This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jPCwtGoI0ecPy92Hetk5oBMuEmk.cer File: jPCwtGoI0ecPy92Hetk5oBMuEmk.cer (raw, json) Hash identifier: /GsW2BdJZcwxXesvTbtUIbd709KblfElqd6qMa53o/I= Subject key identifier: 8C:F0:B0:B4:6A:08:D1:E7:0F:CB:DD:87:7A:D9:39:A0:13:2E:12:69 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F84FDC4F6CC663D375C6DCAC020AA38 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/27/488f90-224e-4634-967f-8f181d3a3e8f/1/jPCwtGoI0ecPy92Hetk5oBMuEmk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/27/488f90-224e-4634-967f-8f181d3a3e8f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:23:00 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 206255 IP: 185.174.196.0/22 IP: 2a11:b880::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:fd:c4:f6:cc:66:3d:37:5c:6d:ca:c0:20:aa:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:23:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8cf0b0b46a08d1e70fcbdd877ad939a0132e1269 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:35:6c:b7:72:ee:12:e9:ef:77:ab:63:46:f8: d4:8e:46:76:61:ee:19:5a:2c:ff:ea:10:bc:13:9a: 41:7b:93:aa:79:2b:93:88:2e:47:85:68:87:09:59: ec:47:92:6f:34:01:d1:f3:5c:85:a3:f9:5a:3b:0b: 37:7f:91:17:f9:24:5c:69:e2:a8:34:d2:e4:57:7e: 9f:f8:06:db:46:3f:19:08:ac:3b:9b:ac:bd:02:f9: f8:17:83:e4:89:7c:fe:5e:74:be:c1:fb:5b:96:8c: da:75:09:43:81:ba:b1:3b:77:44:ce:3a:df:39:4c: db:c7:f7:7c:c0:06:f2:b0:08:4d:cb:71:88:95:4b: 95:8d:c4:1c:d3:01:e7:30:90:eb:4f:79:35:38:bd: 78:d3:08:33:24:cc:02:01:65:7f:ec:4c:6a:48:98: 2c:94:2e:c6:20:e3:cb:35:08:25:29:9d:eb:e7:a1: 61:bb:f9:1d:e9:cb:eb:6f:ba:3a:81:f4:6b:c0:22: e3:9a:44:b5:0f:a2:2d:b2:ed:a2:43:5f:86:30:dc: 15:6b:1b:f0:6b:36:8f:f2:1a:bd:26:34:79:ef:f4: f4:50:f5:25:8c:ec:eb:fc:21:71:97:b6:d7:62:2c: 77:2c:94:c1:fc:ec:29:a9:ec:0b:ef:09:44:06:d6: 95:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:F0:B0:B4:6A:08:D1:E7:0F:CB:DD:87:7A:D9:39:A0:13:2E:12:69 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/488f90-224e-4634-967f-8f181d3a3e8f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/488f90-224e-4634-967f-8f181d3a3e8f/1/jPCwtGoI0ecPy92Hetk5oBMuEmk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.174.196.0/22 IPv6: 2a11:b880::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 206255 Signature Algorithm: sha256WithRSAEncryption 24:1b:ec:47:47:42:0f:09:65:52:8e:eb:0a:88:0e:9c:3b:eb: ab:e2:ba:13:53:07:8f:ef:06:27:a7:d4:5e:d5:f0:07:73:1c: 90:10:02:d5:a8:cc:c3:35:c4:26:5c:19:f0:7e:23:fd:26:a6: 3f:2d:fd:61:d1:2f:73:d1:ce:a5:e7:6e:24:28:35:ee:fe:eb: d0:9f:81:0d:67:fb:9b:79:55:02:87:0e:b2:71:a7:ed:a1:8b: 14:98:0e:96:35:a0:0d:25:45:cd:38:13:35:6d:df:de:76:ad: 8e:56:81:a7:91:48:56:14:51:4b:f8:22:54:fd:32:06:0e:89: d9:b8:45:9f:da:f9:f5:a5:77:97:4c:ef:1a:40:5e:45:31:50: dc:fe:83:d0:d4:46:31:54:c9:03:6b:f1:85:13:b2:52:24:c1: 9b:d9:7c:4d:15:83:48:6c:59:85:9e:88:6c:0b:b3:e2:a4:f6: 06:98:c2:6a:d7:0a:06:d1:64:47:c7:d3:6a:99:39:60:ef:e5: a1:77:f3:b9:27:17:10:f4:bb:92:4d:81:fc:97:75:db:f4:44: 38:89:3b:22:24:ea:3d:4a:82:15:a2:1b:4c:ed:3b:98:d8:2e: 01:ca:96:30:7a:f3:14:2f:d0:41:5b:95:b4:3f:a6:73:09:3e: 5a:a8:d7:5f -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt/hP3E9sxmPTdcbcrAIKo4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMzAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Y2YwYjBiNDZhMDhkMWU3MGZjYmRkODc3YWQ5MzlhMDEzMmUxMjY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4zVst3LuEunvd6tjRvjUjkZ2Ye4Z Wiz/6hC8E5pBe5OqeSuTiC5HhWiHCVnsR5JvNAHR81yFo/laOws3f5EX+SRcaeKo NNLkV36f+AbbRj8ZCKw7m6y9Avn4F4PkiXz+XnS+wftblozadQlDgbqxO3dEzjrf OUzbx/d8wAbysAhNy3GIlUuVjcQc0wHnMJDrT3k1OL140wgzJMwCAWV/7ExqSJgs lC7GIOPLNQglKZ3r56Fhu/kd6cvrb7o6gfRrwCLjmkS1D6Itsu2iQ1+GMNwVaxvw azaP8hq9JjR57/T0UPUljOzr/CFxl7bXYix3LJTB/OwpqewL7wlEBtaVgQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFIzwsLRqCNHnD8vdh3rZOaATLhJpMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI3LzQ4OGY5 MC0yMjRlLTQ2MzQtOTY3Zi04ZjE4MWQzYTNlOGYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjcvNDg4Zjkw LTIyNGUtNDYzNC05NjdmLThmMTgxZDNhM2U4Zi8xL2pQQ3d0R29JMGVjUHk5Mkhl dGs1b0JNdUVtay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCua7EMA0EAgACMAcDBQMqEbiAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMlrzANBgkqhkiG9w0BAQsFAAOCAQEAJBvsR0dCDwll Uo7rCogOnDvrq+K6E1MHj+8GJ6fUXtXwB3MckBAC1ajMwzXEJlwZ8H4j/SamPy39 YdEvc9HOpeduJCg17v7r0J+BDWf7m3lVAocOsnGn7aGLFJgOljWgDSVFzTgTNW3f 3natjlaBp5FIVhRRS/giVP0yBg6J2bhFn9r59aV3l0zvGkBeRTFQ3P6D0NRGMVTJ A2vxhROyUiTBm9l8TRWDSGxZhZ6IbAuz4qT2BpjCatcKBtFkR8fTapk5YO/loXfz uScXEPS7kk2B/Jd12/REOIk7IiTqPUqCFaIbTO07mNguAcqWMHrzFC/QQVuVtD+m cwk+WqjXXw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:24:10 2026 by rpki-client