This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/j5pGcBRq2IDxS62ksnYrYT3fHRg.cer File: j5pGcBRq2IDxS62ksnYrYT3fHRg.cer (raw, json) Hash identifier: Trp38Kq24xkqm8ETWXnxgxgMgmSi38RFRlGT4Apw71I= Subject key identifier: 8F:9A:46:70:14:6A:D8:80:F1:4B:AD:A4:B2:76:2B:61:3D:DF:1D:18 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77596AAE4A1392D0A0AA051D453DBA54 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/j5pGcBRq2IDxS62ksnYrYT3fHRg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:18:27 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 60901 IP: 185.241.84.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:6a:ae:4a:13:92:d0:a0:aa:05:1d:45:3d:ba:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8f9a4670146ad880f14bada4b2762b613ddf1d18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:7f:b3:0b:67:73:fd:46:d0:39:91:29:41:b8: 81:be:31:e6:a5:fc:f2:a6:4c:de:c3:0e:ff:68:86: e0:02:e8:ce:e1:fa:85:ec:cb:49:c6:57:ce:02:28: 21:b2:61:fc:aa:a9:fd:51:1d:25:56:9e:bb:69:e1: 2c:a4:a4:4f:5f:28:82:8b:76:a4:ed:93:80:2f:39: aa:c0:4e:50:b0:ec:50:78:e6:54:d9:b8:2f:3d:ba: 28:db:19:43:0a:86:c8:97:52:19:40:63:ff:18:e7: 99:e1:4e:5c:ca:65:d9:03:d6:52:90:ca:ad:33:e1: 40:73:4b:02:1a:d5:f6:6e:6a:7c:e5:c4:9f:eb:0a: 4b:bc:7e:e2:c1:3b:8a:b5:f6:14:c5:e0:a6:f4:7b: a6:fc:c1:4c:15:17:90:ff:71:67:80:40:2f:c1:2e: 7d:99:5e:da:44:df:1f:d6:42:8d:b3:a2:a2:8b:b1: 2a:6c:63:92:39:cf:7c:1d:2f:f2:42:55:fb:59:5f: 8a:c1:3c:c9:26:3c:de:1c:f7:0a:65:05:66:a9:c4: 65:9b:9e:16:8c:98:11:fe:39:b4:ce:67:b1:4d:47: ac:d6:1c:da:cc:e0:a7:53:bd:ae:03:54:5a:87:e5: 01:40:47:0d:6d:bb:a5:fc:39:c5:51:db:12:37:97: df:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:9A:46:70:14:6A:D8:80:F1:4B:AD:A4:B2:76:2B:61:3D:DF:1D:18 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/j5pGcBRq2IDxS62ksnYrYT3fHRg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.241.84.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 60901 Signature Algorithm: sha256WithRSAEncryption 05:03:c7:c9:3f:bf:39:f5:ac:2a:41:31:bf:06:40:86:5f:e7: 59:a9:1a:e7:93:6c:06:97:1d:e1:40:e7:01:40:c0:f8:a3:81: 44:56:57:12:08:72:4d:0d:c8:07:83:ef:28:35:52:bb:03:5e: 10:ac:ff:e3:4a:a2:ef:71:71:4d:e7:11:eb:aa:f2:f8:82:22: 50:8b:2c:f3:f1:55:8d:77:7e:8d:a8:0e:88:6b:08:31:8d:9d: a6:a0:e5:5f:34:b1:8e:fd:93:c5:56:9b:10:7d:eb:ff:b2:81: dd:35:59:52:17:97:9d:5d:be:91:b6:be:bb:ba:f3:d4:28:32: 6e:14:92:6b:63:e7:4b:f5:73:91:10:af:d8:3e:e4:d1:ce:9b: 50:15:91:3f:8e:6c:77:63:a1:b2:28:d5:13:a0:1c:27:00:3a: d3:d1:dd:a8:0a:4d:04:17:64:bf:55:62:c1:03:ec:3e:da:e1: af:59:4a:47:9d:45:2e:54:d8:75:06:33:0f:49:9a:dd:90:1a: 00:8e:71:20:32:6c:e3:48:bc:cf:f4:36:c2:10:2c:0d:66:71: 80:6b:65:ca:d4:33:40:57:7b:17:b1:59:53:77:c4:41:d7:e1: fb:82:4d:df:2d:5a:00:ea:cc:02:0b:1f:14:01:96:0b:10:54: 56:1f:3a:a0 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt3WWquShOS0KCqBR1FPbpUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZjlhNDY3MDE0NmFkODgwZjE0YmFkYTRiMjc2MmI2MTNkZGYxZDE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnX+zC2dz/UbQOZEpQbiBvjHmpfzy pkzeww7/aIbgAujO4fqF7MtJxlfOAighsmH8qqn9UR0lVp67aeEspKRPXyiCi3ak 7ZOALzmqwE5QsOxQeOZU2bgvPboo2xlDCobIl1IZQGP/GOeZ4U5cymXZA9ZSkMqt M+FAc0sCGtX2bmp85cSf6wpLvH7iwTuKtfYUxeCm9Hum/MFMFReQ/3FngEAvwS59 mV7aRN8f1kKNs6Kii7EqbGOSOc98HS/yQlX7WV+KwTzJJjzeHPcKZQVmqcRlm54W jJgR/jm0zmexTUes1hzazOCnU72uA1Rah+UBQEcNbbul/DnFUdsSN5ffIQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFI+aRnAUatiA8UutpLJ2K2E93x0YMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgzLzM1NDQz MC01NGJjLTQ1NWUtYjBkMS03Y2Q1MDhmNzMzNjQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODMvMzU0NDMw LTU0YmMtNDU1ZS1iMGQxLTdjZDUwOGY3MzM2NC8xL2o1cEdjQlJxMklEeFM2Mmtz bllyWVQzZkhSZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCufFUMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDt5TANBgkqhkiG9w0BAQsFAAOCAQEABQPHyT+/OfWsKkExvwZAhl/nWaka55Ns Bpcd4UDnAUDA+KOBRFZXEghyTQ3IB4PvKDVSuwNeEKz/40qi73FxTecR66ry+IIi UIss8/FVjXd+jagOiGsIMY2dpqDlXzSxjv2TxVabEH3r/7KB3TVZUheXnV2+kba+ u7rz1CgybhSSa2PnS/VzkRCv2D7k0c6bUBWRP45sd2OhsijVE6AcJwA609HdqApN BBdkv1ViwQPsPtrhr1lKR51FLlTYdQYzD0ma3ZAaAI5xIDJs40i8z/Q2whAsDWZx gGtlytQzQFd7F7FZU3fEQdfh+4JN3y1aAOrMAgsfFAGWCxBUVh86oA== -----END CERTIFICATE-----Generated at Fri Jan 9 07:48:04 2026 by rpki-client