This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jKD-wY7yn5qt_pYrz3QIkNsPc5A.cer File: jKD-wY7yn5qt_pYrz3QIkNsPc5A.cer (raw, json) Hash identifier: g7+EgTe5pZfWv6TgXrNTTbOOH1ecHTcjBeMyxwPQz3Y= Subject key identifier: 8C:A0:FE:C1:8E:F2:9F:9A:AD:FE:96:2B:CF:74:08:90:DB:0F:73:90 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA73742B3566092FAD9E21239D48A83 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/61/ea5b40-2886-4baf-8ea0-113eefa51aa6/1/jKD-wY7yn5qt_pYrz3QIkNsPc5A.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/61/ea5b40-2886-4baf-8ea0-113eefa51aa6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:20:46 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 194.156.200.0/23 IP: 194.156.204.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:37:42:b3:56:60:92:fa:d9:e2:12:39:d4:8a:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:20:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8ca0fec18ef29f9aadfe962bcf740890db0f7390 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:f9:38:35:36:23:18:73:04:34:55:35:bf:82: f2:c9:76:f5:33:a9:7e:9b:bd:31:c2:86:7e:5d:e6: 0f:7a:9b:34:0e:0d:1c:7f:e5:33:a8:18:36:38:6e: c2:c9:7c:86:2e:a1:e9:81:95:52:4d:75:44:eb:75: b2:c0:85:8f:ac:eb:c7:f6:02:ea:59:bf:4d:2c:d4: 74:a9:67:77:29:37:ce:be:05:7d:30:e4:34:b6:4d: 5b:20:ee:91:71:69:db:65:50:80:10:93:31:17:26: 3d:8f:78:fe:a0:72:2b:04:d8:30:4e:8a:70:ff:e3: 01:a5:46:01:4a:8e:e6:a5:7e:2c:6b:03:2c:ac:9b: 93:34:f5:d0:f6:1f:76:ac:c6:11:66:ae:c0:b8:aa: 3b:66:e9:6b:24:aa:85:ee:b0:79:b9:e6:80:55:b7: b9:ad:14:f7:35:1e:70:99:17:16:bf:08:58:81:70: 91:e0:ae:50:88:d0:f1:11:d1:6c:ed:5d:5c:58:73: b8:9f:f4:8e:78:3d:d9:af:84:12:22:3f:de:74:2a: e1:c3:a1:15:63:88:ed:f9:ce:48:e6:d0:c6:b9:f1: f7:30:dd:80:e8:9e:5a:c6:bf:7b:8b:33:58:43:cc: 82:9a:a3:1d:a1:24:c1:23:bc:8b:4d:ea:bc:9f:81: 6d:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:A0:FE:C1:8E:F2:9F:9A:AD:FE:96:2B:CF:74:08:90:DB:0F:73:90 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ea5b40-2886-4baf-8ea0-113eefa51aa6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ea5b40-2886-4baf-8ea0-113eefa51aa6/1/jKD-wY7yn5qt_pYrz3QIkNsPc5A.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.156.200.0/23 194.156.204.0/23 Signature Algorithm: sha256WithRSAEncryption 6b:76:d3:b8:9b:a9:91:b8:5a:49:16:46:df:b5:c4:b2:1e:9f: ac:4a:63:2f:da:d1:6b:3d:1c:48:88:f9:57:12:43:92:05:35: 0c:11:9e:0a:85:95:49:f0:49:dd:75:33:f9:87:d4:f1:e6:27: 11:28:45:d8:06:c9:36:16:d5:c4:76:11:12:4d:6e:e0:d7:a0: 7c:4c:2c:f2:80:e4:da:7e:3f:91:6d:be:ab:68:b8:28:35:f9: a2:4d:6f:ae:50:2a:63:45:52:4c:84:51:47:44:fd:12:ef:cc: b3:7d:c1:b4:38:57:0e:63:43:b8:06:bb:3d:21:c4:23:ae:f8: 99:0d:ff:f6:16:36:4b:05:7b:d8:68:e8:5a:36:88:57:5d:e7: f3:89:5d:34:70:fa:dc:f3:e3:07:95:95:db:df:16:dc:ff:eb: 2e:f1:1e:6e:b3:bb:ad:ce:f0:9d:27:37:b5:83:7d:ef:41:a9: c3:46:ab:20:e0:16:93:c1:32:1f:b7:a2:22:de:f9:01:a6:56: eb:c3:d3:b1:b8:30:f7:f3:45:64:a4:be:86:9d:36:b4:3d:be: 16:be:a3:6e:ea:e3:06:67:c1:f7:26:eb:14:ee:a9:a7:47:c9: c7:5d:ee:0d:61:4b:94:b7:50:27:d9:6a:6d:34:da:0c:75:05: 27:d7:9a:5a -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgISAZt+pzdCs1ZgkvrZ4hI51IqDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIyMDQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Y2EwZmVjMThlZjI5ZjlhYWRmZTk2MmJjZjc0MDg5MGRiMGY3MzkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4fk4NTYjGHMENFU1v4LyyXb1M6l+ m70xwoZ+XeYPeps0Dg0cf+UzqBg2OG7CyXyGLqHpgZVSTXVE63WywIWPrOvH9gLq Wb9NLNR0qWd3KTfOvgV9MOQ0tk1bIO6RcWnbZVCAEJMxFyY9j3j+oHIrBNgwTopw /+MBpUYBSo7mpX4sawMsrJuTNPXQ9h92rMYRZq7AuKo7ZulrJKqF7rB5ueaAVbe5 rRT3NR5wmRcWvwhYgXCR4K5QiNDxEdFs7V1cWHO4n/SOeD3Zr4QSIj/edCrhw6EV Y4jt+c5I5tDGufH3MN2A6J5axr97izNYQ8yCmqMdoSTBI7yLTeq8n4FtrwIDAQAB o4ICijCCAoYwHQYDVR0OBBYEFIyg/sGO8p+arf6WK890CJDbD3OQMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYxL2VhNWI0 MC0yODg2LTRiYWYtOGVhMC0xMTNlZWZhNTFhYTYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjEvZWE1YjQw LTI4ODYtNGJhZi04ZWEwLTExM2VlZmE1MWFhNi8xL2pLRC13WTd5bjVxdF9wWXJ6 M1FJa05zUGM1QS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQBwpzIAwQBwpzMMA0GCSqGSIb3DQEBCwUAA4IB AQBrdtO4m6mRuFpJFkbftcSyHp+sSmMv2tFrPRxIiPlXEkOSBTUMEZ4KhZVJ8End dTP5h9Tx5icRKEXYBsk2FtXEdhESTW7g16B8TCzygOTafj+Rbb6raLgoNfmiTW+u UCpjRVJMhFFHRP0S78yzfcG0OFcOY0O4Brs9IcQjrviZDf/2FjZLBXvYaOhaNohX XefziV00cPrc8+MHlZXb3xbc/+su8R5us7utzvCdJze1g33vQanDRqsg4BaTwTIf t6Ii3vkBplbrw9OxuDD380VkpL6GnTa0Pb4WvqNu6uMGZ8H3JusU7qmnR8nHXe4N YUuUt1An2WptNNoMdQUn15pa -----END CERTIFICATE-----Generated at Sat Jan 3 03:54:12 2026 by rpki-client