This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jucXwqqWGqxFA_G0hGTfAjPOP6k.cer File: jucXwqqWGqxFA_G0hGTfAjPOP6k.cer (raw, json) Hash identifier: M7UTX54MfXMNZwfA2Osz61Nl+KjCT5FdIxAt4YE5j0g= Subject key identifier: 8E:E7:17:C2:AA:96:1A:AC:45:03:F1:B4:84:64:DF:02:33:CE:3F:A9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E3867D875512965810AB23959BABAE1 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/de/130d77-c4db-485a-bcbf-329cb516d937/1/jucXwqqWGqxFA_G0hGTfAjPOP6k.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/de/130d77-c4db-485a-bcbf-329cb516d937/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:44 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.116.32.0/22 IP: 2a06:7b40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:67:d8:75:51:29:65:81:0a:b2:39:59:ba:ba:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8ee717c2aa961aac4503f1b48464df0233ce3fa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:b7:3e:98:db:13:3d:fd:74:8c:38:8e:69:eb: db:d1:9f:98:bd:50:50:d5:34:64:24:cc:4e:b6:f4: 09:75:f8:6b:85:0f:fc:c6:40:f6:b1:74:3b:6f:73: 4e:88:3f:ab:07:33:e2:59:92:17:a5:d1:7b:72:e7: 1f:fa:df:34:e3:aa:e4:b5:4b:7e:91:5f:a9:89:89: da:d7:7a:5a:46:92:d0:ef:c3:69:f6:b6:d7:79:a8: 81:34:ec:be:14:3c:43:77:bf:12:f4:6a:de:86:fd: c2:79:30:b1:b8:8a:2e:9d:1e:62:c9:ec:d0:ce:1c: 55:0e:9c:c6:81:e3:ac:f5:4b:cf:36:8c:2b:b6:8a: 7c:0b:b4:97:93:41:b8:3e:cc:ec:f7:46:ce:a1:84: 38:a1:21:96:36:ea:cd:37:06:29:01:f8:de:f3:d7: 5e:7a:71:4e:24:3f:20:ed:32:99:8a:14:86:b0:0e: 20:b7:c3:34:f4:c2:d0:07:07:9d:da:f4:c3:e8:4b: 34:a1:19:e9:42:fd:e0:00:3d:4d:36:90:96:62:c5: 82:8f:52:f0:f2:57:ef:2d:95:23:81:5e:5c:a6:2e: 24:68:3b:8e:c0:cc:f3:85:4c:16:bb:7a:ef:a1:9b: d9:81:62:1f:1d:14:07:17:b9:60:d4:4f:8e:86:2a: 8b:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:E7:17:C2:AA:96:1A:AC:45:03:F1:B4:84:64:DF:02:33:CE:3F:A9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/130d77-c4db-485a-bcbf-329cb516d937/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/130d77-c4db-485a-bcbf-329cb516d937/1/jucXwqqWGqxFA_G0hGTfAjPOP6k.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.116.32.0/22 IPv6: 2a06:7b40::/29 Signature Algorithm: sha256WithRSAEncryption 98:72:b6:93:96:f8:22:52:14:36:90:82:97:b9:2d:d1:06:1f: 65:62:b7:cc:b1:9f:27:8e:ed:69:dd:fc:ab:fc:d1:f3:37:36: 9c:a4:3b:e5:0c:f3:73:89:1a:bd:7e:e8:b8:7c:ef:f3:fd:0e: 7b:13:f2:fa:19:46:c7:1c:13:c1:a5:1b:ae:19:5e:b9:6a:79: 82:f3:50:5c:2a:48:cb:64:e6:e6:87:38:2b:6a:e7:6e:5f:1e: 2e:69:b3:a4:ba:c1:e7:3a:e5:49:d6:83:ad:3e:a5:b2:ef:23: 12:ea:54:0b:82:e9:5d:1c:7c:e4:5f:f7:40:2a:0f:a5:a8:b8: d1:0b:bd:ea:98:7e:83:d1:e4:2a:42:ce:60:8c:eb:d5:6f:e1: 2a:bc:ea:2d:cc:50:07:59:75:c8:b2:b5:60:a9:41:3d:85:c1: ba:43:48:a3:27:1f:c3:5c:d0:81:f9:40:6b:d0:6b:03:ec:ce: e3:d0:ac:62:8b:d8:d7:c2:11:50:5d:07:18:f8:89:4d:b7:65: ab:ef:73:0d:ae:51:19:12:3f:18:f8:5d:c5:ca:e3:5a:69:91: 59:99:cb:7d:ae:3b:12:67:32:cd:ca:56:ec:b7:5e:2a:48:54: 05:a9:41:66:cd:9b:80:63:43:0d:33:09:1b:d4:ae:0d:33:ab: 64:64:93:d2 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt+OGfYdVEpZYEKsjlZurrhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZWU3MTdjMmFhOTYxYWFjNDUwM2YxYjQ4NDY0ZGYwMjMzY2UzZmE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbc+mNsTPf10jDiOaevb0Z+YvVBQ 1TRkJMxOtvQJdfhrhQ/8xkD2sXQ7b3NOiD+rBzPiWZIXpdF7cucf+t8046rktUt+ kV+piYna13paRpLQ78Np9rbXeaiBNOy+FDxDd78S9Grehv3CeTCxuIounR5iyezQ zhxVDpzGgeOs9UvPNowrtop8C7SXk0G4Pszs90bOoYQ4oSGWNurNNwYpAfje89de enFOJD8g7TKZihSGsA4gt8M09MLQBwed2vTD6Es0oRnpQv3gAD1NNpCWYsWCj1Lw 8lfvLZUjgV5cpi4kaDuOwMzzhUwWu3rvoZvZgWIfHRQHF7lg1E+OhiqLlQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFI7nF8KqlhqsRQPxtIRk3wIzzj+pMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RlLzEzMGQ3 Ny1jNGRiLTQ4NWEtYmNiZi0zMjljYjUxNmQ5MzcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGUvMTMwZDc3 LWM0ZGItNDg1YS1iY2JmLTMyOWNiNTE2ZDkzNy8xL2p1Y1h3cXFXR3F4RkFfRzBo R1RmQWpQT1A2ay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuXQgMA0EAgACMAcDBQMqBntAMA0GCSqGSIb3 DQEBCwUAA4IBAQCYcraTlvgiUhQ2kIKXuS3RBh9lYrfMsZ8nju1p3fyr/NHzNzac pDvlDPNziRq9fui4fO/z/Q57E/L6GUbHHBPBpRuuGV65anmC81BcKkjLZObmhzgr auduXx4uabOkusHnOuVJ1oOtPqWy7yMS6lQLguldHHzkX/dAKg+lqLjRC73qmH6D 0eQqQs5gjOvVb+EqvOotzFAHWXXIsrVgqUE9hcG6Q0ijJx/DXNCB+UBr0GsD7M7j 0Kxii9jXwhFQXQcY+IlNt2Wr73MNrlEZEj8Y+F3FyuNaaZFZmct9rjsSZzLNylbs t14qSFQFqUFmzZuAY0MNMwkb1K4NM6tkZJPS -----END CERTIFICATE-----Generated at Mon Feb 9 18:28:04 2026 by rpki-client