This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/preJsy4W6d0vcFExGdx36mH_Hgk.cer File: preJsy4W6d0vcFExGdx36mH_Hgk.cer (raw, json) Hash identifier: Tp/nglKy0f87MiFHo7H+LSOWjU4eO4YWBx+x21cjoLY= Subject key identifier: A6:B7:89:B3:2E:16:E9:DD:2F:70:51:31:19:DC:77:EA:61:FF:1E:09 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C7F796D6D98EB79A05F6EA11EE45FA1 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4f/e768bd-f512-4b8a-936a-06c9296f08a2/1/preJsy4W6d0vcFExGdx36mH_Hgk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4f/e768bd-f512-4b8a-936a-06c9296f08a2/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:18:07 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 24703 AS: 25236 IP: 147.78.116.0/22 IP: 176.111.48.0 -- 176.111.50.255 IP: 176.111.57.0 -- 176.111.63.255 IP: 193.111.8.0/23 IP: 195.128.16.0/22 IP: 195.234.212.0/22 IP: 2a09:21c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:79:6d:6d:98:eb:79:a0:5f:6e:a1:1e:e4:5f:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a6b789b32e16e9dd2f70513119dc77ea61ff1e09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:62:5c:3d:7c:cd:b7:fa:70:37:3f:b1:db:8e: 76:d6:bf:61:ef:20:cf:47:ba:58:c3:a5:19:22:9f: 3e:49:0e:64:fe:71:d3:bd:43:ac:b0:e0:32:eb:7b: a3:e5:14:99:d9:42:aa:9d:f5:16:c9:9c:7d:24:ca: a9:a3:db:42:90:47:81:34:f9:21:94:b8:b7:a1:0c: f4:9c:38:fb:d1:e9:1d:28:44:28:18:0c:1e:b0:9a: 9b:78:28:fa:05:7a:87:fd:3a:06:fe:50:94:40:4b: 44:78:70:55:9f:a7:99:74:5a:e5:48:f3:b4:a0:6a: bc:7a:5a:be:30:66:ce:2e:7d:93:d1:3b:8e:24:4b: ae:e1:ef:18:06:96:0c:55:9d:96:ee:c6:59:d8:5b: fc:49:1e:03:25:25:83:84:d4:39:1a:db:4a:56:fb: 7e:55:85:23:58:15:85:91:2e:a5:cd:04:bc:ba:37: 95:0a:d4:54:e5:98:b2:db:2b:c7:3e:01:52:da:0a: d2:05:f4:23:2e:c8:aa:ab:38:04:bc:1b:eb:85:cf: bd:c5:33:d7:9e:bb:33:da:ba:ae:36:34:37:ba:57: 8f:53:d1:6e:cf:67:b7:0d:59:b1:76:e6:b5:0c:7b: 0e:ad:a3:80:33:4a:36:b5:0e:ec:be:c8:a8:23:6e: ab:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:B7:89:B3:2E:16:E9:DD:2F:70:51:31:19:DC:77:EA:61:FF:1E:09 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e768bd-f512-4b8a-936a-06c9296f08a2/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e768bd-f512-4b8a-936a-06c9296f08a2/1/preJsy4W6d0vcFExGdx36mH_Hgk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.78.116.0/22 176.111.48.0-176.111.50.255 176.111.57.0-176.111.63.255 193.111.8.0/23 195.128.16.0/22 195.234.212.0/22 IPv6: 2a09:21c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 24703 25236 Signature Algorithm: sha256WithRSAEncryption 06:bc:b7:8a:fa:59:3e:e4:01:db:d2:4b:7b:12:c7:27:80:7d: 50:7c:15:90:ae:7e:54:f7:f8:27:d4:79:c4:3b:3f:54:4c:39: 53:d5:88:e8:2d:9f:77:a7:75:85:9c:95:94:0a:64:b4:73:46: ac:2b:9f:11:22:3d:a0:14:77:6e:b5:f7:ed:f4:dd:6c:ff:11: b7:9f:9b:60:c1:33:6a:f9:8e:ff:ac:c8:cb:85:2b:19:e2:4c: 17:2e:61:d1:ad:86:b5:66:61:68:6e:b5:7e:13:dd:02:d4:45: db:7e:a6:c7:d5:7e:ca:9d:aa:7d:80:80:b4:73:20:bb:2d:1e: b7:89:fe:86:5f:2d:88:25:23:e1:cc:8f:65:24:65:98:80:5d: f2:3c:09:3c:9a:90:5b:10:3d:41:a1:e8:6e:dc:3b:61:42:af: 61:8c:ee:fa:17:05:87:54:37:b0:dc:3a:fc:a5:72:09:57:26: 8d:6d:99:50:20:cc:83:c7:5c:33:dd:90:fa:87:6a:98:bc:6c: 0e:ef:46:c5:b1:ce:f5:44:72:a3:15:51:f5:f8:e6:93:cc:08: f6:4e:64:39:40:00:fe:3c:71:b5:36:41:2d:19:b9:7a:93:14: be:76:fd:f4:6d:94:18:c4:25:c7:76:ca:88:3f:e4:d1:45:78: 94:5b:db:0d -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgISAZt8f3ltbZjreaBfbqEe5F+hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNmI3ODliMzJlMTZlOWRkMmY3MDUxMzExOWRjNzdlYTYxZmYxZTA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmJcPXzNt/pwNz+x24521r9h7yDP R7pYw6UZIp8+SQ5k/nHTvUOssOAy63uj5RSZ2UKqnfUWyZx9JMqpo9tCkEeBNPkh lLi3oQz0nDj70ekdKEQoGAwesJqbeCj6BXqH/ToG/lCUQEtEeHBVn6eZdFrlSPO0 oGq8elq+MGbOLn2T0TuOJEuu4e8YBpYMVZ2W7sZZ2Fv8SR4DJSWDhNQ5GttKVvt+ VYUjWBWFkS6lzQS8ujeVCtRU5Ziy2yvHPgFS2grSBfQjLsiqqzgEvBvrhc+9xTPX nrsz2rquNjQ3ulePU9Fuz2e3DVmxdua1DHsOraOAM0o2tQ7svsioI26rTQIDAQAB o4IC4DCCAtwwHQYDVR0OBBYEFKa3ibMuFundL3BRMRncd+ph/x4JMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRmL2U3Njhi ZC1mNTEyLTRiOGEtOTM2YS0wNmM5Mjk2ZjA4YTIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGYvZTc2OGJk LWY1MTItNGI4YS05MzZhLTA2YzkyOTZmMDhhMi8xL3ByZUpzeTRXNmQwdmNGRXhH ZHgzNm1IX0hnay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFwGCCsGAQUF BwEHAQH/BE0wSzA6BAIAATA0AwQCk050MAwDBASwbzADBACwbzIwDAMEALBvOQME BrBvAAMEAcFvCAMEAsOAEAMEAsPq1DANBAIAAjAHAwUDKgkhwDAdBggrBgEFBQcB CAEB/wQOMAygCjAIAgJgfwICYpQwDQYJKoZIhvcNAQELBQADggEBAAa8t4r6WT7k AdvSS3sSxyeAfVB8FZCuflT3+CfUecQ7P1RMOVPViOgtn3endYWclZQKZLRzRqwr nxEiPaAUd2619+303Wz/Ebefm2DBM2r5jv+syMuFKxniTBcuYdGthrVmYWhutX4T 3QLURdt+psfVfsqdqn2AgLRzILstHreJ/oZfLYglI+HMj2UkZZiAXfI8CTyakFsQ PUGh6G7cO2FCr2GM7voXBYdUN7DcOvylcglXJo1tmVAgzIPHXDPdkPqHapi8bA7v RsWxzvVEcqMVUfX45pPMCPZOZDlAAP48cbU2QS0ZuXqTFL52/fRtlBjEJcd2yog/ 5NFFeJRb2w0= -----END CERTIFICATE-----Generated at Thu Jan 8 23:59:48 2026 by rpki-client