This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jn3H8pi7d0pybtxDPPawOZQUi1Q.cer File: jn3H8pi7d0pybtxDPPawOZQUi1Q.cer (raw, json) Hash identifier: tvd/pzF8wVh+yvmB4e0m63VLxB4jC5VYvn0uDAfxQlc= Subject key identifier: 8E:7D:C7:F2:98:BB:77:4A:72:6E:DC:43:3C:F6:B0:39:94:14:8B:54 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7834FB09A9748E08B26C1CA5549264BC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4c/20ee43-0462-4822-845f-9c76a4bdb523/1/jn3H8pi7d0pybtxDPPawOZQUi1Q.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4c/20ee43-0462-4822-845f-9c76a4bdb523/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:16 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 206294 IP: 145.22.0.0/16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:fb:09:a9:74:8e:08:b2:6c:1c:a5:54:92:64:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8e7dc7f298bb774a726edc433cf6b03994148b54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:9b:4e:cc:07:6b:87:0a:2d:af:ad:49:ec:7b: 26:a5:c5:00:cc:6b:09:88:93:64:cb:97:78:71:d9: df:af:db:90:bb:a7:97:b3:72:60:f3:b6:21:0f:f7: c1:70:90:d6:c1:f0:6e:4c:ba:ee:62:43:c6:14:30: c2:4e:90:70:f5:ee:d0:a8:5c:8c:e3:de:97:af:50: 7a:b4:43:43:b9:67:73:e7:8f:e4:7c:d4:29:c1:69: 01:e7:e1:f1:87:47:87:1d:49:1f:87:90:19:67:3e: cb:a3:bb:05:ba:24:14:8f:ad:e1:83:1e:50:cb:16: ab:f4:b2:f6:2d:aa:d7:81:1e:c9:85:a7:ac:a7:c1: b6:08:73:17:52:7b:a9:e4:96:c6:5b:ed:9b:3e:09: a4:c5:48:ae:62:c1:50:c7:df:3b:7f:45:d3:c5:ec: 98:f1:39:1f:78:27:b1:09:20:6d:34:2a:dd:e4:ce: 6b:73:c8:42:3d:44:d2:50:6e:cf:f5:5f:ca:a7:95: d0:56:62:39:33:e3:cd:b3:f1:18:b1:f6:cf:02:4c: 0b:84:94:05:d0:53:2a:27:e4:c1:6e:1b:00:0b:34: a2:4e:f6:b1:b9:41:3c:b8:c1:4b:9e:f1:59:18:56: ea:0b:07:04:bd:f2:a4:36:cf:af:46:4b:6f:d7:9a: cc:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:7D:C7:F2:98:BB:77:4A:72:6E:DC:43:3C:F6:B0:39:94:14:8B:54 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/20ee43-0462-4822-845f-9c76a4bdb523/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/20ee43-0462-4822-845f-9c76a4bdb523/1/jn3H8pi7d0pybtxDPPawOZQUi1Q.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 145.22.0.0/16 sbgp-autonomousSysNum: critical Autonomous System Numbers: 206294 Signature Algorithm: sha256WithRSAEncryption 5a:4b:f2:9c:bc:bd:2c:87:53:d3:d5:ef:7c:90:61:69:b7:e4: af:38:28:8a:c5:08:77:2f:a7:ed:59:c2:10:2b:64:4a:68:20: 6f:80:cd:49:32:4f:a0:d4:12:ab:a4:ee:d5:9b:05:6f:cc:f9: 75:74:1b:57:f2:c7:fc:5f:06:d1:3e:0d:59:7f:4f:ac:0f:f6: 93:09:85:ad:f1:d8:86:a6:a1:be:c1:4d:3c:04:10:2c:8f:ae: 54:ad:54:b5:d2:ba:24:28:b4:00:47:9a:10:aa:59:54:91:9c: a1:c7:7b:48:bc:9d:71:c9:ba:d5:f9:38:6f:1c:fd:e8:ee:fe: cb:10:36:c0:59:17:86:82:62:17:ad:da:0d:d3:50:73:9b:a2: 77:22:fc:c4:d0:7f:6a:2c:9e:68:6f:3b:3e:32:6e:13:c6:82: 2e:45:f6:54:02:4b:2b:0c:09:7c:31:b1:0e:8b:f5:26:29:55: 80:da:90:c0:78:31:6e:34:75:51:44:49:65:66:9f:57:90:64: bb:49:19:7d:0c:1e:ad:36:aa:81:66:a1:b6:60:14:60:cf:f0: 73:be:ca:1c:e1:61:ac:2c:bb:1a:59:e7:ed:30:9a:e4:98:7b: f7:09:8a:28:10:a4:8a:b6:08:cd:cc:6d:bf:67:3f:93:87:1e: ca:e2:a8:45 -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISAZt4NPsJqXSOCLJsHKVUkmS8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZTdkYzdmMjk4YmI3NzRhNzI2ZWRjNDMzY2Y2YjAzOTk0MTQ4YjU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxptOzAdrhwotr61J7HsmpcUAzGsJ iJNky5d4cdnfr9uQu6eXs3Jg87YhD/fBcJDWwfBuTLruYkPGFDDCTpBw9e7QqFyM 496Xr1B6tENDuWdz54/kfNQpwWkB5+Hxh0eHHUkfh5AZZz7Lo7sFuiQUj63hgx5Q yxar9LL2LarXgR7Jhaesp8G2CHMXUnup5JbGW+2bPgmkxUiuYsFQx987f0XTxeyY 8TkfeCexCSBtNCrd5M5rc8hCPUTSUG7P9V/Kp5XQVmI5M+PNs/EYsfbPAkwLhJQF 0FMqJ+TBbhsACzSiTvaxuUE8uMFLnvFZGFbqCwcEvfKkNs+vRktv15rM3wIDAQAB o4ICnzCCApswHQYDVR0OBBYEFI59x/KYu3dKcm7cQzz2sDmUFItUMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRjLzIwZWU0 My0wNDYyLTQ4MjItODQ1Zi05Yzc2YTRiZGI1MjMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGMvMjBlZTQz LTA0NjItNDgyMi04NDVmLTljNzZhNGJkYjUyMy8xL2puM0g4cGk3ZDBweWJ0eERQ UGF3T1pRVWkxUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUF BwEHAQH/BA8wDTALBAIAATAFAwMAkRYwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID AyXWMA0GCSqGSIb3DQEBCwUAA4IBAQBaS/KcvL0sh1PT1e98kGFpt+SvOCiKxQh3 L6ftWcIQK2RKaCBvgM1JMk+g1BKrpO7VmwVvzPl1dBtX8sf8XwbRPg1Zf0+sD/aT CYWt8diGpqG+wU08BBAsj65UrVS10rokKLQAR5oQqllUkZyhx3tIvJ1xybrV+Thv HP3o7v7LEDbAWReGgmIXrdoN01Bzm6J3IvzE0H9qLJ5obzs+Mm4TxoIuRfZUAksr DAl8MbEOi/UmKVWA2pDAeDFuNHVRREllZp9XkGS7SRl9DB6tNqqBZqG2YBRgz/Bz vsoc4WGsLLsaWeftMJrkmHv3CYooEKSKtgjNzG2/Zz+Thx7K4qhF -----END CERTIFICATE-----Generated at Mon Feb 9 16:51:01 2026 by rpki-client