This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jqF1hhztDPcNUWR5s_qIB2Jqwx8.cer File: jqF1hhztDPcNUWR5s_qIB2Jqwx8.cer (raw, json) Hash identifier: 9vUFbApYZTvEpv1FMpT4BxX19Vjzig/Kmxt5ex3fIsU= Subject key identifier: 8E:A1:75:86:1C:ED:0C:F7:0D:51:64:79:B3:FA:88:07:62:6A:C3:1F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA59E9BDE4340BC299E7B4CF7DF04EC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a1/ebfac8-57b5-48a4-a690-daed8f1e748b/1/jqF1hhztDPcNUWR5s_qIB2Jqwx8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a1/ebfac8-57b5-48a4-a690-daed8f1e748b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:19:01 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 212312 IP: 89.184.58.0/23 IP: 185.242.238.0/23 IP: 2a12:77c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:9e:9b:de:43:40:bc:29:9e:7b:4c:f7:df:04:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8ea175861ced0cf70d516479b3fa8807626ac31f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:95:b3:d8:57:f9:13:da:0d:ff:18:c1:df:e4: e7:16:24:2f:21:86:e4:a7:87:2a:4a:79:ea:18:21: ef:78:72:6b:78:a1:ba:e8:c3:d1:ab:b0:e3:12:f7: a8:d6:18:35:d5:47:e4:40:1c:3c:e0:2d:48:7c:20: 4b:93:ad:1c:d8:e5:83:c5:04:36:87:71:ca:e3:9a: 4d:3d:b1:f6:1a:0c:fa:de:9f:83:9f:fa:1b:49:15: 59:6c:70:b7:be:a2:4a:06:74:3b:d8:89:35:d4:5f: d0:a5:4c:6c:f2:f0:b8:d4:fc:bd:53:26:3c:32:c3: d6:51:51:da:f7:eb:8f:6b:c6:b1:69:c7:c5:58:13: 41:83:c7:dc:90:39:8a:0b:3c:2d:48:ee:5b:74:e0: 79:58:3f:0e:8f:b1:03:23:00:83:01:ba:72:66:93: da:bd:d3:61:40:7a:3c:6c:64:42:33:9c:3b:69:38: da:fd:11:b9:c3:da:f4:a6:fb:9d:4a:a5:d8:e2:b3: 8a:58:74:35:01:93:8c:93:60:10:a1:2b:9d:75:dc: fd:6d:e9:33:c1:ae:7e:40:fc:c2:ac:96:ef:4f:cd: 72:77:1f:35:17:83:7e:03:b1:0d:a1:ba:ce:5a:8a: af:75:a1:1a:a0:c0:39:33:b1:3f:75:d3:f9:c7:e6: f1:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:A1:75:86:1C:ED:0C:F7:0D:51:64:79:B3:FA:88:07:62:6A:C3:1F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ebfac8-57b5-48a4-a690-daed8f1e748b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ebfac8-57b5-48a4-a690-daed8f1e748b/1/jqF1hhztDPcNUWR5s_qIB2Jqwx8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.184.58.0/23 185.242.238.0/23 IPv6: 2a12:77c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 212312 Signature Algorithm: sha256WithRSAEncryption 7b:ca:2c:c0:ea:dd:71:42:d1:ad:70:ca:82:18:3a:93:6c:8d: ce:cf:33:90:05:c4:5d:a6:57:a5:7b:5b:3a:26:bd:bf:8f:59: 80:4c:49:7f:9d:62:73:0e:d1:62:4f:09:67:34:35:de:6f:0a: 9c:44:5a:77:a0:e9:50:40:ee:33:c2:53:9f:c4:8c:49:53:95: db:61:30:99:3d:92:95:c5:a1:9e:aa:0a:a9:47:40:c0:ca:90: a3:c8:2f:ce:2d:d8:e5:58:37:35:aa:33:0a:ce:8c:96:2d:15: e4:23:1f:af:6c:e1:f2:36:4d:1d:97:af:41:6b:7b:bf:34:9f: 59:fb:f3:2f:09:61:dd:83:97:26:db:32:f2:0a:45:42:5e:bd: b0:0c:ab:4a:c9:d7:3b:74:9b:48:67:a4:9f:fc:c5:5c:95:f6: eb:a4:21:0a:0f:0b:cc:05:47:f0:2a:3a:79:7b:8a:48:ec:73: 9a:d7:5c:63:92:c6:a7:5a:b2:e7:f3:69:0f:cc:ad:10:1d:92: f3:dd:48:38:46:79:07:70:a0:13:2b:d3:c1:0d:cc:08:66:52: ef:3a:3b:66:6b:ad:9a:bf:89:78:b4:ce:c0:17:47:54:6c:df: 04:c0:8e:90:ea:20:93:88:4d:9c:3b:7d:24:08:74:2e:8e:da: c3:39:74:6d -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt+pZ6b3kNAvCmee0z33wTsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZWExNzU4NjFjZWQwY2Y3MGQ1MTY0NzliM2ZhODgwNzYyNmFjMzFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5Wz2Ff5E9oN/xjB3+TnFiQvIYbk p4cqSnnqGCHveHJreKG66MPRq7DjEveo1hg11UfkQBw84C1IfCBLk60c2OWDxQQ2 h3HK45pNPbH2Ggz63p+Dn/obSRVZbHC3vqJKBnQ72Ik11F/QpUxs8vC41Py9UyY8 MsPWUVHa9+uPa8axacfFWBNBg8fckDmKCzwtSO5bdOB5WD8Oj7EDIwCDAbpyZpPa vdNhQHo8bGRCM5w7aTja/RG5w9r0pvudSqXY4rOKWHQ1AZOMk2AQoSudddz9bekz wa5+QPzCrJbvT81ydx81F4N+A7ENobrOWoqvdaEaoMA5M7E/ddP5x+bxCQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFI6hdYYc7Qz3DVFkebP6iAdiasMfMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ExL2ViZmFj OC01N2I1LTQ4YTQtYTY5MC1kYWVkOGYxZTc0OGIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTEvZWJmYWM4 LTU3YjUtNDhhNC1hNjkwLWRhZWQ4ZjFlNzQ4Yi8xL2pxRjFoaHp0RFBjTlVXUjVz X3FJQjJKcXd4OC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQBWbg6AwQBufLuMA0EAgACMAcDBQMqEnfAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwM9WDANBgkqhkiG9w0BAQsFAAOCAQEAe8os wOrdcULRrXDKghg6k2yNzs8zkAXEXaZXpXtbOia9v49ZgExJf51icw7RYk8JZzQ1 3m8KnERad6DpUEDuM8JTn8SMSVOV22EwmT2SlcWhnqoKqUdAwMqQo8gvzi3Y5Vg3 NaozCs6Mli0V5CMfr2zh8jZNHZevQWt7vzSfWfvzLwlh3YOXJtsy8gpFQl69sAyr SsnXO3SbSGekn/zFXJX266QhCg8LzAVH8Co6eXuKSOxzmtdcY5LGp1qy5/NpD8yt EB2S891IOEZ5B3CgEyvTwQ3MCGZS7zo7Zmutmr+JeLTOwBdHVGzfBMCOkOogk4hN nDt9JAh0Lo7awzl0bQ== -----END CERTIFICATE-----Generated at Sun Jan 11 23:33:51 2026 by rpki-client