This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/trJJosVixe29t1BY4mvXcBI-la4.cer File: trJJosVixe29t1BY4mvXcBI-la4.cer (raw, json) Hash identifier: /3lfiKRa/jAV+pYqPcrEgVSHx+2gwlXmVPvwjIbJn2g= Subject key identifier: B6:B2:49:A2:C5:62:C5:ED:BD:B7:50:58:E2:6B:D7:70:12:3E:95:AE Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CED14DC54FCC994E9F32C904C0D867F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fd/455b26-6aa1-435f-bd45-9ce31c273108/1/trJJosVixe29t1BY4mvXcBI-la4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fd/455b26-6aa1-435f-bd45-9ce31c273108/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:17:50 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.33.182.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:14:dc:54:fc:c9:94:e9:f3:2c:90:4c:0d:86:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b6b249a2c562c5edbdb75058e26bd770123e95ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:73:e8:cb:db:8a:f0:c9:eb:f5:c2:0d:b6:14: 12:54:ae:c3:2e:b8:cb:10:95:02:12:b3:0e:23:4e: e0:d1:ba:80:47:c5:40:68:ff:0f:19:cb:ce:04:8a: c5:4f:18:f9:ea:af:c8:07:5a:7c:ab:78:6b:28:65: 07:4a:70:42:d7:a0:28:ae:b5:44:3f:81:da:dc:bf: 8c:ca:24:a0:06:65:de:d6:90:ef:51:22:94:8f:1c: 48:d6:b5:7e:a1:07:24:b3:f6:35:f7:ca:6a:c1:09: 0e:e5:c6:1d:f1:f8:2a:96:cf:02:4d:00:78:e4:16: 76:e8:f5:10:44:86:b8:ce:ab:a0:ad:5f:3d:fc:5f: 2d:bc:59:fd:f2:ac:73:e4:a8:1c:13:a9:6d:0a:58: 3b:4d:e5:9e:0c:e3:41:a2:a5:d4:f3:39:3a:14:ff: 6f:39:e0:a9:99:40:e5:c6:ac:ce:33:72:4d:58:83: 31:fd:50:cc:f6:0c:a1:3c:17:6c:ce:e6:2a:14:21: e7:d0:dc:0a:e6:ee:4d:ef:bf:44:1f:95:95:f5:9b: 6c:b8:d6:d2:40:57:4b:24:ff:f2:a4:53:01:98:5b: b1:30:80:6b:5b:46:83:f1:4e:55:41:ef:61:c9:df: fd:b0:7f:8e:9a:5c:b9:d4:4b:20:4c:89:0d:e2:d0: b6:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:B2:49:A2:C5:62:C5:ED:BD:B7:50:58:E2:6B:D7:70:12:3E:95:AE X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/455b26-6aa1-435f-bd45-9ce31c273108/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/455b26-6aa1-435f-bd45-9ce31c273108/1/trJJosVixe29t1BY4mvXcBI-la4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.33.182.0/23 Signature Algorithm: sha256WithRSAEncryption 4c:e9:62:d9:8a:df:f1:41:4f:f8:8b:91:3c:a4:f6:99:81:3d: 90:f7:fb:9f:30:f3:37:43:3c:0a:ab:88:29:9d:70:85:0f:59: 09:c8:35:2f:24:3e:41:ae:e0:09:88:ef:49:2b:d7:05:71:bf: 89:23:f2:c6:b3:bd:c9:7e:b0:3c:32:9c:cd:3b:c9:03:67:e9: d4:5f:ef:07:6f:36:5b:0c:da:2b:b2:9e:38:78:93:04:ec:d7: 11:51:ad:97:76:64:33:60:c0:4d:c3:70:02:cd:fc:21:07:5c: 4e:9b:2b:8b:5a:5a:7c:d6:a3:cc:c9:21:63:4e:61:03:b6:3d: 35:9d:a3:49:aa:ea:1d:1a:a4:6c:71:86:44:f0:49:34:2a:f1: c5:7d:45:4f:58:82:41:9a:29:58:0f:00:f2:0c:07:65:10:cf: de:93:46:ba:15:db:54:1d:6d:fb:85:a7:b8:4b:61:0c:ac:0f: e0:33:00:f6:d3:22:0d:ab:81:a9:12:b3:9e:c8:af:79:59:7f: 0d:11:1e:f3:9e:eb:ee:ab:43:2c:c9:dd:b0:d4:4c:8b:17:1a: 5f:b2:36:91:0d:d2:d9:97:d1:1e:06:de:af:5f:ae:bc:d3:36: 90:ec:56:e2:7f:60:a3:ee:5a:cd:94:a7:f5:e0:5b:fb:9d:7e: df:65:00:59 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt87RTcVPzJlOnzLJBMDYZ/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNmIyNDlhMmM1NjJjNWVkYmRiNzUwNThlMjZiZDc3MDEyM2U5NWFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3Poy9uK8Mnr9cINthQSVK7DLrjL EJUCErMOI07g0bqAR8VAaP8PGcvOBIrFTxj56q/IB1p8q3hrKGUHSnBC16AorrVE P4Ha3L+MyiSgBmXe1pDvUSKUjxxI1rV+oQcks/Y198pqwQkO5cYd8fgqls8CTQB4 5BZ26PUQRIa4zqugrV89/F8tvFn98qxz5KgcE6ltClg7TeWeDONBoqXU8zk6FP9v OeCpmUDlxqzOM3JNWIMx/VDM9gyhPBdszuYqFCHn0NwK5u5N779EH5WV9ZtsuNbS QFdLJP/ypFMBmFuxMIBrW0aD8U5VQe9hyd/9sH+Omly51EsgTIkN4tC2CwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFLaySaLFYsXtvbdQWOJr13ASPpWuMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZkLzQ1NWIy Ni02YWExLTQzNWYtYmQ0NS05Y2UzMWMyNzMxMDgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmQvNDU1YjI2 LTZhYTEtNDM1Zi1iZDQ1LTljZTMxYzI3MzEwOC8xL3RySkpvc1ZpeGUyOXQxQlk0 bXZYY0JJLWxhNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQBwSG2MA0GCSqGSIb3DQEBCwUAA4IBAQBM6WLZ it/xQU/4i5E8pPaZgT2Q9/ufMPM3QzwKq4gpnXCFD1kJyDUvJD5BruAJiO9JK9cF cb+JI/LGs73JfrA8MpzNO8kDZ+nUX+8HbzZbDNorsp44eJME7NcRUa2XdmQzYMBN w3ACzfwhB1xOmyuLWlp81qPMySFjTmEDtj01naNJquodGqRscYZE8Ek0KvHFfUVP WIJBmilYDwDyDAdlEM/ek0a6FdtUHW37hae4S2EMrA/gMwD20yINq4GpErOeyK95 WX8NER7znuvuq0Msyd2w1EyLFxpfsjaRDdLZl9EeBt6vX6680zaQ7Fbif2Cj7lrN lKf14Fv7nX7fZQBZ -----END CERTIFICATE-----Generated at Wed Jan 21 13:51:18 2026 by rpki-client