This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jvxhDOe89HllH9lRjCiJTtHrWoQ.cer File: jvxhDOe89HllH9lRjCiJTtHrWoQ.cer (raw, json) Hash identifier: qTH7ZvHzp/j/wFfr1mFxPpD2cH0wJsfAQN4OJU+7f3w= Subject key identifier: 8E:FC:61:0C:E7:BC:F4:79:65:1F:D9:51:8C:28:89:4E:D1:EB:5A:84 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C7FD84DF38A8C2C35C8F50D42123571 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/dc/2894d7-14ee-46ab-882a-21272b87728b/1/jvxhDOe89HllH9lRjCiJTtHrWoQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/dc/2894d7-14ee-46ab-882a-21272b87728b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:18:31 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.103.203.0/24 IP: 195.54.166.0/23 IP: 202.122.129.0/24 IP: 2a14:280::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:d8:4d:f3:8a:8c:2c:35:c8:f5:0d:42:12:35:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8efc610ce7bcf479651fd9518c28894ed1eb5a84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a9:5c:35:da:a5:2f:53:27:02:59:0c:b2:be: e2:c8:48:70:dd:f0:41:8d:52:ff:6b:a0:69:f9:51: 10:ba:7d:02:1b:b2:60:23:ac:fa:1c:d5:dc:df:6a: dc:5f:27:12:74:d0:01:5a:ea:e0:bf:7a:d6:58:1d: f9:1a:95:12:fe:45:c4:d1:25:d2:26:4d:d6:4d:f6: 23:0e:b6:bd:f5:a7:ba:7d:18:0c:ca:b3:b7:15:50: 4d:dd:83:54:e0:a3:85:de:cc:6e:78:cf:a7:94:ca: 8f:f7:09:0c:fc:c6:f7:6f:43:b0:13:67:50:c3:a7: ea:c0:95:50:92:89:a0:ed:f9:0a:ac:cb:0d:65:7e: b3:ed:ee:d4:07:e9:f8:63:3e:c7:1b:29:3a:b8:0b: 3b:ca:c3:92:89:ae:34:f0:64:29:a2:be:20:3d:62: 6f:94:f2:f0:a2:60:e1:61:5b:45:c5:7d:bc:39:5c: f5:c6:42:23:68:48:6b:7f:fd:03:d6:54:48:f5:b5: 00:be:14:03:7c:97:5b:0c:1f:79:51:66:0d:0e:63: 95:db:0d:19:d3:52:46:b5:5b:92:88:5a:20:d3:ce: 06:90:2b:67:5b:65:42:c5:5d:f0:fe:29:08:c5:8c: d8:0a:1f:3b:3d:5e:ed:72:68:75:fd:1d:22:56:5a: 46:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:FC:61:0C:E7:BC:F4:79:65:1F:D9:51:8C:28:89:4E:D1:EB:5A:84 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2894d7-14ee-46ab-882a-21272b87728b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2894d7-14ee-46ab-882a-21272b87728b/1/jvxhDOe89HllH9lRjCiJTtHrWoQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.103.203.0/24 195.54.166.0/23 202.122.129.0/24 IPv6: 2a14:280::/29 Signature Algorithm: sha256WithRSAEncryption 7a:cd:55:ac:cd:6f:c7:e5:c7:21:32:4c:9c:d9:f7:ad:79:9c: 24:60:b4:c6:b5:66:6b:27:2d:f4:f0:f7:05:f4:e3:95:2d:92: 78:d5:b4:cc:a2:05:94:ce:8d:39:98:7c:0c:fa:73:22:15:47: f6:e9:a5:d2:b6:e2:7f:1d:3d:83:e7:92:f8:5f:cf:be:22:fc: 4f:61:9f:6a:a3:8a:a1:08:c7:4d:9b:33:37:aa:f8:3f:4c:74: 1e:cf:b4:97:63:53:e9:9f:20:7a:a3:b2:ba:3e:25:d9:47:dd: e3:8a:7f:cc:47:ee:26:ff:b2:a3:da:a4:82:c6:b9:b5:36:16: 74:9e:c9:76:a7:d0:b7:90:fb:e9:d2:c3:d0:66:b9:05:c8:3d: cd:a2:3c:3e:67:e8:41:c4:d4:94:44:21:46:da:e7:59:a7:1b: fb:b0:b8:64:de:66:ac:d1:1f:af:08:8e:40:02:53:f7:2e:ac: b4:1e:b0:cc:75:69:f1:a3:07:a0:12:3e:d7:ed:5f:a4:e3:7f: 0f:ae:37:56:47:3b:17:5a:66:0d:6f:7d:0c:c1:4f:07:84:d4: c5:bc:19:39:d0:a2:52:48:0c:95:b4:9e:9f:ec:e8:3d:9a:08: 66:2f:0e:18:ec:cd:7b:ea:5f:da:94:38:2c:e9:36:57:0b:48: 19:7e:04:3e -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISAZt8f9hN84qMLDXI9Q1CEjVxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZWZjNjEwY2U3YmNmNDc5NjUxZmQ5NTE4YzI4ODk0ZWQxZWI1YTg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoalcNdqlL1MnAlkMsr7iyEhw3fBB jVL/a6Bp+VEQun0CG7JgI6z6HNXc32rcXycSdNABWurgv3rWWB35GpUS/kXE0SXS Jk3WTfYjDra99ae6fRgMyrO3FVBN3YNU4KOF3sxueM+nlMqP9wkM/Mb3b0OwE2dQ w6fqwJVQkomg7fkKrMsNZX6z7e7UB+n4Yz7HGyk6uAs7ysOSia408GQpor4gPWJv lPLwomDhYVtFxX28OVz1xkIjaEhrf/0D1lRI9bUAvhQDfJdbDB95UWYNDmOV2w0Z 01JGtVuSiFog084GkCtnW2VCxV3w/ikIxYzYCh87PV7tcmh1/R0iVlpGTwIDAQAB o4ICnzCCApswHQYDVR0OBBYEFI78YQznvPR5ZR/ZUYwoiU7R61qEMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RjLzI4OTRk Ny0xNGVlLTQ2YWItODgyYS0yMTI3MmI4NzcyOGIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGMvMjg5NGQ3 LTE0ZWUtNDZhYi04ODJhLTIxMjcyYjg3NzI4Yi8xL2p2eGhET2U4OUhsbEg5bFJq Q2lKVHRIcldvUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQAuWfLAwQBwzamAwQAynqBMA0EAgACMAcDBQMq FAKAMA0GCSqGSIb3DQEBCwUAA4IBAQB6zVWszW/H5cchMkyc2feteZwkYLTGtWZr Jy308PcF9OOVLZJ41bTMogWUzo05mHwM+nMiFUf26aXStuJ/HT2D55L4X8++IvxP YZ9qo4qhCMdNmzM3qvg/THQez7SXY1PpnyB6o7K6PiXZR93jin/MR+4m/7Kj2qSC xrm1NhZ0nsl2p9C3kPvp0sPQZrkFyD3Nojw+Z+hBxNSURCFG2udZpxv7sLhk3mas 0R+vCI5AAlP3Lqy0HrDMdWnxowegEj7X7V+k438PrjdWRzsXWmYNb30MwU8HhNTF vBk50KJSSAyVtJ6f7Og9mghmLw4Y7M176l/alDgs6TZXC0gZfgQ+ -----END CERTIFICATE-----Generated at Mon Feb 9 16:51:54 2026 by rpki-client