This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jZg6B-bbi8SUyI370TF7qBDS0no.cer File: jZg6B-bbi8SUyI370TF7qBDS0no.cer (raw, json) Hash identifier: XJyxBei/hYhOvjyK+BCjRO9kFl3/GdwtopPbZRegMl8= Subject key identifier: 8D:98:3A:07:E6:DB:8B:C4:94:C8:8D:FB:D1:31:7B:A8:10:D2:D2:7A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F13DD4BA52B9A831CBF4B1808FF2402 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/jZg6B-bbi8SUyI370TF7qBDS0no.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:19:26 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 212606 IP: 185.178.49.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:dd:4b:a5:2b:9a:83:1c:bf:4b:18:08:ff:24:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:19:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8d983a07e6db8bc494c88dfbd1317ba810d2d27a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ba:41:a1:e0:2c:62:e9:ac:d1:0c:bc:08:0f: 80:eb:0f:02:ca:8a:8d:75:f1:10:7b:a2:a9:eb:17: 9b:74:78:e4:25:73:67:01:15:08:de:38:6e:8b:24: 08:ec:ec:d3:9a:c1:99:76:68:71:d8:d5:e0:bc:b5: 2a:61:3c:aa:fe:ff:23:f4:d7:a9:0e:29:84:1f:33: f9:27:6c:f3:21:ae:8f:60:61:24:3e:06:8e:a2:0e: af:c7:93:77:0e:3b:96:f0:1c:ba:85:af:83:7b:4a: df:10:b2:1f:8a:03:11:43:74:c3:f7:5b:85:70:01: 2b:8e:fe:2d:a0:15:9b:52:79:65:2a:f1:5c:9e:a0: 80:31:f0:2b:f2:09:95:92:87:fc:46:e3:26:d0:18: e5:57:a3:aa:17:3f:b1:6e:33:b1:e5:e6:86:b3:52: bc:0f:7f:db:3c:b6:10:40:06:a4:07:13:56:c9:c8: 21:bb:6a:4a:a8:8c:bd:11:40:81:89:99:ed:f6:fd: 8c:f9:d8:3a:3a:5c:23:ae:56:7f:65:41:b0:99:91: 4d:d4:f9:35:09:8e:46:15:c0:be:4e:53:d0:93:68: 0a:ea:11:29:09:33:ca:7c:af:8b:25:83:b4:e0:d5: cb:e0:62:83:78:5c:a9:fb:bc:5c:70:a1:cc:16:78: 0a:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:98:3A:07:E6:DB:8B:C4:94:C8:8D:FB:D1:31:7B:A8:10:D2:D2:7A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/jZg6B-bbi8SUyI370TF7qBDS0no.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.178.49.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 212606 Signature Algorithm: sha256WithRSAEncryption 2c:a8:17:da:17:ca:87:e0:ae:4f:06:c9:87:17:f4:ca:7a:a0: 57:3f:52:87:7d:04:33:4f:9d:97:78:98:e1:fe:53:7a:b2:62: 12:54:05:db:0e:8f:03:61:a8:75:37:6b:72:ba:15:40:8e:0e: d1:54:f0:fc:b7:93:3a:9a:81:47:a0:dc:22:bc:b6:f4:58:2f: a0:49:f8:aa:9d:15:bc:95:9e:38:3f:3a:a2:3d:bc:08:be:07: 2d:84:fa:99:a2:e6:12:5c:36:36:3e:bd:cc:b4:d4:23:68:c9: 4d:40:05:24:67:af:fd:d6:b6:28:27:a6:41:ec:24:46:7e:ac: c1:aa:68:8e:0f:30:10:82:42:0f:ce:6a:3d:9e:24:80:2c:47: f9:ea:71:c5:f5:70:bd:35:47:b3:4e:0e:4c:cb:90:98:18:48: fc:24:c3:bd:6b:af:74:a8:1d:37:d8:c8:45:90:a0:e8:f1:40: c1:ae:bb:06:9e:39:a1:c5:60:c0:db:1f:0a:59:77:ea:47:dc: e6:a4:02:3a:ae:1c:4e:98:a3:9c:fe:09:66:89:d9:3e:27:1b: 9e:1b:ab:b2:84:35:e1:30:b6:82:cb:56:3b:2c:6c:b3:34:cf: b4:f9:b4:32:9e:da:f0:f0:d4:c2:2b:05:36:0a:2b:7e:12:c4: 1d:63:1f:f9 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt/E91LpSuagxy/SxgI/yQCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQxOTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZDk4M2EwN2U2ZGI4YmM0OTRjODhkZmJkMTMxN2JhODEwZDJkMjdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLpBoeAsYums0Qy8CA+A6w8CyoqN dfEQe6Kp6xebdHjkJXNnARUI3jhuiyQI7OzTmsGZdmhx2NXgvLUqYTyq/v8j9Nep DimEHzP5J2zzIa6PYGEkPgaOog6vx5N3DjuW8By6ha+De0rfELIfigMRQ3TD91uF cAErjv4toBWbUnllKvFcnqCAMfAr8gmVkof8RuMm0BjlV6OqFz+xbjOx5eaGs1K8 D3/bPLYQQAakBxNWycghu2pKqIy9EUCBiZnt9v2M+dg6OlwjrlZ/ZUGwmZFN1Pk1 CY5GFcC+TlPQk2gK6hEpCTPKfK+LJYO04NXL4GKDeFyp+7xccKHMFngK+QIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFI2YOgfm24vElMiN+9Exe6gQ0tJ6MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU4LzNmNWU4 Yy1kMzc3LTRmNDMtOGYyNC1kZTk3ZTkxNDFmZWQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTgvM2Y1ZThj LWQzNzctNGY0My04ZjI0LWRlOTdlOTE0MWZlZC8xL2paZzZCLWJiaThTVXlJMzcw VEY3cUJEUzBuby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAubIxMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwM+fjANBgkqhkiG9w0BAQsFAAOCAQEALKgX2hfKh+CuTwbJhxf0ynqgVz9Sh30E M0+dl3iY4f5TerJiElQF2w6PA2GodTdrcroVQI4O0VTw/LeTOpqBR6DcIry29Fgv oEn4qp0VvJWeOD86oj28CL4HLYT6maLmElw2Nj69zLTUI2jJTUAFJGev/da2KCem QewkRn6swapojg8wEIJCD85qPZ4kgCxH+epxxfVwvTVHs04OTMuQmBhI/CTDvWuv dKgdN9jIRZCg6PFAwa67Bp45ocVgwNsfCll36kfc5qQCOq4cTpijnP4JZonZPicb nhursoQ14TC2gstWOyxsszTPtPm0Mp7a8PDUwisFNgorfhLEHWMf+Q== -----END CERTIFICATE-----Generated at Mon Feb 9 16:52:21 2026 by rpki-client