This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rjjDnx4hTH7N8vDslXhHAfLRKI8.cer File: rjjDnx4hTH7N8vDslXhHAfLRKI8.cer (raw, json) Hash identifier: Yobt72TeRbKxhUxK3rUkHtdhuFxtU168ytUHCDEWIp4= Subject key identifier: AE:38:C3:9F:1E:21:4C:7E:CD:F2:F0:EC:95:78:47:01:F2:D1:28:8F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5A918EA4A7C39266379CF6417046C2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d2/6b8155-e838-45c9-af22-101bab0df2df/1/rjjDnx4hTH7N8vDslXhHAfLRKI8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d2/6b8155-e838-45c9-af22-101bab0df2df/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:18:34 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 77.240.18.0 -- 77.240.23.255 IP: 185.58.32.0/22 IP: 2a02:5de0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:91:8e:a4:a7:c3:92:66:37:9c:f6:41:70:46:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ae38c39f1e214c7ecdf2f0ec95784701f2d1288f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:5d:24:71:ee:3c:19:38:95:7a:ef:4a:1a:1d: b0:9d:6f:81:44:20:16:58:73:de:df:19:4e:86:77: d7:e2:53:43:d9:fb:41:77:f7:91:79:82:ad:c3:d8: b4:c8:a8:b6:c1:17:a0:d5:42:b7:db:b2:4c:e6:fc: 2f:f6:f9:88:7c:1d:56:db:da:38:87:4d:85:b9:12: 22:7a:a8:ec:ae:5e:04:31:da:5b:54:fd:0e:fd:ab: 7a:6d:3c:3a:6e:c3:07:5a:8b:17:27:db:5e:e3:33: 63:81:e6:31:25:d0:6d:1f:94:71:90:85:30:52:32: 6e:c7:ab:45:ca:7b:4d:c7:8c:a3:9b:a6:37:99:3e: e2:74:b8:68:75:61:b4:4a:bf:6f:11:cc:87:59:cf: 88:8d:2b:f3:9c:71:3d:4f:f1:3c:47:b6:5e:7a:fb: 7e:61:48:5d:e4:aa:dd:69:86:dd:22:a3:6a:78:96: 1e:61:0a:14:d1:74:e2:b7:99:c4:5a:2f:e2:a5:59: e8:6b:89:79:8e:cb:a4:01:38:30:33:58:6f:ac:ef: 28:a2:06:d5:47:aa:67:cf:ed:d1:c6:9f:3f:a5:ce: e6:03:d6:9b:2b:76:1e:69:ed:cd:14:e6:b4:8c:78: 14:22:3d:e9:8b:ce:a3:ce:ff:be:d9:38:6e:22:11: 2e:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:38:C3:9F:1E:21:4C:7E:CD:F2:F0:EC:95:78:47:01:F2:D1:28:8F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/6b8155-e838-45c9-af22-101bab0df2df/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/6b8155-e838-45c9-af22-101bab0df2df/1/rjjDnx4hTH7N8vDslXhHAfLRKI8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.240.18.0-77.240.23.255 185.58.32.0/22 IPv6: 2a02:5de0::/32 Signature Algorithm: sha256WithRSAEncryption 44:cf:d0:8f:36:30:26:d0:a5:e8:e8:8d:63:e9:27:a2:a5:90: 72:86:81:89:32:9f:1e:4d:23:ca:d3:1d:98:8e:13:86:46:ca: f9:20:4a:33:22:cc:07:06:15:be:9c:4f:0a:ef:ad:bf:58:c8: 17:ce:52:53:b5:4a:76:2a:a3:1d:43:61:32:8e:be:cb:41:bd: 27:61:1e:6d:57:4f:f2:c1:a8:5c:f0:e9:23:6e:85:9e:b4:34: c2:ad:9c:3b:ca:05:10:1b:31:9b:bc:ed:09:d9:24:a3:37:0d: 9a:77:55:cc:3c:06:01:e3:78:86:92:a6:c5:e5:98:1b:35:dc: 75:e5:8f:9c:67:84:eb:d3:53:1c:ea:0b:8c:9c:4a:63:64:9a: 34:d0:a6:cf:e6:d4:a2:09:6a:ff:1a:11:a1:2b:27:a2:06:fe: bc:a3:0e:90:c6:7a:a4:6f:ef:20:e0:ce:8d:cb:ee:01:e3:4c: 72:ff:c3:e9:82:06:96:38:ed:df:84:ea:b5:11:a3:36:7b:5f: 54:2d:79:7a:69:ce:40:82:be:ea:62:b2:b1:c6:e4:4e:10:d6: f8:ca:5f:32:c5:79:d4:6a:b8:74:09:5a:e2:67:b6:77:94:df: 36:a8:aa:a2:6b:21:91:fa:e5:2b:b4:fa:57:4e:68:1b:15:67: 6e:25:75:0c -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgISAZt6WpGOpKfDkmY3nPZBcEbCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZTM4YzM5ZjFlMjE0YzdlY2RmMmYwZWM5NTc4NDcwMWYyZDEyODhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAul0kce48GTiVeu9KGh2wnW+BRCAW WHPe3xlOhnfX4lND2ftBd/eReYKtw9i0yKi2wReg1UK327JM5vwv9vmIfB1W29o4 h02FuRIieqjsrl4EMdpbVP0O/at6bTw6bsMHWosXJ9te4zNjgeYxJdBtH5RxkIUw UjJux6tFyntNx4yjm6Y3mT7idLhodWG0Sr9vEcyHWc+IjSvznHE9T/E8R7Zeevt+ YUhd5KrdaYbdIqNqeJYeYQoU0XTit5nEWi/ipVnoa4l5jsukATgwM1hvrO8oogbV R6pnz+3Rxp8/pc7mA9abK3Yeae3NFOa0jHgUIj3pi86jzv++2ThuIhEu0wIDAQAB o4ICoTCCAp0wHQYDVR0OBBYEFK44w58eIUx+zfLw7JV4RwHy0SiPMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2QyLzZiODE1 NS1lODM4LTQ1YzktYWYyMi0xMDFiYWIwZGYyZGYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDIvNmI4MTU1 LWU4MzgtNDVjOS1hZjIyLTEwMWJhYjBkZjJkZi8xL3JqakRueDRoVEg3Tjh2RHNs WGhIQWZMUktJOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDwGCCsGAQUF BwEHAQH/BC0wKzAaBAIAATAUMAwDBAFN8BIDBANN8BADBAK5OiAwDQQCAAIwBwMF ACoCXeAwDQYJKoZIhvcNAQELBQADggEBAETP0I82MCbQpejojWPpJ6KlkHKGgYky nx5NI8rTHZiOE4ZGyvkgSjMizAcGFb6cTwrvrb9YyBfOUlO1SnYqox1DYTKOvstB vSdhHm1XT/LBqFzw6SNuhZ60NMKtnDvKBRAbMZu87QnZJKM3DZp3Vcw8BgHjeIaS psXlmBs13HXlj5xnhOvTUxzqC4ycSmNkmjTQps/m1KIJav8aEaErJ6IG/ryjDpDG eqRv7yDgzo3L7gHjTHL/w+mCBpY47d+E6rURozZ7X1QteXppzkCCvupisrHG5E4Q 1vjKXzLFedRquHQJWuJntneU3zaoqqJrIZH65Su0+ldOaBsVZ24ldQw= -----END CERTIFICATE-----Generated at Mon Feb 9 16:52:39 2026 by rpki-client