This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.cer File: JFC_v3mPrqp9ajYFjQE-JNS7HZ0.cer (raw, json) Hash identifier: FryuSH6MVUI4UAVSEt+qJG2gBgDEiZDqHYTTTA1gcCE= Subject key identifier: 24:50:BF:BF:79:8F:AE:AA:7D:6A:36:05:8D:01:3E:24:D4:BB:1D:9D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7FF22C9E755DCF9801F8ADC8002F24E3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d4/19c76f-2f67-421c-84ae-dd549f3b83bf/1/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d4/19c76f-2f67-421c-84ae-dd549f3b83bf/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 18:22:16 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.75.60.0/22 IP: 2a05:4c40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:2c:9e:75:5d:cf:98:01:f8:ad:c8:00:2f:24:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 18:22:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2450bfbf798faeaa7d6a36058d013e24d4bb1d9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:fa:2b:b7:6d:1a:22:03:73:2f:06:f9:23:17: 03:47:b5:03:21:29:ab:fc:3e:f7:09:93:bc:f1:4c: 1d:14:73:2c:f7:6e:4b:71:f4:e5:a1:20:8a:d3:3d: cc:84:85:9c:f1:19:6b:6e:fa:b1:7a:5b:41:6f:1d: 10:86:ef:3b:1b:a2:5b:bb:88:2b:10:1b:72:8f:18: 91:38:ab:d3:d4:0a:9d:07:5a:ff:ba:6f:df:a6:53: ef:66:54:e4:c9:e3:0a:66:0d:82:79:5d:b1:8f:bd: fe:8e:db:35:6f:66:2e:3b:b3:b9:b4:39:8e:43:73: c0:71:5e:6f:f5:11:04:45:a8:c4:5e:23:78:29:19: 82:36:b3:89:62:48:58:28:dd:bf:e3:67:00:1b:1c: 2a:16:af:76:cd:3c:74:44:6f:bf:9f:9c:39:58:ec: cc:47:c7:84:6c:bc:59:ac:35:9e:f1:40:2e:b4:68: a8:c8:67:10:80:c3:40:2c:94:c3:ad:fb:ae:99:30: e7:9b:ca:c6:8d:ed:f3:ac:36:b2:ea:fe:d3:fd:6e: 2e:9a:2f:98:86:01:4c:44:04:81:68:fc:1f:62:3f: a7:55:85:27:c3:4c:7d:3b:1e:81:b3:cb:28:68:4f: 01:0e:97:41:7d:59:8d:fd:02:6a:b6:e7:f5:5d:8f: 03:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:50:BF:BF:79:8F:AE:AA:7D:6A:36:05:8D:01:3E:24:D4:BB:1D:9D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/19c76f-2f67-421c-84ae-dd549f3b83bf/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/19c76f-2f67-421c-84ae-dd549f3b83bf/1/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.75.60.0/22 IPv6: 2a05:4c40::/29 Signature Algorithm: sha256WithRSAEncryption 27:2c:18:3f:9b:63:af:e8:8a:4e:2d:3f:53:be:51:04:75:0a: 11:94:52:a4:2a:4c:e8:a6:30:fe:30:23:8e:2e:46:47:ce:8e: f0:b0:f7:c0:d1:23:ed:8b:8e:86:fd:3b:81:3b:8f:96:ef:4e: 08:51:da:0a:a2:d9:be:cd:33:5e:a3:9c:05:c5:2e:71:12:de: de:1a:75:2b:d2:af:60:41:b7:85:55:95:8d:12:f0:b1:46:26: 12:4a:f9:88:43:9b:22:98:07:60:cc:b3:ca:0e:d4:9a:4d:bc: 38:e7:59:bd:ac:e2:b0:19:51:1b:a9:74:fe:49:59:ed:7f:2b: ba:ee:01:f2:f7:7a:b1:6e:c2:85:ce:ec:99:e5:e8:ad:35:1d: 7a:58:92:a2:78:d9:6d:56:a8:8e:24:1e:1b:e0:53:7e:e0:2d: ce:aa:04:6f:2b:00:20:f5:8f:4f:c4:b9:ef:f6:16:81:ec:e0: 6f:79:ce:83:26:b4:0c:e1:11:e2:3d:79:d4:ac:88:2c:2c:99: 1e:73:f6:cd:0f:f6:45:9f:86:26:a0:70:87:69:69:e0:64:0a: ab:01:1a:17:70:45:cc:ca:d3:d7:f0:dd:bf:81:4d:7c:ae:a7: 68:b1:9e:e8:12:5a:d7:36:58:09:64:b4:de:d2:3a:0d:26:51: 28:a7:17:5f -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt/8iyedV3PmAH4rcgALyTjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTgyMjE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNDUwYmZiZjc5OGZhZWFhN2Q2YTM2MDU4ZDAxM2UyNGQ0YmIxZDlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvort20aIgNzLwb5IxcDR7UDISmr /D73CZO88UwdFHMs925LcfTloSCK0z3MhIWc8RlrbvqxeltBbx0Qhu87G6Jbu4gr EBtyjxiROKvT1AqdB1r/um/fplPvZlTkyeMKZg2CeV2xj73+jts1b2YuO7O5tDmO Q3PAcV5v9REERajEXiN4KRmCNrOJYkhYKN2/42cAGxwqFq92zTx0RG+/n5w5WOzM R8eEbLxZrDWe8UAutGioyGcQgMNALJTDrfuumTDnm8rGje3zrDay6v7T/W4umi+Y hgFMRASBaPwfYj+nVYUnw0x9Ox6Bs8soaE8BDpdBfVmN/QJqtuf1XY8D3wIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFCRQv795j66qfWo2BY0BPiTUux2dMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q0LzE5Yzc2 Zi0yZjY3LTQyMWMtODRhZS1kZDU0OWYzYjgzYmYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDQvMTljNzZm LTJmNjctNDIxYy04NGFlLWRkNTQ5ZjNiODNiZi8xL0pGQ192M21QcnFwOWFqWUZq UUUtSk5TN0haMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuUs8MA0EAgACMAcDBQMqBUxAMA0GCSqGSIb3 DQEBCwUAA4IBAQAnLBg/m2Ov6IpOLT9TvlEEdQoRlFKkKkzopjD+MCOOLkZHzo7w sPfA0SPti46G/TuBO4+W704IUdoKotm+zTNeo5wFxS5xEt7eGnUr0q9gQbeFVZWN EvCxRiYSSvmIQ5simAdgzLPKDtSaTbw451m9rOKwGVEbqXT+SVntfyu67gHy93qx bsKFzuyZ5eitNR16WJKieNltVqiOJB4b4FN+4C3OqgRvKwAg9Y9PxLnv9haB7OBv ec6DJrQM4RHiPXnUrIgsLJkec/bND/ZFn4YmoHCHaWngZAqrARoXcEXMytPX8N2/ gU18rqdosZ7oElrXNlgJZLTe0joNJlEopxdf -----END CERTIFICATE-----Generated at Sun Jan 25 06:00:00 2026 by rpki-client