This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jQjCXuFjw27WtzFxYBoYNkgupe4.cer File: jQjCXuFjw27WtzFxYBoYNkgupe4.cer (raw, json) Hash identifier: 2vIcyXa66OOnIcwZ6ZbGrvEW6PRzyuX9QBd1vknSffE= Subject key identifier: 8D:08:C2:5E:E1:63:C3:6E:D6:B7:31:71:60:1A:18:36:48:2E:A5:EE Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F85744999347B7486F9AB4CC1B1F574 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f0/51cc20-1f81-4ee1-bd93-44d781ed62d4/1/jQjCXuFjw27WtzFxYBoYNkgupe4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f0/51cc20-1f81-4ee1-bd93-44d781ed62d4/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:23:31 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 206083 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:74:49:99:34:7b:74:86:f9:ab:4c:c1:b1:f5:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:23:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8d08c25ee163c36ed6b73171601a1836482ea5ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:50:56:bc:76:d8:6e:1e:7f:d5:37:19:d8:88: 2b:43:c4:23:40:d0:98:d9:a4:9c:f2:26:b5:24:42: 94:4c:00:4c:ce:f1:3e:aa:25:80:e3:2b:6e:05:9a: 9c:a3:14:66:7a:89:a9:da:63:d7:a0:8b:bc:df:df: 77:ed:42:f9:7d:80:32:23:ea:70:f3:99:da:bd:c7: 30:20:db:9c:22:68:24:0a:0d:0c:35:e7:e6:d0:e1: 64:ff:49:48:10:d5:55:e6:62:ce:54:c9:d4:9e:aa: d6:fa:97:ac:ab:f4:cb:69:c3:bf:7d:a1:80:da:f2: 6a:72:87:57:30:8d:32:ef:d9:71:c0:6e:a1:e5:12: a0:89:48:e5:24:99:59:1c:86:df:26:a7:2b:85:2d: 13:2c:9f:79:01:a1:7e:1b:74:df:c8:52:58:89:c8: 59:39:d3:a0:8b:6f:7c:0e:1b:af:b3:c3:c3:54:85: 65:e6:2e:84:77:fd:c0:50:6d:61:1d:f5:63:31:5a: e5:9a:07:07:df:8b:ca:b0:e5:69:36:81:93:15:a8: 33:c4:2f:bb:87:02:7e:c8:0b:b2:36:7c:54:4e:35: 23:cd:d0:3f:5d:e4:7b:06:2d:8e:65:21:23:bc:1e: c5:78:23:50:e9:ef:19:ef:f8:ac:b9:f2:2e:8a:35: d0:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:08:C2:5E:E1:63:C3:6E:D6:B7:31:71:60:1A:18:36:48:2E:A5:EE X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/51cc20-1f81-4ee1-bd93-44d781ed62d4/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/51cc20-1f81-4ee1-bd93-44d781ed62d4/1/jQjCXuFjw27WtzFxYBoYNkgupe4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 206083 Signature Algorithm: sha256WithRSAEncryption 17:76:a4:e9:3a:75:1e:7b:39:1a:96:5d:a5:fd:27:1d:55:53: 8c:d3:e7:a0:ea:47:63:03:94:79:09:b9:19:55:be:b3:cc:23: 7d:34:a5:39:ae:7e:d6:b9:36:be:f1:9a:21:f6:00:8b:14:5d: cf:ad:49:c8:b1:ab:10:ad:4b:f0:9b:71:f2:d9:11:3d:fd:a7: dc:6c:91:f8:6c:4f:40:1b:eb:b1:e0:a3:09:4c:26:bb:cc:78: 6a:76:5e:be:8d:fe:5b:ef:94:17:d9:57:8e:8f:49:fd:b2:5e: 5f:dc:6d:91:a2:dd:06:39:8b:e6:9f:ba:ee:02:d2:dd:74:9b: a5:6d:49:d2:50:f5:fd:cc:41:f1:d9:85:f5:79:2f:75:3e:a7: f5:f4:2f:f9:bb:ce:27:45:f0:c1:91:05:50:bf:5b:26:89:2d: 2a:73:06:eb:b9:90:a4:b9:dc:d3:0e:b5:3c:08:aa:42:be:66: 2f:01:61:80:bb:d8:f0:3d:12:55:22:cf:eb:70:8c:40:4b:db: 6c:1e:6a:9e:a3:01:36:4e:fc:af:7b:56:ab:22:ea:84:cc:11: 91:9e:92:22:f6:e6:49:9e:3b:cd:27:9c:b2:08:74:02:ef:13: c4:b2:92:6e:27:90:4c:01:eb:f4:a6:ef:2c:0f:14:aa:bb:99: cd:d0:56:38 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt/hXRJmTR7dIb5q0zBsfV0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZDA4YzI1ZWUxNjNjMzZlZDZiNzMxNzE2MDFhMTgzNjQ4MmVhNWVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVBWvHbYbh5/1TcZ2IgrQ8QjQNCY 2aSc8ia1JEKUTABMzvE+qiWA4ytuBZqcoxRmeomp2mPXoIu839937UL5fYAyI+pw 85navccwINucImgkCg0MNefm0OFk/0lIENVV5mLOVMnUnqrW+pesq/TLacO/faGA 2vJqcodXMI0y79lxwG6h5RKgiUjlJJlZHIbfJqcrhS0TLJ95AaF+G3TfyFJYichZ OdOgi298Dhuvs8PDVIVl5i6Ed/3AUG1hHfVjMVrlmgcH34vKsOVpNoGTFagzxC+7 hwJ+yAuyNnxUTjUjzdA/XeR7Bi2OZSEjvB7FeCNQ6e8Z7/isufIuijXQywIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFI0Iwl7hY8Nu1rcxcWAaGDZILqXuMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YwLzUxY2My MC0xZjgxLTRlZTEtYmQ5My00NGQ3ODFlZDYyZDQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjAvNTFjYzIw LTFmODEtNGVlMS1iZDkzLTQ0ZDc4MWVkNjJkNC8xL2pRakNYdUZqdzI3V3R6RnhZ Qm9ZTmtndXBlNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMlAzANBgkqhkiG9w0BAQsFAAOCAQEAF3ak6Tp1Hns5 GpZdpf0nHVVTjNPnoOpHYwOUeQm5GVW+s8wjfTSlOa5+1rk2vvGaIfYAixRdz61J yLGrEK1L8Jtx8tkRPf2n3GyR+GxPQBvrseCjCUwmu8x4anZevo3+W++UF9lXjo9J /bJeX9xtkaLdBjmL5p+67gLS3XSbpW1J0lD1/cxB8dmF9XkvdT6n9fQv+bvOJ0Xw wZEFUL9bJoktKnMG67mQpLnc0w61PAiqQr5mLwFhgLvY8D0SVSLP63CMQEvbbB5q nqMBNk78r3tWqyLqhMwRkZ6SIvbmSZ47zSecsgh0Au8TxLKSbieQTAHr9KbvLA8U qruZzdBWOA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:52:19 2026 by rpki-client