This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.cer File: j3tJbqfPdj0Fgwg3Hhv2flO8e6M.cer (raw, json) Hash identifier: A6T53EIvSZgeR8N2erVFPw0sKevNgb4+xrdN5zX7UAE= Subject key identifier: 8F:7B:49:6E:A7:CF:76:3D:05:83:08:37:1E:1B:F6:7E:53:BC:7B:A3 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5A9080690BB9583C9345EC7169D14E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7e/9efd94-0516-4e66-98d5-251b019d51a8/1/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7e/9efd94-0516-4e66-98d5-251b019d51a8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:18:34 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 205961 IP: 185.200.20.0/22 IP: 2a0b:24c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 21:26:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:90:80:69:0b:b9:58:3c:93:45:ec:71:69:d1:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8f7b496ea7cf763d058308371e1bf67e53bc7ba3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:6c:f6:06:2c:1d:3a:b1:cd:1b:98:ef:92:ad: e7:0a:ac:5d:95:bc:0d:18:76:5b:cf:f0:b5:08:75: f0:68:93:c6:e7:30:a6:1e:58:8a:b1:d4:ef:4c:07: 65:10:c9:79:5e:78:d4:e4:c2:b2:65:c4:9d:b0:14: d4:60:95:32:16:3c:59:c0:82:72:cd:ae:94:93:dd: 98:d2:f7:94:59:76:8e:56:d6:30:ff:69:13:b2:11: 92:fd:5e:a8:34:fb:c4:ec:7a:9e:10:70:e5:6f:2d: 0f:bb:28:8e:11:94:7d:cc:dd:5f:ef:14:95:38:6f: c3:06:79:88:b6:aa:f6:84:81:af:cb:0b:c0:95:29: e2:08:6d:a8:e2:c4:7c:9d:60:c7:d4:68:96:0a:c6: 33:10:f0:82:27:c0:c4:80:96:51:1c:cf:bb:a0:35: 45:83:e6:0f:1f:dc:39:43:1c:18:3b:98:bf:17:97: b3:ef:34:fb:cc:7d:b5:c3:57:7e:f1:5a:44:35:81: 4d:84:f8:d2:43:57:87:84:5d:0c:59:08:8f:a3:a2: 79:d2:9d:8b:2a:4a:31:fe:9f:a9:73:dc:ad:7b:ac: 60:dd:0e:b9:d0:15:10:82:ec:5b:3d:33:e5:4f:c2: c1:23:3b:b1:0f:7d:c5:ae:98:67:03:e5:33:d9:90: 99:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:7B:49:6E:A7:CF:76:3D:05:83:08:37:1E:1B:F6:7E:53:BC:7B:A3 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9efd94-0516-4e66-98d5-251b019d51a8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9efd94-0516-4e66-98d5-251b019d51a8/1/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.200.20.0/22 IPv6: 2a0b:24c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 205961 Signature Algorithm: sha256WithRSAEncryption 25:b8:ed:7a:20:d7:22:b2:47:97:48:18:ac:d0:bf:20:9d:98: 6e:a1:c8:a6:7a:a0:7d:65:9d:7c:48:ac:b7:09:bc:aa:54:01: 93:8f:a8:43:74:fe:31:e9:28:c9:6c:22:e2:ba:0f:c7:29:06: e0:a0:3d:06:8b:dd:10:e3:d2:39:04:66:c8:6f:38:b2:fb:87: f1:ce:55:02:c4:50:e3:a4:d7:92:3d:a2:ec:5b:22:2d:15:24: dd:0c:dc:18:60:c4:28:99:5c:db:28:6e:e6:31:2c:a1:4a:90: f3:24:03:04:75:12:81:1d:f6:fe:19:63:fc:09:99:f6:6f:f5: a4:40:a8:1d:83:9f:45:0e:0f:db:26:0c:7b:16:24:56:2d:37: e9:04:8d:9c:bd:4b:21:3b:49:43:3b:ad:55:72:df:8e:5a:f8: 0e:5d:2b:ca:61:94:06:f6:4d:8e:88:57:67:49:bf:62:50:97: 2f:42:22:78:e5:a5:f3:fe:d6:1c:94:5a:da:1a:eb:0b:77:b1: 66:c5:b1:8e:6f:1e:aa:8a:7e:58:05:ea:3c:7c:9e:da:b1:96: 16:57:b0:b8:54:f2:ed:b1:9c:fc:75:04:3e:aa:87:16:85:9f: d0:d2:a2:c6:d0:ed:06:b1:da:d7:66:89:82:fc:cf:24:84:e6: 72:a4:87:9f -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt6WpCAaQu5WDyTRexxadFOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZjdiNDk2ZWE3Y2Y3NjNkMDU4MzA4MzcxZTFiZjY3ZTUzYmM3YmEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGz2BiwdOrHNG5jvkq3nCqxdlbwN GHZbz/C1CHXwaJPG5zCmHliKsdTvTAdlEMl5XnjU5MKyZcSdsBTUYJUyFjxZwIJy za6Uk92Y0veUWXaOVtYw/2kTshGS/V6oNPvE7HqeEHDlby0PuyiOEZR9zN1f7xSV OG/DBnmItqr2hIGvywvAlSniCG2o4sR8nWDH1GiWCsYzEPCCJ8DEgJZRHM+7oDVF g+YPH9w5QxwYO5i/F5ez7zT7zH21w1d+8VpENYFNhPjSQ1eHhF0MWQiPo6J50p2L Kkox/p+pc9yte6xg3Q650BUQguxbPTPlT8LBIzuxD33FrphnA+Uz2ZCZrwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFI97SW6nz3Y9BYMINx4b9n5TvHujMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdlLzllZmQ5 NC0wNTE2LTRlNjYtOThkNS0yNTFiMDE5ZDUxYTgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2UvOWVmZDk0 LTA1MTYtNGU2Ni05OGQ1LTI1MWIwMTlkNTFhOC8xL2ozdEpicWZQZGowRmd3ZzNI aHYyZmxPOGU2TS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCucgUMA0EAgACMAcDBQMqCyTAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMkiTANBgkqhkiG9w0BAQsFAAOCAQEAJbjteiDXIrJH l0gYrNC/IJ2YbqHIpnqgfWWdfEistwm8qlQBk4+oQ3T+MekoyWwi4roPxykG4KA9 BovdEOPSOQRmyG84svuH8c5VAsRQ46TXkj2i7FsiLRUk3QzcGGDEKJlc2yhu5jEs oUqQ8yQDBHUSgR32/hlj/AmZ9m/1pECoHYOfRQ4P2yYMexYkVi036QSNnL1LITtJ QzutVXLfjlr4Dl0rymGUBvZNjohXZ0m/YlCXL0IieOWl8/7WHJRa2hrrC3exZsWx jm8eqop+WAXqPHye2rGWFlewuFTy7bGc/HUEPqqHFoWf0NKixtDtBrHa12aJgvzP JITmcqSHnw== -----END CERTIFICATE-----Generated at Tue Jan 13 05:14:28 2026 by rpki-client