This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jkFZeSO5geHA1Pyi_9CozcNme30.cer File: jkFZeSO5geHA1Pyi_9CozcNme30.cer (raw, json) Hash identifier: C2vL06ty3AfYvhIHDfhw2o57mo/g6hRDw0kPlExtgjQ= Subject key identifier: 8E:41:59:79:23:B9:81:E1:C0:D4:FC:A2:FF:D0:A8:CD:C3:66:7B:7D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797E571AD22C8747C076313AE7A61D02 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6e/c96090-91d4-4403-bbfd-47ba33ba3c05/1/jkFZeSO5geHA1Pyi_9CozcNme30.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6e/c96090-91d4-4403-bbfd-47ba33ba3c05/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:01 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 158.94.0.0/19 IP: 158.94.224.0/19 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:57:1a:d2:2c:87:47:c0:76:31:3a:e7:a6:1d:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8e41597923b981e1c0d4fca2ffd0a8cdc3667b7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:ea:e4:8f:c9:be:30:99:63:d7:86:da:20:0f: 5a:a7:f8:99:17:3d:7d:85:af:32:f6:dc:30:7b:36: 20:5c:66:3c:b7:35:79:c0:42:e5:c3:c0:88:04:57: a7:b8:6e:c5:29:9f:f8:72:a4:86:fe:d4:49:6e:66: f6:4b:26:6d:59:ec:13:d6:e7:1a:8a:c1:b1:21:33: 38:cd:13:fb:00:01:d9:9c:69:9c:3a:af:1a:ff:de: bc:66:67:e0:48:db:24:4a:47:9c:cc:35:61:0d:43: 73:e7:35:05:6c:de:20:a9:53:a5:7b:3b:0a:62:95: 5b:90:6e:f1:d1:f6:32:bd:08:66:a7:47:9b:23:10: cc:50:f0:86:4f:fd:d3:3c:85:b3:c1:ab:c6:70:80: c8:df:1f:41:29:fc:f1:58:68:76:4b:4c:d0:46:1a: 3b:75:92:a8:25:ac:ce:6f:7f:3c:fe:0f:75:06:3d: d1:a1:d3:8b:60:ca:a6:c2:77:06:ba:22:fc:57:83: 36:18:50:35:bd:02:95:de:cf:51:da:97:df:89:87: 2f:44:a9:60:29:d5:3f:ce:45:ce:04:41:15:46:29: 1c:5d:fa:c6:96:10:3a:a8:4d:26:3e:66:b9:24:d1: 47:17:23:f1:24:e0:5d:54:78:c3:e9:9e:f5:da:ac: a0:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:41:59:79:23:B9:81:E1:C0:D4:FC:A2:FF:D0:A8:CD:C3:66:7B:7D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c96090-91d4-4403-bbfd-47ba33ba3c05/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c96090-91d4-4403-bbfd-47ba33ba3c05/1/jkFZeSO5geHA1Pyi_9CozcNme30.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 158.94.0.0/19 158.94.224.0/19 Signature Algorithm: sha256WithRSAEncryption 4f:b7:e7:11:8e:67:ea:84:07:de:8c:24:94:39:bc:69:45:1b: fd:21:47:e3:62:96:fe:67:58:db:12:20:f2:5d:bc:43:a0:27: 2c:79:a3:7e:bc:3c:da:af:4b:1e:ec:a2:98:bc:c8:7b:46:55: fe:c8:36:da:9b:d6:74:2a:67:ca:b8:b8:6c:74:4f:13:90:0a: 50:39:c5:ef:c2:bc:73:4a:ed:97:bd:c5:2d:9e:2d:94:5e:b0: 68:6e:08:4c:b7:cb:78:af:91:9f:fc:23:8f:c6:8a:02:15:f1: 52:b1:44:da:07:86:1a:8d:13:41:28:13:17:8b:3d:db:a4:6b: b9:16:9e:99:9c:d4:ac:41:8f:ca:cc:52:b7:09:d4:f2:9b:e0: e9:8a:54:d7:fd:b7:bb:af:30:37:cf:ad:03:3f:1b:b7:23:db: c3:35:e8:69:12:9d:59:ee:5b:c2:f7:75:75:47:68:35:54:ae: 9d:07:6a:da:aa:44:4f:13:df:f6:52:96:7a:aa:a1:35:b1:82: 72:d4:32:e1:63:34:38:1c:53:e3:1d:9e:b9:bd:22:fc:6c:46: 44:17:6f:09:a6:03:37:08:74:c6:f0:2b:99:ad:6c:41:21:76: d9:57:b4:7e:5a:78:64:67:f8:30:df:fd:ed:5e:d0:c8:27:04: 41:40:d2:6c -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgISAZt5flca0iyHR8B2MTrnph0CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZTQxNTk3OTIzYjk4MWUxYzBkNGZjYTJmZmQwYThjZGMzNjY3YjdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+rkj8m+MJlj14baIA9ap/iZFz19 ha8y9twwezYgXGY8tzV5wELlw8CIBFenuG7FKZ/4cqSG/tRJbmb2SyZtWewT1uca isGxITM4zRP7AAHZnGmcOq8a/968ZmfgSNskSkeczDVhDUNz5zUFbN4gqVOlezsK YpVbkG7x0fYyvQhmp0ebIxDMUPCGT/3TPIWzwavGcIDI3x9BKfzxWGh2S0zQRho7 dZKoJazOb388/g91Bj3RodOLYMqmwncGuiL8V4M2GFA1vQKV3s9R2pffiYcvRKlg KdU/zkXOBEEVRikcXfrGlhA6qE0mPma5JNFHFyPxJOBdVHjD6Z712qygFQIDAQAB o4ICijCCAoYwHQYDVR0OBBYEFI5BWXkjuYHhwNT8ov/QqM3DZnt9MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZlL2M5NjA5 MC05MWQ0LTQ0MDMtYmJmZC00N2JhMzNiYTNjMDUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmUvYzk2MDkw LTkxZDQtNDQwMy1iYmZkLTQ3YmEzM2JhM2MwNS8xL2prRlplU081Z2VIQTFQeWlf OUNvemNObWUzMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQFnl4AAwQFnl7gMA0GCSqGSIb3DQEBCwUAA4IB AQBPt+cRjmfqhAfejCSUObxpRRv9IUfjYpb+Z1jbEiDyXbxDoCcseaN+vDzar0se 7KKYvMh7RlX+yDbam9Z0KmfKuLhsdE8TkApQOcXvwrxzSu2XvcUtni2UXrBobghM t8t4r5Gf/COPxooCFfFSsUTaB4YajRNBKBMXiz3bpGu5Fp6ZnNSsQY/KzFK3CdTy m+DpilTX/be7rzA3z60DPxu3I9vDNehpEp1Z7lvC93V1R2g1VK6dB2raqkRPE9/2 UpZ6qqE1sYJy1DLhYzQ4HFPjHZ65vSL8bEZEF28JpgM3CHTG8CuZrWxBIXbZV7R+ WnhkZ/gw3/3tXtDIJwRBQNJs -----END CERTIFICATE-----Generated at Mon Feb 9 19:41:09 2026 by rpki-client