This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer File: JFXX_uSkmeyvEdLT2o44neMjQS8.cer (raw, json) Hash identifier: eL2CYPyv7N76zDIBnYDSo8ku6FqPTYykZdgAWHYIfk8= Subject key identifier: 24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B783514B3DE53D6DF38BAB9D0C6479D63 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:23 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 41956 IP: 45.94.52.0/22 IP: 147.78.44.0/22 IP: 185.6.148.0/22 IP: 212.30.32.0/19 IP: 2a05:9740::/29 IP: 2a09:1d40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:14:b3:de:53:d6:df:38:ba:b9:d0:c6:47:9d:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2455d7fee4a499ecaf11d2d3da8e389de323412f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:59:92:95:8a:a2:c6:57:10:66:70:39:0b:0a: b1:ab:90:f6:ff:cb:4f:cf:b4:e1:ec:01:3d:04:aa: 8c:8a:f8:a8:75:a1:b3:f1:c8:11:41:37:61:f3:d8: 0c:f4:ef:dc:d3:95:8c:49:04:58:4a:e9:2e:fa:c5: bb:93:de:79:9b:b1:13:2d:f2:16:a3:bf:34:14:ad: c8:e8:88:54:e7:c7:73:f2:0b:68:b0:da:50:1a:5e: 6b:d0:03:41:d8:80:a8:7c:44:b4:f3:9e:75:45:75: 1e:f4:08:f9:ec:83:3a:d2:d4:32:8d:85:27:5c:ee: 4b:d2:8d:26:60:08:b4:f1:79:41:97:ab:9f:c1:9c: fd:6f:4d:6f:58:4e:57:a5:5f:5e:d6:ce:3a:03:e7: 83:2f:46:a2:8a:33:ed:61:b4:d1:e7:ae:d6:f1:69: 5b:60:0f:60:9c:20:bc:da:37:de:08:26:06:ad:93: 56:fa:cd:be:93:de:cb:2c:d9:68:3a:bc:82:b0:da: dd:91:52:88:71:7f:81:83:90:4b:42:04:e9:7b:0c: c3:3b:08:13:81:04:be:97:e2:1e:85:5e:fd:4d:86: 6a:48:c0:52:78:42:f4:6e:0c:87:75:d1:c6:3e:74: c9:81:42:47:7c:a7:62:9f:2f:33:22:fa:aa:ec:d3: 78:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.94.52.0/22 147.78.44.0/22 185.6.148.0/22 212.30.32.0/19 IPv6: 2a05:9740::/29 2a09:1d40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 41956 Signature Algorithm: sha256WithRSAEncryption 87:5f:60:ea:95:09:be:14:d2:d3:df:1e:e4:c1:38:ee:c7:70: 1c:8e:7a:d6:9b:9e:0e:4e:49:67:f2:03:02:9f:3b:07:b3:cb: 21:d7:de:9e:e1:a7:24:0b:dd:cb:a3:f0:0d:d2:c3:f3:29:56: 62:b2:3b:a7:c2:03:61:6a:92:9a:20:6a:ed:d0:03:03:60:b4: a7:fb:7a:0d:76:a5:be:36:c5:99:4b:16:e5:48:c9:aa:40:00: b9:b3:a6:c9:5b:c9:43:a8:97:9e:cc:4f:e1:97:59:43:99:bb: ec:00:84:33:67:07:90:81:de:ee:9a:1e:4b:73:15:32:05:b0: f1:fa:4a:28:43:9d:74:0c:24:7a:04:5b:95:9a:55:b5:ea:45: 38:34:94:40:8b:4e:2b:dc:a0:30:dd:d0:16:4f:83:a2:25:59: a8:10:2d:da:ab:c5:c2:de:2c:31:87:d3:a9:9c:53:cc:9f:42: 12:6f:00:c0:41:70:d2:7b:c6:b2:f1:f2:e2:65:71:bb:93:c8: 3a:3f:0e:ea:42:f0:79:c7:53:e6:99:d9:c4:0f:74:c6:fc:c9: 65:1c:c5:c9:94:19:ca:99:2b:d9:06:4c:eb:83:70:dd:b3:4e: fc:e7:0f:da:7b:08:e3:1c:58:94:7c:81:5e:55:94:af:4b:70: 53:97:77:17 -----BEGIN CERTIFICATE----- MIIFvDCCBKSgAwIBAgISAZt4NRSz3lPW3zi6udDGR51jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNDU1ZDdmZWU0YTQ5OWVjYWYxMWQyZDNkYThlMzg5ZGUzMjM0MTJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVmSlYqixlcQZnA5Cwqxq5D2/8tP z7Th7AE9BKqMiviodaGz8cgRQTdh89gM9O/c05WMSQRYSuku+sW7k955m7ETLfIW o780FK3I6IhU58dz8gtosNpQGl5r0ANB2ICofES08551RXUe9Aj57IM60tQyjYUn XO5L0o0mYAi08XlBl6ufwZz9b01vWE5XpV9e1s46A+eDL0aiijPtYbTR567W8Wlb YA9gnCC82jfeCCYGrZNW+s2+k97LLNloOryCsNrdkVKIcX+Bg5BLQgTpewzDOwgT gQS+l+IehV79TYZqSMBSeEL0bgyHddHGPnTJgUJHfKdiny8zIvqq7NN40QIDAQAB o4ICyDCCAsQwHQYDVR0OBBYEFCRV1/7kpJnsrxHS09qOOJ3jI0EvMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBjLzNmZmI3 Ni05OTMxLTQ5NDItOWRhMS0xZTA0NjU1MTNiNjMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGMvM2ZmYjc2 LTk5MzEtNDk0Mi05ZGExLTFlMDQ2NTUxM2I2My8xL0pGWFhfdVNrbWV5dkVkTFQy bzQ0bmVNalFTOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEcGCCsGAQUF BwEHAQH/BDgwNjAeBAIAATAYAwQCLV40AwQCk04sAwQCuQaUAwQF1B4gMBQEAgAC MA4DBQMqBZdAAwUDKgkdQDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMAo+QwDQYJ KoZIhvcNAQELBQADggEBAIdfYOqVCb4U0tPfHuTBOO7HcByOetabng5OSWfyAwKf OwezyyHX3p7hpyQL3cuj8A3Sw/MpVmKyO6fCA2Fqkpogau3QAwNgtKf7eg12pb42 xZlLFuVIyapAALmzpslbyUOol57MT+GXWUOZu+wAhDNnB5CB3u6aHktzFTIFsPH6 SihDnXQMJHoEW5WaVbXqRTg0lECLTivcoDDd0BZPg6IlWagQLdqrxcLeLDGH06mc U8yfQhJvAMBBcNJ7xrLx8uJlcbuTyDo/DupC8HnHU+aZ2cQPdMb8yWUcxcmUGcqZ K9kGTOuDcN2zTvznD9p7COMcWJR8gV5VlK9LcFOXdxc= -----END CERTIFICATE-----Generated at Wed Jan 21 14:44:17 2026 by rpki-client