This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jolfHicMY17GHfmpf8D2aMCo9Ug.cer File: jolfHicMY17GHfmpf8D2aMCo9Ug.cer (raw, json) Hash identifier: jvYZg2qGB8HdFsyA+KbzyC3OvNs/YW27KOPp4ARu9dU= Subject key identifier: 8E:89:5F:1E:27:0C:63:5E:C6:1D:F9:A9:7F:C0:F6:68:C0:A8:F5:48 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F8328CA24D7B1330F7E5389341BAABD Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:21:00 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 194.33.114.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:28:ca:24:d7:b1:33:0f:7e:53:89:34:1b:aa:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:21:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8e895f1e270c635ec61df9a97fc0f668c0a8f548 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b0:ca:b8:e8:bd:2a:b3:ea:c7:a1:62:13:1c: cf:09:54:33:50:5f:24:a9:d2:e3:d7:b3:32:00:3d: b6:ee:d3:b6:08:83:b2:79:f1:20:5d:48:c9:1d:8e: 86:11:76:81:41:70:6b:5d:e0:62:c5:e6:bc:72:86: 6a:a0:55:8a:dd:d6:4b:3f:1b:3a:47:62:d5:07:9e: fb:88:78:4d:7b:78:40:a5:ca:a1:5d:af:06:15:a5: 86:42:21:ec:4e:4b:b2:c2:55:38:b6:ce:57:67:56: e8:8c:a2:9c:4e:ed:c2:b1:19:ba:6c:51:20:fe:3c: 6a:4c:c9:34:fd:44:3d:4a:57:a3:1b:0c:b6:83:b2: 42:d0:31:7b:5e:15:21:83:f7:c2:9b:2a:f5:e4:80: 47:c0:b7:fa:f5:14:17:5e:ef:2d:a8:d4:60:bd:e6: 04:07:88:33:91:ba:8e:de:1b:29:cb:0e:f8:a5:01: 48:14:28:ee:e0:36:ac:61:15:e4:27:35:f7:af:21: ce:69:54:3c:83:ca:80:fa:cd:1e:c8:ec:59:b8:e4: 27:51:43:0a:76:81:d5:dc:4c:c1:c1:5f:e5:74:67: d5:52:fe:90:98:c9:3a:dd:37:58:bf:b1:ed:45:ff: a1:f6:19:a7:51:45:6a:52:37:78:be:2e:f2:2c:07: 39:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:89:5F:1E:27:0C:63:5E:C6:1D:F9:A9:7F:C0:F6:68:C0:A8:F5:48 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.33.114.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:82:d2:c4:3d:59:a9:e0:52:9c:3a:ab:26:ed:df:be:03:10: c2:3c:99:eb:3c:f1:31:ed:1c:e2:01:35:3d:55:8d:56:16:93: d2:11:8c:77:a6:81:14:6b:8e:71:0f:c4:c5:74:e8:01:9d:d0: 08:52:6c:dd:e4:42:66:85:15:75:2c:19:01:50:bf:e7:f8:c1: 22:81:f9:63:cd:6d:71:f5:06:fd:e2:ea:b8:5c:62:02:be:2f: 7f:b7:6b:7a:b3:2e:87:4e:2e:ee:92:38:79:5e:f4:b8:5d:4a: 82:59:86:30:4c:4f:0c:90:34:d4:cc:1d:87:3c:c5:f1:5f:59: 3e:b7:c9:91:4d:24:d8:13:cd:6a:f2:8f:f4:64:ab:ab:d7:10: c2:82:0e:bd:4d:7f:8a:a4:95:63:13:6c:1a:9b:64:3e:b9:ea: a5:08:c4:1d:0c:77:23:6e:06:a8:ea:53:f6:85:f4:87:eb:ec: e2:ad:57:0b:1e:01:22:2b:f2:41:ff:7f:72:32:33:85:0f:2c: 64:9b:b0:a8:fe:76:63:50:dc:1c:1a:1f:1c:4e:b3:2b:ce:a1: 2e:25:90:32:1d:52:6d:bf:2f:c3:47:c1:af:b6:c1:dd:e6:c6: 7d:81:17:50:e3:82:d3:e2:46:c7:cf:a7:d4:c1:a4:05:5c:07: 4f:ca:b1:ff -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt/gyjKJNexMw9+U4k0G6q9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZTg5NWYxZTI3MGM2MzVlYzYxZGY5YTk3ZmMwZjY2OGMwYThmNTQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprDKuOi9KrPqx6FiExzPCVQzUF8k qdLj17MyAD227tO2CIOyefEgXUjJHY6GEXaBQXBrXeBixea8coZqoFWK3dZLPxs6 R2LVB577iHhNe3hApcqhXa8GFaWGQiHsTkuywlU4ts5XZ1bojKKcTu3CsRm6bFEg /jxqTMk0/UQ9SlejGwy2g7JC0DF7XhUhg/fCmyr15IBHwLf69RQXXu8tqNRgveYE B4gzkbqO3hspyw74pQFIFCju4DasYRXkJzX3ryHOaVQ8g8qA+s0eyOxZuOQnUUMK doHV3EzBwV/ldGfVUv6QmMk63TdYv7HtRf+h9hmnUUVqUjd4vi7yLAc5CQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFI6JXx4nDGNexh35qX/A9mjAqPVIMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzAzL2JjNTNk Mi05MTM3LTQ3OTktOWU0MS1lNjlhMDE3NDg1ZmIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDMvYmM1M2Qy LTkxMzctNDc5OS05ZTQxLWU2OWEwMTc0ODVmYi8xL2pvbGZIaWNNWTE3R0hmbXBm OEQyYU1DbzlVZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwiFyMA0GCSqGSIb3DQEBCwUAA4IBAQB6gtLE PVmp4FKcOqsm7d++AxDCPJnrPPEx7RziATU9VY1WFpPSEYx3poEUa45xD8TFdOgB ndAIUmzd5EJmhRV1LBkBUL/n+MEigfljzW1x9Qb94uq4XGICvi9/t2t6sy6HTi7u kjh5XvS4XUqCWYYwTE8MkDTUzB2HPMXxX1k+t8mRTSTYE81q8o/0ZKur1xDCgg69 TX+KpJVjE2wam2Q+ueqlCMQdDHcjbgao6lP2hfSH6+zirVcLHgEiK/JB/39yMjOF Dyxkm7Co/nZjUNwcGh8cTrMrzqEuJZAyHVJtvy/DR8GvtsHd5sZ9gRdQ44LT4kbH z6fUwaQFXAdPyrH/ -----END CERTIFICATE-----Generated at Mon Jan 26 13:35:04 2026 by rpki-client