This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rJ4u_NwhOsWxsIedkioXi4UPRR8.cer File: rJ4u_NwhOsWxsIedkioXi4UPRR8.cer (raw, json) Hash identifier: KAR7fxS96dp63ZnrW8C/dkvCAKAA9TnTa5bFb69bQhc= Subject key identifier: AC:9E:2E:FC:DC:21:3A:C5:B1:B0:87:9D:92:2A:17:8B:85:0F:45:1F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C7EF5BBC51B0D30ED47D42B65F8261E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/rJ4u_NwhOsWxsIedkioXi4UPRR8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:17:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 24763 AS: 29104 IP: 37.35.0.0/21 IP: 185.116.132.0/22 IP: 192.54.144.0/24 IP: 192.93.158.0 -- 192.93.161.255 IP: 192.93.166.0/23 IP: 193.56.124.0/23 IP: 193.56.130.0/23 IP: 2a00:4f40::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7e:f5:bb:c5:1b:0d:30:ed:47:d4:2b:65:f8:26:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ac9e2efcdc213ac5b1b0879d922a178b850f451f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:5e:1c:0d:c7:79:30:87:44:52:03:8d:74:e7: e3:e5:a0:bf:22:36:26:a5:55:45:8a:a1:88:5f:82: 89:b6:38:0f:ac:4c:22:d2:5a:be:cd:80:16:c8:75: d3:b9:f0:8e:d7:a8:72:40:fc:32:1d:da:f6:a6:c6: 4a:32:6e:9c:43:20:32:6b:2d:fc:bc:2d:f5:a2:c7: 76:88:9e:d4:3d:25:b0:b0:8b:b7:16:87:44:0d:e6: 14:16:ac:8f:60:fd:d8:d6:4b:09:17:a9:3a:5f:a8: 44:71:91:96:cc:86:00:dc:5b:c5:b2:cc:ea:a5:85: 7a:fe:af:9b:88:ce:d3:90:e6:30:f6:c8:38:69:65: 97:a0:c4:ea:ac:de:38:ee:77:e3:fe:cc:6e:8b:f0: 1d:dd:39:e2:d3:2f:7f:b9:58:60:d5:3f:bb:64:78: b8:1f:de:c0:9e:cc:75:30:49:34:53:56:6d:72:cd: 9b:1d:67:63:42:51:b2:7e:b8:3a:38:6b:55:26:7c: 02:7b:15:8c:07:f1:c7:7c:32:ca:6f:61:3c:99:45: b4:8c:dd:15:fe:1d:e2:6e:d6:f2:a9:40:e7:10:44: 5e:8b:34:9a:58:a3:0c:5d:cf:4c:e2:0f:95:ee:59: 4d:25:8b:d3:95:f9:96:1c:13:bd:63:45:8a:68:ff: 91:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:9E:2E:FC:DC:21:3A:C5:B1:B0:87:9D:92:2A:17:8B:85:0F:45:1F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/rJ4u_NwhOsWxsIedkioXi4UPRR8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.35.0.0/21 185.116.132.0/22 192.54.144.0/24 192.93.158.0-192.93.161.255 192.93.166.0/23 193.56.124.0/23 193.56.130.0/23 IPv6: 2a00:4f40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 24763 29104 Signature Algorithm: sha256WithRSAEncryption 20:34:77:82:6b:4d:17:d4:ab:02:7e:d1:a6:3b:cc:c1:fa:3e: ac:4d:54:22:87:28:23:5b:d0:2b:36:fd:c9:8e:66:07:41:60: 5f:c5:c8:6d:9f:8a:91:57:81:ca:19:d0:44:ef:bb:27:b8:6b: d0:4a:d8:54:68:e4:c7:e2:be:10:58:0c:0e:9d:a2:f8:db:62: 3f:f2:c9:4e:9f:37:3b:37:d4:b0:95:c3:8f:51:5a:41:64:94: 08:b1:80:b5:ba:7f:7a:bd:d1:c7:d6:81:51:6e:02:18:61:7e: f2:98:52:bf:75:66:14:90:f1:cb:c4:1f:c1:c8:56:63:b7:4e: 7e:a8:b9:40:66:40:8a:4e:ed:ad:72:74:a9:a1:6c:c2:be:dc: f7:d8:c2:95:1b:b8:b8:b8:cb:06:36:98:4a:34:16:b1:cb:0e: d2:31:2f:89:9b:a5:2a:08:15:c0:b2:23:10:a1:7f:8b:8d:39: c1:8c:9f:15:3b:ff:ef:ce:82:65:c0:f6:43:85:e6:0f:53:20: 88:ae:90:30:e3:6b:3b:6f:cd:0a:6d:c4:9c:a7:1a:25:6f:2b: 43:87:02:c5:8a:55:97:14:24:25:63:c2:cf:6d:e6:34:fa:ed: 86:db:ec:ad:ca:2e:36:c7:63:aa:f9:c8:de:96:2f:9c:07:dc: c0:1b:12:ce -----BEGIN CERTIFICATE----- MIIF0jCCBLqgAwIBAgISAZt8fvW7xRsNMO1H1Ctl+CYeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYzllMmVmY2RjMjEzYWM1YjFiMDg3OWQ5MjJhMTc4Yjg1MGY0NTFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAql4cDcd5MIdEUgONdOfj5aC/IjYm pVVFiqGIX4KJtjgPrEwi0lq+zYAWyHXTufCO16hyQPwyHdr2psZKMm6cQyAyay38 vC31osd2iJ7UPSWwsIu3FodEDeYUFqyPYP3Y1ksJF6k6X6hEcZGWzIYA3FvFsszq pYV6/q+biM7TkOYw9sg4aWWXoMTqrN447nfj/sxui/Ad3Tni0y9/uVhg1T+7ZHi4 H97Ansx1MEk0U1Ztcs2bHWdjQlGyfrg6OGtVJnwCexWMB/HHfDLKb2E8mUW0jN0V /h3ibtbyqUDnEEReizSaWKMMXc9M4g+V7llNJYvTlfmWHBO9Y0WKaP+R6wIDAQAB o4IC3jCCAtowHQYDVR0OBBYEFKyeLvzcITrFsbCHnZIqF4uFD0UfMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RkL2QxZmFh OS1iNWEzLTRkNDktODY4YS03YzdiZjI3MTc1YzUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGQvZDFmYWE5 LWI1YTMtNGQ0OS04NjhhLTdjN2JmMjcxNzVjNS8xL3JKNHVfTndoT3NXeHNJZWRr aW9YaTRVUFJSOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFoGCCsGAQUF BwEHAQH/BEswSTA4BAIAATAyAwQDJSMAAwQCuXSEAwQAwDaQMAwDBAHAXZ4DBAHA XaADBAHAXaYDBAHBOHwDBAHBOIIwDQQCAAIwBwMFACoAT0AwHQYIKwYBBQUHAQgB Af8EDjAMoAowCAICYLsCAnGwMA0GCSqGSIb3DQEBCwUAA4IBAQAgNHeCa00X1KsC ftGmO8zB+j6sTVQihygjW9ArNv3JjmYHQWBfxchtn4qRV4HKGdBE77snuGvQSthU aOTH4r4QWAwOnaL422I/8slOnzc7N9SwlcOPUVpBZJQIsYC1un96vdHH1oFRbgIY YX7ymFK/dWYUkPHLxB/ByFZjt05+qLlAZkCKTu2tcnSpoWzCvtz32MKVG7i4uMsG NphKNBaxyw7SMS+Jm6UqCBXAsiMQoX+LjTnBjJ8VO//vzoJlwPZDheYPUyCIrpAw 42s7b80KbcScpxolbytDhwLFilWXFCQlY8LPbeY0+u2G2+ytyi42x2Oq+cjeli+c B9zAGxLO -----END CERTIFICATE-----Generated at Mon Feb 9 16:52:07 2026 by rpki-client