This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jfPflxqnyyXft8tVspyHvL4yCCk.cer File: jfPflxqnyyXft8tVspyHvL4yCCk.cer (raw, json) Hash identifier: jRQyom7ZXaVT8mim7drAlNnHSavx/ibY2/0rJJ0zFJs= Subject key identifier: 8D:F3:DF:97:1A:A7:CB:25:DF:B7:CB:55:B2:9C:87:BC:BE:32:08:29 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA52C98A137C7EB57BDC53C84757A3F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:18:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 199155 IP: 193.236.32.0 -- 193.236.95.255 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 07:52:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:2c:98:a1:37:c7:eb:57:bd:c5:3c:84:75:7a:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8df3df971aa7cb25dfb7cb55b29c87bcbe320829 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c8:6b:12:13:ca:57:74:a2:c8:b2:5f:30:77: ee:9e:8e:f1:a5:e3:84:4e:0b:69:38:61:bd:b1:64: ce:ae:d7:23:6f:c1:2a:a7:24:16:f2:28:eb:0b:da: 1f:75:47:9c:23:5b:ed:33:53:6c:73:02:5a:81:11: 80:6d:cb:b3:db:b0:6b:a0:65:cd:a8:0e:1f:ac:ea: f6:d9:de:70:38:3f:2b:86:09:2e:c6:df:09:df:f9: d5:05:13:aa:af:dc:3c:cb:71:57:7a:aa:fc:9b:0c: d3:52:82:50:11:68:97:bf:31:49:64:1d:cf:12:af: bf:82:25:b3:f9:06:7d:21:b9:3b:a2:24:1a:7d:d5: ce:df:d5:21:26:11:d9:02:3b:f0:46:91:7a:e7:98: 77:74:40:2c:3c:6f:17:b5:34:66:12:ee:8f:0f:24: 5a:7d:59:a0:a6:e8:25:e0:6a:b0:5b:60:9a:5c:aa: 49:c9:2b:ea:97:3b:4f:84:2b:4c:2d:d3:92:1c:7d: 52:8b:8f:27:eb:25:aa:88:67:f0:34:20:b9:7d:a7: 3e:18:19:d2:51:60:37:d4:64:0e:4e:40:2d:a5:f1: 72:5d:28:d4:09:a0:dc:fa:da:de:51:f0:a8:bd:59: 97:b8:5b:2b:10:e1:2e:26:c3:32:0a:e7:87:d0:6c: 7f:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:F3:DF:97:1A:A7:CB:25:DF:B7:CB:55:B2:9C:87:BC:BE:32:08:29 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.236.32.0-193.236.95.255 sbgp-autonomousSysNum: critical Autonomous System Numbers: 199155 Signature Algorithm: sha256WithRSAEncryption 1e:a2:19:33:7e:96:7c:c3:34:fa:44:1f:0f:0b:35:5d:b7:08: 5f:83:2f:8d:ad:cd:70:10:7d:c5:27:19:01:4d:5c:6d:d0:5a: 77:13:8b:dd:21:6c:50:3c:c6:9d:a3:bd:55:8f:f9:86:5e:ac: dd:e7:56:50:72:82:3f:9d:6d:b3:2e:45:e6:a9:1c:bd:27:2c: b3:5e:4e:f2:1b:dc:34:a3:63:96:d6:22:c5:c0:c1:89:b5:a1: 9c:f7:ca:d6:47:29:57:82:97:89:ed:ef:0c:58:9e:6b:59:23: 5b:b3:0e:b1:58:e6:32:98:8a:97:b8:9d:e5:99:01:6a:0d:02: 19:09:3c:29:83:fd:d4:64:20:fc:78:30:79:81:37:f2:f3:55: 34:ef:59:09:b2:7f:a6:d1:74:96:b8:d2:31:ea:86:c5:f3:71: d0:9f:16:8d:39:84:aa:82:31:72:c4:44:53:2e:8a:86:01:96: eb:7c:30:e7:b2:37:94:e9:8a:19:95:14:2f:a6:72:ac:24:6f: 61:49:ef:a2:98:27:db:7f:49:90:c7:45:9b:fb:54:d2:88:53: b1:aa:74:e9:f0:41:ac:0f:24:c3:65:6f:fc:86:2f:88:eb:7c: 0e:45:6f:4b:83:9c:ba:13:d6:fb:fc:ec:32:1b:21:0d:a8:3f: 75:1e:d1:76 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgISAZt+pSyYoTfH61e9xTyEdXo/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZGYzZGY5NzFhYTdjYjI1ZGZiN2NiNTViMjljODdiY2JlMzIwODI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtshrEhPKV3SiyLJfMHfuno7xpeOE TgtpOGG9sWTOrtcjb8EqpyQW8ijrC9ofdUecI1vtM1NscwJagRGAbcuz27BroGXN qA4frOr22d5wOD8rhgkuxt8J3/nVBROqr9w8y3FXeqr8mwzTUoJQEWiXvzFJZB3P Eq+/giWz+QZ9Ibk7oiQafdXO39UhJhHZAjvwRpF655h3dEAsPG8XtTRmEu6PDyRa fVmgpugl4GqwW2CaXKpJySvqlztPhCtMLdOSHH1Si48n6yWqiGfwNCC5fac+GBnS UWA31GQOTkAtpfFyXSjUCaDc+treUfCovVmXuFsrEOEuJsMyCueH0Gx/iwIDAQAB o4ICqDCCAqQwHQYDVR0OBBYEFI3z35cap8sl37fLVbKch7y+MggpMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RlL2MyYWQ0 NC1mZTdkLTQ2ZDktOTEzZS1jNzk0YjVmODc4MDQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGUvYzJhZDQ0 LWZlN2QtNDZkOS05MTNlLWM3OTRiNWY4NzgwNC8xL2pmUGZseHFueXlYZnQ4dFZz cHlIdkw0eUNDay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCcGCCsGAQUF BwEHAQH/BBgwFjAUBAIAATAOMAwDBAXB7CADBAXB7EAwGgYIKwYBBQUHAQgBAf8E CzAJoAcwBQIDAwnzMA0GCSqGSIb3DQEBCwUAA4IBAQAeohkzfpZ8wzT6RB8PCzVd twhfgy+Nrc1wEH3FJxkBTVxt0Fp3E4vdIWxQPMado71Vj/mGXqzd51ZQcoI/nW2z LkXmqRy9JyyzXk7yG9w0o2OW1iLFwMGJtaGc98rWRylXgpeJ7e8MWJ5rWSNbsw6x WOYymIqXuJ3lmQFqDQIZCTwpg/3UZCD8eDB5gTfy81U071kJsn+m0XSWuNIx6obF 83HQnxaNOYSqgjFyxERTLoqGAZbrfDDnsjeU6YoZlRQvpnKsJG9hSe+imCfbf0mQ x0Wb+1TSiFOxqnTp8EGsDyTDZW/8hi+I63wORW9Lg5y6E9b7/OwyGyENqD91HtF2 -----END CERTIFICATE-----Generated at Sun Jan 11 14:34:07 2026 by rpki-client