This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rjrbWMEIuLsT5DwV7qPHiZtko6o.cer File: rjrbWMEIuLsT5DwV7qPHiZtko6o.cer (raw, json) Hash identifier: Ti034oBY2Cpj2fyFGptXZjSk52zq8ENAVX3VIXsHFlA= Subject key identifier: AE:3A:DB:58:C1:08:B8:BB:13:E4:3C:15:EE:A3:C7:89:9B:64:A3:AA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C12496863C56DC1CCACDFAD0C0AA1A5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ed/d81aa2-8a55-40db-96dc-8fbb5128a2c9/1/rjrbWMEIuLsT5DwV7qPHiZtko6o.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ed/d81aa2-8a55-40db-96dc-8fbb5128a2c9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:18:51 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 21137 AS: 203651 IP: 194.4.140.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:49:68:63:c5:6d:c1:cc:ac:df:ad:0c:0a:a1:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ae3adb58c108b8bb13e43c15eea3c7899b64a3aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:de:32:4d:0e:fb:50:8e:92:56:13:09:0a:7d: 01:fa:79:fd:5e:85:0c:cc:fb:d2:bb:6b:8a:f9:02: 62:c5:eb:a9:e6:49:6d:bf:16:e3:36:4c:12:b5:2c: 1b:5a:7e:35:53:2a:99:5b:41:46:d1:34:d7:4a:de: 57:82:f8:ac:f4:30:ea:e6:72:29:05:f1:4b:36:37: ae:ae:09:f5:4d:b3:8d:e6:69:95:21:20:be:19:2c: 7c:a3:2d:06:1e:70:da:79:b1:cf:12:ac:6c:b5:c2: 33:7d:92:45:07:d6:f1:e7:20:15:16:aa:36:4d:b2: 3a:42:c4:bc:b2:3c:4c:c9:3d:b6:5a:44:c2:52:8f: ff:51:7b:16:19:3b:ad:cf:ea:c5:60:90:ff:ec:ac: 9e:4c:07:1d:a2:4d:12:c1:fd:20:6d:fc:b0:5a:33: 93:43:5c:16:29:ea:82:45:96:9c:b9:0b:67:fa:1a: 40:99:7e:1d:e6:21:09:eb:70:bd:58:c6:ad:da:a8: c5:b0:50:94:6c:b5:b6:ab:7b:a0:b7:ad:d7:eb:52: e4:0f:1f:5f:59:0c:42:8b:b1:17:ce:38:e5:83:da: d0:8f:c5:2c:71:47:a0:a3:b9:67:86:f2:41:39:5f: f9:cf:a2:9f:fd:ec:da:f5:7e:1d:c1:62:fe:6c:a0: b4:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:3A:DB:58:C1:08:B8:BB:13:E4:3C:15:EE:A3:C7:89:9B:64:A3:AA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d81aa2-8a55-40db-96dc-8fbb5128a2c9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d81aa2-8a55-40db-96dc-8fbb5128a2c9/1/rjrbWMEIuLsT5DwV7qPHiZtko6o.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.4.140.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 21137 203651 Signature Algorithm: sha256WithRSAEncryption 01:55:34:be:52:94:a6:87:38:3f:ff:49:3a:ac:91:7d:6d:01: f2:48:5d:7a:22:5d:8d:83:24:e6:8d:6b:2c:e5:88:1e:e5:66: c1:cc:c4:b4:4e:8e:13:42:ae:8d:96:fe:cf:aa:94:dc:06:19: 03:4e:8a:49:f8:28:06:84:14:4a:be:ec:5c:76:c8:e9:86:f9: 5b:5b:b5:20:47:dd:a9:99:bb:3e:86:72:6e:26:95:94:d7:95: ae:87:cd:f4:53:f6:2d:9e:73:cf:fe:e2:b7:61:d0:73:6e:f2: 58:f2:de:fa:5c:27:c0:12:af:23:7a:f4:46:fe:9f:71:fe:19: c7:e5:25:39:b5:7f:a4:2c:62:6e:ae:e7:df:ca:05:08:aa:69: 6c:9c:6c:7f:65:9a:df:41:4d:da:ba:de:1c:8e:98:3c:35:1a: 7a:47:8a:5e:53:0e:6e:f3:9e:cf:2d:fa:6d:4f:e6:81:e4:b3: a6:2e:8c:04:59:94:ed:3e:5f:f3:a6:69:4c:7e:db:b5:e9:69: 1f:84:c1:af:fd:ed:83:fc:32:39:30:34:79:f9:7f:40:c4:43: 81:65:a2:7d:05:c0:e8:53:cb:1e:32:46:3b:d7:22:1a:d2:80: 99:bd:73:9c:43:bf:a0:78:77:39:21:1d:bc:a1:12:71:b0:20: bf:c2:4c:72 -----BEGIN CERTIFICATE----- MIIFmDCCBICgAwIBAgISAZt8EkloY8Vtwcys360MCqGlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZTNhZGI1OGMxMDhiOGJiMTNlNDNjMTVlZWEzYzc4OTliNjRhM2FhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtd4yTQ77UI6SVhMJCn0B+nn9XoUM zPvSu2uK+QJixeup5kltvxbjNkwStSwbWn41UyqZW0FG0TTXSt5Xgvis9DDq5nIp BfFLNjeurgn1TbON5mmVISC+GSx8oy0GHnDaebHPEqxstcIzfZJFB9bx5yAVFqo2 TbI6QsS8sjxMyT22WkTCUo//UXsWGTutz+rFYJD/7KyeTAcdok0Swf0gbfywWjOT Q1wWKeqCRZacuQtn+hpAmX4d5iEJ63C9WMat2qjFsFCUbLW2q3ugt63X61LkDx9f WQxCi7EXzjjlg9rQj8UscUego7lnhvJBOV/5z6Kf/eza9X4dwWL+bKC0/wIDAQAB o4ICpDCCAqAwHQYDVR0OBBYEFK4621jBCLi7E+Q8Fe6jx4mbZKOqMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VkL2Q4MWFh Mi04YTU1LTQwZGItOTZkYy04ZmJiNTEyOGEyYzkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWQvZDgxYWEy LThhNTUtNDBkYi05NmRjLThmYmI1MTI4YTJjOS8xL3JqcmJXTUVJdUxzVDVEd1Y3 cVBIaVp0a282by5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCwgSMMB4GCCsGAQUFBwEIAQH/BA8wDaALMAkC AlKRAgMDG4MwDQYJKoZIhvcNAQELBQADggEBAAFVNL5SlKaHOD//STqskX1tAfJI XXoiXY2DJOaNayzliB7lZsHMxLROjhNCro2W/s+qlNwGGQNOikn4KAaEFEq+7Fx2 yOmG+VtbtSBH3amZuz6Gcm4mlZTXla6HzfRT9i2ec8/+4rdh0HNu8ljy3vpcJ8AS ryN69Eb+n3H+GcflJTm1f6QsYm6u59/KBQiqaWycbH9lmt9BTdq63hyOmDw1GnpH il5TDm7zns8t+m1P5oHks6YujARZlO0+X/OmaUx+27XpaR+Ewa/97YP8MjkwNHn5 f0DEQ4Flon0FwOhTyx4yRjvXIhrSgJm9c5xDv6B4dzkhHbyhEnGwIL/CTHI= -----END CERTIFICATE-----Generated at Mon Feb 9 18:27:23 2026 by rpki-client