This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jsM7jhNW_M_INGbu2KhlUSp9APE.cer File: jsM7jhNW_M_INGbu2KhlUSp9APE.cer (raw, json) Hash identifier: cjzHGredPOC7UJ9FLI3RGFp4N08OXGwvezAOKYAXOZo= Subject key identifier: 8E:C3:3B:8E:13:56:FC:CF:C8:34:66:EE:D8:A8:65:51:2A:7D:00:F1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5B3B49B186C3848978EC01DE9AD4C6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/32/b72806-49e8-4112-a235-1c1e8532d5b0/1/jsM7jhNW_M_INGbu2KhlUSp9APE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/32/b72806-49e8-4112-a235-1c1e8532d5b0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:18:09 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 203739 IP: 185.255.68.0/22 IP: 2a0c:6440::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:3b:49:b1:86:c3:84:89:78:ec:01:de:9a:d4:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8ec33b8e1356fccfc83466eed8a865512a7d00f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:f2:b2:22:1d:55:58:ba:5c:71:57:48:97:d0: e7:0a:2e:35:4a:03:32:c5:3a:5b:2e:3d:8e:20:5c: 13:bc:36:9d:40:b5:7e:a5:1e:51:04:b8:4a:3d:5e: 77:80:cc:53:01:27:94:f2:90:c6:1d:30:be:d2:0d: 58:80:fd:53:fa:00:f0:00:e0:3d:4e:93:6d:1d:ff: ef:0c:39:6a:36:13:74:7d:07:62:85:c1:43:66:43: 32:d6:46:7e:82:5a:9a:5f:87:91:53:89:4a:84:80: 03:dd:ff:e5:fc:e1:ea:c0:4a:71:d2:b8:e4:c5:58: 04:67:a3:ec:35:17:e7:0c:f1:d1:53:e7:9c:9f:47: 84:88:3a:0b:0d:fd:a1:66:8f:19:46:e1:03:e3:ce: b9:01:cd:d9:35:99:1e:aa:3b:91:02:25:f1:87:30: 2d:94:3c:58:fd:51:99:c2:28:60:c3:6c:4d:be:5e: dd:43:13:3e:98:fa:9e:22:6d:a3:5d:c1:9d:90:ef: 81:78:6d:ae:64:9e:67:b1:01:eb:5e:e2:f9:93:34: 35:55:34:30:14:c8:ad:a5:4e:d0:db:b1:a6:b6:cb: aa:52:d8:b4:2f:73:0d:21:f7:85:45:e6:1d:e1:a9: d0:dc:4a:ef:81:30:ae:63:67:eb:1d:da:52:c3:d7: 55:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:C3:3B:8E:13:56:FC:CF:C8:34:66:EE:D8:A8:65:51:2A:7D:00:F1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b72806-49e8-4112-a235-1c1e8532d5b0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b72806-49e8-4112-a235-1c1e8532d5b0/1/jsM7jhNW_M_INGbu2KhlUSp9APE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.255.68.0/22 IPv6: 2a0c:6440::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 203739 Signature Algorithm: sha256WithRSAEncryption a6:f1:d1:fd:2e:69:72:02:29:68:e8:9a:de:95:da:88:0c:05: 10:d6:64:11:fa:d9:4f:34:89:ad:d5:4c:92:e8:0c:09:7f:e9: d9:ab:f8:93:ce:ae:7a:9e:7a:f8:f4:31:4c:b8:23:2d:d0:62: b9:49:e7:ac:61:25:88:8e:a0:2c:db:4d:23:56:46:7b:7d:09: f9:9b:64:a9:89:28:b4:21:bd:32:94:03:f7:fd:5f:18:f4:a9: 61:7f:b0:f5:41:a1:ef:d4:b0:e4:c7:72:7c:d8:01:70:01:bf: f9:e8:43:9c:8f:ba:85:ac:b8:53:63:be:8f:10:d0:4f:a1:b4: e0:2f:8a:06:e0:2a:18:ec:16:2b:d1:b0:fe:d7:65:5e:97:92: 80:21:31:d8:b1:17:b6:6b:a4:10:4b:fe:d4:cd:71:e6:09:15: d9:60:68:dd:27:d8:77:2d:69:ad:03:56:4b:b6:79:81:c0:48: 21:70:f4:9c:71:bf:52:af:87:05:40:1f:74:17:33:e9:1b:ca: 9e:03:46:8b:67:b4:41:a3:3c:a8:d5:63:6a:a2:3a:3e:1d:52: 50:44:0d:0e:94:11:fd:3a:c9:97:23:0e:ac:b7:84:e0:ef:d7: 4f:00:4a:40:ca:21:d1:75:43:fb:f5:38:7d:45:6d:fb:33:2f: 32:e5:79:88 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt9WztJsYbDhIl47AHemtTGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZWMzM2I4ZTEzNTZmY2NmYzgzNDY2ZWVkOGE4NjU1MTJhN2QwMGYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1fKyIh1VWLpccVdIl9DnCi41SgMy xTpbLj2OIFwTvDadQLV+pR5RBLhKPV53gMxTASeU8pDGHTC+0g1YgP1T+gDwAOA9 TpNtHf/vDDlqNhN0fQdihcFDZkMy1kZ+glqaX4eRU4lKhIAD3f/l/OHqwEpx0rjk xVgEZ6PsNRfnDPHRU+ecn0eEiDoLDf2hZo8ZRuED4865Ac3ZNZkeqjuRAiXxhzAt lDxY/VGZwihgw2xNvl7dQxM+mPqeIm2jXcGdkO+BeG2uZJ5nsQHrXuL5kzQ1VTQw FMitpU7Q27GmtsuqUti0L3MNIfeFReYd4anQ3ErvgTCuY2frHdpSw9dVIQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFI7DO44TVvzPyDRm7tioZVEqfQDxMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMyL2I3Mjgw Ni00OWU4LTQxMTItYTIzNS0xYzFlODUzMmQ1YjAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzIvYjcyODA2 LTQ5ZTgtNDExMi1hMjM1LTFjMWU4NTMyZDViMC8xL2pzTTdqaE5XX01fSU5HYnUy S2hsVVNwOUFQRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuf9EMA0EAgACMAcDBQMqDGRAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMb2zANBgkqhkiG9w0BAQsFAAOCAQEApvHR/S5pcgIp aOia3pXaiAwFENZkEfrZTzSJrdVMkugMCX/p2av4k86uep56+PQxTLgjLdBiuUnn rGEliI6gLNtNI1ZGe30J+ZtkqYkotCG9MpQD9/1fGPSpYX+w9UGh79Sw5MdyfNgB cAG/+ehDnI+6hay4U2O+jxDQT6G04C+KBuAqGOwWK9Gw/tdlXpeSgCEx2LEXtmuk EEv+1M1x5gkV2WBo3SfYdy1prQNWS7Z5gcBIIXD0nHG/Uq+HBUAfdBcz6RvKngNG i2e0QaM8qNVjaqI6Ph1SUEQNDpQR/TrJlyMOrLeE4O/XTwBKQMoh0XVD+/U4fUVt +zMvMuV5iA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:41:49 2026 by rpki-client