This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jaArHaSqceZbb7m-I6ayCMJcV9g.cer File: jaArHaSqceZbb7m-I6ayCMJcV9g.cer (raw, json) Hash identifier: cC8CNWU2vtFc6SSWOd/ScdOWrVzCn4rD8BWn2sM9HGQ= Subject key identifier: 8D:A0:2B:1D:A4:AA:71:E6:5B:6F:B9:BE:23:A6:B2:08:C2:5C:57:D8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B775918C0E6DFB9A86A7C496914393020 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/56/dba6c5-20e5-4073-853a-c9e29deba244/1/jaArHaSqceZbb7m-I6ayCMJcV9g.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/56/dba6c5-20e5-4073-853a-c9e29deba244/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:18:06 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 208326 IP: 195.88.19.0/24 IP: 2a14:a80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:18:c0:e6:df:b9:a8:6a:7c:49:69:14:39:30:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8da02b1da4aa71e65b6fb9be23a6b208c25c57d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:0f:34:c3:45:0e:0c:df:6b:d8:dc:cd:5b:1e: 81:86:b6:cd:96:e6:1a:53:cf:19:0b:7d:93:33:98: 40:dc:57:cd:95:f0:ce:dd:51:f2:71:19:48:9b:2a: 44:df:7c:10:e7:43:28:b1:28:61:f0:84:d7:b6:a1: 77:62:1f:a6:dc:25:fc:76:7e:6b:ba:26:f2:d8:23: 4f:87:1a:c4:29:db:08:85:bf:7c:29:f3:15:72:05: 9d:51:e0:ef:62:33:fb:63:e7:d5:cf:ec:da:32:06: 7c:4f:2a:48:32:a6:a9:6a:67:3c:8a:3f:c1:c7:74: b8:10:35:67:53:90:94:00:9a:35:55:d8:d4:26:90: 2b:42:b9:20:72:0e:91:df:93:04:33:aa:c6:2f:ac: 1d:f2:32:fe:2e:7e:bd:4d:66:e5:eb:1e:a0:99:12: ca:26:dc:de:1e:62:75:33:f9:7d:d7:22:60:b6:d4: 7e:a3:5f:dd:94:ee:6d:81:c2:e7:73:e4:ba:f9:aa: 83:9a:b3:06:46:e7:e8:0f:64:03:18:1e:4c:70:9d: 33:86:1e:c5:d5:f8:8e:a6:73:12:9d:8a:be:ba:d7: b1:0d:88:2d:32:8e:d7:62:75:d3:ee:dc:20:ef:31: 1e:12:6d:45:35:cf:e6:86:5c:d8:b3:3a:72:75:92: 8b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:A0:2B:1D:A4:AA:71:E6:5B:6F:B9:BE:23:A6:B2:08:C2:5C:57:D8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/dba6c5-20e5-4073-853a-c9e29deba244/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/dba6c5-20e5-4073-853a-c9e29deba244/1/jaArHaSqceZbb7m-I6ayCMJcV9g.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.88.19.0/24 IPv6: 2a14:a80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 208326 Signature Algorithm: sha256WithRSAEncryption 65:4b:e9:fb:f4:23:77:e8:35:db:08:fe:2d:1a:2f:8b:a3:e6: 7e:19:0a:6f:9e:8d:18:1b:22:6f:b2:8e:f4:48:e0:4b:64:4e: 1a:05:05:a4:53:24:ca:42:23:0a:bf:50:f0:43:66:1c:8b:77: cd:ab:f1:cc:d3:dc:cc:3f:00:c0:b1:ec:89:cb:28:50:36:7b: 72:38:63:95:b4:82:65:cc:c6:b2:fb:79:8f:a9:28:a3:b1:3e: 92:5b:f2:a0:ee:9c:a6:2a:2f:48:a8:33:c3:14:a0:47:06:b7: 06:94:e8:90:5e:64:c3:fa:22:d8:31:38:2e:84:42:0f:b4:94: 03:50:66:ea:ae:00:e5:05:db:34:3a:48:cf:52:b8:7e:3f:19: 56:26:b7:59:61:9d:a1:bb:8d:72:6a:37:77:ca:a1:e4:05:cd: 87:df:11:52:c7:b3:39:ab:62:aa:43:3b:07:74:00:b8:72:75: cd:e0:8c:91:b7:cf:7c:5a:f6:b3:05:0e:e0:d4:10:43:60:5b: f0:58:35:86:5e:8a:a6:01:3f:0f:b9:1b:1f:82:08:8a:80:49: 8c:97:a4:1c:20:bc:b9:56:a4:ec:b5:e1:ab:87:2c:ee:35:f3: 56:f4:ae:33:f9:0c:77:ae:0a:d9:03:88:84:6c:3b:33:1d:cc: 20:6a:c3:f4 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt3WRjA5t+5qGp8SWkUOTAgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZGEwMmIxZGE0YWE3MWU2NWI2ZmI5YmUyM2E2YjIwOGMyNWM1N2Q4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0g80w0UODN9r2NzNWx6BhrbNluYa U88ZC32TM5hA3FfNlfDO3VHycRlImypE33wQ50MosShh8ITXtqF3Yh+m3CX8dn5r uiby2CNPhxrEKdsIhb98KfMVcgWdUeDvYjP7Y+fVz+zaMgZ8TypIMqapamc8ij/B x3S4EDVnU5CUAJo1VdjUJpArQrkgcg6R35MEM6rGL6wd8jL+Ln69TWbl6x6gmRLK JtzeHmJ1M/l91yJgttR+o1/dlO5tgcLnc+S6+aqDmrMGRufoD2QDGB5McJ0zhh7F 1fiOpnMSnYq+utexDYgtMo7XYnXT7twg7zEeEm1FNc/mhlzYszpydZKLLQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFI2gKx2kqnHmW2+5viOmsgjCXFfYMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU2L2RiYTZj NS0yMGU1LTQwNzMtODUzYS1jOWUyOWRlYmEyNDQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTYvZGJhNmM1 LTIwZTUtNDA3My04NTNhLWM5ZTI5ZGViYTI0NC8xL2phQXJIYVNxY2VaYmI3bS1J NmF5Q01KY1Y5Zy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAw1gTMA0EAgACMAcDBQMqFAqAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMtxjANBgkqhkiG9w0BAQsFAAOCAQEAZUvp+/Qjd+g1 2wj+LRovi6PmfhkKb56NGBsib7KO9EjgS2ROGgUFpFMkykIjCr9Q8ENmHIt3zavx zNPczD8AwLHsicsoUDZ7cjhjlbSCZczGsvt5j6koo7E+klvyoO6cpiovSKgzwxSg Rwa3BpTokF5kw/oi2DE4LoRCD7SUA1Bm6q4A5QXbNDpIz1K4fj8ZVia3WWGdobuN cmo3d8qh5AXNh98RUsezOatiqkM7B3QAuHJ1zeCMkbfPfFr2swUO4NQQQ2Bb8Fg1 hl6KpgE/D7kbH4IIioBJjJekHCC8uVak7LXhq4cs7jXzVvSuM/kMd64K2QOIhGw7 Mx3MIGrD9A== -----END CERTIFICATE-----Generated at Mon Feb 9 15:06:06 2026 by rpki-client