This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rJpRvqG1cP-nLZxS0aUYwkvHjAI.cer File: rJpRvqG1cP-nLZxS0aUYwkvHjAI.cer (raw, json) Hash identifier: RXE/T0HZEcMcNtKEREOkdgdlyVBPSqkEsYMHMgZa6Po= Subject key identifier: AC:9A:51:BE:A1:B5:70:FF:A7:2D:9C:52:D1:A5:18:C2:4B:C7:8C:02 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7758947EFA9F5CD83E0F094060B8E8FC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d3/2de87a-0176-4f19-b0e8-ab5630211f7a/1/rJpRvqG1cP-nLZxS0aUYwkvHjAI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d3/2de87a-0176-4f19-b0e8-ab5630211f7a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:17:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 50772 IP: 195.78.100.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:94:7e:fa:9f:5c:d8:3e:0f:09:40:60:b8:e8:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ac9a51bea1b570ffa72d9c52d1a518c24bc78c02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d8:12:60:c8:40:84:ee:4f:17:5e:4a:d9:a8: d7:36:fa:a9:3f:f7:e8:be:e7:7d:86:f5:2d:94:f7: 3d:87:6c:63:28:16:61:2c:6c:1f:9a:7d:8a:d4:4d: ae:cc:47:b9:0a:c7:b1:2a:81:35:7c:bd:00:6d:60: 19:77:91:2d:80:24:ad:34:2c:b8:84:a8:bd:07:80: 41:8f:35:74:6a:54:9d:52:4b:fa:64:50:e7:7b:ae: 25:85:dc:2a:d3:0b:e2:df:d1:f6:2c:75:e6:32:b2: 30:1f:1b:01:0d:60:92:a7:dd:bc:15:9e:11:87:3d: cb:8b:76:26:4a:16:5e:8b:00:fc:29:fa:9b:c2:76: 34:d5:84:64:8e:58:41:32:5b:f2:39:d5:9a:50:f7: 43:f5:c7:55:4b:83:ca:e3:82:df:14:7d:e0:b7:a2: f1:27:ec:92:3a:c4:b9:5b:0b:ab:59:e2:d1:95:f6: 7e:8a:3a:a5:41:13:4e:bf:f2:6a:de:3e:28:92:3d: 8e:d4:55:88:70:ea:bb:cc:b2:0e:7a:94:a0:fc:5d: 0b:0b:76:71:e8:50:24:b2:e0:80:a9:1f:09:ff:2b: b5:2f:7a:9a:0c:ab:fc:ec:7b:27:5b:80:aa:c3:d9: 01:c1:e6:57:65:3c:ce:e4:1a:7c:dd:17:d1:92:5d: e8:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:9A:51:BE:A1:B5:70:FF:A7:2D:9C:52:D1:A5:18:C2:4B:C7:8C:02 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/2de87a-0176-4f19-b0e8-ab5630211f7a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/2de87a-0176-4f19-b0e8-ab5630211f7a/1/rJpRvqG1cP-nLZxS0aUYwkvHjAI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.78.100.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 50772 Signature Algorithm: sha256WithRSAEncryption 3e:73:6f:48:00:9a:e8:e3:b1:55:ad:35:be:37:54:b6:9a:3f: a0:eb:6a:09:b1:57:47:8e:1a:a6:b1:ff:85:52:d9:cf:4c:62: e4:df:64:5c:7a:d8:ae:f0:37:d2:7a:d7:a7:2c:85:e6:8e:58: 2c:75:b8:c1:2c:07:0c:69:8e:ae:f5:e3:bd:c3:7a:54:cb:94: f2:80:06:fa:9f:d8:99:10:4c:d0:13:b8:0e:2f:18:f9:f2:c0: b4:cb:38:63:ec:89:4e:83:27:91:c9:ac:ad:7d:34:f4:5d:e4: 13:e7:6d:52:05:5d:6a:26:62:b9:60:dc:88:53:c2:8c:d6:c0: 8f:54:07:d3:bf:e0:33:a6:37:9f:3c:38:ea:d9:91:af:6b:1e: e5:d1:44:3c:4e:0a:61:77:b4:e6:36:4e:9a:9a:fa:c4:a5:ef: f0:bf:7d:af:b9:88:2a:e2:fe:c9:e1:76:49:ab:4f:77:f6:89: 67:6d:73:9b:df:2c:4c:ec:ea:71:f4:69:ca:67:d3:ed:8a:89: cd:38:be:89:8f:d6:5c:d4:af:0c:32:6c:57:65:cf:ac:de:84: 3a:14:a1:ce:50:f8:ac:83:4a:b9:fc:a8:fb:c4:41:72:4a:4c: 01:13:1c:98:7b:f1:e7:52:06:ed:cd:05:94:7a:04:76:64:80: 86:d3:aa:62 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt3WJR++p9c2D4PCUBguOj8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYzlhNTFiZWExYjU3MGZmYTcyZDljNTJkMWE1MThjMjRiYzc4YzAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdgSYMhAhO5PF15K2ajXNvqpP/fo vud9hvUtlPc9h2xjKBZhLGwfmn2K1E2uzEe5CsexKoE1fL0AbWAZd5EtgCStNCy4 hKi9B4BBjzV0alSdUkv6ZFDne64lhdwq0wvi39H2LHXmMrIwHxsBDWCSp928FZ4R hz3Li3YmShZeiwD8KfqbwnY01YRkjlhBMlvyOdWaUPdD9cdVS4PK44LfFH3gt6Lx J+ySOsS5WwurWeLRlfZ+ijqlQRNOv/Jq3j4okj2O1FWIcOq7zLIOepSg/F0LC3Zx 6FAksuCAqR8J/yu1L3qaDKv87HsnW4Cqw9kBweZXZTzO5Bp83RfRkl3o0wIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFKyaUb6htXD/py2cUtGlGMJLx4wCMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2QzLzJkZTg3 YS0wMTc2LTRmMTktYjBlOC1hYjU2MzAyMTFmN2EvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDMvMmRlODdh LTAxNzYtNGYxOS1iMGU4LWFiNTYzMDIxMWY3YS8xL3JKcFJ2cUcxY1AtbkxaeFMw YVVZd2t2SGpBSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQBw05kMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDGVDANBgkqhkiG9w0BAQsFAAOCAQEAPnNvSACa6OOxVa01vjdUtpo/oOtqCbFX R44aprH/hVLZz0xi5N9kXHrYrvA30nrXpyyF5o5YLHW4wSwHDGmOrvXjvcN6VMuU 8oAG+p/YmRBM0BO4Di8Y+fLAtMs4Y+yJToMnkcmsrX009F3kE+dtUgVdaiZiuWDc iFPCjNbAj1QH07/gM6Y3nzw46tmRr2se5dFEPE4KYXe05jZOmpr6xKXv8L99r7mI KuL+yeF2SatPd/aJZ21zm98sTOzqcfRpymfT7YqJzTi+iY/WXNSvDDJsV2XPrN6E OhShzlD4rINKufyo+8RBckpMARMcmHvx51IG7c0FlHoEdmSAhtOqYg== -----END CERTIFICATE-----Generated at Mon Feb 9 15:09:20 2026 by rpki-client