This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jlexRHZCwU8RwEtkHPHY3orax4Q.cer File: jlexRHZCwU8RwEtkHPHY3orax4Q.cer (raw, json) Hash identifier: rNaB3GhJlAahX8a37vW2Rhqm5JnCpb5XcnEEVU2myuc= Subject key identifier: 8E:57:B1:44:76:42:C1:4F:11:C0:4B:64:1C:F1:D8:DE:8A:DA:C7:84 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA6428B8D5A41DF2F1D46C10B157ACB Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:19:43 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 35213 AS: 205239 IP: 91.201.168.0/24 IP: 91.205.64.0/22 IP: 91.229.101.0/24 IP: 91.239.136.0/22 IP: 176.111.51.0/24 IP: 193.0.247.0/24 IP: 2001:678:31c::/48 IP: 2a13:61c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:42:8b:8d:5a:41:df:2f:1d:46:c1:0b:15:7a:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:19:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8e57b1447642c14f11c04b641cf1d8de8adac784 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:6f:2d:1e:46:28:5a:15:21:98:1b:b0:da:9f: 2f:37:d0:2b:f1:78:05:87:08:1a:6f:63:55:27:f4: b8:51:86:e1:fb:96:6c:24:fc:6d:43:35:1a:44:64: 06:34:85:33:7e:c8:99:e4:08:98:5f:db:8b:e6:ef: e9:63:5b:f2:a5:38:b5:5b:dc:1b:38:c3:21:94:40: 13:e1:de:80:a4:8c:ee:0a:88:38:83:39:12:28:49: 1d:e0:f9:4d:7a:72:fa:bf:71:d0:36:6a:e7:11:3b: bd:7f:98:9c:a3:77:b2:e3:ec:2e:19:b0:fc:2e:6e: c0:c2:7a:b5:44:b1:5c:c6:6d:5d:3f:59:c5:dc:6d: a4:ee:dd:a2:44:fc:91:bb:5f:06:7b:e9:14:f5:e7: 24:26:e4:6b:f3:3b:f6:1c:7e:0f:8e:44:7c:1f:d9: 5e:4d:57:7d:6d:bb:7e:18:47:de:b8:07:21:29:64: 3d:c3:3a:b6:09:61:25:20:eb:27:ba:25:bd:98:3d: c6:5b:07:28:df:44:63:05:fa:26:6a:df:30:07:d8: ef:6f:4c:56:72:c5:74:64:48:46:df:8b:98:39:c9: 78:61:b9:8d:84:d7:28:64:5d:21:ea:ae:12:c3:66: e4:7c:df:8c:3b:bb:8b:0c:b8:fc:ad:b0:3d:71:35: ce:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:57:B1:44:76:42:C1:4F:11:C0:4B:64:1C:F1:D8:DE:8A:DA:C7:84 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.201.168.0/24 91.205.64.0/22 91.229.101.0/24 91.239.136.0/22 176.111.51.0/24 193.0.247.0/24 IPv6: 2001:678:31c::/48 2a13:61c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 35213 205239 Signature Algorithm: sha256WithRSAEncryption 46:3b:1f:b8:fd:9b:12:12:da:77:80:72:04:d3:76:42:14:af: 64:b7:ef:d6:53:ad:43:20:6c:eb:54:35:36:18:ae:97:32:97: db:7a:cc:a7:5f:b4:14:85:59:e7:2f:35:1a:0c:5c:b1:cb:6f: 0e:64:ff:5e:a6:b9:e9:c8:ed:d3:12:ef:43:7f:78:fc:19:93: d4:de:90:56:d8:8d:53:30:64:08:45:00:a3:ff:08:91:3f:46: 93:a0:e0:48:78:6f:d9:29:29:67:32:ed:ee:f3:42:82:36:f8: e6:11:35:f1:27:4c:b5:ab:9f:83:3d:0d:d7:01:bf:2e:b5:22: ec:57:8b:46:29:c6:23:1c:41:db:16:c6:36:b5:00:74:e6:73: 74:31:d9:89:90:e9:6e:8a:35:ad:4c:25:14:f8:a5:40:74:8a: d8:6b:e1:7d:8c:cd:26:c7:bf:8b:ab:8a:ec:c6:16:0b:49:55: f3:0e:76:67:44:9f:cc:af:78:89:75:33:d1:95:23:50:16:35: 59:9b:01:f1:b7:6a:6e:9b:bf:ec:16:78:cc:b0:91:20:ff:02: 7f:df:fb:64:41:0c:77:7e:56:d5:53:23:48:f4:39:56:4a:61: 33:4d:3d:65:0e:e3:4c:c8:68:0c:71:83:28:7a:a6:f6:63:58: 6c:ce:01:2f -----BEGIN CERTIFICATE----- MIIFzzCCBLegAwIBAgISAZt+pkKLjVpB3y8dRsELFXrLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIxOTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZTU3YjE0NDc2NDJjMTRmMTFjMDRiNjQxY2YxZDhkZThhZGFjNzg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkm8tHkYoWhUhmBuw2p8vN9Ar8XgF hwgab2NVJ/S4UYbh+5ZsJPxtQzUaRGQGNIUzfsiZ5AiYX9uL5u/pY1vypTi1W9wb OMMhlEAT4d6ApIzuCog4gzkSKEkd4PlNenL6v3HQNmrnETu9f5ico3ey4+wuGbD8 Lm7Awnq1RLFcxm1dP1nF3G2k7t2iRPyRu18Ge+kU9eckJuRr8zv2HH4PjkR8H9le TVd9bbt+GEfeuAchKWQ9wzq2CWElIOsnuiW9mD3GWwco30RjBfomat8wB9jvb0xW csV0ZEhG34uYOcl4YbmNhNcoZF0h6q4Sw2bkfN+MO7uLDLj8rbA9cTXOowIDAQAB o4IC2zCCAtcwHQYDVR0OBBYEFI5XsUR2QsFPEcBLZBzx2N6K2seEMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q4L2UxYzdj OS1jYzgwLTQ1ZDctYTZkOC1hZjMzNGEwYTFlOTMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDgvZTFjN2M5 LWNjODAtNDVkNy1hNmQ4LWFmMzM0YTBhMWU5My8xL2psZXhSSFpDd1U4UndFdGtI UEhZM29yYXg0US5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFUGCCsGAQUF BwEHAQH/BEYwRDAqBAIAATAkAwQAW8moAwQCW81AAwQAW+VlAwQCW++IAwQAsG8z AwQAwQD3MBYEAgACMBADBwAgAQZ4AxwDBQMqE2HAMB8GCCsGAQUFBwEIAQH/BBAw DqAMMAoCAwCJjQIDAyG3MA0GCSqGSIb3DQEBCwUAA4IBAQBGOx+4/ZsSEtp3gHIE 03ZCFK9kt+/WU61DIGzrVDU2GK6XMpfbesynX7QUhVnnLzUaDFyxy28OZP9eprnp yO3TEu9Df3j8GZPU3pBW2I1TMGQIRQCj/wiRP0aToOBIeG/ZKSlnMu3u80KCNvjm ETXxJ0y1q5+DPQ3XAb8utSLsV4tGKcYjHEHbFsY2tQB05nN0MdmJkOluijWtTCUU +KVAdIrYa+F9jM0mx7+Lq4rsxhYLSVXzDnZnRJ/Mr3iJdTPRlSNQFjVZmwHxt2pu m7/sFnjMsJEg/wJ/3/tkQQx3flbVUyNI9DlWSmEzTT1lDuNMyGgMcYMoeqb2Y1hs zgEv -----END CERTIFICATE-----Generated at Mon Feb 9 16:50:29 2026 by rpki-client