This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7JJpGF9j3DNWA39xPOigkJ_wciU.cer File: 7JJpGF9j3DNWA39xPOigkJ_wciU.cer (raw, json) Hash identifier: LSofWTfs+aSbdXjiuAwqsA/iMJTGKeZRMMXTP6Dt80o= Subject key identifier: EC:92:69:18:5F:63:DC:33:56:03:7F:71:3C:E8:A0:90:9F:F0:72:25 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C12070BB024F136D5D534219FF8DD18 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/75/d50905-007a-4074-9a05-a6c8bd8742a4/1/7JJpGF9j3DNWA39xPOigkJ_wciU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/75/d50905-007a-4074-9a05-a6c8bd8742a4/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:18:34 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 195.144.20.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:07:0b:b0:24:f1:36:d5:d5:34:21:9f:f8:dd:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ec9269185f63dc3356037f713ce8a0909ff07225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ce:bd:01:ec:a3:ae:a4:01:2b:cb:48:c8:21: df:cd:0e:47:b5:7c:3c:e7:27:e5:07:a9:41:6c:61: a6:e0:04:12:48:01:bc:a5:42:45:18:a6:84:17:52: 2e:8b:7e:45:df:5e:83:16:19:2c:cc:d0:77:98:c5: 49:a3:0a:31:a6:35:60:7a:ef:63:23:29:8d:61:62: 29:71:42:aa:86:24:27:42:ed:3b:04:57:1a:10:d4: da:56:ba:9c:2e:b4:4f:c1:c5:0e:82:98:c6:11:43: d8:d8:4b:70:ec:99:08:0b:f2:be:a5:d0:7c:8c:12: 99:c4:15:52:a4:5e:93:6b:83:d4:ca:1a:30:fb:30: 92:f2:95:4d:51:43:79:fa:58:64:ad:27:c4:0a:a8: f3:57:cc:d4:17:34:1c:58:ac:69:df:71:4a:fe:fa: 4b:29:ab:0c:4c:1a:f7:59:3e:f3:74:a7:ea:2f:2e: 27:45:ee:f4:8d:69:d7:b5:22:20:eb:89:6f:85:31: ec:06:32:9b:31:46:c9:2e:ec:11:0a:4b:96:d2:5f: 12:88:5c:d9:dc:09:84:4d:11:e0:b7:84:4e:e3:ea: 45:75:1d:8a:e1:0b:da:e6:27:90:ec:ca:bb:5d:1c: d2:43:cd:02:d5:40:57:2e:e3:11:b2:c9:48:1f:21: 37:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:92:69:18:5F:63:DC:33:56:03:7F:71:3C:E8:A0:90:9F:F0:72:25 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d50905-007a-4074-9a05-a6c8bd8742a4/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d50905-007a-4074-9a05-a6c8bd8742a4/1/7JJpGF9j3DNWA39xPOigkJ_wciU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.144.20.0/24 Signature Algorithm: sha256WithRSAEncryption 88:8c:93:fb:09:50:4c:74:63:5c:26:5c:47:44:e5:42:bf:bd: 36:60:92:47:35:32:5e:4a:5f:91:2f:08:1a:48:15:51:fd:b2: 23:1c:06:5e:be:b9:5c:9b:45:f1:05:c6:40:8c:e7:a4:1f:27: 21:e7:37:78:bc:d8:9a:2b:f9:d8:83:f7:3e:a6:70:d4:f8:70: f1:6b:e3:e9:c9:c0:80:ae:26:1c:ce:71:c7:46:5d:33:3a:6f: b4:6b:be:7c:68:46:93:75:32:d9:ae:c0:cb:d1:69:ed:4c:b7: db:27:fd:ed:83:b0:af:e1:01:19:97:c7:a4:a9:c8:0c:98:0c: 9e:8d:2b:96:32:4f:ec:f3:81:57:7b:6f:82:9c:30:43:de:65: 40:a3:f4:ae:ae:d6:e1:f2:c8:c2:f9:1a:5b:30:90:fc:23:af: 83:be:0d:1f:fa:88:a6:dd:4e:79:aa:93:f4:e3:85:29:15:59: a0:77:76:4e:9f:ed:65:92:9d:72:e5:95:ba:d6:29:da:1d:95: 8b:ff:46:e2:5b:37:bf:72:a0:ab:b1:57:17:e0:66:88:9a:64: 04:00:39:ac:4b:7c:ca:54:4e:ef:5e:6c:18:30:60:0b:d4:f1: aa:91:46:d8:a9:52:71:1b:02:e2:be:a4:71:a0:76:8d:e3:b9: 0a:7e:5b:dc -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt8EgcLsCTxNtXVNCGf+N0YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYzkyNjkxODVmNjNkYzMzNTYwMzdmNzEzY2U4YTA5MDlmZjA3MjI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnc69AeyjrqQBK8tIyCHfzQ5HtXw8 5yflB6lBbGGm4AQSSAG8pUJFGKaEF1Iui35F316DFhkszNB3mMVJowoxpjVgeu9j IymNYWIpcUKqhiQnQu07BFcaENTaVrqcLrRPwcUOgpjGEUPY2Etw7JkIC/K+pdB8 jBKZxBVSpF6Ta4PUyhow+zCS8pVNUUN5+lhkrSfECqjzV8zUFzQcWKxp33FK/vpL KasMTBr3WT7zdKfqLy4nRe70jWnXtSIg64lvhTHsBjKbMUbJLuwRCkuW0l8SiFzZ 3AmETRHgt4RO4+pFdR2K4Qva5ieQ7Mq7XRzSQ80C1UBXLuMRsslIHyE3cwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFOySaRhfY9wzVgN/cTzooJCf8HIlMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc1L2Q1MDkw NS0wMDdhLTQwNzQtOWEwNS1hNmM4YmQ4NzQyYTQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzUvZDUwOTA1 LTAwN2EtNDA3NC05YTA1LWE2YzhiZDg3NDJhNC8xLzdKSnBHRjlqM0ROV0EzOXhQ T2lna0pfd2NpVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAw5AUMA0GCSqGSIb3DQEBCwUAA4IBAQCIjJP7 CVBMdGNcJlxHROVCv702YJJHNTJeSl+RLwgaSBVR/bIjHAZevrlcm0XxBcZAjOek Hych5zd4vNiaK/nYg/c+pnDU+HDxa+PpycCAriYcznHHRl0zOm+0a758aEaTdTLZ rsDL0WntTLfbJ/3tg7Cv4QEZl8ekqcgMmAyejSuWMk/s84FXe2+CnDBD3mVAo/Su rtbh8sjC+RpbMJD8I6+Dvg0f+oim3U55qpP044UpFVmgd3ZOn+1lkp1y5ZW61ina HZWL/0biWze/cqCrsVcX4GaImmQEADmsS3zKVE7vXmwYMGAL1PGqkUbYqVJxGwLi vqRxoHaN47kKflvc -----END CERTIFICATE-----Generated at Mon Jan 26 04:00:25 2026 by rpki-client