This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jlo2o46eViR2rnC5FQKOMBhxKRk.cer File: jlo2o46eViR2rnC5FQKOMBhxKRk.cer (raw, json) Hash identifier: PKD+X32YMMclMUtyK41V4/YPPw6gmhdDOBb/19nPq8A= Subject key identifier: 8E:5A:36:A3:8E:9E:56:24:76:AE:70:B9:15:02:8E:30:18:71:29:19 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ED58BE9E3133BC6C71439A5C1E5F39 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5e/7b2567-dbaf-46d3-8c01-df0e619a0b82/1/jlo2o46eViR2rnC5FQKOMBhxKRk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5e/7b2567-dbaf-46d3-8c01-df0e619a0b82/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:19:16 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 207627 IP: 185.225.224.0/24 IP: 195.253.243.0/24 IP: 2a06:4740::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:58:be:9e:31:33:bc:6c:71:43:9a:5c:1e:5f:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:19:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8e5a36a38e9e562476ae70b915028e3018712919 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:f4:ff:37:a1:30:ab:86:7f:f1:9f:4f:91:9a: e3:84:70:31:cf:d8:1b:41:c3:ad:c8:50:70:e8:c9: e7:62:e9:9f:1d:68:5d:b5:7b:4f:5a:51:f4:dc:95: 4d:ae:a4:d4:13:9e:f2:b9:79:3e:78:16:f8:2f:d5: 95:4f:68:ae:4d:d0:0b:59:61:a5:06:26:55:0c:4b: 91:09:2d:a9:df:a4:75:26:92:a0:ba:0b:16:07:09: e5:08:b4:ca:46:ab:f6:c4:ee:25:2b:16:37:5a:ce: ac:07:db:96:e4:0d:3c:4f:12:62:58:11:73:59:6d: 2a:99:3f:ff:e5:24:58:1f:64:d1:ba:59:b1:32:d3: 53:98:3c:a1:30:a5:f1:1a:0e:c6:f9:16:01:7c:53: 76:b4:4c:e6:dd:55:31:c2:e8:05:23:85:34:03:e6: 54:59:88:8a:2c:2b:41:40:32:f4:86:0e:88:b0:0b: 25:1b:e5:02:11:23:04:b1:a2:40:8b:9f:49:5c:99: 48:95:b5:4e:44:bb:f5:ad:f4:6e:be:ab:f8:e5:e5: fe:84:3e:3a:25:f4:4e:9e:18:5d:c4:91:2c:54:e6: e3:da:53:52:91:8e:a3:7e:0f:f2:ad:86:9b:20:06: 9c:23:42:6b:7d:8b:d5:9f:98:8c:c8:7e:d5:a8:98: f3:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:5A:36:A3:8E:9E:56:24:76:AE:70:B9:15:02:8E:30:18:71:29:19 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7b2567-dbaf-46d3-8c01-df0e619a0b82/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7b2567-dbaf-46d3-8c01-df0e619a0b82/1/jlo2o46eViR2rnC5FQKOMBhxKRk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.225.224.0/24 195.253.243.0/24 IPv6: 2a06:4740::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 207627 Signature Algorithm: sha256WithRSAEncryption 8c:34:39:b1:e5:ee:ef:8d:4b:eb:fd:46:00:79:36:f5:3c:a0: 5d:b7:f3:fd:70:b6:26:84:bd:f7:4e:46:0e:22:82:d3:f6:a4: ce:ad:73:5b:67:34:92:46:c4:3b:a7:2f:48:65:aa:09:61:d0: a3:60:64:27:ab:02:3b:88:36:df:9b:24:98:d4:b9:af:d3:c2: f5:5a:e3:5f:4b:b2:04:85:e9:a6:00:1b:3a:a3:06:33:82:11: 05:6e:20:f6:5d:7a:88:63:7b:ef:d0:c0:e0:6e:59:a1:1a:92: 52:03:b3:9c:82:e5:ae:74:38:15:18:5f:fe:35:d0:c9:fa:7f: cb:42:a4:e6:5e:eb:f9:a5:bc:60:75:c3:96:d4:e1:c6:9a:5a: ce:9a:59:40:1e:3b:aa:ef:b4:43:21:1d:3f:85:5d:8f:d0:f8: b6:2b:2b:0e:1f:3a:f8:69:ac:fc:b3:b3:78:24:47:87:08:a8: 1f:e4:c6:6f:ce:f7:a3:5d:64:6d:30:ac:00:e6:3d:1a:70:f2: 06:aa:7d:e8:18:60:7e:4b:96:02:1e:5f:e7:b5:a2:62:f4:ac: 53:c0:1f:d5:09:2c:c8:8f:56:52:1a:df:78:eb:09:c5:94:2d: 26:8f:7d:d4:8c:78:ab:77:da:6f:0b:fa:f7:b6:2a:6a:c0:a1: 55:9f:26:40 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt57Vi+njEzvGxxQ5pcHl85MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZTVhMzZhMzhlOWU1NjI0NzZhZTcwYjkxNTAyOGUzMDE4NzEyOTE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPT/N6Ewq4Z/8Z9PkZrjhHAxz9gb QcOtyFBw6MnnYumfHWhdtXtPWlH03JVNrqTUE57yuXk+eBb4L9WVT2iuTdALWWGl BiZVDEuRCS2p36R1JpKgugsWBwnlCLTKRqv2xO4lKxY3Ws6sB9uW5A08TxJiWBFz WW0qmT//5SRYH2TRulmxMtNTmDyhMKXxGg7G+RYBfFN2tEzm3VUxwugFI4U0A+ZU WYiKLCtBQDL0hg6IsAslG+UCESMEsaJAi59JXJlIlbVORLv1rfRuvqv45eX+hD46 JfROnhhdxJEsVObj2lNSkY6jfg/yrYabIAacI0JrfYvVn5iMyH7VqJjzfQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFI5aNqOOnlYkdq5wuRUCjjAYcSkZMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVlLzdiMjU2 Ny1kYmFmLTQ2ZDMtOGMwMS1kZjBlNjE5YTBiODIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUvN2IyNTY3 LWRiYWYtNDZkMy04YzAxLWRmMGU2MTlhMGI4Mi8xL2psbzJvNDZlVmlSMnJuQzVG UUtPTUJoeEtSay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQAueHgAwQAw/3zMA0EAgACMAcDBQMqBkdAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMrCzANBgkqhkiG9w0BAQsFAAOCAQEAjDQ5 seXu741L6/1GAHk29TygXbfz/XC2JoS9905GDiKC0/akzq1zW2c0kkbEO6cvSGWq CWHQo2BkJ6sCO4g235skmNS5r9PC9VrjX0uyBIXppgAbOqMGM4IRBW4g9l16iGN7 79DA4G5ZoRqSUgOznILlrnQ4FRhf/jXQyfp/y0Kk5l7r+aW8YHXDltThxppazppZ QB47qu+0QyEdP4Vdj9D4tisrDh86+Gms/LOzeCRHhwioH+TGb873o11kbTCsAOY9 GnDyBqp96BhgfkuWAh5f57WiYvSsU8Af1QksyI9WUhrfeOsJxZQtJo991Ix4q3fa bwv697YqasChVZ8mQA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:50:26 2026 by rpki-client