This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jxQAPWV-y-X5tvSUe4ynKtrOnSk.cer File: jxQAPWV-y-X5tvSUe4ynKtrOnSk.cer (raw, json) Hash identifier: 11yGdJS+5VC9BLeOL66Y7l1goPrHJJe5wcOibwdQbGI= Subject key identifier: 8F:14:00:3D:65:7E:CB:E5:F9:B6:F4:94:7B:8C:A7:2A:DA:CE:9D:29 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7834D847628573C7C38D128A060D7BEF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:07 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 205769 IP: 149.249.252.0/22 IP: 185.207.60.0/22 IP: 2a0b:1ec0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:d8:47:62:85:73:c7:c3:8d:12:8a:06:0d:7b:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8f14003d657ecbe5f9b6f4947b8ca72adace9d29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:0e:24:bb:d1:17:d7:84:e2:65:f6:a7:3d:e2: a7:ae:d8:23:9b:3a:f2:f5:f9:b1:0c:0e:18:fd:80: 72:a0:5c:7a:1b:fc:cb:89:2b:34:bf:27:e1:27:50: 98:3e:8a:63:24:ef:f2:34:26:c3:9c:b9:4c:c7:79: 2a:ea:49:13:c3:c5:9d:cb:e7:ea:fc:1e:a8:11:94: b6:69:6a:04:c9:80:32:e4:82:f0:3c:6e:17:0b:d0: 6d:f5:ab:47:a4:bf:d9:11:e8:c0:e7:3a:54:b1:38: fb:f2:0a:58:11:d6:a7:c0:0e:83:ff:37:a5:72:25: 1f:16:8f:8b:16:b1:94:a7:93:55:14:8f:1b:fb:ae: bf:ae:18:24:74:f2:5f:41:3d:f3:35:1a:f8:d2:93: c2:e1:7c:09:5c:3d:43:e0:51:98:ee:67:b4:12:4e: 64:0e:cf:e9:b0:c1:ad:df:b8:61:cb:f1:4a:9a:66: 0c:67:a5:00:96:89:18:19:c3:00:3d:cd:c7:de:df: 23:88:c2:eb:8b:48:1a:c8:bc:c8:57:76:40:e9:89: 36:c8:a3:01:75:41:62:ee:3c:f5:0d:d1:93:97:4d: a8:fa:3f:eb:97:6d:7b:f4:7a:2d:65:57:77:5b:6d: 50:68:02:20:b8:a4:25:e6:ef:0c:0f:8b:7e:51:24: 8c:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:14:00:3D:65:7E:CB:E5:F9:B6:F4:94:7B:8C:A7:2A:DA:CE:9D:29 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 149.249.252.0/22 185.207.60.0/22 IPv6: 2a0b:1ec0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 205769 Signature Algorithm: sha256WithRSAEncryption 3e:37:e8:99:1f:89:bb:f6:24:e8:3b:4f:0d:ad:28:e4:87:15: 85:2e:38:c2:d0:6d:cd:1d:37:cd:d0:80:6f:c3:43:6c:38:1c: ec:51:12:4f:7e:2a:70:1f:28:f3:e5:bb:46:97:7c:42:96:ea: 8b:45:4f:87:c3:28:f7:b9:ba:89:7a:c2:f4:8a:46:7a:14:30: db:e5:7a:1e:df:04:a5:cc:56:d3:08:b0:66:87:e3:59:94:3a: dc:bd:0e:3c:f4:93:9a:12:f7:3c:28:b1:98:d7:46:e1:0e:69: 35:7f:b9:49:da:6b:e0:a9:01:75:94:27:60:ba:61:c6:cb:df: 23:01:ef:b9:d9:a1:ed:9a:7a:af:43:3a:e9:66:cf:11:22:ce: 45:94:69:c8:e3:70:ac:14:d1:c4:96:5e:7b:32:89:b5:3a:7e: c0:c1:a8:65:59:6a:80:1e:8d:38:7b:1b:10:ef:a3:3a:56:93: d6:83:e8:2a:14:c6:71:f5:1d:f9:f9:b3:cc:f9:18:f5:61:95: 1f:1d:af:2f:08:2a:34:f4:bd:ed:de:85:cb:4c:a7:81:18:0f: 21:76:6a:0d:2b:ae:de:d1:33:9d:7a:41:cd:a4:ee:f7:3b:a6: 8e:a1:b8:3b:ca:bf:83:37:05:f0:00:d0:54:26:d3:28:8e:2f: 4c:bd:27:15 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt4NNhHYoVzx8ONEooGDXvvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZjE0MDAzZDY1N2VjYmU1ZjliNmY0OTQ3YjhjYTcyYWRhY2U5ZDI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4w4ku9EX14TiZfanPeKnrtgjmzry 9fmxDA4Y/YByoFx6G/zLiSs0vyfhJ1CYPopjJO/yNCbDnLlMx3kq6kkTw8Wdy+fq /B6oEZS2aWoEyYAy5ILwPG4XC9Bt9atHpL/ZEejA5zpUsTj78gpYEdanwA6D/zel ciUfFo+LFrGUp5NVFI8b+66/rhgkdPJfQT3zNRr40pPC4XwJXD1D4FGY7me0Ek5k Ds/psMGt37hhy/FKmmYMZ6UAlokYGcMAPc3H3t8jiMLri0gayLzIV3ZA6Yk2yKMB dUFi7jz1DdGTl02o+j/rl2179HotZVd3W21QaAIguKQl5u8MD4t+USSM/QIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFI8UAD1lfsvl+bb0lHuMpyrazp0pMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBhLzdmNDY1 My1kZWMxLTQ3MzUtOWZmNy1lYjNjOWEyZTdlZWEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGEvN2Y0NjUz LWRlYzEtNDczNS05ZmY3LWViM2M5YTJlN2VlYS8xL2p4UUFQV1YteS1YNXR2U1Vl NHluS3RyT25Tay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQClfn8AwQCuc88MA0EAgACMAcDBQAqCx7AMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMjyTANBgkqhkiG9w0BAQsFAAOCAQEAPjfo mR+Ju/Yk6DtPDa0o5IcVhS44wtBtzR03zdCAb8NDbDgc7FEST34qcB8o8+W7Rpd8 Qpbqi0VPh8Mo97m6iXrC9IpGehQw2+V6Ht8EpcxW0wiwZofjWZQ63L0OPPSTmhL3 PCixmNdG4Q5pNX+5Sdpr4KkBdZQnYLphxsvfIwHvudmh7Zp6r0M66WbPESLORZRp yONwrBTRxJZeezKJtTp+wMGoZVlqgB6NOHsbEO+jOlaT1oPoKhTGcfUd+fmzzPkY 9WGVHx2vLwgqNPS97d6Fy0yngRgPIXZqDSuu3tEznXpBzaTu9zumjqG4O8q/gzcF 8ADQVCbTKI4vTL0nFQ== -----END CERTIFICATE-----Generated at Mon Feb 9 16:52:29 2026 by rpki-client