This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jjA8wq-Dh4llJ3HDReB98-gNVE8.cer File: jjA8wq-Dh4llJ3HDReB98-gNVE8.cer (raw, json) Hash identifier: /2CFn7CLpCeqh38kB09TnP+sshRojKUy6jj/unvuNbs= Subject key identifier: 8E:30:3C:C2:AF:83:87:89:65:27:71:C3:45:E0:7D:F3:E8:0D:54:4F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78348864E70C3904C28D55AF6DFC67AB Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1c/9d1a4b-509a-4913-b937-d0adb11ded34/1/jjA8wq-Dh4llJ3HDReB98-gNVE8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1c/9d1a4b-509a-4913-b937-d0adb11ded34/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:17:47 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 201311 IP: 185.78.248.0/22 IP: 193.186.36.0/23 IP: 2a03:5b60::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:88:64:e7:0c:39:04:c2:8d:55:af:6d:fc:67:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8e303cc2af838789652771c345e07df3e80d544f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:16:8f:37:9a:23:06:9b:1e:c8:3c:61:d4:bd: e3:e3:8c:62:1a:59:44:ce:fa:31:09:ef:ac:38:37: 35:cc:d1:56:53:ba:47:af:c0:8f:32:19:5c:9c:0d: 19:7f:ca:1c:d9:b1:4f:e4:29:a1:e0:46:05:cc:a3: 4b:c0:ca:40:75:a9:c5:0c:0e:53:c2:33:ab:58:b7: b7:fd:de:f2:c6:cb:61:93:01:14:6d:f5:30:d1:ae: 97:dc:62:8d:db:68:50:05:b8:26:f6:1b:ac:89:a9: aa:bd:25:53:9c:92:40:ed:be:5c:1a:94:38:7e:64: 65:8d:e0:ae:43:ac:45:d3:1a:84:6b:d4:76:3d:36: d6:80:61:d7:6c:32:f9:e3:22:26:ae:ff:95:f9:07: 75:fc:9f:14:3f:52:1c:a0:ff:9e:e2:6a:77:5c:23: d7:09:5c:1e:dc:0d:10:98:83:71:e1:c7:33:68:ab: bb:3b:ce:e2:0a:3d:e4:04:b1:cd:5a:24:0b:86:d8: a7:b4:95:05:ae:e6:5e:c3:63:bf:a0:83:22:78:d5: 66:9e:05:b0:35:92:3f:35:90:98:c6:81:81:b1:9b: 51:37:a6:47:c5:d8:92:34:e8:64:5f:25:8b:13:e1: 88:05:2c:f3:dd:9f:f6:c1:22:15:1b:19:f1:05:2a: 91:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:30:3C:C2:AF:83:87:89:65:27:71:C3:45:E0:7D:F3:E8:0D:54:4F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/9d1a4b-509a-4913-b937-d0adb11ded34/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/9d1a4b-509a-4913-b937-d0adb11ded34/1/jjA8wq-Dh4llJ3HDReB98-gNVE8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.78.248.0/22 193.186.36.0/23 IPv6: 2a03:5b60::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 201311 Signature Algorithm: sha256WithRSAEncryption 75:e2:0f:b1:36:29:4f:26:b2:45:86:3e:63:75:7c:3b:83:2f: 6e:74:5b:05:54:44:78:3d:ab:91:04:b1:aa:02:f1:b8:60:49: 82:56:3d:b3:cd:c0:7d:05:9c:79:b6:ac:73:85:6a:b4:4d:da: 7f:5f:f3:a4:47:f6:56:23:2a:a1:b9:c7:a7:98:8b:94:5d:6b: e4:bf:97:4a:3a:cf:c4:b5:3b:fa:f7:45:ab:28:4a:21:48:93: ae:f3:bc:06:03:d7:c4:fe:8a:3f:09:36:41:e0:7f:97:ee:f6: d4:0b:ec:c0:4c:62:c9:10:22:9c:14:a4:0b:04:78:a4:c6:a0: 0b:59:15:59:6b:21:58:5e:40:a5:dd:10:b6:80:ef:0d:33:ef: 10:96:92:5c:37:aa:24:aa:0d:1b:68:f6:f7:33:03:87:2d:11: fe:9c:05:6a:35:62:9b:a9:1a:45:49:93:fc:00:8a:38:b5:2a: 45:3c:2c:8e:a8:bf:5e:58:37:d9:7d:9c:8d:de:2f:d1:e1:09: 29:e1:19:f6:88:6a:f2:e9:0b:d0:e2:8a:3b:c3:47:6b:a1:e1: cc:0f:93:be:28:83:65:f1:92:e1:00:02:a5:06:7c:37:2f:1d: 0f:de:7b:6c:77:9d:3c:83:1a:eb:48:c0:8e:47:2c:d3:83:99: 85:2c:02:28 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt4NIhk5ww5BMKNVa9t/GerMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZTMwM2NjMmFmODM4Nzg5NjUyNzcxYzM0NWUwN2RmM2U4MGQ1NDRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzhaPN5ojBpseyDxh1L3j44xiGllE zvoxCe+sODc1zNFWU7pHr8CPMhlcnA0Zf8oc2bFP5Cmh4EYFzKNLwMpAdanFDA5T wjOrWLe3/d7yxsthkwEUbfUw0a6X3GKN22hQBbgm9husiamqvSVTnJJA7b5cGpQ4 fmRljeCuQ6xF0xqEa9R2PTbWgGHXbDL54yImrv+V+Qd1/J8UP1IcoP+e4mp3XCPX CVwe3A0QmINx4cczaKu7O87iCj3kBLHNWiQLhtintJUFruZew2O/oIMieNVmngWw NZI/NZCYxoGBsZtRN6ZHxdiSNOhkXyWLE+GIBSzz3Z/2wSIVGxnxBSqRlQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFI4wPMKvg4eJZSdxw0XgffPoDVRPMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFjLzlkMWE0 Yi01MDlhLTQ5MTMtYjkzNy1kMGFkYjExZGVkMzQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWMvOWQxYTRi LTUwOWEtNDkxMy1iOTM3LWQwYWRiMTFkZWQzNC8xL2pqQTh3cS1EaDRsbEozSERS ZUI5OC1nTlZFOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCuU74AwQBwbokMA0EAgACMAcDBQAqA1tgMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMSXzANBgkqhkiG9w0BAQsFAAOCAQEAdeIP sTYpTyayRYY+Y3V8O4MvbnRbBVREeD2rkQSxqgLxuGBJglY9s83AfQWcebasc4Vq tE3af1/zpEf2ViMqobnHp5iLlF1r5L+XSjrPxLU7+vdFqyhKIUiTrvO8BgPXxP6K Pwk2QeB/l+721AvswExiyRAinBSkCwR4pMagC1kVWWshWF5Apd0QtoDvDTPvEJaS XDeqJKoNG2j29zMDhy0R/pwFajVim6kaRUmT/ACKOLUqRTwsjqi/Xlg32X2cjd4v 0eEJKeEZ9ohq8ukL0OKKO8NHa6HhzA+TviiDZfGS4QACpQZ8Ny8dD957bHedPIMa 60jAjkcs04OZhSwCKA== -----END CERTIFICATE-----Generated at Mon Feb 9 15:09:45 2026 by rpki-client