This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0JH-jFQMROI0-bxmj4o7Fkes2wY.cer File: 0JH-jFQMROI0-bxmj4o7Fkes2wY.cer (raw, json) Hash identifier: lZo5bxkZmj1hwwBGv6MPeuoAbegnhi7A1gomxTN7R8s= Subject key identifier: D0:91:FE:8C:54:0C:44:E2:34:F9:BC:66:8F:8A:3B:16:47:AC:DB:06 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ECFB69824C2ED59FE794B35F790233 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:52 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.192.112.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 02:42:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:fb:69:82:4c:2e:d5:9f:e7:94:b3:5f:79:02:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d091fe8c540c44e234f9bc668f8a3b1647acdb06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:06:0d:06:53:79:6b:15:7f:4f:bd:c2:b8:f5: 12:ca:6b:24:86:93:df:9d:6f:91:6f:b8:87:d8:e3: 25:77:f1:72:30:e0:8f:ac:94:e2:25:76:7a:28:4d: fa:6b:8b:3a:dd:72:af:d8:08:06:1c:95:b8:88:cd: 75:82:e1:44:5b:f2:6d:ca:74:cf:37:7d:8f:e6:c4: 2e:2b:9a:ab:2d:c0:69:cf:b4:8a:4e:44:a8:0f:c1: d0:01:bc:1c:c6:9e:cd:0f:65:ea:0f:f9:1d:3d:5a: 74:c2:69:c9:da:ec:73:ac:f8:c3:ee:3a:8b:a0:05: a9:e1:e5:9f:35:52:f3:fc:b5:b1:dc:ff:b9:84:4f: 90:25:50:60:5c:66:17:97:17:53:14:12:54:93:38: 51:c3:89:bd:06:84:f3:a0:97:ac:95:f9:cf:ff:ec: 67:75:2e:83:d0:b5:d8:da:dd:09:7a:93:ab:34:b6: 05:99:f2:e6:ff:18:10:61:1a:d2:0a:77:2b:a6:e1: 30:6a:4b:b5:76:80:e4:83:b9:0c:65:81:77:82:04: 22:4b:d2:4f:75:24:76:cc:b4:71:10:67:72:a0:1a: 3f:66:88:d5:d7:6e:48:c4:79:ad:f5:f1:02:72:68: ed:93:7f:5b:e0:ae:a0:47:4b:f4:04:ec:8a:1a:e3: c5:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:91:FE:8C:54:0C:44:E2:34:F9:BC:66:8F:8A:3B:16:47:AC:DB:06 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.192.112.0/22 Signature Algorithm: sha256WithRSAEncryption a8:76:99:2d:5a:ed:b0:f3:34:ed:23:b6:d6:4c:ad:3f:4a:3c: 9d:5b:4e:d8:65:ed:55:96:29:43:f1:a2:68:2d:8e:55:a1:78: 67:22:85:8c:93:dd:c6:81:2b:eb:3d:a2:2c:b3:3a:b2:1c:e0: 39:ec:d3:fa:30:72:37:46:7e:37:0d:39:e4:d5:d0:6e:ce:de: 9e:3d:f7:3a:29:00:e3:a2:f9:d1:07:f5:ed:33:67:5a:ec:c8: d9:a3:a3:0f:ef:b2:0e:34:b1:f6:66:8e:0a:53:18:c3:e1:50: 60:8b:b0:7c:a4:1a:7b:99:fe:b2:94:94:b9:e5:f0:ba:db:1f: 2c:8f:76:9f:fb:be:67:a1:f6:67:1f:6c:00:73:e1:ae:55:e4: 84:01:d3:53:46:0d:e4:26:ac:2d:19:20:8d:ca:0b:75:ce:46: 89:24:e6:d2:25:03:f3:00:f2:a5:e5:69:3e:8d:07:18:56:23: 10:39:8d:8e:4e:29:63:62:8b:af:3c:74:36:e1:a7:30:21:54: e3:15:c2:b4:68:b5:c0:39:7a:2f:ab:15:3a:07:2a:30:0a:14: dd:3f:a1:14:1a:a3:a7:d1:4d:63:02:d5:8a:0f:61:d0:77:8e: 06:92:8e:72:9f:6e:a8:61:c8:74:5c:6c:ca:55:93:09:3b:9b: d3:3b:c0:4f -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt57Ptpgkwu1Z/nlLNfeQIzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMDkxZmU4YzU0MGM0NGUyMzRmOWJjNjY4ZjhhM2IxNjQ3YWNkYjA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAYNBlN5axV/T73CuPUSymskhpPf nW+Rb7iH2OMld/FyMOCPrJTiJXZ6KE36a4s63XKv2AgGHJW4iM11guFEW/JtynTP N32P5sQuK5qrLcBpz7SKTkSoD8HQAbwcxp7ND2XqD/kdPVp0wmnJ2uxzrPjD7jqL oAWp4eWfNVLz/LWx3P+5hE+QJVBgXGYXlxdTFBJUkzhRw4m9BoTzoJeslfnP/+xn dS6D0LXY2t0JepOrNLYFmfLm/xgQYRrSCncrpuEwaku1doDkg7kMZYF3ggQiS9JP dSR2zLRxEGdyoBo/ZojV125IxHmt9fECcmjtk39b4K6gR0v0BOyKGuPFGwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFNCR/oxUDETiNPm8Zo+KOxZHrNsGMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q5LzlhM2Fh Yy0yYTRjLTQzODctYWVhOC0wNGU2ZjU3NjRjNTIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDkvOWEzYWFj LTJhNGMtNDM4Ny1hZWE4LTA0ZTZmNTc2NGM1Mi8xLzBKSC1qRlFNUk9JMC1ieG1q NG83RmtlczJ3WS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCucBwMA0GCSqGSIb3DQEBCwUAA4IBAQCodpkt Wu2w8zTtI7bWTK0/SjydW07YZe1VlilD8aJoLY5VoXhnIoWMk93GgSvrPaIsszqy HOA57NP6MHI3Rn43DTnk1dBuzt6ePfc6KQDjovnRB/XtM2da7MjZo6MP77IONLH2 Zo4KUxjD4VBgi7B8pBp7mf6ylJS55fC62x8sj3af+75nofZnH2wAc+GuVeSEAdNT Rg3kJqwtGSCNygt1zkaJJObSJQPzAPKl5Wk+jQcYViMQOY2OTiljYouvPHQ24acw IVTjFcK0aLXAOXovqxU6ByowChTdP6EUGqOn0U1jAtWKD2HQd44Gko5yn26oYch0 XGzKVZMJO5vTO8BP -----END CERTIFICATE-----Generated at Mon Jan 12 05:54:49 2026 by rpki-client