This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jmvT1UXusL5A8oOJnSGM9IaOlJA.cer File: jmvT1UXusL5A8oOJnSGM9IaOlJA.cer (raw, json) Hash identifier: 57K/OMg5LYqvXVpqvKYzJYZi6dL6CrL9+oC1Cqsvu/s= Subject key identifier: 8E:6B:D3:D5:45:EE:B0:BE:40:F2:83:89:9D:21:8C:F4:86:8E:94:90 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C76944647E135611E820F74592BF0D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:18:35 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 208896 IP: 45.15.248.0/22 IP: 45.86.196.0/22 IP: 45.132.168.0/22 IP: 45.156.196.0/22 IP: 2a0e:87c0::/29 IP: 2a0e:a140::/29 IP: 2a0f:6c00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:69:44:64:7e:13:56:11:e8:20:f7:45:92:bf:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8e6bd3d545eeb0be40f283899d218cf4868e9490 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:92:de:c1:90:48:33:c0:ba:c2:be:b4:1f:d4: 8d:5a:ed:28:06:67:64:e2:db:af:f5:41:1c:ad:91: e9:ec:62:b8:04:34:09:3d:81:b2:6a:71:4f:95:e2: 30:8f:0a:6e:a5:23:a3:93:83:fc:ff:ce:9e:88:36: 2a:77:3d:e9:5a:f0:ae:0d:91:bd:0c:0a:4f:98:46: b5:a0:46:c9:04:db:de:d3:6c:3d:0c:93:1c:dd:72: 46:6e:ec:95:7b:cb:ce:46:1e:d0:28:eb:33:7b:16: 56:a4:54:6c:0c:91:1a:8a:98:65:9f:81:45:7b:b2: 07:68:39:8b:81:10:09:7d:1e:76:3d:b5:47:c3:ac: 97:1d:fe:55:b8:ea:1b:7d:4f:1b:28:6d:86:ab:99: 10:a8:8b:16:60:cb:a1:11:c2:8d:24:c7:18:90:fc: 36:d8:8f:ea:10:a4:62:c8:82:d3:79:b6:0f:fb:09: 75:ba:18:b1:65:19:0b:26:4d:fa:b7:59:63:fd:7b: 52:6a:18:80:b0:61:2e:9f:2a:c5:fe:60:76:f2:71: ea:63:6f:18:37:63:ea:6c:c2:67:49:75:1c:9c:bb: 6d:2b:d2:62:9b:46:cc:1f:a7:20:31:f7:43:eb:e6: 25:00:de:ec:60:40:01:ed:60:5a:52:8c:d0:e6:3b: 11:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:6B:D3:D5:45:EE:B0:BE:40:F2:83:89:9D:21:8C:F4:86:8E:94:90 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.15.248.0/22 45.86.196.0/22 45.132.168.0/22 45.156.196.0/22 IPv6: 2a0e:87c0::/29 2a0e:a140::/29 2a0f:6c00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 208896 Signature Algorithm: sha256WithRSAEncryption 72:34:27:98:95:f4:79:8f:7a:a9:92:16:ff:19:40:22:03:d6: 20:97:1b:18:f1:c7:39:29:6c:97:cb:03:13:f5:a5:6e:af:5e: d2:31:6c:2a:9a:be:9f:b1:fd:0c:28:63:e2:5d:67:43:48:c5: 17:02:15:20:4b:20:1d:be:40:05:fa:af:97:fc:52:ce:96:6c: 00:fb:0d:83:54:22:37:33:6a:5a:80:53:c9:3c:7f:e3:9d:a6: 2b:f5:11:27:80:e2:88:99:6a:d9:38:ad:7f:4a:5a:c8:63:1a: 31:39:5d:00:08:fb:ad:e1:a7:b0:67:ef:8c:99:79:83:3d:b0: 22:1a:d4:59:c5:14:2c:89:6e:29:07:25:1d:7f:d6:37:48:28: 56:2c:38:86:a9:6c:65:83:39:d6:62:c7:3b:a6:12:f6:11:d0: 32:f1:46:ad:3a:ff:00:c0:5e:51:8e:c1:5a:b7:ec:0a:48:28: d0:f4:a0:8c:16:a4:c0:2d:df:0a:cd:cb:06:84:e3:8b:48:2e: 01:a5:6e:1d:96:6e:97:76:34:8b:e4:cb:36:e8:22:e7:c9:20: a1:4e:9f:45:64:a7:71:dd:46:60:38:89:9e:e3:85:3c:ec:42: bc:6a:3f:96:cc:79:16:37:99:34:f7:16:79:a4:b2:20:79:22: 06:ac:86:74 -----BEGIN CERTIFICATE----- MIIFwzCCBKugAwIBAgISAZt3x2lEZH4TVhHoIPdFkr8NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZTZiZDNkNTQ1ZWViMGJlNDBmMjgzODk5ZDIxOGNmNDg2OGU5NDkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5LewZBIM8C6wr60H9SNWu0oBmdk 4tuv9UEcrZHp7GK4BDQJPYGyanFPleIwjwpupSOjk4P8/86eiDYqdz3pWvCuDZG9 DApPmEa1oEbJBNve02w9DJMc3XJGbuyVe8vORh7QKOszexZWpFRsDJEaiphln4FF e7IHaDmLgRAJfR52PbVHw6yXHf5VuOobfU8bKG2Gq5kQqIsWYMuhEcKNJMcYkPw2 2I/qEKRiyILTebYP+wl1uhixZRkLJk36t1lj/XtSahiAsGEunyrF/mB28nHqY28Y N2PqbMJnSXUcnLttK9Jim0bMH6cgMfdD6+YlAN7sYEAB7WBaUozQ5jsRfQIDAQAB o4ICzzCCAsswHQYDVR0OBBYEFI5r09VF7rC+QPKDiZ0hjPSGjpSQMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y0LzFkNzA0 Ni1kY2Y1LTQ1MmUtODg0OS1iMTBhMjJkMGE0NzYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjQvMWQ3MDQ2 LWRjZjUtNDUyZS04ODQ5LWIxMGEyMmQwYTQ3Ni8xL2ptdlQxVVh1c0w1QThvT0pu U0dNOUlhT2xKQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CME4GCCsGAQUF BwEHAQH/BD8wPTAeBAIAATAYAwQCLQ/4AwQCLVbEAwQCLYSoAwQCLZzEMBsEAgAC MBUDBQMqDofAAwUDKg6hQAMFAyoPbAAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID AzAAMA0GCSqGSIb3DQEBCwUAA4IBAQByNCeYlfR5j3qpkhb/GUAiA9YglxsY8cc5 KWyXywMT9aVur17SMWwqmr6fsf0MKGPiXWdDSMUXAhUgSyAdvkAF+q+X/FLOlmwA +w2DVCI3M2pagFPJPH/jnaYr9REngOKImWrZOK1/SlrIYxoxOV0ACPut4aewZ++M mXmDPbAiGtRZxRQsiW4pByUdf9Y3SChWLDiGqWxlgznWYsc7phL2EdAy8UatOv8A wF5RjsFat+wKSCjQ9KCMFqTALd8KzcsGhOOLSC4BpW4dlm6XdjSL5Ms26CLnySCh Tp9FZKdx3UZgOIme44U87EK8aj+WzHkWN5k09xZ5pLIgeSIGrIZ0 -----END CERTIFICATE-----Generated at Mon Feb 9 15:07:48 2026 by rpki-client