This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JFcCfjoIe2X5aLU15BX2dDJpWHY.cer File: JFcCfjoIe2X5aLU15BX2dDJpWHY.cer (raw, json) Hash identifier: ysNs9yE5U1FfrIQJ+MfL6k0GXjoPnUBHcfqIgsiYJ14= Subject key identifier: 24:57:02:7E:3A:08:7B:65:F9:68:B5:35:E4:15:F6:74:32:69:58:76 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA4C7038634C3DB62125964FA45EC1E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:19:15 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 20792 IP: 185.95.192.0/22 IP: 213.216.0.0/19 IP: 2a02:13c0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:c7:03:86:34:c3:db:62:12:59:64:fa:45:ec:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2457027e3a087b65f968b535e415f67432695876 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:da:55:63:cc:ab:94:e8:d0:a2:b9:f3:66:cf: c4:f1:3e:21:4e:5b:12:eb:c2:74:bc:a6:78:77:d8: 3a:1b:26:52:af:d0:af:8c:32:af:aa:0c:5f:e7:47: 36:c1:5e:91:ab:fa:56:91:a4:ed:39:e7:5d:9c:4e: 2f:f2:12:9a:f6:40:83:c2:2a:ac:d5:2a:50:b2:81: 51:12:d9:42:fd:ae:dd:d9:7f:72:c2:08:bf:0e:2d: d7:42:58:db:25:01:c1:fc:2a:09:82:d5:48:97:20: cf:ca:e9:5c:df:a5:a2:01:56:7d:b8:30:36:d9:93: 6d:f5:06:45:92:15:ec:45:0a:63:ba:00:b5:2f:f1: 7c:77:cb:95:b5:e0:05:88:28:c4:2d:35:2c:62:59: db:cd:94:06:6e:6f:9f:18:bb:56:60:68:29:8a:d8: fa:aa:fc:3f:7f:08:76:19:b2:1a:f2:39:27:6a:43: da:04:e5:16:30:7b:50:12:fb:3a:c2:0c:38:27:ae: 59:82:b9:38:05:1b:02:fc:20:ee:bd:80:de:b9:c7: 2f:80:4f:eb:4a:58:d7:00:fb:0c:ff:da:a8:80:17: 96:ea:a6:92:ae:c3:fe:32:83:69:fb:81:1a:d6:e7: b6:3e:63:6f:8d:7f:26:a3:a2:1f:1b:c3:1a:57:61: e0:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:57:02:7E:3A:08:7B:65:F9:68:B5:35:E4:15:F6:74:32:69:58:76 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.95.192.0/22 213.216.0.0/19 IPv6: 2a02:13c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 20792 Signature Algorithm: sha256WithRSAEncryption 7b:d9:e7:14:b8:dd:55:c8:bc:74:90:99:e9:89:4f:5d:a1:96: 82:a4:4a:86:8a:7b:8c:39:52:32:fc:87:14:8f:74:67:5d:5c: e1:07:15:a3:d5:f0:d5:11:26:de:06:c0:21:e3:2d:67:03:d7: 29:bb:25:22:f3:cb:48:0a:d9:77:be:85:6e:87:e1:e5:7b:9f: b1:c2:6f:8a:78:3b:62:a8:52:d1:0b:90:23:3e:d3:44:c6:86: 97:1b:a2:be:94:9d:93:31:c8:39:39:7a:26:05:8b:7c:f6:1e: 65:85:7f:89:a6:df:d0:6d:b2:a1:3a:8b:88:c0:22:2b:e9:e6: 44:4c:60:f8:6d:38:1e:ab:3a:e3:fc:a5:94:2b:7b:a4:cc:55: 25:75:fb:e6:1a:dc:63:53:ac:8c:3d:1a:a2:dd:42:ea:3c:f2: 46:44:d6:db:ed:f5:ae:00:45:69:27:30:1e:04:73:25:a9:71: b1:21:ac:c8:31:f2:44:5e:ad:92:25:cd:87:83:4a:3d:3a:7b: 53:2d:0d:95:b4:af:cc:78:22:11:af:1e:e7:c0:69:47:22:85: 47:24:5e:60:99:a2:dc:e4:1d:3e:33:bc:92:c1:42:34:8a:49: 56:40:68:4f:18:85:1d:aa:a3:58:e3:d8:8e:a5:89:52:0b:5d: d5:5e:fa:91 -----BEGIN CERTIFICATE----- MIIFqDCCBJCgAwIBAgISAZt7pMcDhjTD22ISWWT6ReweMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNDU3MDI3ZTNhMDg3YjY1Zjk2OGI1MzVlNDE1ZjY3NDMyNjk1ODc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldpVY8yrlOjQornzZs/E8T4hTlsS 68J0vKZ4d9g6GyZSr9CvjDKvqgxf50c2wV6Rq/pWkaTtOeddnE4v8hKa9kCDwiqs 1SpQsoFREtlC/a7d2X9ywgi/Di3XQljbJQHB/CoJgtVIlyDPyulc36WiAVZ9uDA2 2ZNt9QZFkhXsRQpjugC1L/F8d8uVteAFiCjELTUsYlnbzZQGbm+fGLtWYGgpitj6 qvw/fwh2GbIa8jknakPaBOUWMHtQEvs6wgw4J65Zgrk4BRsC/CDuvYDeuccvgE/r SljXAPsM/9qogBeW6qaSrsP+MoNp+4Ea1ue2PmNvjX8mo6IfG8MaV2HgqQIDAQAB o4ICtDCCArAwHQYDVR0OBBYEFCRXAn46CHtl+Wi1NeQV9nQyaVh2MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RjLzk1ZjMy MC1jN2QzLTQxZGQtYjEyNS1iNzlkMDhmYTE3NDcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGMvOTVmMzIw LWM3ZDMtNDFkZC1iMTI1LWI3OWQwOGZhMTc0Ny8xL0pGY0Nmam9JZTJYNWFMVTE1 QlgyZERKcFdIWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCuV/AAwQF1dgAMA0EAgACMAcDBQAqAhPAMBkG CCsGAQUFBwEIAQH/BAowCKAGMAQCAlE4MA0GCSqGSIb3DQEBCwUAA4IBAQB72ecU uN1VyLx0kJnpiU9doZaCpEqGinuMOVIy/IcUj3RnXVzhBxWj1fDVESbeBsAh4y1n A9cpuyUi88tICtl3voVuh+Hle5+xwm+KeDtiqFLRC5AjPtNExoaXG6K+lJ2TMcg5 OXomBYt89h5lhX+Jpt/QbbKhOouIwCIr6eZETGD4bTgeqzrj/KWUK3ukzFUldfvm GtxjU6yMPRqi3ULqPPJGRNbb7fWuAEVpJzAeBHMlqXGxIazIMfJEXq2SJc2Hg0o9 OntTLQ2VtK/MeCIRrx7nwGlHIoVHJF5gmaLc5B0+M7ySwUI0iklWQGhPGIUdqqNY 49iOpYlSC13VXvqR -----END CERTIFICATE-----Generated at Sun Jan 25 19:22:21 2026 by rpki-client