This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_JKCpXb9YqCiQWa17B8STkJY20k.cer File: _JKCpXb9YqCiQWa17B8STkJY20k.cer (raw, json) Hash identifier: mqQxYjiuVxOhEGclWwmR2tS0QTPt+V+vChf9dMtYIso= Subject key identifier: FC:92:82:A5:76:FD:62:A0:A2:41:66:B5:EC:1F:12:4E:42:58:DB:49 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCA920F413AA496A4E5119053DF1F65 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1d/f69975-affd-4f8e-a9f2-5ce9832e7495/1/_JKCpXb9YqCiQWa17B8STkJY20k.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1d/f69975-affd-4f8e-a9f2-5ce9832e7495/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:19:46 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 215773 IP: 194.56.182.0/24 IP: 212.32.43.0/24 IP: 2a14:5580::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 07:34:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:92:0f:41:3a:a4:96:a4:e5:11:90:53:df:1f:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:19:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fc9282a576fd62a0a24166b5ec1f124e4258db49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:2d:96:10:e9:18:e6:cd:26:7d:98:71:1e:29: e7:38:b1:97:b6:8a:a8:4e:35:10:0b:e1:90:72:ad: 1c:5c:9a:cc:63:d9:3a:99:a6:d2:21:4a:b6:17:5d: 1b:bc:e2:b4:2c:70:6a:86:7b:21:e0:e0:1c:ab:53: 85:a6:95:51:e8:d5:7c:17:76:9e:43:17:62:ad:99: 8f:0b:1b:cc:30:5a:ae:7d:63:95:a2:3c:67:9f:8d: 21:f9:17:a4:a4:0a:f1:89:83:35:e5:24:73:c6:4f: d1:c9:f5:20:2e:77:1d:eb:78:82:7e:dc:55:65:70: d1:2d:71:23:4c:f2:d2:f4:64:d9:ea:e2:f9:5e:a5: 27:2a:12:2b:5b:25:d2:98:0d:e1:e7:18:27:af:50: 94:7c:f7:50:c2:74:b9:2f:fe:de:26:3f:3a:df:7e: f2:eb:bd:1d:6e:de:96:bf:33:67:4e:13:9a:df:06: 1e:f3:e9:60:64:c2:c3:f8:58:22:73:3f:5d:f2:e2: 77:1e:a1:b1:e3:2a:c4:66:6e:ee:dd:80:f0:79:29: 36:1b:27:55:4a:27:f1:49:43:a2:50:fa:9c:af:e7: 09:1d:4f:eb:9c:dd:f2:9a:84:27:ba:73:28:01:c2: d5:38:85:2a:f8:85:69:7e:ba:63:80:95:43:4e:4d: ef:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:92:82:A5:76:FD:62:A0:A2:41:66:B5:EC:1F:12:4E:42:58:DB:49 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f69975-affd-4f8e-a9f2-5ce9832e7495/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f69975-affd-4f8e-a9f2-5ce9832e7495/1/_JKCpXb9YqCiQWa17B8STkJY20k.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.56.182.0/24 212.32.43.0/24 IPv6: 2a14:5580::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 215773 Signature Algorithm: sha256WithRSAEncryption 7b:93:0a:f8:a0:37:7d:81:47:46:41:5b:de:70:68:19:09:d6: 29:a0:9d:40:cb:8e:9b:33:1a:90:96:bf:84:e7:0f:bd:3d:aa: 25:f5:87:b5:f2:86:86:9c:8e:35:13:e5:bf:55:38:bc:da:25: a8:66:38:94:0c:19:98:09:a2:83:f5:40:e3:9e:c2:c1:ad:43: af:0f:07:60:1a:5e:f7:1e:de:48:6e:94:e2:42:32:81:94:15: b5:b8:f4:5c:29:de:81:9e:34:f8:63:5c:38:b6:64:b4:20:5c: af:00:dd:26:d9:63:8c:7d:f9:dd:0b:bd:b7:30:0b:8f:3b:d3: 3f:c7:4b:99:d1:d3:5c:36:ed:9c:1d:0d:0c:3d:0c:a8:47:f3: a0:45:39:32:e2:e3:01:e3:1f:69:c6:f4:96:1c:c3:a7:cb:d2: b9:32:8f:22:bc:bb:f1:71:51:0b:14:b7:0f:d3:d2:98:2f:99: b3:5d:e7:48:fc:7e:a5:36:a1:8c:0f:26:bf:76:5e:b8:35:d9: ac:d7:22:e8:e3:03:29:95:eb:8d:c2:91:64:2d:18:58:6d:3f: b9:db:a3:24:fa:cb:7c:74:2e:cd:30:1f:52:53:66:86:35:27: 8f:db:d3:03:a7:cb:97:fe:12:da:5e:a4:77:7c:96:1f:ee:60: 6e:5e:3d:3a -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt9ypIPQTqklqTlEZBT3x9lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxOTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYzkyODJhNTc2ZmQ2MmEwYTI0MTY2YjVlYzFmMTI0ZTQyNThkYjQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1y2WEOkY5s0mfZhxHinnOLGXtoqo TjUQC+GQcq0cXJrMY9k6mabSIUq2F10bvOK0LHBqhnsh4OAcq1OFppVR6NV8F3ae QxdirZmPCxvMMFqufWOVojxnn40h+RekpArxiYM15SRzxk/RyfUgLncd63iCftxV ZXDRLXEjTPLS9GTZ6uL5XqUnKhIrWyXSmA3h5xgnr1CUfPdQwnS5L/7eJj86337y 670dbt6WvzNnThOa3wYe8+lgZMLD+Fgicz9d8uJ3HqGx4yrEZm7u3YDweSk2GydV SifxSUOiUPqcr+cJHU/rnN3ymoQnunMoAcLVOIUq+IVpfrpjgJVDTk3vXQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFPySgqV2/WKgokFmtewfEk5CWNtJMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFkL2Y2OTk3 NS1hZmZkLTRmOGUtYTlmMi01Y2U5ODMyZTc0OTUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWQvZjY5OTc1 LWFmZmQtNGY4ZS1hOWYyLTVjZTk4MzJlNzQ5NS8xL19KS0NwWGI5WXFDaVFXYTE3 QjhTVGtKWTIway5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQAwji2AwQA1CArMA0EAgACMAcDBQMqFFWAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwNK3TANBgkqhkiG9w0BAQsFAAOCAQEAe5MK +KA3fYFHRkFb3nBoGQnWKaCdQMuOmzMakJa/hOcPvT2qJfWHtfKGhpyONRPlv1U4 vNolqGY4lAwZmAmig/VA457Cwa1Drw8HYBpe9x7eSG6U4kIygZQVtbj0XCnegZ40 +GNcOLZktCBcrwDdJtljjH353Qu9tzALjzvTP8dLmdHTXDbtnB0NDD0MqEfzoEU5 MuLjAeMfacb0lhzDp8vSuTKPIry78XFRCxS3D9PSmC+Zs13nSPx+pTahjA8mv3Ze uDXZrNci6OMDKZXrjcKRZC0YWG0/udujJPrLfHQuzTAfUlNmhjUnj9vTA6fLl/4S 2l6kd3yWH+5gbl49Og== -----END CERTIFICATE-----Generated at Wed Jan 7 10:46:10 2026 by rpki-client