This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jh_rawRLv2ERd1vKA41l5tIjDxQ.cer File: jh_rawRLv2ERd1vKA41l5tIjDxQ.cer (raw, json) Hash identifier: h0FfW7KXlXlFzAVQGxQt01OBCXqUhC0GhsLY7G7YxcY= Subject key identifier: 8E:1F:EB:6B:04:4B:BF:61:11:77:5B:CA:03:8D:65:E6:D2:23:0F:14 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C134AFBC9D7F2ACBA508BB3EBB0D486 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/jh_rawRLv2ERd1vKA41l5tIjDxQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:19:57 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 25308 AS: 204076 IP: 88.210.0.0 -- 88.210.2.255 IP: 88.210.4.0/23 IP: 88.210.7.0 -- 88.210.8.255 IP: 88.210.15.0 -- 88.210.19.255 IP: 88.210.22.0/23 IP: 88.210.28.0/24 IP: 88.210.30.0/23 IP: 88.210.40.0 -- 88.210.46.255 IP: 88.210.48.0/24 IP: 88.210.50.0/23 IP: 88.210.56.0/23 IP: 212.118.32.0 -- 212.118.34.255 IP: 212.118.44.0/24 IP: 212.118.46.0 -- 212.118.51.255 IP: 212.118.60.0/24 IP: 212.118.62.0/23 IP: 2a03:1800::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:4a:fb:c9:d7:f2:ac:ba:50:8b:b3:eb:b0:d4:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:19:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8e1feb6b044bbf6111775bca038d65e6d2230f14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:6b:21:82:a8:10:ff:46:c6:7d:29:aa:1f:78: 0b:81:01:ac:24:59:26:a7:96:a6:97:bc:34:95:28: 17:8e:81:c9:59:3b:46:c4:e0:5b:66:25:11:a8:c1: 6f:8d:6f:9c:e4:d2:42:27:33:84:d9:f6:9d:f4:a2: 31:75:e7:45:1e:04:c1:11:d0:7d:93:aa:f3:0e:65: 3f:5f:8a:22:cc:c8:3d:fb:44:da:cf:0c:c8:f7:f6: e3:84:6b:5e:a8:6c:46:30:55:ad:8c:c8:61:7f:f2: 76:e4:de:94:a4:96:c1:7d:17:57:7a:e1:e8:03:27: b8:80:91:4d:ef:8a:c3:e8:2d:db:38:41:e3:31:f0: f4:8d:1d:be:b8:46:7e:f3:f3:8b:13:fa:bc:d6:63: ed:3e:ee:13:4e:5d:af:73:d5:40:a7:aa:31:62:55: 8b:be:70:28:12:e6:e3:3d:48:17:cc:fe:5c:08:1f: 51:d7:de:15:cb:84:56:b7:58:4b:cc:f6:a4:f3:c5: c3:35:4a:24:f9:8c:ab:d1:34:e6:62:89:75:e5:65: 76:70:55:8d:a9:9f:92:fd:5c:3f:b0:51:c0:5f:ea: dc:49:bf:9d:b2:f6:c0:7a:de:72:b7:0b:7c:ee:69: bf:ee:03:a8:3a:9b:ad:93:4f:4f:6c:53:fd:23:7f: f6:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:1F:EB:6B:04:4B:BF:61:11:77:5B:CA:03:8D:65:E6:D2:23:0F:14 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/jh_rawRLv2ERd1vKA41l5tIjDxQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.210.0.0-88.210.2.255 88.210.4.0/23 88.210.7.0-88.210.8.255 88.210.15.0-88.210.19.255 88.210.22.0/23 88.210.28.0/24 88.210.30.0/23 88.210.40.0-88.210.46.255 88.210.48.0/24 88.210.50.0/23 88.210.56.0/23 212.118.32.0-212.118.34.255 212.118.44.0/24 212.118.46.0-212.118.51.255 212.118.60.0/24 212.118.62.0/23 IPv6: 2a03:1800::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 25308 204076 Signature Algorithm: sha256WithRSAEncryption 46:3e:49:a1:7b:21:68:ae:fe:ce:e8:65:9b:65:4c:d1:bf:ea: 53:7f:dc:e5:52:05:29:68:b9:9e:eb:e5:2d:70:e9:48:ed:44: 40:d4:e8:3e:f2:e1:57:af:49:95:9a:72:d5:33:db:94:a7:6a: 62:ee:7d:fc:39:4d:77:e2:59:19:18:8f:0c:4c:16:db:ea:b3: e2:8c:65:e5:25:be:43:2e:c4:a1:0f:96:5b:68:b9:12:3a:49: cd:17:b1:ee:98:fb:ea:ac:b9:bd:bd:99:fb:02:7f:13:f2:cf: 62:ba:20:76:ca:92:10:49:f4:a4:1f:2a:1d:f5:ce:11:a3:ec: 74:47:c0:de:14:30:c9:7c:5b:06:4b:27:80:c7:53:69:02:83: 5f:f1:30:e7:ff:7d:a6:80:1c:60:c8:13:e9:c0:3b:8a:86:bd: ae:88:13:35:45:c4:78:24:6c:12:d7:f8:ca:60:08:d6:5f:fd: 14:49:ce:49:8f:56:aa:89:1f:67:7e:ab:07:e8:f2:e7:76:fb: 96:6c:b8:b3:99:77:06:ba:ff:3c:76:6d:00:59:37:25:cd:38: d5:f8:79:cb:fd:92:f9:83:17:dd:f9:e7:3c:f8:7d:9b:ed:d7: 44:60:ab:ba:f3:51:37:27:5e:08:f6:fc:9d:1e:e1:31:bf:52: 0a:67:3d:42 -----BEGIN CERTIFICATE----- MIIGNTCCBR2gAwIBAgISAZt8E0r7ydfyrLpQi7PrsNSGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxOTU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZTFmZWI2YjA0NGJiZjYxMTE3NzViY2EwMzhkNjVlNmQyMjMwZjE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWshgqgQ/0bGfSmqH3gLgQGsJFkm p5aml7w0lSgXjoHJWTtGxOBbZiURqMFvjW+c5NJCJzOE2fad9KIxdedFHgTBEdB9 k6rzDmU/X4oizMg9+0TazwzI9/bjhGteqGxGMFWtjMhhf/J25N6UpJbBfRdXeuHo Aye4gJFN74rD6C3bOEHjMfD0jR2+uEZ+8/OLE/q81mPtPu4TTl2vc9VAp6oxYlWL vnAoEubjPUgXzP5cCB9R194Vy4RWt1hLzPak88XDNUok+Yyr0TTmYol15WV2cFWN qZ+S/Vw/sFHAX+rcSb+dsvbAet5ytwt87mm/7gOoOputk09PbFP9I3/21QIDAQAB o4IDQTCCAz0wHQYDVR0OBBYEFI4f62sES79hEXdbygONZebSIw8UMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I2LzdmMWYy OS0xMjQyLTQxZjQtYTA5MC0wZDhmY2UzZWJmYmIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjYvN2YxZjI5 LTEyNDItNDFmNC1hMDkwLTBkOGZjZTNlYmZiYi8xL2poX3Jhd1JMdjJFUmQxdktB NDFsNXRJakR4US5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIG7BggrBgEF BQcBBwEB/wSBqzCBqDCBlgQCAAEwgY8wCwMDAVjSAwQAWNICAwQBWNIEMAwDBABY 0gcDBABY0ggwDAMEAFjSDwMEAljSEAMEAVjSFgMEAFjSHAMEAVjSHjAMAwQDWNIo AwQAWNIuAwQAWNIwAwQBWNIyAwQBWNI4MAwDBAXUdiADBADUdiIDBADUdiwwDAME AdR2LgMEAtR2MAMEANR2PAMEAdR2PjANBAIAAjAHAwUAKgMYADAeBggrBgEFBQcB CAEB/wQPMA2gCzAJAgJi3AIDAx0sMA0GCSqGSIb3DQEBCwUAA4IBAQBGPkmheyFo rv7O6GWbZUzRv+pTf9zlUgUpaLme6+UtcOlI7URA1Og+8uFXr0mVmnLVM9uUp2pi 7n38OU134lkZGI8MTBbb6rPijGXlJb5DLsShD5ZbaLkSOknNF7HumPvqrLm9vZn7 An8T8s9iuiB2ypIQSfSkHyod9c4Ro+x0R8DeFDDJfFsGSyeAx1NpAoNf8TDn/32m gBxgyBPpwDuKhr2uiBM1RcR4JGwS1/jKYAjWX/0USc5Jj1aqiR9nfqsH6PLndvuW bLizmXcGuv88dm0AWTclzTjV+HnL/ZL5gxfd+ec8+H2b7ddEYKu681E3J14I9vyd HuExv1IKZz1C -----END CERTIFICATE-----Generated at Mon Feb 9 16:50:05 2026 by rpki-client