This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jR3ulkqib4m9ECJ21GVjP7guqig.cer File: jR3ulkqib4m9ECJ21GVjP7guqig.cer (raw, json) Hash identifier: uim4UKP/ZAbrGd5HRol8pct5FrtqAk1cmNFsE58WtLo= Subject key identifier: 8D:1D:EE:96:4A:A2:6F:89:BD:10:22:76:D4:65:63:3F:B8:2E:AA:28 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEE6A54A0D57A3A9F1DDD1EFFAC7A48 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a3/549363-1229-4114-a996-259420d32472/1/jR3ulkqib4m9ECJ21GVjP7guqig.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a3/549363-1229-4114-a996-259420d32472/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:19:18 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 109.234.77.0/24 IP: 193.246.123.0/24 IP: 2a09:64c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:6a:54:a0:d5:7a:3a:9f:1d:dd:1e:ff:ac:7a:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:19:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8d1dee964aa26f89bd102276d465633fb82eaa28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d8:d3:a7:a3:6c:ef:70:71:84:fc:8b:11:1c: e1:3b:af:92:db:e7:66:7a:48:27:95:14:3d:71:7d: 57:e8:ed:25:b0:1c:ed:87:d3:76:8c:23:99:5d:ba: 3d:97:d0:7d:5a:32:38:07:a7:4e:03:95:21:07:3b: cd:e7:99:83:d1:a3:22:40:5b:11:1d:f1:34:a1:cf: f1:d6:09:4c:c0:3c:74:83:1b:ad:bf:b7:b7:c4:43: 19:f3:5d:22:1b:0a:33:93:d0:68:f2:1d:11:c4:6a: a4:a8:28:ad:d7:bb:b2:88:9a:76:5e:32:31:e2:1d: 1b:1a:54:f6:6b:dc:52:f6:1e:e0:d9:8c:ce:97:03: aa:fa:5a:7f:4e:19:93:1e:83:e2:54:84:4d:af:5e: a9:e6:f2:f0:84:be:cf:04:0e:9e:2a:d9:f2:ef:a7: 9a:4a:40:c9:9c:c9:c6:57:66:c9:59:9e:92:3d:33: 70:44:ec:d4:4e:10:94:40:a7:c6:91:a2:1d:cc:05: 04:92:91:54:fe:3a:23:2c:21:bb:c2:88:df:84:54: 6b:f2:46:66:ff:45:e9:59:42:30:14:62:30:59:8b: cc:dd:c1:85:46:a1:52:18:62:83:8a:a5:fb:c8:50: 0e:a9:02:18:5c:b2:77:30:7f:5f:9a:21:38:2a:fd: 65:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:1D:EE:96:4A:A2:6F:89:BD:10:22:76:D4:65:63:3F:B8:2E:AA:28 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/549363-1229-4114-a996-259420d32472/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/549363-1229-4114-a996-259420d32472/1/jR3ulkqib4m9ECJ21GVjP7guqig.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.234.77.0/24 193.246.123.0/24 IPv6: 2a09:64c0::/29 Signature Algorithm: sha256WithRSAEncryption 8f:4e:11:66:42:02:fa:68:d1:53:80:5d:a8:7a:06:0e:4e:39: 43:cc:f6:e7:23:9c:9f:a7:ec:60:1e:3f:5f:c5:22:37:e7:dc: 88:93:60:cd:1d:07:6a:68:21:bc:b5:0e:3c:ae:b9:28:52:16: df:a9:66:ca:40:53:85:ff:e8:29:49:6d:69:4c:be:d8:66:6c: 6c:89:e8:7e:ee:86:8c:cb:d2:0f:25:40:b9:14:fc:2c:32:79: 4a:e3:75:b0:3e:92:6d:53:ab:66:c7:8b:a9:94:b9:c5:b3:55: a0:70:e6:8c:6b:fc:64:67:47:ad:d0:90:f5:c8:92:4f:1f:1a: 82:b0:63:5e:03:aa:c3:19:2b:4e:84:f9:08:f4:5a:cf:16:29: 13:b9:77:0d:19:65:79:4e:95:96:ea:9e:df:83:c0:1f:c6:dd: a3:ee:cf:1a:ed:4a:0f:65:96:74:1a:18:97:bf:f2:d8:b2:01: 0f:b0:b4:f6:ce:1a:88:df:b2:c2:85:b6:0a:cf:ff:e6:e9:ac: dd:58:f5:65:06:63:f3:5b:29:75:84:05:a8:d3:15:2d:d6:d0: 42:97:98:2a:0b:cf:5c:03:62:ee:da:1e:15:33:c2:61:9c:c3: 07:62:9f:2d:89:4a:2a:bf:13:be:37:f7:02:b1:63:6f:12:d5: 5d:d4:a3:1d -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgISAZt87mpUoNV6Op8d3R7/rHpIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxOTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZDFkZWU5NjRhYTI2Zjg5YmQxMDIyNzZkNDY1NjMzZmI4MmVhYTI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdjTp6Ns73BxhPyLERzhO6+S2+dm ekgnlRQ9cX1X6O0lsBzth9N2jCOZXbo9l9B9WjI4B6dOA5UhBzvN55mD0aMiQFsR HfE0oc/x1glMwDx0gxutv7e3xEMZ810iGwozk9Bo8h0RxGqkqCit17uyiJp2XjIx 4h0bGlT2a9xS9h7g2YzOlwOq+lp/ThmTHoPiVIRNr16p5vLwhL7PBA6eKtny76ea SkDJnMnGV2bJWZ6SPTNwROzUThCUQKfGkaIdzAUEkpFU/jojLCG7wojfhFRr8kZm /0XpWUIwFGIwWYvM3cGFRqFSGGKDiqX7yFAOqQIYXLJ3MH9fmiE4Kv1l6QIDAQAB o4ICmTCCApUwHQYDVR0OBBYEFI0d7pZKom+JvRAidtRlYz+4LqooMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2EzLzU0OTM2 My0xMjI5LTQxMTQtYTk5Ni0yNTk0MjBkMzI0NzIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTMvNTQ5MzYz LTEyMjktNDExNC1hOTk2LTI1OTQyMGQzMjQ3Mi8xL2pSM3Vsa3FpYjRtOUVDSjIx R1ZqUDdndXFpZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQAbepNAwQAwfZ7MA0EAgACMAcDBQMqCWTAMA0G CSqGSIb3DQEBCwUAA4IBAQCPThFmQgL6aNFTgF2oegYOTjlDzPbnI5yfp+xgHj9f xSI359yIk2DNHQdqaCG8tQ48rrkoUhbfqWbKQFOF/+gpSW1pTL7YZmxsieh+7oaM y9IPJUC5FPwsMnlK43WwPpJtU6tmx4uplLnFs1WgcOaMa/xkZ0et0JD1yJJPHxqC sGNeA6rDGStOhPkI9FrPFikTuXcNGWV5TpWW6p7fg8Afxt2j7s8a7UoPZZZ0GhiX v/LYsgEPsLT2zhqI37LChbYKz//m6azdWPVlBmPzWyl1hAWo0xUt1tBCl5gqC89c A2Lu2h4VM8JhnMMHYp8tiUoqvxO+N/cCsWNvEtVd1KMd -----END CERTIFICATE-----Generated at Mon Feb 9 15:07:05 2026 by rpki-client