This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jsO7EvX2KhCIsHqYFsRjBtEWHh0.cer File: jsO7EvX2KhCIsHqYFsRjBtEWHh0.cer (raw, json) Hash identifier: d3wmMzsVZ+swjq3Pfo/VbxuE1TWBamzx766EZsnb2Bk= Subject key identifier: 8E:C3:BB:12:F5:F6:2A:10:88:B0:7A:98:16:C4:63:06:D1:16:1E:1D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B35AC53A0F02B04A801AB309CD77D04 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/93/c0e4d6-e7dc-41b4-b563-bbc76129c89b/1/jsO7EvX2KhCIsHqYFsRjBtEWHh0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/93/c0e4d6-e7dc-41b4-b563-bbc76129c89b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:17:53 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 216302 IP: 31.24.248.0/24 IP: 2a12:48c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:ac:53:a0:f0:2b:04:a8:01:ab:30:9c:d7:7d:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8ec3bb12f5f62a1088b07a9816c46306d1161e1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:55:e1:da:64:e7:6d:51:ee:da:65:0d:f5:ab: 4e:71:99:c5:74:aa:fa:82:88:d5:76:b6:aa:80:63: 85:1d:30:1a:0a:50:e7:42:fd:94:dd:7b:8c:66:45: 4d:39:59:f1:b8:b7:b9:bd:32:c6:6a:fb:85:43:3a: cc:57:70:b5:80:7a:80:cd:e4:fa:93:14:07:27:18: c1:79:bb:2e:34:87:87:97:62:0d:d5:7c:28:f3:67: bd:f8:03:1d:76:d5:af:e5:6c:78:dc:4b:cb:af:26: c2:ee:69:09:f2:cb:39:f0:44:cd:e3:ac:4b:b1:bc: 2b:9f:ab:e4:3a:17:f9:22:1d:53:88:e4:09:ff:5b: cb:51:7a:79:50:ae:df:a2:85:9f:06:c4:f6:2f:0b: 6f:33:87:7e:4d:04:0a:fc:ea:a5:aa:ee:9c:76:7a: 5c:c4:61:b9:5e:47:f3:7c:e1:53:39:5c:da:33:0a: ff:df:d1:d3:28:f5:fd:b1:a9:4b:fb:cf:74:b4:5e: a4:32:55:dc:dc:fb:16:a3:2f:52:88:80:53:7a:e0: a5:8e:63:05:b8:63:ad:eb:58:08:ac:50:51:d3:79: 7f:89:7d:92:8c:03:86:aa:fc:be:89:86:1f:71:fc: 5c:50:3e:00:d6:5d:e5:0c:ae:80:b2:77:03:90:d2: 98:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:C3:BB:12:F5:F6:2A:10:88:B0:7A:98:16:C4:63:06:D1:16:1E:1D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/c0e4d6-e7dc-41b4-b563-bbc76129c89b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/c0e4d6-e7dc-41b4-b563-bbc76129c89b/1/jsO7EvX2KhCIsHqYFsRjBtEWHh0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.24.248.0/24 IPv6: 2a12:48c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 216302 Signature Algorithm: sha256WithRSAEncryption 46:29:bf:d1:b4:6d:35:a6:b3:99:28:47:18:2c:2c:1f:c7:8f: 84:4b:7a:46:49:77:40:bc:ff:1a:42:75:18:34:5c:5e:c2:3e: b7:bd:80:c3:2d:28:f5:be:97:d9:c9:f8:4e:53:f0:45:dd:00: b5:f2:e9:a6:d6:25:09:61:4b:08:26:4f:39:94:39:9d:8e:6f: bf:b0:e2:cd:d8:03:67:df:3d:94:9c:4a:c2:ab:8b:6f:07:5b: 36:23:09:c1:f0:fc:ed:5a:66:38:7d:f7:90:92:5c:45:3d:69: d7:45:b4:36:75:4d:d3:a9:7c:20:a2:48:98:b2:45:2f:8a:e8: 21:ad:41:b8:19:5b:33:a7:1f:b8:99:fe:b0:1c:5a:08:c4:f1: 99:b9:08:b0:e9:8b:f6:00:2f:48:34:86:6a:75:99:ed:73:df: 00:22:6d:06:43:09:0e:3a:c0:29:08:f0:d2:27:f3:a8:c3:d8: 91:6a:56:ba:2d:b3:3d:22:54:ce:96:57:b1:e6:c7:4b:24:08: 18:a3:a1:a4:75:05:ef:d5:b2:4d:b4:63:95:27:76:21:95:24: fa:03:3b:db:dc:4c:7e:f3:ba:ff:aa:c0:a6:f5:21:c3:bf:2b: 1f:7d:14:e7:a8:0d:05:bc:bb:96:2d:30:73:b2:b7:95:a3:0b: fb:70:69:36 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt7NaxToPArBKgBqzCc130EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZWMzYmIxMmY1ZjYyYTEwODhiMDdhOTgxNmM0NjMwNmQxMTYxZTFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVXh2mTnbVHu2mUN9atOcZnFdKr6 gojVdraqgGOFHTAaClDnQv2U3XuMZkVNOVnxuLe5vTLGavuFQzrMV3C1gHqAzeT6 kxQHJxjBebsuNIeHl2IN1Xwo82e9+AMddtWv5Wx43EvLrybC7mkJ8ss58ETN46xL sbwrn6vkOhf5Ih1TiOQJ/1vLUXp5UK7fooWfBsT2LwtvM4d+TQQK/Oqlqu6cdnpc xGG5XkfzfOFTOVzaMwr/39HTKPX9salL+890tF6kMlXc3PsWoy9SiIBTeuCljmMF uGOt61gIrFBR03l/iX2SjAOGqvy+iYYfcfxcUD4A1l3lDK6AsncDkNKYCQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFI7DuxL19ioQiLB6mBbEYwbRFh4dMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkzL2MwZTRk Ni1lN2RjLTQxYjQtYjU2My1iYmM3NjEyOWM4OWIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTMvYzBlNGQ2 LWU3ZGMtNDFiNC1iNTYzLWJiYzc2MTI5Yzg5Yi8xL2pzTzdFdlgyS2hDSXNIcVlG c1JqQnRFV0hoMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAHxj4MA0EAgACMAcDBQMqEkjAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNM7jANBgkqhkiG9w0BAQsFAAOCAQEARim/0bRtNaaz mShHGCwsH8ePhEt6Rkl3QLz/GkJ1GDRcXsI+t72Awy0o9b6X2cn4TlPwRd0AtfLp ptYlCWFLCCZPOZQ5nY5vv7DizdgDZ989lJxKwquLbwdbNiMJwfD87VpmOH33kJJc RT1p10W0NnVN06l8IKJImLJFL4roIa1BuBlbM6cfuJn+sBxaCMTxmbkIsOmL9gAv SDSGanWZ7XPfACJtBkMJDjrAKQjw0ifzqMPYkWpWui2zPSJUzpZXsebHSyQIGKOh pHUF79WyTbRjlSd2IZUk+gM729xMfvO6/6rApvUhw78rH30U56gNBby7li0wc7K3 laML+3BpNg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:48:02 2026 by rpki-client