This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jljYxh9jNQx3vvHWaxzPpaAODds.cer File: jljYxh9jNQx3vvHWaxzPpaAODds.cer (raw, json) Hash identifier: r5CcbIKo5EQWXHDv1CaQs7VHt+0DS/mOFWw1qNnWRzE= Subject key identifier: 8E:58:D8:C6:1F:63:35:0C:77:BE:F1:D6:6B:1C:CF:A5:A0:0E:0D:DB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DC9A911AB01110AFF2FF30454040E21 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/77/30c592-0ac6-4f73-95bf-ab5956b4d970/1/jljYxh9jNQx3vvHWaxzPpaAODds.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/77/30c592-0ac6-4f73-95bf-ab5956b4d970/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:18:46 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 31060 IP: 193.23.49.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:a9:11:ab:01:11:0a:ff:2f:f3:04:54:04:0e:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8e58d8c61f63350c77bef1d66b1ccfa5a00e0ddb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:6c:8e:29:be:f6:66:b9:64:03:f4:2e:52:d3: e3:6f:0f:d1:f3:60:62:0d:ba:be:2c:1a:b6:80:32: 3b:86:71:25:9d:89:c5:51:60:97:7b:5c:a2:9c:8a: b3:ba:fc:2e:50:ca:34:96:f3:1c:5c:d3:0d:ae:b2: 67:28:45:e5:83:c9:c6:9b:bc:67:73:78:3b:b0:a4: 78:28:ab:5d:9d:b5:72:c2:80:59:33:01:30:93:3e: 7f:07:0a:9c:f9:95:80:c2:3e:18:80:45:32:16:8b: fb:b1:71:2a:4c:5c:52:ea:84:25:b1:91:25:95:ea: c0:5c:ef:b8:36:f4:6b:f4:7f:86:9c:78:f6:bc:24: 65:30:12:3c:aa:f2:35:39:b4:bb:c9:8a:85:ea:21: cf:40:fe:f3:83:6b:06:42:8c:3d:05:a6:12:8c:c3: e3:cc:8b:57:65:1c:5f:3f:63:3d:44:4a:4c:03:f1: 43:4e:84:6b:32:71:f1:53:61:ba:3e:54:73:20:57: 7e:2a:a1:f9:a5:de:1e:34:fd:16:b7:31:ba:cd:71: 6d:15:be:08:3a:6e:a7:b3:4b:ba:1d:06:ba:33:66: d6:29:ad:fe:c3:58:4f:50:3b:9c:e6:6b:f4:71:df: d8:d3:5e:3d:d9:d8:fa:a4:99:c8:76:5c:5e:6b:ac: 53:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:58:D8:C6:1F:63:35:0C:77:BE:F1:D6:6B:1C:CF:A5:A0:0E:0D:DB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/30c592-0ac6-4f73-95bf-ab5956b4d970/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/30c592-0ac6-4f73-95bf-ab5956b4d970/1/jljYxh9jNQx3vvHWaxzPpaAODds.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.23.49.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 31060 Signature Algorithm: sha256WithRSAEncryption 0a:cc:12:f8:5b:96:fe:de:94:7f:67:16:6b:b2:2b:5e:17:7f: 66:9e:e8:dd:36:21:e9:5a:71:47:74:b6:3e:be:ad:f7:31:3b: bc:24:d3:b8:4a:ec:54:c2:20:b4:d1:51:97:c4:b2:2d:41:52: b5:0d:80:11:c2:2a:8b:47:b5:dc:9f:e0:36:16:3d:dd:ab:03: db:77:a3:d8:58:7f:89:fb:4d:b7:a5:28:0c:a8:6a:89:1b:ab: 84:19:e2:18:66:c4:ce:64:f7:ee:b4:37:e8:bc:d4:f1:c2:6e: 04:a3:ad:80:6b:ff:aa:62:cc:93:58:1b:3e:b3:42:64:b0:99: 9e:e2:d5:c3:c2:cd:c9:4a:ec:21:b0:21:56:86:46:0b:af:54: b6:79:ed:7c:69:a2:6d:20:d4:dc:9d:50:3b:aa:43:28:2a:c8: 18:04:5c:ee:ba:54:4a:1b:fa:28:dd:6f:e8:d5:0d:da:7e:b2: 5a:02:af:8e:04:de:cc:9b:0d:97:87:47:6e:e3:d4:72:6b:d0: 2b:2e:aa:f3:6a:c3:42:4a:3c:65:f9:77:a3:c5:60:21:60:34: b9:9f:df:8c:f2:5d:59:ff:32:5f:06:fd:30:dd:c6:b5:b8:ce: 69:4e:ce:ac:09:d2:88:a4:fc:cb:d4:a1:86:88:92:b7:f3:21: fa:b0:fa:00 -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISAZt9yakRqwERCv8v8wRUBA4hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZTU4ZDhjNjFmNjMzNTBjNzdiZWYxZDY2YjFjY2ZhNWEwMGUwZGRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWyOKb72ZrlkA/QuUtPjbw/R82Bi Dbq+LBq2gDI7hnElnYnFUWCXe1yinIqzuvwuUMo0lvMcXNMNrrJnKEXlg8nGm7xn c3g7sKR4KKtdnbVywoBZMwEwkz5/Bwqc+ZWAwj4YgEUyFov7sXEqTFxS6oQlsZEl lerAXO+4NvRr9H+GnHj2vCRlMBI8qvI1ObS7yYqF6iHPQP7zg2sGQow9BaYSjMPj zItXZRxfP2M9REpMA/FDToRrMnHxU2G6PlRzIFd+KqH5pd4eNP0WtzG6zXFtFb4I Om6ns0u6HQa6M2bWKa3+w1hPUDuc5mv0cd/Y01492dj6pJnIdlxea6xTJQIDAQAB o4ICnzCCApswHQYDVR0OBBYEFI5Y2MYfYzUMd77x1mscz6WgDg3bMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc3LzMwYzU5 Mi0wYWM2LTRmNzMtOTViZi1hYjU5NTZiNGQ5NzAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzcvMzBjNTky LTBhYzYtNGY3My05NWJmLWFiNTk1NmI0ZDk3MC8xL2psall4aDlqTlF4M3Z2SFdh eHpQcGFBT0Rkcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwRcxMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQC AnlUMA0GCSqGSIb3DQEBCwUAA4IBAQAKzBL4W5b+3pR/ZxZrsiteF39mnujdNiHp WnFHdLY+vq33MTu8JNO4SuxUwiC00VGXxLItQVK1DYARwiqLR7Xcn+A2Fj3dqwPb d6PYWH+J+023pSgMqGqJG6uEGeIYZsTOZPfutDfovNTxwm4Eo62Aa/+qYsyTWBs+ s0JksJme4tXDws3JSuwhsCFWhkYLr1S2ee18aaJtINTcnVA7qkMoKsgYBFzuulRK G/oo3W/o1Q3afrJaAq+OBN7Mmw2Xh0du49Rya9ArLqrzasNCSjxl+XejxWAhYDS5 n9+M8l1Z/zJfBv0w3ca1uM5pTs6sCdKIpPzL1KGGiJK38yH6sPoA -----END CERTIFICATE-----Generated at Mon Jan 12 13:07:02 2026 by rpki-client