This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jTN8DIVpRrj72vKF9Syt3POK0Kg.cer File: jTN8DIVpRrj72vKF9Syt3POK0Kg.cer (raw, json) Hash identifier: tO01VppPfyPGGaE6wTvIlboOewfLH56CQ1Q9HveuOlg= Subject key identifier: 8D:33:7C:0C:85:69:46:B8:FB:DA:F2:85:F5:2C:AD:DC:F3:8A:D0:A8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7758C20EB213429A6899EC20D5C4B5D9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:17:44 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 213092 IP: 2001:678:d90::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:c2:0e:b2:13:42:9a:68:99:ec:20:d5:c4:b5:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8d337c0c856946b8fbdaf285f52caddcf38ad0a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:6a:00:58:8a:a6:9f:d2:e2:34:89:10:b4:50: 8a:4f:ee:c8:e0:b3:f2:1a:86:1a:61:a3:ef:36:c7: 5a:02:2a:17:44:ca:0b:11:0b:9a:50:50:48:f1:33: 65:27:51:7b:7b:21:83:d5:01:44:c7:08:78:3a:c6: 4a:6a:d8:31:f6:d8:ec:ab:c7:30:4a:3b:96:dd:a9: c3:51:0c:ad:09:cc:95:b0:2d:4d:10:4f:37:aa:8f: f9:b6:fa:81:1b:a3:38:12:1b:3d:bf:1c:cb:4c:70: cf:bf:b2:7d:73:a1:d9:ba:f7:30:d3:14:65:72:5b: 9d:92:cd:dd:57:42:91:ac:04:33:96:83:61:ca:fd: 31:e4:40:b3:75:90:cf:e3:53:8a:35:ab:f8:71:18: a2:11:6c:21:7e:04:6c:77:28:63:17:81:72:9b:df: d7:0b:ec:c2:65:41:6b:f1:fc:f7:77:a7:f1:bd:19: f6:b7:0e:e2:de:a0:1d:19:b9:c4:b8:9a:41:22:d6: b7:61:45:c4:8c:9a:c6:a3:37:d6:17:dc:a7:87:66: b3:ec:c7:c9:8b:ac:53:41:3c:5e:1a:0b:01:ac:43: 77:e1:08:6a:cc:c4:ba:b2:3a:da:fb:58:80:b6:74: f4:f1:2e:d1:4e:e2:9e:a6:f7:95:02:c2:cb:ba:86: 80:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:33:7C:0C:85:69:46:B8:FB:DA:F2:85:F5:2C:AD:DC:F3:8A:D0:A8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:d90::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 213092 Signature Algorithm: sha256WithRSAEncryption 74:d9:4d:cb:17:49:28:30:5b:ac:c5:57:94:cf:5a:11:50:0d: 43:c1:4d:dd:b6:71:4a:cb:3e:9e:db:26:44:f1:12:00:d4:0a: f6:3f:ec:62:33:ee:72:80:d0:0f:26:93:0a:19:ca:cb:0b:b3: 53:85:30:8a:a7:88:bb:d8:be:28:60:5a:01:69:dd:9d:5b:d6: 55:04:80:6d:18:f6:0c:bb:cf:02:02:65:97:49:84:1e:a7:57: d2:83:65:10:73:58:2d:f9:6c:c1:f5:38:db:27:e7:b7:e2:18: 3c:1f:fe:69:f6:ed:14:1b:14:d7:48:99:20:3a:89:0b:9b:1e: 34:08:8f:d6:c4:0f:55:90:a9:ac:7a:02:76:cd:3b:18:b1:29: 73:ad:2f:58:0f:15:52:41:2a:6f:4d:86:f3:59:fa:62:a3:66: 1e:2d:17:f8:ea:9c:82:8b:2e:cb:18:0c:2b:a1:87:de:f6:d2: 8b:cc:c6:96:bc:42:89:f9:43:4e:2b:83:f5:44:88:48:83:ce: 11:17:45:38:f7:ee:f2:16:67:49:4a:59:ba:b0:ee:24:f1:14: ad:31:7f:11:a1:c9:70:3f:4f:c5:0c:28:0b:1b:7a:2f:1b:50: d1:f2:9e:fc:9a:c1:ae:e5:5a:24:50:4e:c2:7d:67:b2:9a:2c: 8c:e9:95:1b -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZt3WMIOshNCmmiZ7CDVxLXZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZDMzN2MwYzg1Njk0NmI4ZmJkYWYyODVmNTJjYWRkY2YzOGFkMGE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGoAWIqmn9LiNIkQtFCKT+7I4LPy GoYaYaPvNsdaAioXRMoLEQuaUFBI8TNlJ1F7eyGD1QFExwh4OsZKatgx9tjsq8cw SjuW3anDUQytCcyVsC1NEE83qo/5tvqBG6M4Ehs9vxzLTHDPv7J9c6HZuvcw0xRl cludks3dV0KRrAQzloNhyv0x5ECzdZDP41OKNav4cRiiEWwhfgRsdyhjF4Fym9/X C+zCZUFr8fz3d6fxvRn2tw7i3qAdGbnEuJpBIta3YUXEjJrGozfWF9ynh2az7MfJ i6xTQTxeGgsBrEN34QhqzMS6sjra+1iAtnT08S7RTuKepveVAsLLuoaAowIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFI0zfAyFaUa4+9ryhfUsrdzzitCoMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk2LzVjOWJk OS0wOWFkLTRmYWMtYmJiYy0zZjE1Zjg4MzZkYmIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTYvNWM5YmQ5 LTA5YWQtNGZhYy1iYmJjLTNmMTVmODgzNmRiYi8xL2pUTjhESVZwUnJqNzJ2S0Y5 U3l0M1BPSzBLZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeA2QMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwNAZDANBgkqhkiG9w0BAQsFAAOCAQEAdNlNyxdJKDBbrMVXlM9aEVANQ8FN 3bZxSss+ntsmRPESANQK9j/sYjPucoDQDyaTChnKywuzU4UwiqeIu9i+KGBaAWnd nVvWVQSAbRj2DLvPAgJll0mEHqdX0oNlEHNYLflswfU42yfnt+IYPB/+afbtFBsU 10iZIDqJC5seNAiP1sQPVZCprHoCds07GLEpc60vWA8VUkEqb02G81n6YqNmHi0X +OqcgosuyxgMK6GH3vbSi8zGlrxCiflDTiuD9USISIPOERdFOPfu8hZnSUpZurDu JPEUrTF/EaHJcD9PxQwoCxt6LxtQ0fKe/JrBruVaJFBOwn1nsposjOmVGw== -----END CERTIFICATE-----Generated at Mon Feb 9 20:55:30 2026 by rpki-client