This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jq3tC4P6TjHOCghA60KbqKnxjjk.cer File: jq3tC4P6TjHOCghA60KbqKnxjjk.cer (raw, json) Hash identifier: tX4V7HlzzjH+aPaHfPH5GwwuBjm0nkBX70miq2E/pss= Subject key identifier: 8E:AD:ED:0B:83:FA:4E:31:CE:0A:08:40:EB:42:9B:A8:A9:F1:8E:39 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7758F73F507009187F0E5F74B5DD5336 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/79/c22c08-56a7-42d4-bea5-877dda192379/1/jq3tC4P6TjHOCghA60KbqKnxjjk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/79/c22c08-56a7-42d4-bea5-877dda192379/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:17:57 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 146.75.0.0/16 IP: 185.31.16.0/22 IP: 2a04:4e40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:f7:3f:50:70:09:18:7f:0e:5f:74:b5:dd:53:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8eaded0b83fa4e31ce0a0840eb429ba8a9f18e39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:77:af:2c:c0:df:ee:2b:87:7a:5c:b0:30:ee: 8f:35:61:92:ca:4d:4a:1c:06:51:8f:d9:49:7e:89: f5:c4:16:7b:09:ac:c8:ae:08:0b:75:7f:15:6f:8b: ec:f2:62:d6:5b:2d:31:85:3b:24:62:1e:0d:54:20: 6c:a0:ea:86:c5:d7:87:1d:e7:8c:41:11:94:e7:92: b6:df:7b:56:64:0f:0d:c2:de:07:14:03:a4:02:6b: 5a:d6:0a:2f:72:b3:81:b9:63:f4:aa:5d:7c:47:f3: 38:71:f6:eb:19:61:f9:29:bf:e1:59:ea:f5:33:a9: b3:37:ae:31:5a:71:a1:ad:e3:88:8f:34:a8:ad:56: cc:a1:4b:34:3e:a2:d4:32:2b:3b:17:3c:94:8a:46: 1c:f1:a1:1d:d1:b2:3d:bd:da:cc:88:c6:91:48:a7: fb:32:52:1f:d9:9e:cb:68:4b:51:45:73:20:51:ff: 1c:f3:fe:a3:bf:79:6b:c0:4a:5e:05:4a:dd:2d:d2: 52:c3:6b:6c:3f:95:84:c0:ad:b4:c5:63:63:4b:c3: 7e:d1:6f:da:1b:1a:03:16:0b:90:67:58:9f:47:80: 13:9d:9c:89:c0:e5:99:29:28:c9:38:80:9b:6a:f1: 77:f5:b4:71:34:b2:18:84:63:be:a4:77:ca:49:cc: 3d:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:AD:ED:0B:83:FA:4E:31:CE:0A:08:40:EB:42:9B:A8:A9:F1:8E:39 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c22c08-56a7-42d4-bea5-877dda192379/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c22c08-56a7-42d4-bea5-877dda192379/1/jq3tC4P6TjHOCghA60KbqKnxjjk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.75.0.0/16 185.31.16.0/22 IPv6: 2a04:4e40::/29 Signature Algorithm: sha256WithRSAEncryption 4d:a5:25:17:f2:2e:d7:43:c1:7a:ba:13:88:60:c6:a4:26:ba: 62:39:45:0e:af:33:fe:f4:d1:5b:b6:8e:7c:bf:70:6c:10:44: 54:8d:04:cf:50:2c:97:b2:1e:69:aa:a4:11:40:b8:30:01:04: 0d:c4:bc:0b:82:50:12:18:02:90:f4:6b:4a:de:94:6a:39:0f: 41:f9:65:42:1b:49:f6:4e:75:73:20:b4:73:65:80:83:23:2b: fe:f8:b4:aa:93:28:4a:58:17:3c:b3:4e:2d:dc:5b:86:fa:6a: 48:93:6c:49:47:ee:cc:fd:49:ca:0b:80:93:cc:e1:a1:d3:32: f4:9b:a0:40:96:1a:97:59:f8:c6:48:0b:cb:e2:32:ee:19:70: 48:55:2a:21:f4:43:55:f3:07:b9:99:e8:43:87:28:e0:3d:a4: 5b:86:d9:60:b7:bf:48:1a:75:e0:aa:73:22:7a:61:b4:f9:4e: d5:5c:43:50:4d:05:10:83:cb:f7:82:99:f7:fc:52:5f:14:d2: a7:3d:e5:f2:81:40:a4:4a:6e:b2:91:1c:61:a6:b3:97:c1:83: 43:c2:b2:fd:a9:29:b0:04:d9:19:0d:f2:1f:f5:11:72:95:ac: 9d:05:c2:28:d4:d6:c3:b7:32:ef:68:55:2f:ab:60:27:70:d9: 7e:76:e0:05 -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgISAZt3WPc/UHAJGH8OX3S13VM2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZWFkZWQwYjgzZmE0ZTMxY2UwYTA4NDBlYjQyOWJhOGE5ZjE4ZTM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnevLMDf7iuHelywMO6PNWGSyk1K HAZRj9lJfon1xBZ7CazIrggLdX8Vb4vs8mLWWy0xhTskYh4NVCBsoOqGxdeHHeeM QRGU55K233tWZA8Nwt4HFAOkAmta1govcrOBuWP0ql18R/M4cfbrGWH5Kb/hWer1 M6mzN64xWnGhreOIjzSorVbMoUs0PqLUMis7FzyUikYc8aEd0bI9vdrMiMaRSKf7 MlIf2Z7LaEtRRXMgUf8c8/6jv3lrwEpeBUrdLdJSw2tsP5WEwK20xWNjS8N+0W/a GxoDFguQZ1ifR4ATnZyJwOWZKSjJOICbavF39bRxNLIYhGO+pHfKScw91QIDAQAB o4ICmDCCApQwHQYDVR0OBBYEFI6t7QuD+k4xzgoIQOtCm6ip8Y45MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc5L2MyMmMw OC01NmE3LTQyZDQtYmVhNS04NzdkZGExOTIzNzkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzkvYzIyYzA4 LTU2YTctNDJkNC1iZWE1LTg3N2RkYTE5MjM3OS8xL2pxM3RDNFA2VGpIT0NnaEE2 MEticUtueGpqay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDMGCCsGAQUF BwEHAQH/BCQwIjARBAIAATALAwMAkksDBAK5HxAwDQQCAAIwBwMFAyoETkAwDQYJ KoZIhvcNAQELBQADggEBAE2lJRfyLtdDwXq6E4hgxqQmumI5RQ6vM/700Vu2jny/ cGwQRFSNBM9QLJeyHmmqpBFAuDABBA3EvAuCUBIYApD0a0relGo5D0H5ZUIbSfZO dXMgtHNlgIMjK/74tKqTKEpYFzyzTi3cW4b6akiTbElH7sz9ScoLgJPM4aHTMvSb oECWGpdZ+MZIC8viMu4ZcEhVKiH0Q1XzB7mZ6EOHKOA9pFuG2WC3v0gadeCqcyJ6 YbT5TtVcQ1BNBRCDy/eCmff8Ul8U0qc95fKBQKRKbrKRHGGms5fBg0PCsv2pKbAE 2RkN8h/1EXKVrJ0FwijU1sO3Mu9oVS+rYCdw2X524AU= -----END CERTIFICATE-----Generated at Mon Jan 12 00:03:07 2026 by rpki-client