This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jZwH5-jehYsuaBPQD5s5kt9Tgn8.cer File: jZwH5-jehYsuaBPQD5s5kt9Tgn8.cer (raw, json) Hash identifier: Ul5/qFnjHqOf9bCuu5ICYXWpUp+Kul2IG+SefK/T83Q= Subject key identifier: 8D:9C:07:E7:E8:DE:85:8B:2E:68:13:D0:0F:9B:39:92:DF:53:82:7F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C127903B0E4F3F50757328D1C007BFC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7b/e14e2a-a0ea-43d9-b05f-f363c5138702/1/jZwH5-jehYsuaBPQD5s5kt9Tgn8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7b/e14e2a-a0ea-43d9-b05f-f363c5138702/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:19:04 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 206756 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:79:03:b0:e4:f3:f5:07:57:32:8d:1c:00:7b:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8d9c07e7e8de858b2e6813d00f9b3992df53827f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ce:79:94:1e:88:99:c8:de:23:e8:89:98:c8: 12:db:50:54:b3:3a:82:2f:bf:7e:fc:d1:15:a6:18: c4:4b:7e:ae:c7:c7:21:82:1e:dd:7c:5b:1c:3c:38: 72:26:6b:20:30:e6:61:a7:86:5a:ef:0b:a5:54:21: 80:be:0d:fa:c4:4e:9b:69:20:fc:04:d2:06:4a:f2: 78:c3:3c:8c:66:b3:98:3d:fa:0c:68:8f:e5:b7:58: b6:73:78:53:f8:a8:bd:69:18:17:9c:6c:1b:57:f1: f9:38:5d:d9:5c:50:54:ea:bd:0a:f1:92:36:b4:bc: 73:c7:fc:8d:f2:86:db:3e:c3:1e:77:1b:83:b5:c5: b3:26:9f:a2:92:ec:58:df:9b:9c:d7:3b:07:78:42: d4:d3:ec:d8:43:32:7a:f8:4b:df:9f:5e:9e:ea:37: 1f:3d:0a:3f:67:84:e6:5c:44:3e:2b:cf:02:3c:51: 83:1d:5a:19:c5:b6:5b:dd:94:2f:91:47:df:78:db: bd:a4:a1:c3:a4:83:a6:cb:87:84:28:f3:3f:b7:c7: 92:17:9b:49:43:68:f0:a0:3d:3f:cd:10:6b:77:c3: 1c:09:56:b8:d7:0c:cc:0a:f2:b1:fb:4f:4b:fa:4b: 71:b9:3e:3e:99:bd:15:d4:17:ab:07:f4:bb:b6:7d: df:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:9C:07:E7:E8:DE:85:8B:2E:68:13:D0:0F:9B:39:92:DF:53:82:7F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e14e2a-a0ea-43d9-b05f-f363c5138702/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e14e2a-a0ea-43d9-b05f-f363c5138702/1/jZwH5-jehYsuaBPQD5s5kt9Tgn8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 206756 Signature Algorithm: sha256WithRSAEncryption 12:34:e1:b9:3e:14:d6:68:3c:a9:16:fc:f6:c6:23:7e:bd:f7: 3e:f1:3c:6e:25:17:d3:b9:94:28:84:74:b8:2c:9a:1b:f7:d7: a8:1d:23:e7:ab:e8:e2:c3:d1:7e:8a:af:df:e8:85:e6:1c:af: 13:f6:54:f8:a7:4d:af:fc:b3:7c:23:59:fd:d6:68:76:6e:9c: e5:0c:41:96:31:2b:0a:3b:69:5f:5a:96:e5:ab:e1:2c:25:dd: e7:7d:04:de:f2:97:6a:8e:04:cb:41:98:6e:60:d9:90:91:c1: ba:37:ca:64:75:20:88:5a:dc:ab:2c:00:89:b4:bf:37:8e:61: a8:32:e4:3c:94:2e:07:99:ce:c7:bd:3b:fd:08:eb:32:53:4b: 77:f7:30:5c:41:3f:d8:09:da:f0:bf:2b:be:f4:03:3d:82:ee: a8:62:53:26:40:ab:bd:a7:64:70:3c:51:83:73:1e:f7:a5:cb: e6:8c:ff:3b:a0:0d:0a:b5:7c:79:5a:36:60:35:30:0c:f5:f3: 14:35:29:de:88:22:f8:59:ad:8b:02:14:fb:76:2c:5b:99:2d: 76:d4:4f:fa:fb:ea:25:e6:44:b4:96:b3:d1:2a:97:a5:29:82: d1:ab:fd:be:13:a4:9a:d4:c4:67:e3:7c:4c:61:8c:82:73:0d: a9:e5:a8:cc -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt8EnkDsOTz9QdXMo0cAHv8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZDljMDdlN2U4ZGU4NThiMmU2ODEzZDAwZjliMzk5MmRmNTM4MjdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs855lB6ImcjeI+iJmMgS21BUszqC L79+/NEVphjES36ux8chgh7dfFscPDhyJmsgMOZhp4Za7wulVCGAvg36xE6baSD8 BNIGSvJ4wzyMZrOYPfoMaI/lt1i2c3hT+Ki9aRgXnGwbV/H5OF3ZXFBU6r0K8ZI2 tLxzx/yN8obbPsMedxuDtcWzJp+ikuxY35uc1zsHeELU0+zYQzJ6+Evfn16e6jcf PQo/Z4TmXEQ+K88CPFGDHVoZxbZb3ZQvkUffeNu9pKHDpIOmy4eEKPM/t8eSF5tJ Q2jwoD0/zRBrd8McCVa41wzMCvKx+09L+ktxuT4+mb0V1BerB/S7tn3fBQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFI2cB+fo3oWLLmgT0A+bOZLfU4J/MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdiL2UxNGUy YS1hMGVhLTQzZDktYjA1Zi1mMzYzYzUxMzg3MDIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2IvZTE0ZTJh LWEwZWEtNDNkOS1iMDVmLWYzNjNjNTEzODcwMi8xL2pad0g1LWplaFlzdWFCUFFE NXM1a3Q5VGduOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMnpDANBgkqhkiG9w0BAQsFAAOCAQEAEjThuT4U1mg8 qRb89sYjfr33PvE8biUX07mUKIR0uCyaG/fXqB0j56vo4sPRfoqv3+iF5hyvE/ZU +KdNr/yzfCNZ/dZodm6c5QxBljErCjtpX1qW5avhLCXd530E3vKXao4Ey0GYbmDZ kJHBujfKZHUgiFrcqywAibS/N45hqDLkPJQuB5nOx707/QjrMlNLd/cwXEE/2Ana 8L8rvvQDPYLuqGJTJkCrvadkcDxRg3Me96XL5oz/O6ANCrV8eVo2YDUwDPXzFDUp 3ogi+FmtiwIU+3YsW5ktdtRP+vvqJeZEtJaz0SqXpSmC0av9vhOkmtTEZ+N8TGGM gnMNqeWozA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:56:18 2026 by rpki-client