This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fJEpqtsgM1TRX_VqJ-jbra-NBwU.cer File: fJEpqtsgM1TRX_VqJ-jbra-NBwU.cer (raw, json) Hash identifier: AXgccxFFpIt8+pShpJmOT79T94k21enPGEiNUPpl3to= Subject key identifier: 7C:91:29:AA:DB:20:33:54:D1:5F:F5:6A:27:E8:DB:AD:AF:8D:07:05 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F84BDF488C5458AF0571A7FDE42DCE2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7f/6e4fed-66c8-4d24-aa66-f2c4c9ca1556/1/fJEpqtsgM1TRX_VqJ-jbra-NBwU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7f/6e4fed-66c8-4d24-aa66-f2c4c9ca1556/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:22:44 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 31627 IP: 193.16.243.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:bd:f4:88:c5:45:8a:f0:57:1a:7f:de:42:dc:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:22:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7c9129aadb203354d15ff56a27e8dbadaf8d0705 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b6:4a:78:9a:14:77:b8:19:53:cb:fc:20:fa: 51:6f:dc:5b:60:30:0d:de:df:d9:a3:25:b9:60:14: 42:1b:2b:36:11:d7:ff:14:5f:8b:8b:70:20:f3:e1: c0:88:66:10:19:ee:6c:49:7c:c3:8a:e3:00:65:0a: 04:6a:b0:b9:ee:6d:f1:e8:cc:62:fd:fe:75:1f:38: 7d:37:bf:cf:b6:2f:45:05:ec:3e:3e:6f:37:1c:b1: 92:2b:ab:b0:aa:5c:bb:93:a6:55:31:98:86:00:58: 97:a7:00:07:6f:92:9b:70:b4:56:48:1e:ea:3e:8b: 8a:7b:7b:42:51:43:13:ed:0c:53:22:f7:61:c7:00: 78:03:d8:d8:77:0b:2b:76:cc:62:60:9d:f2:ac:a2: 79:78:bd:97:0b:35:50:6f:fd:8b:0a:43:d2:e0:ff: 2c:f2:ca:a5:16:52:13:d0:58:4f:db:20:af:f4:8e: a2:54:39:4c:e9:ab:5a:60:4d:6b:6a:ad:27:4c:02: 43:26:cd:19:28:6c:6a:57:1b:1d:8f:1a:28:07:d4: 0d:c1:71:02:17:e8:c2:ce:26:e9:d2:1b:ac:88:de: 5a:e7:3f:fa:23:e4:76:49:e6:74:a1:04:3a:93:1e: f0:26:d1:be:2c:60:1b:37:09:0f:3b:82:01:6d:c6: b5:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:91:29:AA:DB:20:33:54:D1:5F:F5:6A:27:E8:DB:AD:AF:8D:07:05 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6e4fed-66c8-4d24-aa66-f2c4c9ca1556/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6e4fed-66c8-4d24-aa66-f2c4c9ca1556/1/fJEpqtsgM1TRX_VqJ-jbra-NBwU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.16.243.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 31627 Signature Algorithm: sha256WithRSAEncryption a2:32:49:3f:55:97:f5:be:f1:99:ce:b4:7b:4c:89:d0:b2:fa: 28:d9:15:09:5c:56:d0:9f:20:ff:b0:42:1a:56:44:b3:39:30: ab:78:74:96:9a:b7:21:e1:5f:1b:4d:cb:a8:01:bf:4c:bd:e2: 08:ed:11:6d:85:09:19:01:8b:c2:36:44:88:50:bb:0a:b7:7a: 2c:ad:09:36:9b:bc:ff:19:50:31:18:b6:8d:21:25:5e:28:32: 81:fb:1b:fc:55:e7:13:7d:3c:4b:2f:51:ff:1a:b4:70:48:a9: 10:14:9f:a5:97:0f:d9:12:81:86:95:9f:ec:d8:b3:3b:34:2c: cf:5b:2b:f4:a6:05:2d:dc:1c:05:10:45:5b:1e:0e:03:bd:77: 36:37:53:86:34:21:9a:50:55:18:d2:e0:7d:e0:2b:bf:fa:54: 70:bd:48:bc:49:2b:8a:d0:fd:db:cb:77:fa:dc:1f:7b:ab:30: fc:87:c3:70:be:dc:b2:bc:c6:20:f0:3a:51:b2:d0:54:6f:3b: 4f:e3:98:78:d7:21:ec:5c:aa:90:c2:11:17:45:fe:61:af:b6: d8:63:b0:de:6a:a2:56:e9:91:b9:16:b9:42:4a:e0:7d:9c:66: bc:2f:2f:7a:9e:1f:fa:9a:9c:1d:89:f6:c6:93:06:85:0a:06: e7:e5:da:86 -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISAZt/hL30iMVFivBXGn/eQtziMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMjQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YzkxMjlhYWRiMjAzMzU0ZDE1ZmY1NmEyN2U4ZGJhZGFmOGQwNzA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrZKeJoUd7gZU8v8IPpRb9xbYDAN 3t/ZoyW5YBRCGys2Edf/FF+Li3Ag8+HAiGYQGe5sSXzDiuMAZQoEarC57m3x6Mxi /f51Hzh9N7/Pti9FBew+Pm83HLGSK6uwqly7k6ZVMZiGAFiXpwAHb5KbcLRWSB7q PouKe3tCUUMT7QxTIvdhxwB4A9jYdwsrdsxiYJ3yrKJ5eL2XCzVQb/2LCkPS4P8s 8sqlFlIT0FhP2yCv9I6iVDlM6ataYE1raq0nTAJDJs0ZKGxqVxsdjxooB9QNwXEC F+jCzibp0husiN5a5z/6I+R2SeZ0oQQ6kx7wJtG+LGAbNwkPO4IBbca1tQIDAQAB o4ICnzCCApswHQYDVR0OBBYEFHyRKarbIDNU0V/1aifo262vjQcFMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdmLzZlNGZl ZC02NmM4LTRkMjQtYWE2Ni1mMmM0YzljYTE1NTYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2YvNmU0ZmVk LTY2YzgtNGQyNC1hYTY2LWYyYzRjOWNhMTU1Ni8xL2ZKRXBxdHNnTTFUUlhfVnFK LWpicmEtTkJ3VS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwRDzMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQC AnuLMA0GCSqGSIb3DQEBCwUAA4IBAQCiMkk/VZf1vvGZzrR7TInQsvoo2RUJXFbQ nyD/sEIaVkSzOTCreHSWmrch4V8bTcuoAb9MveII7RFthQkZAYvCNkSIULsKt3os rQk2m7z/GVAxGLaNISVeKDKB+xv8VecTfTxLL1H/GrRwSKkQFJ+llw/ZEoGGlZ/s 2LM7NCzPWyv0pgUt3BwFEEVbHg4DvXc2N1OGNCGaUFUY0uB94Cu/+lRwvUi8SSuK 0P3by3f63B97qzD8h8NwvtyyvMYg8DpRstBUbztP45h41yHsXKqQwhEXRf5hr7bY Y7DeaqJW6ZG5FrlCSuB9nGa8Ly96nh/6mpwdifbGkwaFCgbn5dqG -----END CERTIFICATE-----Generated at Fri Jan 9 08:01:26 2026 by rpki-client