This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jXcsVOPZCA6it45wNP2EG2dXzUQ.cer File: jXcsVOPZCA6it45wNP2EG2dXzUQ.cer (raw, json) Hash identifier: 9PPE0WnESXXcfJYPLIeiXShNn65Ammnb2D+3B0f42uw= Subject key identifier: 8D:77:2C:54:E3:D9:08:0E:A2:B7:8E:70:34:FD:84:1B:67:57:CD:44 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A372C21DBF76F89922E8A418DD9135 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.gxt.network/repo/gxt-as44822/0/8D772C54E3D9080EA2B78E7034FD841B6757CD44.mft caRepository: rsync://rpki.gxt.network/repo/gxt-as44822/0/ Notify URL: https://rpki.gxt.network/rrdp/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:56 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 44822 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:72:c2:1d:bf:76:f8:99:22:e8:a4:18:dd:91:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8d772c54e3d9080ea2b78e7034fd841b6757cd44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:3e:35:60:83:a5:e5:3a:6b:9d:5b:95:f1:f8: 24:3e:f4:ea:96:67:51:68:ab:d9:fa:fd:b5:41:05: de:93:0d:fc:b1:86:f2:de:2a:dd:a0:ef:d9:fa:4f: cd:b7:55:3f:ae:f8:1d:1f:8a:04:d8:3e:51:5e:6f: 60:ed:53:0a:67:ef:6a:23:93:98:db:02:82:6a:03: 12:10:a3:4e:fd:c2:4c:48:7d:e5:f5:a0:21:b3:dd: 4f:65:7e:75:97:aa:33:f4:91:e9:45:9b:0d:16:9a: 98:f4:1f:38:dc:c6:a3:44:09:bb:12:f6:a6:60:a9: e6:cb:90:86:d7:5f:e4:a8:d2:10:66:73:b0:49:e7: 35:eb:4f:8d:f5:1c:ff:18:b2:cb:a6:78:7c:18:57: 4c:ae:55:b4:66:28:cd:3a:35:b9:87:52:90:6a:03: e3:9e:36:3a:a3:c8:e2:3b:e0:d4:4f:4e:ab:fb:4c: 72:c9:3e:56:b5:5c:68:f2:45:26:90:77:6a:22:4e: 67:a0:75:5b:de:c6:65:43:dc:34:db:73:c3:fe:31: 9c:cc:b1:2e:b9:cc:c8:5d:3d:6f:94:92:ff:bb:05: ee:ba:b1:6a:5c:cb:d7:8e:02:93:ec:19:78:d1:36: bd:85:4c:1d:1e:42:6b:b5:27:b9:cf:c1:8f:89:24: 6a:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:77:2C:54:E3:D9:08:0E:A2:B7:8E:70:34:FD:84:1B:67:57:CD:44 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.gxt.network/repo/gxt-as44822/0/ RPKI Manifest - URI:rsync://rpki.gxt.network/repo/gxt-as44822/0/8D772C54E3D9080EA2B78E7034FD841B6757CD44.mft RPKI Notify - URI:https://rpki.gxt.network/rrdp/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 44822 Signature Algorithm: sha256WithRSAEncryption 84:66:56:a2:bc:66:11:46:43:73:13:06:48:be:0b:07:15:b0: 0e:08:12:3f:1c:18:c8:e0:d2:e8:d8:ba:5a:a4:a9:6f:e8:a2: ca:de:77:94:9c:6b:45:59:f9:d1:c4:a2:86:2d:d4:9a:57:c3: 97:e1:51:ca:17:3c:35:5b:1d:f1:39:30:1d:9b:8b:b8:90:d8: 2b:4d:d7:13:3d:b5:bd:8d:f1:ee:90:3e:5a:6d:12:2d:75:b2: d8:33:41:4b:a5:fa:9f:a9:d5:c4:1b:8d:93:ad:26:bb:4f:64: 63:ab:91:d1:14:80:c7:f3:47:15:3d:a1:02:c9:b4:ee:a8:db: 89:0f:7b:45:34:11:0a:8d:5b:52:b1:5a:39:95:87:33:29:d0: f8:d7:5b:96:fb:71:51:63:c9:c7:a7:26:bd:b2:01:55:10:8d: a4:00:f1:8f:5e:e2:70:0f:d4:0f:26:fd:62:e0:ab:fb:f4:cf: 04:2f:bf:9b:50:aa:c2:31:4e:d6:6d:12:e7:19:eb:06:ce:63: 6b:9c:cf:d6:b2:0a:d4:ec:54:1a:da:df:d9:fc:d3:2e:cb:9d: a9:eb:2d:22:fc:b2:33:2d:73:f4:cd:3e:20:76:9b:c3:4b:74: 82:b4:37:dc:37:6e:fc:94:6e:75:e6:d0:23:29:82:9c:1b:9a: d7:26:7d:3c -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgISAZt4o3LCHb92+Jki6KQY3ZE1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZDc3MmM1NGUzZDkwODBlYTJiNzhlNzAzNGZkODQxYjY3NTdjZDQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqz41YIOl5TprnVuV8fgkPvTqlmdR aKvZ+v21QQXekw38sYby3irdoO/Z+k/Nt1U/rvgdH4oE2D5RXm9g7VMKZ+9qI5OY 2wKCagMSEKNO/cJMSH3l9aAhs91PZX51l6oz9JHpRZsNFpqY9B843MajRAm7Evam YKnmy5CG11/kqNIQZnOwSec160+N9Rz/GLLLpnh8GFdMrlW0ZijNOjW5h1KQagPj njY6o8jiO+DUT06r+0xyyT5WtVxo8kUmkHdqIk5noHVb3sZlQ9w023PD/jGczLEu uczIXT1vlJL/uwXuurFqXMvXjgKT7Bl40Ta9hUwdHkJrtSe5z8GPiSRqVQIDAQAB o4ICRzCCAkMwHQYDVR0OBBYEFI13LFTj2QgOoreOcDT9hBtnV81EMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwgewGCCsGAQUFBwELBIHfMIHcMDgGCCsGAQUFBzAFhixyc3lu YzovL3Jwa2kuZ3h0Lm5ldHdvcmsvcmVwby9neHQtYXM0NDgyMi8wLzBkBggrBgEF BQcwCoZYcnN5bmM6Ly9ycGtpLmd4dC5uZXR3b3JrL3JlcG8vZ3h0LWFzNDQ4MjIv MC84RDc3MkM1NEUzRDkwODBFQTJCNzhFNzAzNEZEODQxQjY3NTdDRDQ0Lm1mdDA6 BggrBgEFBQcwDYYuaHR0cHM6Ly9ycGtpLmd4dC5uZXR3b3JrL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5u ZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVt ay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAaBggrBgEFBQcBCAEB/wQL MAmgBzAFAgMArxYwDQYJKoZIhvcNAQELBQADggEBAIRmVqK8ZhFGQ3MTBki+CwcV sA4IEj8cGMjg0ujYulqkqW/oosred5Sca0VZ+dHEooYt1JpXw5fhUcoXPDVbHfE5 MB2bi7iQ2CtN1xM9tb2N8e6QPlptEi11stgzQUul+p+p1cQbjZOtJrtPZGOrkdEU gMfzRxU9oQLJtO6o24kPe0U0EQqNW1KxWjmVhzMp0PjXW5b7cVFjycenJr2yAVUQ jaQA8Y9e4nAP1A8m/WLgq/v0zwQvv5tQqsIxTtZtEucZ6wbOY2ucz9ayCtTsVBra 39n80y7LnanrLSL8sjMtc/TNPiB2m8NLdIK0N9w3bvyUbnXm0CMpgpwbmtcmfTw= -----END CERTIFICATE-----Generated at Mon Feb 9 15:04:38 2026 by rpki-client