This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/n-JpKxvOewMnwf51yJKZ4vhiF_w.cer File: n-JpKxvOewMnwf51yJKZ4vhiF_w.cer (raw, json) Hash identifier: i9IixbuCPbeDzNOT7oRjrNHvbBIR5Xayw2oiTUc0Oxo= Subject key identifier: 9F:E2:69:2B:1B:CE:7B:03:27:C1:FE:75:C8:92:99:E2:F8:62:17:FC Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7FF2522D5368DA97D497CE8135EDC606 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d4/a3de62-11ed-4da6-9f32-70fc1eab54c1/1/n-JpKxvOewMnwf51yJKZ4vhiF_w.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d4/a3de62-11ed-4da6-9f32-70fc1eab54c1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 18:22:25 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 202467 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 15:17:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:52:2d:53:68:da:97:d4:97:ce:81:35:ed:c6:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 18:22:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9fe2692b1bce7b0327c1fe75c89299e2f86217fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:73:e2:9d:0b:f5:34:9b:45:16:82:f7:40:5e: eb:18:9e:35:5b:61:b4:d0:3e:f0:08:17:ca:59:a8: 5f:81:f3:9c:fa:d9:90:e8:b8:c7:4f:4a:ff:40:5d: 19:3b:dd:16:63:45:d2:3c:ed:78:96:d7:6f:5b:e7: 74:c7:42:99:6a:1b:c5:d7:dd:13:18:38:de:4c:1c: 7b:f9:d3:10:94:a7:ee:b5:c4:97:77:cd:22:e1:7e: 09:01:a8:98:d4:be:a5:6e:ed:31:a6:32:5b:db:b2: 7f:ac:48:b6:ea:02:78:ed:00:c6:ef:04:04:6a:fc: 2d:16:55:7d:d3:5c:20:de:87:04:c3:04:68:30:04: 38:fa:be:26:a7:b4:71:bb:cf:60:c7:58:20:b4:00: 69:02:34:cb:37:36:ca:ca:3c:8c:b2:23:5f:3a:29: e0:66:61:5c:33:8e:54:0b:5a:4a:43:50:9f:05:a1: 5c:3e:5f:b2:d4:e7:70:1b:f7:f6:8d:c0:13:b5:26: 58:77:7d:e9:87:2d:7d:e4:da:bb:e4:ad:e4:d8:b9: cc:8b:30:00:bc:ef:d1:ef:0c:62:62:9e:07:4f:62: 75:82:8f:0a:8f:4d:dd:86:05:2f:f9:d6:a2:05:26: fe:ba:5b:a2:a9:2c:9d:74:58:bb:0d:c7:e7:03:70: 69:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:E2:69:2B:1B:CE:7B:03:27:C1:FE:75:C8:92:99:E2:F8:62:17:FC X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/a3de62-11ed-4da6-9f32-70fc1eab54c1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/a3de62-11ed-4da6-9f32-70fc1eab54c1/1/n-JpKxvOewMnwf51yJKZ4vhiF_w.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 202467 Signature Algorithm: sha256WithRSAEncryption 49:fa:62:e9:eb:9a:02:b5:0f:05:43:97:08:bc:2a:11:f5:2d: 70:aa:ff:53:e2:d0:c4:46:89:3f:14:50:0a:d1:58:ab:7c:fa: 21:c2:c9:3b:8b:74:2a:ee:cc:b4:ff:af:f7:3c:70:e1:64:20: 73:bd:04:19:ee:09:b2:31:b0:bf:ec:fc:56:0b:1a:59:f1:b5: 01:c8:5c:a5:88:8e:3b:18:60:7b:73:93:0d:d6:30:c5:e5:eb: 6b:26:e0:10:cb:00:d0:ec:90:c2:e5:05:ad:9b:ca:49:d5:4f: 3a:e4:ee:b6:e3:9b:d6:41:0e:b3:df:d9:67:00:f6:2c:96:05: 90:0e:9c:1b:f6:d6:5f:30:e7:9f:af:fe:75:ad:df:3f:0c:7c: 0e:dc:00:01:19:8e:68:2b:c1:c9:cc:be:0a:23:84:d9:8c:ec: 68:f1:d3:f5:63:04:a9:40:e2:5d:ec:c8:fa:ea:76:92:6a:da: f9:95:b5:fa:fb:67:32:5a:bd:de:b7:8c:15:82:91:2d:5e:c8: d4:71:89:bd:8f:88:24:56:9a:e7:3e:db:75:06:d2:9f:7c:14: e5:30:58:02:e7:e2:b3:3b:ef:0c:52:da:e2:65:eb:42:a8:ee: c3:92:4f:f3:01:ce:df:2e:c0:1f:7c:8b:0d:3b:b6:d8:fe:d2: cc:db:24:3a -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt/8lItU2jal9SXzoE17cYGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTgyMjI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZmUyNjkyYjFiY2U3YjAzMjdjMWZlNzVjODkyOTllMmY4NjIxN2ZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0HPinQv1NJtFFoL3QF7rGJ41W2G0 0D7wCBfKWahfgfOc+tmQ6LjHT0r/QF0ZO90WY0XSPO14ltdvW+d0x0KZahvF190T GDjeTBx7+dMQlKfutcSXd80i4X4JAaiY1L6lbu0xpjJb27J/rEi26gJ47QDG7wQE avwtFlV901wg3ocEwwRoMAQ4+r4mp7Rxu89gx1ggtABpAjTLNzbKyjyMsiNfOing ZmFcM45UC1pKQ1CfBaFcPl+y1OdwG/f2jcATtSZYd33phy195Nq75K3k2LnMizAA vO/R7wxiYp4HT2J1go8Kj03dhgUv+daiBSb+uluiqSyddFi7DcfnA3BpEwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFJ/iaSsbznsDJ8H+dciSmeL4Yhf8MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q0L2EzZGU2 Mi0xMWVkLTRkYTYtOWYzMi03MGZjMWVhYjU0YzEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDQvYTNkZTYy LTExZWQtNGRhNi05ZjMyLTcwZmMxZWFiNTRjMS8xL24tSnBLeHZPZXdNbndmNTF5 SktaNHZoaUZfdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMW4zANBgkqhkiG9w0BAQsFAAOCAQEASfpi6euaArUP BUOXCLwqEfUtcKr/U+LQxEaJPxRQCtFYq3z6IcLJO4t0Ku7MtP+v9zxw4WQgc70E Ge4JsjGwv+z8VgsaWfG1AchcpYiOOxhge3OTDdYwxeXraybgEMsA0OyQwuUFrZvK SdVPOuTutuOb1kEOs9/ZZwD2LJYFkA6cG/bWXzDnn6/+da3fPwx8DtwAARmOaCvB ycy+CiOE2YzsaPHT9WMEqUDiXezI+up2kmra+ZW1+vtnMlq93reMFYKRLV7I1HGJ vY+IJFaa5z7bdQbSn3wU5TBYAufiszvvDFLa4mXrQqjuw5JP8wHO3y7AH3yLDTu2 2P7SzNskOg== -----END CERTIFICATE-----Generated at Mon Jan 12 17:21:10 2026 by rpki-client