This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jlVrUrjk5wn6Vpta43LG4oJm8jI.cer File: jlVrUrjk5wn6Vpta43LG4oJm8jI.cer (raw, json) Hash identifier: hP7QO2+tZ53BmiPp+nIJVqhnKkpKsfzC4e7eOoPB4J4= Subject key identifier: 8E:55:6B:52:B8:E4:E7:09:FA:56:9B:5A:E3:72:C6:E2:82:66:F2:32 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB9C377B144671710B11D2A0100DFB Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/92/88f2a5-27e8-4671-a8d3-cde702c0ec8b/1/jlVrUrjk5wn6Vpta43LG4oJm8jI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/92/88f2a5-27e8-4671-a8d3-cde702c0ec8b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:31 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 48149 IP: 46.254.216.0/21 IP: 109.207.80.0/20 IP: 185.130.232.0/22 IP: 185.220.36.0/22 IP: 2001:678:1bc::/48 IP: 2a0b:ec40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:9c:37:7b:14:46:71:71:0b:11:d2:a0:10:0d:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8e556b52b8e4e709fa569b5ae372c6e28266f232 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ea:00:93:97:9e:32:65:f6:1f:88:e8:75:47: ba:44:b0:b4:b0:18:4c:38:a5:53:2f:ea:31:70:60: bf:18:7f:62:b8:a9:76:49:8b:3c:db:91:b7:4b:33: a4:05:99:ad:f8:f7:ae:77:87:db:6a:6d:38:da:9c: 99:8a:55:00:1b:e9:a0:c1:84:73:58:2b:86:07:32: 28:b2:07:5e:fe:2d:c1:53:42:e8:36:c8:90:fd:6f: 9f:2b:da:2b:17:fc:26:4c:72:8f:b4:ec:2f:b8:02: bb:cf:64:e2:0e:4f:19:d4:47:d2:de:ea:3c:01:2e: bb:d5:55:c6:a1:0e:72:86:0d:8d:a9:40:db:63:c3: 69:c9:c0:39:75:60:09:a0:fd:08:1c:76:70:d9:63: b7:90:ee:f3:76:9c:cf:f6:92:4c:b3:74:8c:ec:8f: 43:df:f5:1b:32:58:fb:03:42:21:6c:d3:ea:d0:e0: 73:f2:eb:71:71:b3:83:67:48:13:e3:90:1a:2f:30: a9:7c:e3:bb:91:25:3e:5b:23:ac:8b:c4:98:94:85: 39:83:86:94:33:97:be:88:1a:42:1e:80:c7:a2:6d: bf:fb:28:c5:6e:87:46:1f:2a:28:81:f3:42:a3:75: ca:b0:76:ae:87:f0:c4:06:13:15:8c:b1:af:7c:40: b4:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:55:6B:52:B8:E4:E7:09:FA:56:9B:5A:E3:72:C6:E2:82:66:F2:32 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/88f2a5-27e8-4671-a8d3-cde702c0ec8b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/88f2a5-27e8-4671-a8d3-cde702c0ec8b/1/jlVrUrjk5wn6Vpta43LG4oJm8jI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.254.216.0/21 109.207.80.0/20 185.130.232.0/22 185.220.36.0/22 IPv6: 2001:678:1bc::/48 2a0b:ec40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 48149 Signature Algorithm: sha256WithRSAEncryption 52:03:c6:87:9e:70:00:52:9c:cb:38:02:10:28:a4:9c:0e:a8: 02:74:72:1d:46:0c:20:9e:00:03:55:dd:b5:ba:a6:8b:46:b6: 4e:b0:0d:25:42:bb:ec:06:59:ab:d7:c6:b1:46:86:1c:ea:b1: 2a:1a:cb:f4:58:ac:84:27:49:87:ce:0e:41:d9:f8:60:fd:5f: e9:c9:9c:26:c2:9d:56:ca:18:f8:c4:68:89:5f:31:6f:df:40: 29:14:cd:a3:5c:0d:37:d7:f1:8b:6e:4e:83:31:7e:d0:35:75: 5e:8d:0c:2d:fc:0a:04:1d:f5:4b:d7:a7:d0:cd:46:97:ce:df: b4:1f:27:12:04:fa:7d:70:bc:de:cc:f5:65:ba:68:b8:31:6d: fd:01:b3:63:f3:44:86:a2:e0:6b:89:38:49:e0:94:ae:b1:29: ea:89:e2:32:eb:7d:2f:68:95:fd:c4:66:df:e9:f3:51:09:7e: fb:26:45:5a:6b:27:9b:f9:a1:4e:8e:bd:b9:0c:8f:50:14:8b: 89:c6:e9:0c:6c:9a:66:18:4c:b0:ac:1d:81:64:42:81:c8:51: b3:da:26:93:c5:42:72:8c:7a:31:87:84:02:b6:05:49:b0:1a: 7a:c2:e3:1f:62:be:9a:90:5b:6b:04:e2:57:09:38:9a:ca:52: 0c:35:69:60 -----BEGIN CERTIFICATE----- MIIFvjCCBKagAwIBAgISAZt265w3exRGcXELEdKgEA37MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZTU1NmI1MmI4ZTRlNzA5ZmE1NjliNWFlMzcyYzZlMjgyNjZmMjMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1uoAk5eeMmX2H4jodUe6RLC0sBhM OKVTL+oxcGC/GH9iuKl2SYs825G3SzOkBZmt+Peud4fbam042pyZilUAG+mgwYRz WCuGBzIosgde/i3BU0LoNsiQ/W+fK9orF/wmTHKPtOwvuAK7z2TiDk8Z1EfS3uo8 AS671VXGoQ5yhg2NqUDbY8NpycA5dWAJoP0IHHZw2WO3kO7zdpzP9pJMs3SM7I9D 3/UbMlj7A0IhbNPq0OBz8utxcbODZ0gT45AaLzCpfOO7kSU+WyOsi8SYlIU5g4aU M5e+iBpCHoDHom2/+yjFbodGHyoogfNCo3XKsHauh/DEBhMVjLGvfEC0VQIDAQAB o4ICyjCCAsYwHQYDVR0OBBYEFI5Va1K45OcJ+labWuNyxuKCZvIyMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkyLzg4ZjJh NS0yN2U4LTQ2NzEtYThkMy1jZGU3MDJjMGVjOGIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTIvODhmMmE1 LTI3ZTgtNDY3MS1hOGQzLWNkZTcwMmMwZWM4Yi8xL2psVnJVcmprNXduNlZwdGE0 M0xHNG9KbThqSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEkGCCsGAQUF BwEHAQH/BDowODAeBAIAATAYAwQDLv7YAwQEbc9QAwQCuYLoAwQCudwkMBYEAgAC MBADBwAgAQZ4AbwDBQMqC+xAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwC8FTAN BgkqhkiG9w0BAQsFAAOCAQEAUgPGh55wAFKcyzgCECiknA6oAnRyHUYMIJ4AA1Xd tbqmi0a2TrANJUK77AZZq9fGsUaGHOqxKhrL9FishCdJh84OQdn4YP1f6cmcJsKd VsoY+MRoiV8xb99AKRTNo1wNN9fxi25OgzF+0DV1Xo0MLfwKBB31S9en0M1Gl87f tB8nEgT6fXC83sz1ZbpouDFt/QGzY/NEhqLga4k4SeCUrrEp6oniMut9L2iV/cRm 3+nzUQl++yZFWmsnm/mhTo69uQyPUBSLicbpDGyaZhhMsKwdgWRCgchRs9omk8VC cox6MYeEArYFSbAaesLjH2K+mpBbawTiVwk4mspSDDVpYA== -----END CERTIFICATE-----Generated at Mon Feb 9 15:10:56 2026 by rpki-client