This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jqzH87IYxJLYjb68nNy5otLTDtE.cer File: jqzH87IYxJLYjb68nNy5otLTDtE.cer (raw, json) Hash identifier: jjQLa1a3n6sQeUFwNM1EUNREUOVRZ4iCZFZGo7Hg4Bw= Subject key identifier: 8E:AC:C7:F3:B2:18:C4:92:D8:8D:BE:BC:9C:DC:B9:A2:D2:D3:0E:D1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA3D46CAF64B3FBF33502AAB28E546A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2a/bd42ea-ebb6-4445-bd20-775da6aa3123/1/jqzH87IYxJLYjb68nNy5otLTDtE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2a/bd42ea-ebb6-4445-bd20-775da6aa3123/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:18:12 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 60039 IP: 185.60.236.0/22 IP: 185.98.104.0/22 IP: 2a02:76a0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:d4:6c:af:64:b3:fb:f3:35:02:aa:b2:8e:54:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8eacc7f3b218c492d88dbebc9cdcb9a2d2d30ed1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:98:73:59:15:75:72:55:da:1b:48:3d:d3:96: 38:9f:9e:b9:da:d3:c1:0f:e8:27:bb:26:df:87:a3: fa:9d:ec:95:f7:e3:ce:11:16:e3:aa:dd:4b:11:c2: 0a:d8:af:74:cf:2e:27:10:fd:f8:7e:03:d3:12:dd: 30:c5:e3:4d:8e:91:4d:55:e5:cb:bc:ea:71:18:b7: 80:55:36:13:af:d7:a3:6d:1f:98:dd:8f:b0:a0:1c: e1:fb:41:1d:1d:60:47:3e:d1:55:c1:79:b0:ba:11: 82:63:d2:a2:84:ec:e2:62:99:33:15:fb:da:78:52: bb:0d:f2:94:be:d5:cb:82:3a:a8:bb:9f:e1:29:d0: 03:13:21:62:76:65:9c:6d:68:01:e4:e7:91:70:08: 73:07:b2:b4:ed:96:6b:a6:1e:a1:3c:c3:1b:49:0c: 32:44:ec:af:c5:3c:81:d9:3d:e9:2d:3f:bb:9e:b5: 40:cc:01:14:f8:70:45:dc:cf:da:6d:fb:90:13:b1: 1a:eb:a6:31:00:85:c9:3d:13:21:10:58:18:59:6a: 2f:d2:f9:43:d8:cd:c8:14:87:b4:d0:0e:27:12:e7: 24:ba:95:68:cb:a8:f5:3b:b4:6f:aa:6f:65:7b:04: 4c:b3:0d:7f:6e:75:41:e5:e0:8a:b3:54:e1:92:b2: 17:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:AC:C7:F3:B2:18:C4:92:D8:8D:BE:BC:9C:DC:B9:A2:D2:D3:0E:D1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/bd42ea-ebb6-4445-bd20-775da6aa3123/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/bd42ea-ebb6-4445-bd20-775da6aa3123/1/jqzH87IYxJLYjb68nNy5otLTDtE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.60.236.0/22 185.98.104.0/22 IPv6: 2a02:76a0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 60039 Signature Algorithm: sha256WithRSAEncryption a8:71:73:e3:88:8b:36:07:36:c7:f0:22:28:2f:bf:d1:a5:1a: 02:74:87:5b:49:57:2a:ce:86:25:c8:63:cf:46:4f:09:f8:1f: 2c:d8:80:65:67:18:5e:60:c0:51:98:05:66:a1:58:a8:f8:b6: e4:1b:54:c3:8e:a7:80:79:9f:f3:46:81:0b:60:22:1a:3d:c5: ef:5d:61:35:b0:e0:1c:47:a2:6c:50:06:f6:2b:c2:1e:f0:ff: 0e:3c:36:b6:f4:b8:b0:6b:89:92:ef:09:4f:45:33:c2:e6:ad: 0e:9a:cd:22:4f:66:44:d1:ea:1c:b0:ba:ce:a5:b8:27:20:78: f3:dc:5c:a9:9d:18:1e:90:9d:38:90:0f:7c:32:8a:a3:8f:bd: 80:bb:18:62:68:21:c3:19:42:ea:78:6a:45:6c:21:c5:1b:bd: 95:1e:f6:5f:7b:16:40:29:2a:18:db:c9:1a:5e:cd:0a:b7:68: 6f:6f:a6:cd:f7:00:ca:6d:cf:d0:19:71:7d:7d:76:16:3b:ba: 0d:eb:21:68:5d:64:b4:52:e0:df:bf:2b:61:a1:0e:b5:75:fe: 0e:7f:43:26:b1:16:57:58:9b:71:90:69:48:e4:f4:0a:9b:fe: a3:82:54:0e:10:cb:82:d4:eb:67:b1:56:21:25:73:80:be:c8: f1:a6:16:26 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt7o9Rsr2Sz+/M1AqqyjlRqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZWFjYzdmM2IyMThjNDkyZDg4ZGJlYmM5Y2RjYjlhMmQyZDMwZWQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5hzWRV1clXaG0g905Y4n5652tPB D+gnuybfh6P6neyV9+POERbjqt1LEcIK2K90zy4nEP34fgPTEt0wxeNNjpFNVeXL vOpxGLeAVTYTr9ejbR+Y3Y+woBzh+0EdHWBHPtFVwXmwuhGCY9KihOziYpkzFfva eFK7DfKUvtXLgjqou5/hKdADEyFidmWcbWgB5OeRcAhzB7K07ZZrph6hPMMbSQwy ROyvxTyB2T3pLT+7nrVAzAEU+HBF3M/abfuQE7Ea66YxAIXJPRMhEFgYWWov0vlD 2M3IFIe00A4nEuckupVoy6j1O7Rvqm9lewRMsw1/bnVB5eCKs1ThkrIXIQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFI6sx/OyGMSS2I2+vJzcuaLS0w7RMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJhL2JkNDJl YS1lYmI2LTQ0NDUtYmQyMC03NzVkYTZhYTMxMjMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmEvYmQ0MmVh LWViYjYtNDQ0NS1iZDIwLTc3NWRhNmFhMzEyMy8xL2pxekg4N0lZeEpMWWpiNjhu Tnk1b3RMVER0RS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCuTzsAwQCuWJoMA0EAgACMAcDBQAqAnagMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwDqhzANBgkqhkiG9w0BAQsFAAOCAQEAqHFz 44iLNgc2x/AiKC+/0aUaAnSHW0lXKs6GJchjz0ZPCfgfLNiAZWcYXmDAUZgFZqFY qPi25BtUw46ngHmf80aBC2AiGj3F711hNbDgHEeibFAG9ivCHvD/Djw2tvS4sGuJ ku8JT0UzwuatDprNIk9mRNHqHLC6zqW4JyB489xcqZ0YHpCdOJAPfDKKo4+9gLsY YmghwxlC6nhqRWwhxRu9lR72X3sWQCkqGNvJGl7NCrdob2+mzfcAym3P0BlxfX12 Fju6DeshaF1ktFLg378rYaEOtXX+Dn9DJrEWV1ibcZBpSOT0Cpv+o4JUDhDLgtTr Z7FWISVzgL7I8aYWJg== -----END CERTIFICATE-----Generated at Fri Jan 2 17:00:01 2026 by rpki-client