This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jrL4G4xHwrWI9FHUA3xoN4cLOX8.cer File: jrL4G4xHwrWI9FHUA3xoN4cLOX8.cer (raw, json) Hash identifier: XvMfk4aDNJd4BrYJeroOP3m2xvwykEwp951pxOzTE30= Subject key identifier: 8E:B2:F8:1B:8C:47:C2:B5:88:F4:51:D4:03:7C:68:37:87:0B:39:7F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C11A2CAE5850066E1DBD357FE1A5316 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7a/9e1f46-802b-49d1-91b8-483fc90708d5/1/jrL4G4xHwrWI9FHUA3xoN4cLOX8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7a/9e1f46-802b-49d1-91b8-483fc90708d5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:18:09 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 59639 AS: 59848 IP: 91.199.199.0/24 IP: 146.19.242.0/24 IP: 193.200.89.0/24 IP: 2a0c:e880::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:a2:ca:e5:85:00:66:e1:db:d3:57:fe:1a:53:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8eb2f81b8c47c2b588f451d4037c6837870b397f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e9:46:ab:4d:d3:97:06:8a:62:bd:d9:ce:3d: eb:27:e8:57:72:de:20:d0:b6:8f:77:93:cf:a4:04: 05:80:19:b9:fb:c5:f2:4a:63:a6:fb:38:f3:ef:dd: 7c:40:d1:5f:1a:45:cc:eb:74:0c:83:93:87:a0:3d: 6f:2d:43:ce:56:13:4a:92:2f:82:06:0c:39:fb:15: b4:76:a0:2e:b9:55:d8:1f:24:dd:b2:36:fd:ed:91: 3b:7a:34:bc:11:8d:c4:64:a7:00:60:48:6c:5a:ca: 2a:f7:17:98:fd:e2:0e:af:e3:a1:4c:22:b6:0d:db: a6:2c:fc:55:8f:78:75:40:11:cd:34:18:0c:3e:ef: ac:ef:88:1f:17:bf:14:ce:97:a8:4e:93:6c:a2:17: b1:0b:54:5a:26:17:90:2b:7d:61:a1:8d:fc:9e:a3: 40:ea:5f:fe:92:2e:a4:cf:ea:c5:d9:ce:d0:29:ae: 49:17:2e:5a:cf:ea:a1:5c:02:3a:29:46:1b:0f:4f: 9f:0f:fd:87:91:41:7b:5c:0c:19:f1:02:f2:18:f5: 23:7b:8c:1f:12:8c:f4:1f:0e:d6:63:24:d8:b7:8f: 54:1d:7a:5a:db:99:41:70:e6:d8:3b:28:5a:0c:0f: 0c:20:20:d4:6b:39:6b:93:d5:70:f3:ea:b4:71:3f: 5e:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:B2:F8:1B:8C:47:C2:B5:88:F4:51:D4:03:7C:68:37:87:0B:39:7F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/9e1f46-802b-49d1-91b8-483fc90708d5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/9e1f46-802b-49d1-91b8-483fc90708d5/1/jrL4G4xHwrWI9FHUA3xoN4cLOX8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.199.199.0/24 146.19.242.0/24 193.200.89.0/24 IPv6: 2a0c:e880::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 59639 59848 Signature Algorithm: sha256WithRSAEncryption 0e:d7:a5:b0:50:41:ae:e0:23:8d:c3:81:04:43:c3:7e:49:97: b7:0d:2d:5d:fc:86:ee:26:5f:a7:97:87:4b:a0:05:23:a9:fa: 3c:a0:8a:d4:a4:4b:f6:89:11:58:19:51:10:09:87:94:44:4a: 58:68:a8:08:bb:de:a9:2e:38:ca:b4:84:aa:29:72:20:1d:0e: f8:06:67:44:1e:63:1d:c3:c3:06:55:99:73:49:a3:3d:5d:68: b7:80:ad:b3:b0:b6:90:6c:93:a1:1d:23:82:99:83:31:78:60: a7:7c:1c:65:00:e0:bd:68:c9:1b:0c:2a:fc:fc:76:64:6f:2c: 3d:aa:22:92:f2:24:18:9b:8d:7e:42:6b:ce:a0:03:f0:73:4c: a5:92:e5:b1:00:06:a2:fc:67:ba:47:5d:0d:6b:4c:09:36:ff: c4:db:f9:6b:78:14:2f:1e:c2:f8:f7:57:c4:37:2a:a9:3f:35: 53:ff:32:78:f4:4f:b7:c0:4b:eb:a6:57:81:fb:b3:a7:b0:5f: d2:b8:05:b1:cb:72:4d:64:39:a3:cf:f5:cc:42:82:35:dd:87: 7a:c1:0a:7f:cf:c3:f9:55:da:4a:04:35:36:9c:46:16:f3:c9: 5f:1e:ae:e9:bf:05:36:3f:a9:0a:82:6e:1e:91:85:b1:03:73: 42:f5:f0:eb -----BEGIN CERTIFICATE----- MIIFtDCCBJygAwIBAgISAZt8EaLK5YUAZuHb01f+GlMWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZWIyZjgxYjhjNDdjMmI1ODhmNDUxZDQwMzdjNjgzNzg3MGIzOTdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvelGq03TlwaKYr3Zzj3rJ+hXct4g 0LaPd5PPpAQFgBm5+8XySmOm+zjz7918QNFfGkXM63QMg5OHoD1vLUPOVhNKki+C Bgw5+xW0dqAuuVXYHyTdsjb97ZE7ejS8EY3EZKcAYEhsWsoq9xeY/eIOr+OhTCK2 DdumLPxVj3h1QBHNNBgMPu+s74gfF78UzpeoTpNsohexC1RaJheQK31hoY38nqNA 6l/+ki6kz+rF2c7QKa5JFy5az+qhXAI6KUYbD0+fD/2HkUF7XAwZ8QLyGPUje4wf Eoz0Hw7WYyTYt49UHXpa25lBcObYOyhaDA8MICDUazlrk9Vw8+q0cT9eFQIDAQAB o4ICwDCCArwwHQYDVR0OBBYEFI6y+BuMR8K1iPRR1AN8aDeHCzl/MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdhLzllMWY0 Ni04MDJiLTQ5ZDEtOTFiOC00ODNmYzkwNzA4ZDUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2EvOWUxZjQ2 LTgwMmItNDlkMS05MWI4LTQ4M2ZjOTA3MDhkNS8xL2pyTDRHNHhId3JXSTlGSFVB M3hvTjRjTE9YOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQAW8fHAwQAkhPyAwQAwchZMA0EAgACMAcDBQMq DOiAMB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwDo9wIDAOnIMA0GCSqGSIb3DQEB CwUAA4IBAQAO16WwUEGu4CONw4EEQ8N+SZe3DS1d/IbuJl+nl4dLoAUjqfo8oIrU pEv2iRFYGVEQCYeUREpYaKgIu96pLjjKtISqKXIgHQ74BmdEHmMdw8MGVZlzSaM9 XWi3gK2zsLaQbJOhHSOCmYMxeGCnfBxlAOC9aMkbDCr8/HZkbyw9qiKS8iQYm41+ QmvOoAPwc0ylkuWxAAai/Ge6R10Na0wJNv/E2/lreBQvHsL491fENyqpPzVT/zJ4 9E+3wEvrpleB+7OnsF/SuAWxy3JNZDmjz/XMQoI13Yd6wQp/z8P5VdpKBDU2nEYW 88lfHq7pvwU2P6kKgm4ekYWxA3NC9fDr -----END CERTIFICATE-----Generated at Mon Feb 9 16:51:36 2026 by rpki-client