:e2:21:01:e9: 6c:01:90:03:d3:d0:98:25:bf:9f:d6:ba:c5:38:be:c3:51:0e: 61:2c:cc:1e:9d:b1:8b:54:04:62:6f:4a:45:3c:cd:e8:b9:aa: e3:9a:08:b4:b2:a7:73:50:04:44:41:80:12:fe:41:bf:b7:df: 7d:f1:2f:e0:da:04:5e:3c:cc:42:6f:73:0a:13:e8:7a:35:b6: c5:79:3e:20:18:e0:af:e4:01:d1:f4:fa:71:5c:91:d9:ac:4d: 9e:98:8e:8a:e6:1a:a7:0e:3b:0e:08:71:d3:1e:25:71:fc:b5: d0:95:5d:b1:71:2a:84:d1:b5:43:0b:9e:2a:c6:69:a8:a9:7a: b1:74:8a:41:b4:e3:df:bd:8a:df:16:30:d8:1d:0a:4b:2e:2e: 17:37:d5:84:11:ae:dc:3a:1b:5e:7c:51:43:44:56:36:7f:79: 45:81:12:8a:e0:17:54:bd:a7:48:b3:ef:1a:ea:f0:a1:2f:5c: a3:ef:e7:2c -----BEGIN CERTIFICATE----- MIIFxDCCBKygAwIBAgISAZt+pImn0Nx0IbuclueXUc42MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Y2ViMjNlMmM1ZDlmMmM3MzQ0ODg5MDQ1MDU4MzVlZjI4MDlmYjNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzhjCQcif+6aVn3unkiFVB9mz5nxE 2GJSjFDuCLjuOfLmYq+y7C9DLCTsqjcyWH2GZ9OEZrNKymuz0xjipG+Dj20SWntL 894EVBmTfmS/DYkEPjlBl3Jg6q+NFOtMZdQwha7iA7Mk6pLfObIcmwHyasylZTRD C/HlVWNR9oSvTNQx/w19CqzVFa0LbD0f+yTgV0tunQ4DSP6sa4M92+911/r5AqV5 lilwUGTE9aqgmezeSorw9EQaIf18nH0ohHulyykxJy4C09J56Hcm9Rrx/5mlR5yb y6H5/LjPtKAiw2WWKgCrKNPEZ10GNxChGcqY54HTN9X6pZsDRXU1gAIf6QIDAQAB o4IC0DCCAswwHQYDVR0OBBYEFIzrI+LF2fLHNEiJBFBYNe8oCfs7MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE2LzY5OTI5 Mi0zZGEwLTQ3NzItYWY4Mi04MzM0ZTM2MjIzNmQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTYvNjk5Mjky LTNkYTAtNDc3Mi1hZjgyLTgzMzRlMzYyMjM2ZC8xL2pPc2o0c1haOHNjMFNJa0VV RmcxN3lnSi16cy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF BwEHAQH/BDEwLzAeBAIAATAYAwQDBT+AAwQFbWmAAwQCuS+cAwQCuZWsMA0EAgAC MAcDBQMqB2cAMCkGCCsGAQUFBwEIAQH/BBowGKAWMBQCAwDClQIDAMkpAgMA348C AwDsbTANBgkqhkiG9w0BAQsFAAOCAQEAdg48iqEHcMlpP1qTXh779xN5iQfAczVx DY/pRyQ5hrmh4f/H3pgIr4UcK6OsKN0gWR5RR8DMk6SEFMp7lbaU0pPaNgviIQHp bAGQA9PQmCW/n9a6xTi+w1EOYSzMHp2xi1QEYm9KRTzN6Lmq45oItLKnc1AEREGA Ev5Bv7ffffEv4NoEXjzMQm9zChPoejW2xXk+IBjgr+QB0fT6cVyR2axNnpiOiuYa pw47Dghx0x4lcfy10JVdsXEqhNG1QwueKsZpqKl6sXSKQbTj372K3xYw2B0KSy4u FzfVhBGu3DobXnxRQ0RWNn95RYESiuAXVL2nSLPvGurwoS9co+/nLA== -----END CERTIFICATE-----Generated at Mon Feb 9 15:13:52 2026 by rpki-client