This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jrsOsZ53d9cDgAD2wS053tEgQkI.cer File: jrsOsZ53d9cDgAD2wS053tEgQkI.cer (raw, json) Hash identifier: msgUUwNR4ZohlFwSyR3HH7+l5nYcwF/yVU5e4qXsN0E= Subject key identifier: 8E:BB:0E:B1:9E:77:77:D7:03:80:00:F6:C1:2D:39:DE:D1:20:42:42 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCAEA9C2538C3FAEF9D3062F55F7C04 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/22/3b157d-8196-4e40-ab36-15141c66854d/1/jrsOsZ53d9cDgAD2wS053tEgQkI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/22/3b157d-8196-4e40-ab36-15141c66854d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:20:08 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 43099 IP: 91.194.66.0/23 IP: 2001:67c:a2c::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:ea:9c:25:38:c3:fa:ef:9d:30:62:f5:5f:7c:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:20:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8ebb0eb19e7777d7038000f6c12d39ded1204242 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:af:b0:f7:ac:f5:f2:70:47:b6:eb:88:e3:cb: 38:14:39:b5:0e:50:b2:30:2c:43:ce:c5:46:62:6f: e6:2c:4a:a8:eb:a7:46:a0:14:15:9d:17:eb:1b:75: 9a:f3:c1:d8:59:a6:7b:02:0f:58:4a:36:6a:f8:74: 9b:74:50:34:1b:a1:0b:f9:0c:7e:2c:4f:a3:d0:e2: 02:91:aa:cf:a8:3e:c1:8c:f0:31:92:67:a6:aa:b0: cd:55:8b:02:cf:99:43:33:b8:2d:e7:77:b5:e7:43: 67:1c:6c:a1:0c:7a:07:1a:d4:6b:25:76:22:2a:37: 09:15:eb:60:15:d4:8e:6f:60:73:12:60:9f:42:5c: 8e:fe:32:ac:54:a4:16:b7:f0:a7:89:af:a6:33:d9: d3:49:9f:e3:56:3f:e2:11:0a:8f:30:9b:2e:26:22: 1d:ca:1c:c6:0f:60:af:37:e5:86:83:2c:f2:a3:91: 29:9e:41:01:b1:4b:17:a2:2a:63:60:16:1f:d1:4f: 28:01:a4:70:99:0d:0d:ef:05:a4:c9:3c:cb:d9:eb: 4a:b4:41:76:9d:c8:8a:27:a0:b7:41:02:26:33:33: 0c:9a:39:a5:9c:2b:54:bc:32:7c:3a:6e:23:a1:f4: e3:41:1f:bf:52:f3:94:c4:6e:0a:32:1d:66:44:f3: 89:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:BB:0E:B1:9E:77:77:D7:03:80:00:F6:C1:2D:39:DE:D1:20:42:42 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3b157d-8196-4e40-ab36-15141c66854d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3b157d-8196-4e40-ab36-15141c66854d/1/jrsOsZ53d9cDgAD2wS053tEgQkI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.194.66.0/23 IPv6: 2001:67c:a2c::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 43099 Signature Algorithm: sha256WithRSAEncryption 0f:3c:6e:ce:db:cd:f3:fd:33:bb:41:62:2d:82:f3:61:5e:82: 9d:e3:cf:5e:62:fe:e2:2c:25:3e:82:56:9a:88:32:2f:a0:24: 26:66:0d:39:bb:5e:89:62:ab:bd:4c:8d:de:e8:ff:73:ea:7b: 6f:59:96:1b:c8:23:68:28:54:23:10:49:c4:2e:88:01:ce:7c: 8f:8d:d3:bd:b1:25:39:17:77:4e:57:f0:27:20:3b:1f:ce:1e: 68:cc:a7:f7:b4:2d:c7:0f:d2:b8:f0:d0:2e:14:88:2c:10:27: 68:b2:94:6e:61:58:0f:8e:10:49:9a:e6:51:57:ff:cd:d4:a2: 64:2e:aa:4e:51:7f:06:43:e6:3a:ec:0f:34:12:b2:87:c8:a3: aa:41:0a:77:92:69:e5:c4:76:c9:04:1e:d9:0e:91:d9:11:3f: b4:75:4f:c9:a0:f0:c5:ed:9a:88:d5:c2:7e:39:af:4c:5d:d2: 43:5e:df:fe:33:06:e6:65:d9:40:f1:e7:4f:df:d0:db:2f:92: 96:17:e5:c0:1e:ee:bb:13:38:3b:15:5f:3c:1c:c9:cb:e7:78: 62:51:23:13:85:c1:33:f4:73:6d:b8:b3:05:ba:9a:29:77:90: 6b:bc:9e:fe:c9:d2:30:cb:f2:12:b3:2e:de:5b:b9:27:fc:bf: 72:93:2d:59 -----BEGIN CERTIFICATE----- MIIFpTCCBI2gAwIBAgISAZt9yuqcJTjD+u+dMGL1X3wEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgyMDA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZWJiMGViMTllNzc3N2Q3MDM4MDAwZjZjMTJkMzlkZWQxMjA0MjQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy6+w96z18nBHtuuI48s4FDm1DlCy MCxDzsVGYm/mLEqo66dGoBQVnRfrG3Wa88HYWaZ7Ag9YSjZq+HSbdFA0G6EL+Qx+ LE+j0OICkarPqD7BjPAxkmemqrDNVYsCz5lDM7gt53e150NnHGyhDHoHGtRrJXYi KjcJFetgFdSOb2BzEmCfQlyO/jKsVKQWt/Cnia+mM9nTSZ/jVj/iEQqPMJsuJiId yhzGD2CvN+WGgyzyo5EpnkEBsUsXoipjYBYf0U8oAaRwmQ0N7wWkyTzL2etKtEF2 nciKJ6C3QQImMzMMmjmlnCtUvDJ8Om4jofTjQR+/UvOUxG4KMh1mRPOJ9QIDAQAB o4ICsTCCAq0wHQYDVR0OBBYEFI67DrGed3fXA4AA9sEtOd7RIEJCMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzIyLzNiMTU3 ZC04MTk2LTRlNDAtYWIzNi0xNTE0MWM2Njg1NGQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjIvM2IxNTdk LTgxOTYtNGU0MC1hYjM2LTE1MTQxYzY2ODU0ZC8xL2pyc09zWjUzZDljRGdBRDJ3 UzA1M3RFZ1FrSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQBW8JCMA8EAgACMAkDBwAgAQZ8CiwwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDAKhbMA0GCSqGSIb3DQEBCwUAA4IBAQAPPG7O283z /TO7QWItgvNhXoKd489eYv7iLCU+glaaiDIvoCQmZg05u16JYqu9TI3e6P9z6ntv WZYbyCNoKFQjEEnELogBznyPjdO9sSU5F3dOV/AnIDsfzh5ozKf3tC3HD9K48NAu FIgsECdospRuYVgPjhBJmuZRV//N1KJkLqpOUX8GQ+Y67A80ErKHyKOqQQp3kmnl xHbJBB7ZDpHZET+0dU/JoPDF7ZqI1cJ+Oa9MXdJDXt/+MwbmZdlA8edP39DbL5KW F+XAHu67Ezg7FV88HMnL53hiUSMThcEz9HNtuLMFupopd5BrvJ7+ydIwy/ISsy7e W7kn/L9yky1Z -----END CERTIFICATE-----Generated at Fri Jan 9 16:32:21 2026 by rpki-client