This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jpsf4xLwCfII6oorcyDOp2XdUYs.cer File: jpsf4xLwCfII6oorcyDOp2XdUYs.cer (raw, json) Hash identifier: 4yJtYLXvCECXzBn7OsleoDIAjogMDs0eplpnJHpNDgY= Subject key identifier: 8E:9B:1F:E3:12:F0:09:F2:08:EA:8A:2B:73:20:CE:A7:65:DD:51:8B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B3636C7ED2347D7987E752F34B87266 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:29 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 198968 AS: 210257 IP: 164.138.208.0/21 IP: 185.137.44.0/22 IP: 2a06:fc80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:36:c7:ed:23:47:d7:98:7e:75:2f:34:b8:72:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8e9b1fe312f009f208ea8a2b7320cea765dd518b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:13:37:e5:19:37:0f:2d:8e:88:3f:6b:77:d4: ff:29:ac:79:7f:71:a1:e6:6a:db:78:49:41:07:e5: a7:b8:ee:f5:d8:3b:c3:7e:6f:df:a4:6e:69:20:c1: 43:94:ee:5f:28:50:22:ee:39:99:b9:d9:75:5a:31: d3:6e:e2:d5:ef:de:38:19:19:ec:ec:a1:4a:89:56: 57:97:6a:f5:6c:10:e6:ea:6a:ad:85:5e:08:91:b6: bf:be:ff:92:65:86:00:41:54:86:74:2b:4e:11:35: 2f:fe:22:38:2e:6f:68:d0:7c:25:ab:0b:7b:2c:b3: 26:ae:05:80:e4:07:6d:ee:c3:26:ad:1d:d2:0b:e8: 1b:1b:62:6f:59:0b:2b:51:47:ff:42:1d:ec:19:b6: 8d:86:b8:e6:da:40:0f:af:22:82:aa:d5:e8:56:8e: 40:77:f3:1e:cf:8e:0b:7c:97:12:b0:f1:85:51:ce: f7:d7:20:8d:80:da:b9:7b:0a:3b:b6:38:a2:24:4b: 5d:ad:a9:3e:5a:e5:2c:5e:1f:55:45:49:e6:c4:11: 83:84:1c:bc:af:91:d4:46:07:5a:45:83:35:d2:4f: e8:53:68:b2:b3:18:ca:a5:e0:91:e1:59:61:78:63: 66:03:c6:7e:7b:6c:61:f0:f2:e1:8f:23:eb:01:48: 05:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:9B:1F:E3:12:F0:09:F2:08:EA:8A:2B:73:20:CE:A7:65:DD:51:8B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.138.208.0/21 185.137.44.0/22 IPv6: 2a06:fc80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 198968 210257 Signature Algorithm: sha256WithRSAEncryption 02:a3:f8:17:30:c8:59:3a:90:7c:46:61:82:c1:28:e3:55:cf: 9b:30:dd:9f:d8:ed:7a:7c:97:89:81:e1:9c:c3:4a:e5:cc:d5: 19:55:c9:37:3e:c0:7c:54:8f:81:d0:39:8d:59:84:19:6f:a1: 0d:1a:f0:31:0d:cc:15:8e:f4:3d:71:03:f4:35:82:57:69:59: 3d:41:12:cf:08:bf:0a:eb:0c:0b:d4:cf:38:60:7d:f1:69:5e: 7e:84:ac:b1:f3:a8:19:90:a6:2c:b9:e6:35:da:14:3b:0e:a8: 8e:5e:0d:38:de:d3:2e:dc:50:f7:e4:69:2d:e3:63:fb:12:27: 43:ea:e7:7c:e3:bb:cf:3b:d4:a8:c7:a4:14:4d:5a:74:c7:2d: 42:c0:14:95:25:2e:b6:9f:bd:f0:30:81:46:bf:06:dc:50:f9: f0:ab:f7:01:97:2e:f2:73:10:b8:d1:1d:d2:84:35:50:3b:cf: d6:de:de:d3:16:d5:a3:ff:6e:3e:76:0d:09:d5:bb:00:3b:6e: ee:7d:fa:a0:3a:4e:b2:e8:4d:37:0b:94:0c:f0:20:f5:a1:22: 5d:06:91:6b:a2:cd:4a:e3:ba:2c:58:e0:46:a4:ce:34:df:cc: f8:ba:0c:d7:0b:c4:5c:eb:3f:60:9e:4b:e2:c5:e3:fa:00:8b: 11:85:b3:d0 -----BEGIN CERTIFICATE----- MIIFrjCCBJagAwIBAgISAZt7NjbH7SNH15h+dS80uHJmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZTliMWZlMzEyZjAwOWYyMDhlYThhMmI3MzIwY2VhNzY1ZGQ1MThiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRM35Rk3Dy2OiD9rd9T/Kax5f3Gh 5mrbeElBB+WnuO712DvDfm/fpG5pIMFDlO5fKFAi7jmZudl1WjHTbuLV7944GRns 7KFKiVZXl2r1bBDm6mqthV4Ikba/vv+SZYYAQVSGdCtOETUv/iI4Lm9o0Hwlqwt7 LLMmrgWA5Adt7sMmrR3SC+gbG2JvWQsrUUf/Qh3sGbaNhrjm2kAPryKCqtXoVo5A d/Mez44LfJcSsPGFUc731yCNgNq5ewo7tjiiJEtdrak+WuUsXh9VRUnmxBGDhBy8 r5HURgdaRYM10k/oU2iysxjKpeCR4VlheGNmA8Z+e2xh8PLhjyPrAUgFEQIDAQAB o4ICujCCArYwHQYDVR0OBBYEFI6bH+MS8AnyCOqKK3Mgzqdl3VGLMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMyL2JhNGRh Ni0xZDFlLTQ4NzgtODc2ZS1hODUzOTlkYjYwYmYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzIvYmE0ZGE2 LTFkMWUtNDg3OC04NzZlLWE4NTM5OWRiNjBiZi8xL2pwc2Y0eEx3Q2ZJSTZvb3Jj eURPcDJYZFVZcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQDpIrQAwQCuYksMA0EAgACMAcDBQMqBvyAMB8G CCsGAQUFBwEIAQH/BBAwDqAMMAoCAwMJOAIDAzVRMA0GCSqGSIb3DQEBCwUAA4IB AQACo/gXMMhZOpB8RmGCwSjjVc+bMN2f2O16fJeJgeGcw0rlzNUZVck3PsB8VI+B 0DmNWYQZb6ENGvAxDcwVjvQ9cQP0NYJXaVk9QRLPCL8K6wwL1M84YH3xaV5+hKyx 86gZkKYsueY12hQ7DqiOXg043tMu3FD35Gkt42P7EidD6ud847vPO9Sox6QUTVp0 xy1CwBSVJS62n73wMIFGvwbcUPnwq/cBly7ycxC40R3ShDVQO8/W3t7TFtWj/24+ dg0J1bsAO27uffqgOk6y6E03C5QM8CD1oSJdBpFros1K47osWOBGpM4038z4ugzX C8Rc6z9gnkvixeP6AIsRhbPQ -----END CERTIFICATE-----Generated at Sun Jan 18 11:47:10 2026 by rpki-client