This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rJSjaRBkgD2GMGAjCmYPIwXuwuc.cer File: rJSjaRBkgD2GMGAjCmYPIwXuwuc.cer (raw, json) Hash identifier: M2klxkMbDszQQp7qXmpceVz2FTBrY2TSqnN+hzE8pkU= Subject key identifier: AC:94:A3:69:10:64:80:3D:86:30:60:23:0A:66:0F:23:05:EE:C2:E7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C13600BEDCB6424E68E055E78E13811 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:20:03 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 140.93.0.0/16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:60:0b:ed:cb:64:24:e6:8e:05:5e:78:e1:38:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:20:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ac94a3691064803d863060230a660f2305eec2e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ca:cd:be:45:8b:29:45:1b:a2:97:4b:8e:89: 45:8b:4b:e7:f3:fd:bc:3d:fd:cb:4f:b5:65:df:5c: 8e:0b:cd:72:f3:ad:16:73:11:ca:f9:89:d6:d1:7a: e4:19:1d:0d:09:2c:74:af:bd:55:1b:f6:12:bb:be: bb:d9:f5:8c:2d:ba:c6:d3:1f:a3:35:ec:85:3c:4e: 07:e3:f8:a0:90:98:01:2b:a1:69:2d:8f:25:35:51: 8b:5c:48:15:a2:68:d6:70:6f:05:4c:6d:e5:2d:98: f3:22:03:02:09:e4:73:e7:d4:c6:49:f5:93:3f:c1: 32:7c:7a:ba:17:8c:cf:de:dd:7b:75:ef:89:47:a1: fe:7c:52:f8:1a:6c:8e:04:0d:dc:28:62:b7:b3:9d: 53:73:2e:f1:57:17:1b:43:99:88:6e:96:5c:f9:ed: 8e:59:40:cd:ef:b2:a2:d5:86:08:b9:05:fb:67:ef: 86:dc:f8:d3:5c:9e:d5:ee:dd:41:e6:fc:d4:a8:37: 3e:fb:99:d4:09:db:b7:ca:54:47:7c:ba:bc:85:68: 35:9d:70:7a:2e:ed:4b:2c:98:f8:5d:38:9c:e4:b0: 28:b9:2f:e5:fc:a4:69:db:dc:fd:3f:30:f5:6a:7d: 9f:fa:b1:34:28:06:70:84:40:b5:a2:75:83:f9:77: b5:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:94:A3:69:10:64:80:3D:86:30:60:23:0A:66:0F:23:05:EE:C2:E7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 140.93.0.0/16 Signature Algorithm: sha256WithRSAEncryption 06:89:4e:e1:84:08:e7:05:d1:3e:09:dd:9d:2c:19:25:eb:fa: b3:b2:bb:3e:66:82:da:ae:8f:f2:7b:15:e3:82:67:63:16:e1: 14:99:9b:d8:c9:c6:82:3f:33:b2:83:24:b1:5e:a6:11:e4:72: ce:d7:56:ac:f4:26:9c:f0:19:c6:da:87:5c:a6:a9:94:9d:67: dd:ce:5a:19:e3:5f:10:c0:fe:bb:81:24:49:63:04:9e:b2:2a: 7d:43:26:a1:cf:b0:71:f6:58:c8:5b:37:25:2a:13:9f:cc:ed: 4e:7a:36:00:13:17:c0:44:02:54:3a:87:c6:7a:cd:cf:ba:50: 20:43:60:17:1e:65:78:b2:78:98:6b:13:4d:08:c6:fa:92:14: 1a:cc:62:ac:15:bb:cd:b9:15:ae:4c:e1:ad:71:50:c6:7b:63: e3:4a:93:bd:34:90:cc:d2:b3:d0:9b:55:7d:42:80:fb:cc:2d: e0:d3:df:e8:1f:4c:34:0b:3b:07:a5:81:35:76:9e:69:07:af: a2:cc:e3:b5:2b:9c:60:f6:d6:41:8d:6d:e6:12:d0:21:5e:6d: f5:1b:33:b5:fb:76:6f:67:4c:e2:2e:cd:2c:f8:c9:e3:84:33: df:82:13:f3:a9:3d:c1:87:be:87:69:84:41:c9:cd:05:0b:df: 97:11:32:03 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgISAZt8E2AL7ctkJOaOBV544TgRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAyMDAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYzk0YTM2OTEwNjQ4MDNkODYzMDYwMjMwYTY2MGYyMzA1ZWVjMmU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssrNvkWLKUUbopdLjolFi0vn8/28 Pf3LT7Vl31yOC81y860WcxHK+YnW0XrkGR0NCSx0r71VG/YSu7672fWMLbrG0x+j NeyFPE4H4/igkJgBK6FpLY8lNVGLXEgVomjWcG8FTG3lLZjzIgMCCeRz59TGSfWT P8EyfHq6F4zP3t17de+JR6H+fFL4GmyOBA3cKGK3s51Tcy7xVxcbQ5mIbpZc+e2O WUDN77Ki1YYIuQX7Z++G3PjTXJ7V7t1B5vzUqDc++5nUCdu3ylRHfLq8hWg1nXB6 Lu1LLJj4XTic5LAouS/l/KRp29z9PzD1an2f+rE0KAZwhEC1onWD+Xe18wIDAQAB o4ICgzCCAn8wHQYDVR0OBBYEFKyUo2kQZIA9hjBgIwpmDyMF7sLnMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YwLzMwMjU2 Yy1mMjAxLTRmNDgtYWNhMC1kYmU2YzkxMGJiYTYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjAvMzAyNTZj LWYyMDEtNGY0OC1hY2EwLWRiZTZjOTEwYmJhNi8xL3JKU2phUkJrZ0QyR01HQWpD bVlQSXdYdXd1Yy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUF BwEHAQH/BA8wDTALBAIAATAFAwMAjF0wDQYJKoZIhvcNAQELBQADggEBAAaJTuGE COcF0T4J3Z0sGSXr+rOyuz5mgtquj/J7FeOCZ2MW4RSZm9jJxoI/M7KDJLFephHk cs7XVqz0JpzwGcbah1ymqZSdZ93OWhnjXxDA/ruBJEljBJ6yKn1DJqHPsHH2WMhb NyUqE5/M7U56NgATF8BEAlQ6h8Z6zc+6UCBDYBceZXiyeJhrE00IxvqSFBrMYqwV u825Fa5M4a1xUMZ7Y+NKk700kMzSs9CbVX1CgPvMLeDT3+gfTDQLOwelgTV2nmkH r6LM47UrnGD21kGNbeYS0CFebfUbM7X7dm9nTOIuzSz4yeOEM9+CE/OpPcGHvodp hEHJzQUL35cRMgM= -----END CERTIFICATE-----Generated at Mon Feb 9 19:41:34 2026 by rpki-client