This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jV7D1aSGjjUxImKnxqqRRDWJPNg.cer File: jV7D1aSGjjUxImKnxqqRRDWJPNg.cer (raw, json) Hash identifier: oOXfV1FoNXAmZKGwTuuNmZHfL27OQUbn2Y0BHkTNQss= Subject key identifier: 8D:5E:C3:D5:A4:86:8E:35:31:22:62:A7:C6:AA:91:44:35:89:3C:D8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F157F6C4DC3009918191A257FFDF69A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/08/15265c-bf79-4ce1-9499-9af7cb386f80/1/jV7D1aSGjjUxImKnxqqRRDWJPNg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/08/15265c-bf79-4ce1-9499-9af7cb386f80/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:13 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.116.117.0/24 IP: 2a10:2b80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:7f:6c:4d:c3:00:99:18:19:1a:25:7f:fd:f6:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8d5ec3d5a4868e35312262a7c6aa914435893cd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b3:72:87:27:db:bd:ae:be:ed:a3:0b:c0:12: a3:5e:e9:91:d6:dd:f7:79:28:86:18:51:d8:b7:bc: ef:90:1d:20:95:97:ac:02:fe:3b:54:6e:d1:77:9a: 77:f4:c0:77:93:c5:0e:b0:17:66:15:6f:d2:1f:9e: 6c:33:23:85:33:53:c2:e7:3c:6d:76:2d:45:8c:1e: d7:9b:95:4e:48:20:07:04:21:f5:5a:f8:30:19:9e: 1f:da:df:57:83:22:03:dd:f3:7f:f7:18:e2:92:cf: fd:a0:42:3e:5d:3d:74:ba:ae:b4:0e:41:c7:7a:d3: cb:c2:83:d6:e1:02:db:e4:53:85:d4:8c:55:68:61: ff:16:52:3a:63:94:fc:b8:ba:68:8d:a9:cd:33:28: 7c:17:b2:49:2a:0e:c4:d4:62:bf:12:ac:1b:12:87: 37:13:29:c2:4d:67:bf:c2:e2:05:12:b9:ad:fc:87: ec:64:bd:2e:e6:7b:4d:17:0c:b7:1a:6e:f5:52:57: 08:7b:3d:8a:9c:03:cd:42:9b:0b:cd:09:88:28:6f: b4:5a:f4:fd:6c:3a:8d:72:fc:8a:9e:b3:bb:60:3c: 03:c2:7a:9b:d1:1a:87:29:62:74:ec:41:fb:80:8f: df:89:7d:60:57:80:7a:87:cf:4a:b6:3f:32:33:43: ea:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:5E:C3:D5:A4:86:8E:35:31:22:62:A7:C6:AA:91:44:35:89:3C:D8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/15265c-bf79-4ce1-9499-9af7cb386f80/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/15265c-bf79-4ce1-9499-9af7cb386f80/1/jV7D1aSGjjUxImKnxqqRRDWJPNg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.116.117.0/24 IPv6: 2a10:2b80::/29 Signature Algorithm: sha256WithRSAEncryption 76:ce:2a:47:03:ef:f5:23:59:e8:7f:2c:ec:44:e1:99:1a:29: 47:0f:53:bd:23:a8:8e:1a:e7:b8:bb:77:ba:31:6f:e8:ca:d1: 98:83:a8:75:d9:bb:a6:b5:80:8f:88:d0:24:04:da:58:06:23: e6:8a:2d:b7:40:7d:06:fa:75:e0:62:74:09:f4:87:77:cc:f5: 47:c1:05:db:c8:76:6b:2b:8c:cd:2c:32:d0:a1:5c:db:26:5c: e7:a7:73:c5:07:3a:92:42:42:29:77:93:6a:49:45:eb:37:41: 66:43:18:c0:cc:4d:63:37:2f:cc:0b:6d:36:96:cb:8d:51:d3: 1d:56:94:65:c5:8c:87:6a:75:0a:0e:ba:e9:c3:2f:38:ba:2c: 4e:bd:87:c5:cb:d3:26:ac:e5:95:5a:35:8c:42:6b:20:2f:3f: 2e:80:40:85:6f:52:90:b4:40:07:99:04:bb:7a:83:c8:7f:c6: 54:67:28:68:a8:04:7c:2f:fa:a3:50:4c:17:11:97:d2:45:01: d2:98:53:4b:78:f2:9d:9c:d4:a8:bb:9c:f0:a4:de:84:11:77: 3f:f5:31:b6:89:48:21:40:f5:96:07:74:db:91:d6:29:2f:fd: de:b1:37:96:14:5e:8b:c3:e6:b0:95:86:6f:c0:0d:ca:09:90: de:a2:a0:5c -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt/FX9sTcMAmRgZGiV//faaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZDVlYzNkNWE0ODY4ZTM1MzEyMjYyYTdjNmFhOTE0NDM1ODkzY2Q4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbNyhyfbva6+7aMLwBKjXumR1t33 eSiGGFHYt7zvkB0glZesAv47VG7Rd5p39MB3k8UOsBdmFW/SH55sMyOFM1PC5zxt di1FjB7Xm5VOSCAHBCH1WvgwGZ4f2t9XgyID3fN/9xjiks/9oEI+XT10uq60DkHH etPLwoPW4QLb5FOF1IxVaGH/FlI6Y5T8uLpojanNMyh8F7JJKg7E1GK/EqwbEoc3 EynCTWe/wuIFErmt/IfsZL0u5ntNFwy3Gm71UlcIez2KnAPNQpsLzQmIKG+0WvT9 bDqNcvyKnrO7YDwDwnqb0RqHKWJ07EH7gI/fiX1gV4B6h89Ktj8yM0PqWQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFI1ew9Wkho41MSJip8aqkUQ1iTzYMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA4LzE1MjY1 Yy1iZjc5LTRjZTEtOTQ5OS05YWY3Y2IzODZmODAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDgvMTUyNjVj LWJmNzktNGNlMS05NDk5LTlhZjdjYjM4NmY4MC8xL2pWN0QxYVNHampVeEltS254 cXFSUkRXSlBOZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAuXR1MA0EAgACMAcDBQMqECuAMA0GCSqGSIb3 DQEBCwUAA4IBAQB2zipHA+/1I1nofyzsROGZGilHD1O9I6iOGue4u3e6MW/oytGY g6h12bumtYCPiNAkBNpYBiPmii23QH0G+nXgYnQJ9Id3zPVHwQXbyHZrK4zNLDLQ oVzbJlznp3PFBzqSQkIpd5NqSUXrN0FmQxjAzE1jNy/MC202lsuNUdMdVpRlxYyH anUKDrrpwy84uixOvYfFy9MmrOWVWjWMQmsgLz8ugECFb1KQtEAHmQS7eoPIf8ZU ZyhoqAR8L/qjUEwXEZfSRQHSmFNLePKdnNSou5zwpN6EEXc/9TG2iUghQPWWB3Tb kdYpL/3esTeWFF6Lw+awlYZvwA3KCZDeoqBc -----END CERTIFICATE-----Generated at Mon Feb 9 15:12:16 2026 by rpki-client