This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JFf3O_AvdUseYxfumk8-iGN_Gqc.cer File: JFf3O_AvdUseYxfumk8-iGN_Gqc.cer (raw, json) Hash identifier: 2bP7YY2GDGaQda3OLxT6EJag0HFgXESGdZ5vsMwSG6A= Subject key identifier: 24:57:F7:3B:F0:2F:75:4B:1E:63:17:EE:9A:4F:3E:88:63:7F:1A:A7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7FF2BB9C69F3DB5171BADC2770A3D3FA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 18:22:52 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 194.117.78.0/24 IP: 203.56.112.0/22 IP: 2a14:3e40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:bb:9c:69:f3:db:51:71:ba:dc:27:70:a3:d3:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 18:22:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2457f73bf02f754b1e6317ee9a4f3e88637f1aa7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:0f:f2:47:eb:61:14:63:fa:80:13:ec:99:6e: 46:79:56:d7:6e:9e:eb:2f:e0:e1:20:e3:c5:16:94: e7:e4:c6:74:ed:bb:2d:a3:0f:c3:32:46:90:98:fc: 64:c6:3d:77:33:bf:4f:5c:48:44:f9:54:fd:24:a7: ea:ee:9d:77:a5:00:4c:cd:c6:93:b3:b9:d7:f9:0f: 61:cb:97:1b:f6:13:69:ff:2f:44:d5:5e:d1:3c:34: e6:22:d2:6a:c1:53:d2:4a:e5:07:5e:fe:d4:d8:a2: 94:3b:ef:46:4b:6b:63:0b:37:42:c8:8e:3f:07:c9: d8:78:85:80:ee:f5:79:f2:cc:f9:fc:21:03:86:55: bb:34:ca:4b:21:83:fd:fa:b0:0e:c6:ef:b1:ed:19: 0a:99:1f:5f:55:6d:9a:ea:e6:97:a5:a1:1f:00:f2: 53:8a:7b:f0:47:14:20:0a:3e:ed:4b:4a:de:e6:b4: 0b:90:90:50:4a:bc:3a:cb:47:70:8d:78:dc:da:a4: 3e:72:0f:19:a9:02:26:92:4e:92:f9:a6:9b:7d:87: 1f:1a:10:4e:5e:03:57:3b:f5:17:8f:f9:d2:1d:d3: d6:c9:b3:78:d5:0e:5c:cb:0a:5f:67:82:69:4a:4c: a5:1b:6c:48:ae:77:2e:e5:52:98:c3:a8:d5:11:43: 48:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:57:F7:3B:F0:2F:75:4B:1E:63:17:EE:9A:4F:3E:88:63:7F:1A:A7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.117.78.0/24 203.56.112.0/22 IPv6: 2a14:3e40::/29 Signature Algorithm: sha256WithRSAEncryption 34:53:43:e1:af:cb:90:4b:d1:7f:d5:5d:48:32:b4:8a:72:af: 53:b1:7f:a9:26:41:e0:6d:f0:32:9d:ab:5f:2a:60:ea:21:07: 2f:ed:59:7f:64:ff:d9:2f:de:38:ff:90:98:59:31:49:8b:6b: b3:60:bc:f4:fc:57:4f:c9:5b:06:94:04:05:f9:ff:c7:5d:24: 9d:16:27:be:d1:c9:b0:91:12:ce:66:b2:cc:a3:bd:bb:63:c2: 89:3d:9a:cf:7a:7f:6c:a1:13:f1:ab:aa:e8:18:53:1f:5b:5a: b7:4b:28:67:ef:c8:b8:5a:d1:ab:ac:f4:1c:6a:72:51:7d:be: 9b:31:d1:b5:e2:a3:df:05:23:fd:2d:fd:ca:a8:0d:d7:8a:3a: 7b:c1:59:04:24:78:2b:b9:7e:d7:a5:7e:41:df:94:71:02:b5: 8d:b0:a8:56:78:7d:a7:01:6e:f5:d6:03:86:42:ba:d9:61:7f: 79:3a:0d:a9:85:b8:c5:8b:23:ab:25:ed:63:de:82:0d:f8:f7: 75:17:d9:85:77:c4:f2:a7:a8:4d:0e:fe:17:e3:16:f0:a6:5c: d8:9b:dd:ef:3a:f0:dc:5f:d1:59:9e:08:8a:11:d3:e6:70:f5: 31:b6:b9:75:4b:cf:aa:65:11:1f:73:75:53:d7:89:e6:86:40: 87:08:86:8e -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgISAZt/8rucafPbUXG63Cdwo9P6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTgyMjUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNDU3ZjczYmYwMmY3NTRiMWU2MzE3ZWU5YTRmM2U4ODYzN2YxYWE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQ/yR+thFGP6gBPsmW5GeVbXbp7r L+DhIOPFFpTn5MZ07bstow/DMkaQmPxkxj13M79PXEhE+VT9JKfq7p13pQBMzcaT s7nX+Q9hy5cb9hNp/y9E1V7RPDTmItJqwVPSSuUHXv7U2KKUO+9GS2tjCzdCyI4/ B8nYeIWA7vV58sz5/CEDhlW7NMpLIYP9+rAOxu+x7RkKmR9fVW2a6uaXpaEfAPJT invwRxQgCj7tS0re5rQLkJBQSrw6y0dwjXjc2qQ+cg8ZqQImkk6S+aabfYcfGhBO XgNXO/UXj/nSHdPWybN41Q5cywpfZ4JpSkylG2xIrncu5VKYw6jVEUNIKQIDAQAB o4ICmTCCApUwHQYDVR0OBBYEFCRX9zvwL3VLHmMX7ppPPohjfxqnMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBhLzBiYTU5 Yi1mZjRmLTQzOGMtODQxNy01ZmEzODA3NDk0OTcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGEvMGJhNTli LWZmNGYtNDM4Yy04NDE3LTVmYTM4MDc0OTQ5Ny8xL0pGZjNPX0F2ZFVzZVl4ZnVt azgtaUdOX0dxYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQAwnVOAwQCyzhwMA0EAgACMAcDBQMqFD5AMA0G CSqGSIb3DQEBCwUAA4IBAQA0U0Phr8uQS9F/1V1IMrSKcq9TsX+pJkHgbfAynatf KmDqIQcv7Vl/ZP/ZL944/5CYWTFJi2uzYLz0/FdPyVsGlAQF+f/HXSSdFie+0cmw kRLOZrLMo727Y8KJPZrPen9soRPxq6roGFMfW1q3Syhn78i4WtGrrPQcanJRfb6b MdG14qPfBSP9Lf3KqA3Xijp7wVkEJHgruX7XpX5B35RxArWNsKhWeH2nAW711gOG QrrZYX95Og2phbjFiyOrJe1j3oIN+Pd1F9mFd8Typ6hNDv4X4xbwplzYm93vOvDc X9FZngiKEdPmcPUxtrl1S8+qZREfc3VT14nmhkCHCIaO -----END CERTIFICATE-----Generated at Mon Jan 26 05:36:00 2026 by rpki-client