This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jha95kqam7o_-hQ4oZesP5SYn68.cer File: jha95kqam7o_-hQ4oZesP5SYn68.cer (raw, json) Hash identifier: 6g+ROMJx5/tlq6TH3flyae8yjuBu94FVqC7pMy4Hn7M= Subject key identifier: 8E:16:BD:E6:4A:9A:9B:BA:3F:FA:14:38:A1:97:AC:3F:94:98:9F:AF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B35E14C2206910D420EEF1A307D3F55 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3e/39ab2e-feeb-4a0e-8740-45296c32f0a3/1/jha95kqam7o_-hQ4oZesP5SYn68.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3e/39ab2e-feeb-4a0e-8740-45296c32f0a3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:07 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 31.222.235.0/24 IP: 185.109.51.0/24 IP: 194.54.145.0/24 IP: 2a14:6300::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 14:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:e1:4c:22:06:91:0d:42:0e:ef:1a:30:7d:3f:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8e16bde64a9a9bba3ffa1438a197ac3f94989faf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:45:e4:a8:79:33:8f:73:47:c1:58:99:11:ae: db:c0:3e:4c:31:0f:1b:f0:f5:d5:2c:0e:0c:0a:97: 9e:0c:3e:a4:ba:d0:f6:a1:5a:fc:ef:2b:9c:90:f7: e0:ab:9e:d2:6b:65:60:29:fd:14:1c:ee:81:4b:bf: e5:cf:4e:a1:d5:c4:e4:17:19:cb:e7:af:30:d8:04: 74:84:8b:a8:61:a1:24:cc:99:a2:e0:95:4e:0c:e5: 80:85:91:a3:42:17:7c:e7:71:03:d5:d1:ac:9a:e9: 48:99:b8:32:45:d5:fa:9d:b2:7f:c8:5c:f8:e0:b0: d6:b4:43:3f:76:f5:18:b3:8d:9e:02:b1:d0:a9:d9: ba:4e:bb:1f:a8:c6:31:94:ba:61:a0:93:4e:a6:4e: 46:e2:3a:f9:e6:7a:e7:03:9b:d2:c3:71:8b:dd:6d: d9:e7:36:17:c6:3e:62:d4:77:36:fc:07:30:10:b5: 51:57:7d:e0:91:b1:9c:4b:76:85:ef:15:c8:62:02: 0f:46:09:5a:02:d0:0f:0c:a5:62:9c:c5:35:74:d7: 65:d2:0c:3b:fd:17:f2:14:f8:1b:7c:f6:9d:01:7c: e6:1b:04:80:c1:b9:77:0a:d0:40:54:24:ff:c0:cc: 75:fd:0d:e5:a6:4f:17:4f:99:ff:03:d6:6a:63:2b: d6:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:16:BD:E6:4A:9A:9B:BA:3F:FA:14:38:A1:97:AC:3F:94:98:9F:AF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/39ab2e-feeb-4a0e-8740-45296c32f0a3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/39ab2e-feeb-4a0e-8740-45296c32f0a3/1/jha95kqam7o_-hQ4oZesP5SYn68.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.222.235.0/24 185.109.51.0/24 194.54.145.0/24 IPv6: 2a14:6300::/29 Signature Algorithm: sha256WithRSAEncryption 72:7b:95:98:88:75:1b:51:cf:bd:85:e4:57:16:8d:e5:a6:e0: 50:96:c2:68:c8:bb:5d:ac:53:1a:4d:3d:17:e5:f0:df:0f:14: 0c:50:dc:6f:11:d6:e1:c4:e7:c8:ed:97:a3:27:ac:00:3d:5a: 0e:13:24:49:be:eb:4f:0c:1d:79:c1:67:a0:b0:76:bb:05:e0: 17:44:af:f6:c7:a8:ea:eb:01:21:97:ab:af:1b:d5:9a:b8:22: e0:4c:d1:ed:ce:bd:f3:0f:b0:bf:46:06:56:4f:3b:eb:9a:09: 91:2c:8c:ef:ca:7f:fd:d6:9c:4a:37:2e:63:ee:ea:77:a1:9d: 34:12:cc:d0:1b:70:e1:c8:9f:63:82:5a:ee:0b:8e:ba:d3:08: 75:84:99:f6:1d:2b:51:8a:27:fc:43:7d:40:cb:96:be:0b:de: d4:60:14:fd:d7:2c:fb:73:1b:4e:36:36:34:a2:2a:af:7e:a0: 98:72:a6:2c:3a:4e:e2:ec:9b:b3:61:f6:25:f8:44:5f:1c:69: d1:ad:52:20:09:ed:76:07:87:a0:14:23:38:76:50:30:d5:f0: 7f:9e:5d:d2:ab:3f:34:6b:6c:6f:8e:54:b5:1f:03:77:b5:b6: 07:6f:71:f8:91:de:50:24:59:27:52:86:71:f9:c5:c4:75:c6: 0d:0e:0a:7d -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISAZt7NeFMIgaRDUIO7xowfT9VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZTE2YmRlNjRhOWE5YmJhM2ZmYTE0MzhhMTk3YWMzZjk0OTg5ZmFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0XkqHkzj3NHwViZEa7bwD5MMQ8b 8PXVLA4MCpeeDD6kutD2oVr87yuckPfgq57Sa2VgKf0UHO6BS7/lz06h1cTkFxnL 568w2AR0hIuoYaEkzJmi4JVODOWAhZGjQhd853ED1dGsmulImbgyRdX6nbJ/yFz4 4LDWtEM/dvUYs42eArHQqdm6TrsfqMYxlLphoJNOpk5G4jr55nrnA5vSw3GL3W3Z 5zYXxj5i1Hc2/AcwELVRV33gkbGcS3aF7xXIYgIPRglaAtAPDKVinMU1dNdl0gw7 /RfyFPgbfPadAXzmGwSAwbl3CtBAVCT/wMx1/Q3lpk8XT5n/A9ZqYyvWewIDAQAB o4ICnzCCApswHQYDVR0OBBYEFI4WveZKmpu6P/oUOKGXrD+UmJ+vMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNlLzM5YWIy ZS1mZWViLTRhMGUtODc0MC00NTI5NmMzMmYwYTMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2UvMzlhYjJl LWZlZWItNGEwZS04NzQwLTQ1Mjk2YzMyZjBhMy8xL2poYTk1a3FhbTdvXy1oUTRv WmVzUDVTWW42OC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQAH97rAwQAuW0zAwQAwjaRMA0EAgACMAcDBQMq FGMAMA0GCSqGSIb3DQEBCwUAA4IBAQBye5WYiHUbUc+9heRXFo3lpuBQlsJoyLtd rFMaTT0X5fDfDxQMUNxvEdbhxOfI7ZejJ6wAPVoOEyRJvutPDB15wWegsHa7BeAX RK/2x6jq6wEhl6uvG9WauCLgTNHtzr3zD7C/RgZWTzvrmgmRLIzvyn/91pxKNy5j 7up3oZ00EszQG3DhyJ9jglruC4660wh1hJn2HStRiif8Q31Ay5a+C97UYBT91yz7 cxtONjY0oiqvfqCYcqYsOk7i7JuzYfYl+ERfHGnRrVIgCe12B4egFCM4dlAw1fB/ nl3Sqz80a2xvjlS1HwN3tbYHb3H4kd5QJFknUoZx+cXEdcYNDgp9 -----END CERTIFICATE-----Generated at Tue Jan 6 20:27:51 2026 by rpki-client