This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jPJ69YYwRc-otYseJ3aSueHTje0.cer File: jPJ69YYwRc-otYseJ3aSueHTje0.cer (raw, json) Hash identifier: DH4qBGJRLs7HOFLs5c9cOg+Fcj0of9ZmIW55/mmyrAU= Subject key identifier: 8C:F2:7A:F5:86:30:45:CF:A8:B5:8B:1E:27:76:92:B9:E1:D3:8D:ED Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEE6669FC9ED80A71C50A58D90829CB Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/91/ab7efb-2d60-4e69-9e06-01c996e0b7e7/1/jPJ69YYwRc-otYseJ3aSueHTje0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/91/ab7efb-2d60-4e69-9e06-01c996e0b7e7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:19:17 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 5.53.104.0/21 IP: 2a01:4f40::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:66:69:fc:9e:d8:0a:71:c5:0a:58:d9:08:29:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:19:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8cf27af5863045cfa8b58b1e277692b9e1d38ded Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:52:23:91:41:d9:4b:0e:07:44:a8:f7:c9:c7: af:79:c7:03:37:d3:bc:81:9b:b4:ba:5f:cf:31:9e: e3:34:92:f7:bf:a2:b1:d4:d0:d3:28:33:e1:3e:f8: 89:58:4d:ad:8f:95:42:84:d2:da:97:58:2e:33:8f: 87:96:9a:e6:1c:59:d8:79:cb:74:77:25:ee:a8:de: 13:eb:6b:73:42:bc:7f:61:f2:6d:ca:d5:8c:96:41: 36:a5:a7:ab:18:52:25:8f:5b:7f:9d:d2:b8:e0:ce: 89:f5:d9:7e:34:c0:10:2c:50:bb:0f:f3:f9:d2:24: 10:d0:9e:1a:bd:fd:ab:d7:ae:8e:ee:88:a5:af:72: c7:a4:19:d8:ae:46:6f:e4:9a:b7:59:4c:f4:c4:f2: 7c:c6:a0:e9:9b:c9:cc:56:45:cc:04:2f:e6:32:c2: 3a:24:fc:ab:19:34:1b:c6:fc:c6:03:25:c3:82:7f: ff:26:60:7a:93:74:95:8f:b7:f5:fa:59:db:ea:36: af:b4:cf:7e:a9:da:ef:70:52:29:11:72:fa:18:fa: a1:dd:a9:34:b9:7c:72:c7:9b:eb:b1:68:b3:4b:e1: 7b:49:99:22:2a:3b:e6:1a:4b:ea:72:03:e9:c9:93: 0a:fa:0b:e4:61:3f:1d:38:ba:b9:de:3e:f7:d3:d3: ef:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:F2:7A:F5:86:30:45:CF:A8:B5:8B:1E:27:76:92:B9:E1:D3:8D:ED X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ab7efb-2d60-4e69-9e06-01c996e0b7e7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ab7efb-2d60-4e69-9e06-01c996e0b7e7/1/jPJ69YYwRc-otYseJ3aSueHTje0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.53.104.0/21 IPv6: 2a01:4f40::/32 Signature Algorithm: sha256WithRSAEncryption 1c:f9:2b:99:de:79:b8:77:4d:28:07:60:ce:4a:18:39:24:d5: 6d:37:14:67:8d:19:ba:85:f4:e7:ad:2a:49:97:77:c9:a2:b8: 96:61:12:f6:6b:c0:40:df:14:e4:b8:7e:08:19:c5:0c:5c:12: 27:15:dd:ca:88:88:f9:67:4c:15:cf:07:74:48:75:10:ec:9e: 6c:86:62:e7:03:00:e9:17:e5:b8:0d:49:32:0a:7c:3d:96:84: 3c:47:fe:99:3d:0f:1a:3d:8e:e9:d3:3b:fb:90:f3:2a:8f:56: 21:14:62:e2:cf:e1:c9:f3:1a:e6:2d:8a:9e:2c:78:a2:4b:1f: 09:a6:d8:ae:b2:26:8a:99:df:f6:13:c9:0f:a8:7c:b8:7b:39: f8:d7:13:c5:53:8c:c1:c7:4b:30:db:05:8c:81:10:1b:0a:c2: 06:91:21:53:1c:6e:c7:3a:41:2a:cf:d3:14:27:e8:66:b6:17: 8b:90:b3:4e:b6:72:89:3f:5e:93:25:72:16:b6:3e:be:dd:59: 9d:65:97:82:6f:bf:f7:f6:87:6f:1e:68:23:1e:e9:57:09:3b: 07:16:56:98:df:50:3c:fb:b4:17:c7:a7:2c:aa:03:11:d7:21: 7d:e3:91:5a:68:99:55:73:60:aa:e8:d7:b7:f9:3f:8c:79:44: ad:5b:fb:99 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt87mZp/J7YCnHFCljZCCnLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Y2YyN2FmNTg2MzA0NWNmYThiNThiMWUyNzc2OTJiOWUxZDM4ZGVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlIjkUHZSw4HRKj3yceveccDN9O8 gZu0ul/PMZ7jNJL3v6Kx1NDTKDPhPviJWE2tj5VChNLal1guM4+HlprmHFnYect0 dyXuqN4T62tzQrx/YfJtytWMlkE2paerGFIlj1t/ndK44M6J9dl+NMAQLFC7D/P5 0iQQ0J4avf2r166O7oilr3LHpBnYrkZv5Jq3WUz0xPJ8xqDpm8nMVkXMBC/mMsI6 JPyrGTQbxvzGAyXDgn//JmB6k3SVj7f1+lnb6javtM9+qdrvcFIpEXL6GPqh3ak0 uXxyx5vrsWizS+F7SZkiKjvmGkvqcgPpyZMK+gvkYT8dOLq53j7309PvcwIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFIzyevWGMEXPqLWLHid2krnh043tMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkxL2FiN2Vm Yi0yZDYwLTRlNjktOWUwNi0wMWM5OTZlMGI3ZTcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTEvYWI3ZWZi LTJkNjAtNGU2OS05ZTA2LTAxYzk5NmUwYjdlNy8xL2pQSjY5WVl3UmMtb3RZc2VK M2FTdWVIVGplMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQDBTVoMA0EAgACMAcDBQAqAU9AMA0GCSqGSIb3 DQEBCwUAA4IBAQAc+SuZ3nm4d00oB2DOShg5JNVtNxRnjRm6hfTnrSpJl3fJoriW YRL2a8BA3xTkuH4IGcUMXBInFd3KiIj5Z0wVzwd0SHUQ7J5shmLnAwDpF+W4DUky Cnw9loQ8R/6ZPQ8aPY7p0zv7kPMqj1YhFGLiz+HJ8xrmLYqeLHiiSx8JptiusiaK md/2E8kPqHy4ezn41xPFU4zBx0sw2wWMgRAbCsIGkSFTHG7HOkEqz9MUJ+hmtheL kLNOtnKJP16TJXIWtj6+3VmdZZeCb7/39odvHmgjHulXCTsHFlaY31A8+7QXx6cs qgMR1yF945FaaJlVc2Cq6Ne3+T+MeUStW/uZ -----END CERTIFICATE-----Generated at Mon Feb 9 16:50:20 2026 by rpki-client