This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rsJF-gJbUVfIedsXr7ao_d4_j08.cer File: rsJF-gJbUVfIedsXr7ao_d4_j08.cer (raw, json) Hash identifier: fiF1a2J+HPGjAB5efHTqCgXaZ/ZGzkoWoiSrfs3G0Hw= Subject key identifier: AE:C2:45:FA:02:5B:51:57:C8:79:DB:17:AF:B6:A8:FD:DE:3F:8F:4F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B35EAEA055300B40F9B7351F70508DF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ff/01a06f-2c69-4395-8bdd-74e7c9567147/1/rsJF-gJbUVfIedsXr7ao_d4_j08.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ff/01a06f-2c69-4395-8bdd-74e7c9567147/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:09 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 199300 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:ea:ea:05:53:00:b4:0f:9b:73:51:f7:05:08:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aec245fa025b5157c879db17afb6a8fdde3f8f4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:bd:a1:77:4b:be:c8:72:c4:f9:14:a0:55:9c: c1:ce:fb:4d:5c:9e:a7:08:c8:16:3c:cb:f7:0c:d8: 97:06:66:38:ca:9f:db:95:29:cf:8c:00:a5:2a:ec: 85:98:a7:ce:93:37:74:c4:c6:eb:72:a4:23:e8:1f: 0a:9f:9e:72:8e:66:44:f1:ba:44:48:d5:bf:79:6e: 81:da:f6:83:f0:13:55:df:0c:9e:34:04:ce:33:ca: ce:6f:27:a6:1a:bc:02:8f:d9:fd:8f:65:d5:8b:5b: 3d:6b:df:1b:4b:10:39:21:c5:c9:f3:14:6d:97:16: 0f:18:45:09:89:40:e3:a7:6d:c6:e2:df:6e:8a:1f: 1a:63:d7:3c:e3:0e:f5:bb:41:ee:d5:0a:ef:8f:cf: 7c:27:72:7f:c0:d4:3b:46:dc:f7:17:dc:f3:4f:da: 46:6d:41:65:77:a2:cb:99:95:79:9f:ab:08:cf:28: e1:65:45:2a:69:a0:a2:0b:4d:43:96:c5:f2:17:8e: 50:ac:bd:da:bb:8e:00:34:0f:9a:c2:92:0e:f8:19: 50:4f:20:f1:07:a6:d8:dd:02:4f:96:e9:eb:ce:78: ec:91:b7:cb:71:94:a7:36:ea:ac:e0:40:63:4c:5c: 46:02:b5:f6:dc:c7:dc:7d:14:97:2a:df:c5:dc:3e: a4:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:C2:45:FA:02:5B:51:57:C8:79:DB:17:AF:B6:A8:FD:DE:3F:8F:4F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/01a06f-2c69-4395-8bdd-74e7c9567147/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/01a06f-2c69-4395-8bdd-74e7c9567147/1/rsJF-gJbUVfIedsXr7ao_d4_j08.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 199300 Signature Algorithm: sha256WithRSAEncryption 9f:9a:05:5b:28:01:9e:24:ef:dd:7d:4e:03:f0:14:b4:2f:a8: d3:21:6b:22:ef:0c:62:75:a4:ce:35:6e:e4:60:ec:95:f4:8f: f6:06:ec:ed:94:69:f3:1c:c9:bc:d1:00:00:f5:e4:8d:37:40: 0c:34:5f:9f:61:55:2c:3a:0b:6f:f2:9d:2d:fc:0c:02:d8:18: c9:cd:33:4a:cb:90:cd:85:85:60:1d:92:64:19:fb:87:46:c8: 88:31:bf:85:f1:13:fc:d2:08:a0:74:70:fa:ce:bd:32:3e:be: c1:61:65:03:85:1b:79:9b:59:3d:9f:06:ad:95:99:97:f6:fd: 75:f7:e1:ec:e4:ad:f4:99:4a:36:f3:c8:f4:d2:b3:7d:85:47: a4:31:b0:7c:48:3b:1c:11:b4:50:8a:74:66:36:82:b7:93:8f: bf:cf:85:0b:0b:02:ed:66:78:3e:6e:07:5d:6a:ec:ba:b9:fb: 44:a9:16:c0:05:14:a3:33:7f:16:35:76:e7:ea:72:04:6a:1e: 0f:f5:26:63:6b:14:f1:6b:c2:8b:a5:a0:45:18:28:66:1e:d8: 82:40:05:33:57:97:ef:c0:7e:b8:0b:e1:32:80:b4:24:50:1f: 9f:a2:7d:96:76:bf:ee:59:33:70:89:09:69:a0:d8:03:27:31: 90:3c:48:af -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt7NerqBVMAtA+bc1H3BQjfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZWMyNDVmYTAyNWI1MTU3Yzg3OWRiMTdhZmI2YThmZGRlM2Y4ZjRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArL2hd0u+yHLE+RSgVZzBzvtNXJ6n CMgWPMv3DNiXBmY4yp/blSnPjAClKuyFmKfOkzd0xMbrcqQj6B8Kn55yjmZE8bpE SNW/eW6B2vaD8BNV3wyeNATOM8rObyemGrwCj9n9j2XVi1s9a98bSxA5IcXJ8xRt lxYPGEUJiUDjp23G4t9uih8aY9c84w71u0Hu1Qrvj898J3J/wNQ7Rtz3F9zzT9pG bUFld6LLmZV5n6sIzyjhZUUqaaCiC01DlsXyF45QrL3au44ANA+awpIO+BlQTyDx B6bY3QJPlunrznjskbfLcZSnNuqs4EBjTFxGArX23MfcfRSXKt/F3D6kMQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFK7CRfoCW1FXyHnbF6+2qP3eP49PMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZmLzAxYTA2 Zi0yYzY5LTQzOTUtOGJkZC03NGU3Yzk1NjcxNDcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmYvMDFhMDZm LTJjNjktNDM5NS04YmRkLTc0ZTdjOTU2NzE0Ny8xL3JzSkYtZ0piVVZmSWVkc1hy N2FvX2Q0X2owOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMKhDANBgkqhkiG9w0BAQsFAAOCAQEAn5oFWygBniTv 3X1OA/AUtC+o0yFrIu8MYnWkzjVu5GDslfSP9gbs7ZRp8xzJvNEAAPXkjTdADDRf n2FVLDoLb/KdLfwMAtgYyc0zSsuQzYWFYB2SZBn7h0bIiDG/hfET/NIIoHRw+s69 Mj6+wWFlA4UbeZtZPZ8GrZWZl/b9dffh7OSt9JlKNvPI9NKzfYVHpDGwfEg7HBG0 UIp0ZjaCt5OPv8+FCwsC7WZ4Pm4HXWrsurn7RKkWwAUUozN/FjV25+pyBGoeD/Um Y2sU8WvCi6WgRRgoZh7YgkAFM1eX78B+uAvhMoC0JFAfn6J9lna/7lkzcIkJaaDY AycxkDxIrw== -----END CERTIFICATE-----Generated at Mon Feb 9 16:52:14 2026 by rpki-client