This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.cer File: pJF9iFtnVnL8jvuJ1uFOI2dQUtk.cer (raw, json) Hash identifier: Cj2m7GkSLv2Z4xI3Du2ddFsPMR1XQyGCahaJCKjN/fE= Subject key identifier: A4:91:7D:88:5B:67:56:72:FC:8E:FB:89:D6:E1:4E:23:67:50:52:D9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7758D4C115269EDD2707C024ACC54908 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cb/13bc29-4ef3-421b-a30f-1344d02cfda8/1/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cb/13bc29-4ef3-421b-a30f-1344d02cfda8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:17:48 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 199195 IP: 2001:67c:c40::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:d4:c1:15:26:9e:dd:27:07:c0:24:ac:c5:49:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a4917d885b675672fc8efb89d6e14e23675052d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e3:78:71:32:49:2a:52:0d:75:78:06:d2:67: 02:58:97:d5:42:13:4f:11:9c:01:6f:a9:5a:74:c2: 08:11:d2:1a:ed:91:a9:ca:75:06:a7:bc:13:69:b4: 74:c7:ef:30:5e:37:e1:89:0f:55:51:d1:b6:2f:c4: 58:57:cf:27:e8:66:5f:4b:54:09:6a:07:eb:51:7a: eb:9c:6e:4b:ef:34:27:01:64:55:46:50:e2:5f:5c: 2d:ef:9b:25:13:25:20:fc:89:c6:3a:10:d5:cd:72: d4:18:f5:ac:49:9d:5b:3b:59:70:a0:53:b8:d0:0b: a6:b7:95:2f:db:c1:4c:ca:8a:ab:db:a9:6c:fb:b7: 4b:9f:37:76:df:b9:3a:df:19:65:e6:ce:4a:b1:39: 49:da:d2:0a:78:9b:47:f6:e0:75:99:f0:fd:71:bd: bf:64:19:ca:89:c6:ef:f8:e4:d5:a1:da:92:6f:85: f0:f1:e9:11:1d:ce:fc:02:d1:8c:35:6b:ad:e6:fa: e8:21:1d:8d:ab:8f:22:45:35:53:65:76:26:de:8c: 15:dc:13:96:8f:06:52:90:57:fc:b9:f8:fa:9f:5d: af:f4:42:40:05:0f:41:6c:61:81:99:e6:56:e6:48: 57:c0:70:df:d2:1d:df:38:76:ec:2b:99:4d:b1:61: 30:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:91:7D:88:5B:67:56:72:FC:8E:FB:89:D6:E1:4E:23:67:50:52:D9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/13bc29-4ef3-421b-a30f-1344d02cfda8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/13bc29-4ef3-421b-a30f-1344d02cfda8/1/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:c40::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 199195 Signature Algorithm: sha256WithRSAEncryption 19:d5:fb:c6:87:3b:1a:c7:72:af:95:a4:fc:ec:c2:2e:80:1e: 95:10:ac:0c:1f:78:aa:32:69:b3:a7:7a:3f:60:b1:4b:4d:dd: c1:31:1a:03:e8:b4:02:4d:45:a6:63:71:c2:aa:98:b3:95:59: c4:90:d5:9a:61:e1:45:56:a5:7d:37:63:11:b0:3c:43:d7:68: df:1b:ac:ed:9b:98:63:f0:fb:35:b3:58:00:94:92:0d:b2:df: 82:7d:42:11:26:01:af:2b:fd:76:6e:58:09:46:59:76:6b:d6: 69:ca:98:32:45:bb:4b:13:d4:6f:1d:d2:68:d6:e0:9c:e1:56: 25:2d:26:2e:a5:07:55:b7:b1:f8:56:4d:51:06:29:c9:94:38: 61:50:bf:fa:be:8e:07:6c:8d:09:67:fd:fc:ce:20:7e:e7:b3: 47:1a:31:2b:e4:0b:d4:b1:37:66:76:8c:77:2b:f7:66:ee:25: 0a:7e:dc:20:e0:4f:46:7d:32:50:b3:69:87:06:11:ea:e7:78: dc:3e:d1:e9:01:a1:df:55:f0:4a:f5:71:f0:cf:74:b8:3c:d7: 76:c1:ed:92:f0:5d:46:8d:9c:81:0f:b4:38:b9:a9:23:eb:47: 99:9a:39:ff:f7:7b:d3:2a:28:8c:8e:36:c3:fa:b8:dc:2e:12: 30:15:11:6f -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZt3WNTBFSae3ScHwCSsxUkIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNDkxN2Q4ODViNjc1NjcyZmM4ZWZiODlkNmUxNGUyMzY3NTA1MmQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtON4cTJJKlINdXgG0mcCWJfVQhNP EZwBb6ladMIIEdIa7ZGpynUGp7wTabR0x+8wXjfhiQ9VUdG2L8RYV88n6GZfS1QJ agfrUXrrnG5L7zQnAWRVRlDiX1wt75slEyUg/InGOhDVzXLUGPWsSZ1bO1lwoFO4 0Aumt5Uv28FMyoqr26ls+7dLnzd237k63xll5s5KsTlJ2tIKeJtH9uB1mfD9cb2/ ZBnKicbv+OTVodqSb4Xw8ekRHc78AtGMNWut5vroIR2Nq48iRTVTZXYm3owV3BOW jwZSkFf8ufj6n12v9EJABQ9BbGGBmeZW5khXwHDf0h3fOHbsK5lNsWEw3QIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFKSRfYhbZ1Zy/I77idbhTiNnUFLZMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NiLzEzYmMy OS00ZWYzLTQyMWItYTMwZi0xMzQ0ZDAyY2ZkYTgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2IvMTNiYzI5 LTRlZjMtNDIxYi1hMzBmLTEzNDRkMDJjZmRhOC8xL3BKRjlpRnRuVm5MOGp2dUox dUZPSTJkUVV0ay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAxAMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwMKGzANBgkqhkiG9w0BAQsFAAOCAQEAGdX7xoc7Gsdyr5Wk/OzCLoAelRCs DB94qjJps6d6P2CxS03dwTEaA+i0Ak1FpmNxwqqYs5VZxJDVmmHhRValfTdjEbA8 Q9do3xus7ZuYY/D7NbNYAJSSDbLfgn1CESYBryv9dm5YCUZZdmvWacqYMkW7SxPU bx3SaNbgnOFWJS0mLqUHVbex+FZNUQYpyZQ4YVC/+r6OB2yNCWf9/M4gfuezRxox K+QL1LE3ZnaMdyv3Zu4lCn7cIOBPRn0yULNphwYR6ud43D7R6QGh31XwSvVx8M90 uDzXdsHtkvBdRo2cgQ+0OLmpI+tHmZo5//d70yoojI42w/q43C4SMBURbw== -----END CERTIFICATE-----Generated at Sun Jan 25 23:53:58 2026 by rpki-client