This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.cer File: rJu_n2IzE-srGCc1C0Wpuh_Z2l8.cer (raw, json) Hash identifier: xbgeS5/Ehz1nSwtr+EtVKe9woAB4EBQ+PL7A84qpA/4= Subject key identifier: AC:9B:BF:9F:62:33:13:EB:2B:18:27:35:0B:45:A9:BA:1F:D9:DA:5F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C76838420A758E02D3BFC5B38A463F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:18:35 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 215879 IP: 2001:67c:6d4::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:68:38:42:0a:75:8e:02:d3:bf:c5:b3:8a:46:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ac9bbf9f623313eb2b1827350b45a9ba1fd9da5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:6a:ac:0b:26:2a:9b:27:1f:51:a0:fa:a9:5e: 71:3d:e1:ee:a1:cf:d7:86:6a:9f:75:b8:9a:7c:66: fc:b1:bf:12:2f:0d:33:6c:f6:d7:e5:b7:81:98:94: 1f:78:24:a3:fc:dc:01:0d:5a:57:91:db:19:d4:94: c3:94:cf:23:3a:21:56:0e:98:cb:32:9d:6d:bf:fd: 98:a6:23:c6:1e:0c:e6:58:f0:09:9e:3b:70:83:23: 6b:07:35:f4:fd:ea:85:5a:0a:3f:4b:e4:01:b7:f7: 06:3f:9a:e8:a5:2d:9e:cb:4c:79:55:96:79:58:12: 29:f1:cd:cc:10:fc:a5:41:aa:c2:fe:a5:03:19:81: 67:ad:a8:8f:f3:0b:28:9e:b2:66:22:13:70:ba:e3: 5a:18:15:ec:49:fd:75:26:79:76:16:44:b8:7f:57: f4:8e:61:eb:18:08:e0:e5:7b:9d:53:96:54:4f:ab: 8d:af:41:62:59:e6:a4:e0:44:a8:01:4f:18:77:7c: 03:c5:22:8a:4f:a3:a8:83:05:0a:de:d9:7c:7b:84: 2d:67:4c:10:ce:19:6c:76:9b:96:8f:a5:41:5b:e1: 83:2c:f7:cd:f5:bd:fb:30:56:11:4e:a9:02:f2:8f: c6:9f:7c:8c:50:54:29:a4:21:65:13:63:52:37:18: d0:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:9B:BF:9F:62:33:13:EB:2B:18:27:35:0B:45:A9:BA:1F:D9:DA:5F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:6d4::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 215879 Signature Algorithm: sha256WithRSAEncryption 81:8d:06:8b:62:31:fa:ce:82:b2:29:a1:20:91:a0:8a:aa:a5: 50:6e:49:bd:82:98:d0:80:ed:c7:7a:61:51:1c:0e:31:3c:36: a7:b6:61:5c:06:33:93:ad:11:21:88:a3:5a:00:78:5e:68:d7: d1:51:cb:2c:c6:1b:95:d7:9a:bb:16:01:29:a5:5a:72:36:a6: 37:e9:53:6e:c1:8f:d3:8e:72:d6:14:68:02:b0:91:35:f8:bb: b6:6e:74:98:6f:56:37:a1:ee:43:ef:a5:f1:9c:17:73:8f:31: 7e:f7:94:83:fe:02:f3:25:2e:b2:b9:0a:b1:32:cb:94:a1:e9: b7:34:09:ce:9c:5d:91:c6:14:23:41:fe:e3:94:ae:24:52:ec: 7a:94:fe:eb:fe:9b:ce:88:36:4e:39:81:05:01:bc:c8:7a:67: 36:f7:53:22:13:2d:3a:d0:a9:35:2f:86:92:ea:fb:7d:90:36: ca:d4:98:05:7e:7e:ae:7f:54:f9:b8:b1:64:d3:e9:70:df:98: 9a:53:62:6c:55:a6:cb:dc:51:ff:1c:7c:9b:c0:a4:bd:51:17: ae:34:a0:3c:53:fe:f7:42:e9:4b:7e:dd:b8:08:25:ef:5b:4c: d7:09:f6:38:41:69:32:4b:85:7d:df:b9:b7:ce:85:49:56:3c: 97:a6:ca:58 -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZt3x2g4Qgp1jgLTv8WzikY/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYzliYmY5ZjYyMzMxM2ViMmIxODI3MzUwYjQ1YTliYTFmZDlkYTVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmqsCyYqmycfUaD6qV5xPeHuoc/X hmqfdbiafGb8sb8SLw0zbPbX5beBmJQfeCSj/NwBDVpXkdsZ1JTDlM8jOiFWDpjL Mp1tv/2YpiPGHgzmWPAJnjtwgyNrBzX0/eqFWgo/S+QBt/cGP5ropS2ey0x5VZZ5 WBIp8c3MEPylQarC/qUDGYFnraiP8wsonrJmIhNwuuNaGBXsSf11Jnl2FkS4f1f0 jmHrGAjg5XudU5ZUT6uNr0FiWeak4ESoAU8Yd3wDxSKKT6OogwUK3tl8e4QtZ0wQ zhlsdpuWj6VBW+GDLPfN9b37MFYRTqkC8o/Gn3yMUFQppCFlE2NSNxjQVQIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFKybv59iMxPrKxgnNQtFqbof2dpfMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ5L2M3YjU3 My0yNzY4LTQ3M2MtYTVjNC01N2VmN2ZlZTc1OWMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDkvYzdiNTcz LTI3NjgtNDczYy1hNWM0LTU3ZWY3ZmVlNzU5Yy8xL3JKdV9uMkl6RS1zckdDYzFD MFdwdWhfWjJsOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAbUMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwNLRzANBgkqhkiG9w0BAQsFAAOCAQEAgY0Gi2Ix+s6CsimhIJGgiqqlUG5J vYKY0IDtx3phURwOMTw2p7ZhXAYzk60RIYijWgB4XmjX0VHLLMYbldeauxYBKaVa cjamN+lTbsGP045y1hRoArCRNfi7tm50mG9WN6HuQ++l8ZwXc48xfveUg/4C8yUu srkKsTLLlKHptzQJzpxdkcYUI0H+45SuJFLsepT+6/6bzog2TjmBBQG8yHpnNvdT IhMtOtCpNS+Gkur7fZA2ytSYBX5+rn9U+bixZNPpcN+YmlNibFWmy9xR/xx8m8Ck vVEXrjSgPFP+90LpS37duAgl71tM1wn2OEFpMkuFfd+5t86FSVY8l6bKWA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:50:18 2026 by rpki-client