This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jphwObPzstubKYrg2NDrNIlprWI.cer File: jphwObPzstubKYrg2NDrNIlprWI.cer (raw, json) Hash identifier: m1uSUZ50Pa+8p38oFVvVdHzVnkQzRqAzCt8D/Jp8Wig= Subject key identifier: 8E:98:70:39:B3:F3:B2:DB:9B:29:8A:E0:D8:D0:EB:34:89:69:AD:62 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7910517993350BF6292E206E4AAF44A0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/jphwObPzstubKYrg2NDrNIlprWI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:17:51 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 59810 IP: 185.70.244.0/22 IP: 193.134.128.0/19 IP: 2a05:2d40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:51:79:93:35:0b:f6:29:2e:20:6e:4a:af:44:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8e987039b3f3b2db9b298ae0d8d0eb348969ad62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:77:b1:d8:1d:91:aa:30:1e:40:97:4c:c3:40: 45:ed:0b:79:de:32:0c:43:d3:82:b2:74:cf:2d:c2: 7b:86:42:09:1f:f0:da:65:53:1a:b2:b1:db:58:40: 54:ba:4b:cb:4f:25:75:dd:ea:e7:e2:8e:69:13:17: 38:83:f4:09:c8:87:3c:ef:b5:e1:72:f4:55:1d:8d: 62:72:1c:0a:02:d4:cd:b1:f2:9b:89:a9:c5:a1:5a: a6:2f:e6:52:02:b3:3d:bc:29:a9:5d:8d:7d:02:41: 33:9e:24:ff:12:88:01:b1:94:41:b2:b6:ce:ae:48: cf:f2:db:ee:08:be:b8:a0:89:e8:21:89:e4:d4:dd: ab:53:78:4c:cb:3f:66:1b:95:0b:c2:59:19:12:e2: 2d:47:1e:e8:2e:ee:76:d4:8d:a7:9c:9c:db:a2:bf: 05:d0:31:b1:c3:c1:97:37:3e:cb:d5:30:0b:60:8d: 4b:90:d8:07:bd:95:32:a0:d9:b8:49:0f:c6:01:d7: 8b:50:91:d4:a3:b0:81:48:da:5c:36:80:2a:53:4e: e7:ff:90:37:92:5a:3e:ae:1d:46:66:92:59:53:62: fd:c9:e2:1e:d6:22:bb:cb:97:2b:3a:96:8c:5a:4c: 0b:60:5a:d7:b3:e2:b7:ff:6f:4b:dd:94:d0:a4:75: 3c:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:98:70:39:B3:F3:B2:DB:9B:29:8A:E0:D8:D0:EB:34:89:69:AD:62 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/jphwObPzstubKYrg2NDrNIlprWI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.70.244.0/22 193.134.128.0/19 IPv6: 2a05:2d40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 59810 Signature Algorithm: sha256WithRSAEncryption 4f:07:54:e0:7e:fc:7f:b5:8d:4b:dc:ac:dc:49:6c:b7:e8:de: 73:a8:a5:f0:d3:7b:b7:cf:6b:22:24:84:40:73:bc:ff:2f:27: 44:80:03:0e:b4:f3:f6:58:65:af:ab:55:0a:2a:47:db:40:86: 5c:26:d1:c9:ca:41:85:65:b0:f8:c9:e5:4a:8a:32:53:6b:e5: ef:1e:55:d0:7f:f3:96:2d:7d:a9:a4:e7:fd:4b:d5:6b:3d:f9: 7b:4c:62:69:5f:6a:5b:24:9a:9a:01:81:43:ee:67:59:f3:9b: 91:77:ee:ac:a9:5b:fc:8a:1d:b7:fa:1f:30:75:e2:1e:7c:3f: 12:6f:8b:11:71:3c:64:db:c4:e9:e6:76:ee:b5:ba:c8:e9:a3: 9f:c2:9a:e7:2b:5f:a0:fe:62:3c:64:84:c4:ff:0c:a1:e2:e4: d9:66:32:2a:78:30:2c:d8:ba:ad:44:5e:48:f7:f3:c8:82:44: 85:a9:64:c2:83:0e:7c:28:4e:2b:d5:68:bb:10:20:4f:42:72: d8:8e:19:0d:b3:0f:e4:d1:3c:7e:70:6a:16:b4:7f:65:79:1a: 22:b6:4a:55:64:d0:df:35:eb:19:c9:72:84:48:0a:60:e2:0b: 99:87:7a:ef:65:31:5f:b7:e8:fc:35:ea:a3:b7:44:49:0c:a2: a8:42:65:0b -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt5EFF5kzUL9ikuIG5Kr0SgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZTk4NzAzOWIzZjNiMmRiOWIyOThhZTBkOGQwZWIzNDg5NjlhZDYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Hex2B2RqjAeQJdMw0BF7Qt53jIM Q9OCsnTPLcJ7hkIJH/DaZVMasrHbWEBUukvLTyV13ern4o5pExc4g/QJyIc877Xh cvRVHY1ichwKAtTNsfKbianFoVqmL+ZSArM9vCmpXY19AkEzniT/EogBsZRBsrbO rkjP8tvuCL64oInoIYnk1N2rU3hMyz9mG5ULwlkZEuItRx7oLu521I2nnJzbor8F 0DGxw8GXNz7L1TALYI1LkNgHvZUyoNm4SQ/GAdeLUJHUo7CBSNpcNoAqU07n/5A3 klo+rh1GZpJZU2L9yeIe1iK7y5crOpaMWkwLYFrXs+K3/29L3ZTQpHU8WQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFI6YcDmz87LbmymK4NjQ6zSJaa1iMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJkLzM2NjU2 MC0wOTZlLTQ4MzUtODlmZC01NjM2MDAzMTlhMWYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmQvMzY2NTYw LTA5NmUtNDgzNS04OWZkLTU2MzYwMDMxOWExZi8xL2pwaHdPYlB6c3R1YktZcmcy TkRyTklscHJXSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCuUb0AwQFwYaAMA0EAgACMAcDBQMqBS1AMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwDpojANBgkqhkiG9w0BAQsFAAOCAQEATwdU 4H78f7WNS9ys3Elst+jec6il8NN7t89rIiSEQHO8/y8nRIADDrTz9lhlr6tVCipH 20CGXCbRycpBhWWw+MnlSooyU2vl7x5V0H/zli19qaTn/UvVaz35e0xiaV9qWySa mgGBQ+5nWfObkXfurKlb/Iodt/ofMHXiHnw/Em+LEXE8ZNvE6eZ27rW6yOmjn8Ka 5ytfoP5iPGSExP8MoeLk2WYyKngwLNi6rUReSPfzyIJEhalkwoMOfChOK9VouxAg T0Jy2I4ZDbMP5NE8fnBqFrR/ZXkaIrZKVWTQ3zXrGclyhEgKYOILmYd672UxX7fo /DXqo7dESQyiqEJlCw== -----END CERTIFICATE-----Generated at Wed Jan 21 13:35:37 2026 by rpki-client