This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gJn-FS53ZHo7-PBarMYMuriw8_E.cer File: gJn-FS53ZHo7-PBarMYMuriw8_E.cer (raw, json) Hash identifier: A/xLAds+E86pAABX06e85ssf6GKQd9FnoLs7nbgQXDo= Subject key identifier: 80:99:FE:15:2E:77:64:7A:3B:F8:F0:5A:AC:C6:0C:BA:B8:B0:F3:F1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E3763CCFB76F9C0CD7DBBCF3A6EBF9F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1c/0095ef-8a39-44d1-a9a6-5baef3fc295d/1/gJn-FS53ZHo7-PBarMYMuriw8_E.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1c/0095ef-8a39-44d1-a9a6-5baef3fc295d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:18:37 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 77.95.221.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 23 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:63:cc:fb:76:f9:c0:cd:7d:bb:cf:3a:6e:bf:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8099fe152e77647a3bf8f05aacc60cbab8b0f3f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:90:af:51:a6:f6:10:82:f2:99:67:69:82:a2: 24:57:ac:1d:14:8c:7b:44:33:c5:ae:24:7e:ae:cc: 8b:55:1a:ab:6e:b3:18:c3:6e:39:0e:1e:f9:6e:43: a0:82:4e:44:df:95:0d:b3:73:0e:46:44:98:09:ec: 60:69:13:e7:15:df:e8:dc:6d:1d:42:55:ec:7f:f1: 93:48:39:17:c6:45:14:d9:04:6f:9a:7e:f2:49:65: d4:d3:4e:58:3b:96:ac:fd:bd:98:12:fb:83:c2:80: 9c:86:56:92:5a:20:6c:ad:27:35:dd:b0:82:20:ca: 89:70:1d:9a:d1:68:6d:dd:47:62:6c:19:e6:df:14: 87:42:1d:65:d8:23:af:51:43:4f:61:42:f8:c7:39: e2:0e:e2:52:2a:d0:9e:54:9d:a1:98:53:2d:3c:8b: 68:dc:13:92:b8:88:91:be:33:8a:1e:64:5b:61:05: 04:c9:47:99:9c:7e:74:22:c1:0b:97:f9:a6:fb:c6: 08:3f:31:96:f5:5f:f8:71:49:6c:6c:c5:cb:31:d4: f5:7e:6a:fd:00:2e:a2:6a:9a:61:19:7f:35:be:15: 09:64:03:d2:cc:0c:f6:b7:24:32:ce:f0:8f:f5:e2: 10:98:c2:d3:09:37:5a:05:d2:95:10:47:fb:1f:7f: 53:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:99:FE:15:2E:77:64:7A:3B:F8:F0:5A:AC:C6:0C:BA:B8:B0:F3:F1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0095ef-8a39-44d1-a9a6-5baef3fc295d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0095ef-8a39-44d1-a9a6-5baef3fc295d/1/gJn-FS53ZHo7-PBarMYMuriw8_E.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.95.221.0/24 Signature Algorithm: sha256WithRSAEncryption 00:be:08:68:d4:a6:78:58:3e:33:00:4e:6f:f8:a7:db:e7:56: c9:50:c2:96:85:bf:d6:85:36:87:3e:8e:36:c9:33:75:cf:2d: e0:2f:2b:c9:9a:a9:1f:75:ba:ea:79:a5:8c:54:5d:c2:e3:89: ed:6a:b6:4c:8e:90:7b:78:6a:11:af:7a:e5:92:ca:63:12:89: d1:83:ab:0a:96:fe:de:ac:9a:d7:35:c3:cb:bd:36:e9:3b:56: 64:04:c0:80:7b:ad:18:2f:a6:92:3f:b1:fc:25:1f:e5:ae:6e: d7:ab:0d:fe:c6:5c:eb:ae:ff:e4:02:52:99:3d:e0:8e:1d:05: 3f:5e:b0:ef:da:af:7e:8c:05:4e:27:37:2f:20:46:c7:5a:ba: a1:2d:88:3b:2b:38:fa:9a:45:df:b7:b5:c5:28:99:f9:ef:a4: 3c:ea:7a:db:e7:6f:8f:9c:fa:e8:f9:0f:d6:64:32:c5:ed:02: 21:ad:b3:a4:fb:ba:f0:49:51:26:25:89:83:12:c6:f5:2a:66: 45:5a:b8:58:1e:e6:c7:67:08:ce:42:ad:6c:68:4e:ed:d6:ba: 5e:42:0a:23:ce:65:b1:61:d8:4e:ba:bd:68:a2:a9:23:e3:cf: 8f:5f:29:b6:38:5e:95:7c:48:51:9e:bb:6f:c6:60:e1:e9:bb: ab:6c:c5:30 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt+N2PM+3b5wM19u886br+fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MDk5ZmUxNTJlNzc2NDdhM2JmOGYwNWFhY2M2MGNiYWI4YjBmM2YxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpCvUab2EILymWdpgqIkV6wdFIx7 RDPFriR+rsyLVRqrbrMYw245Dh75bkOggk5E35UNs3MORkSYCexgaRPnFd/o3G0d QlXsf/GTSDkXxkUU2QRvmn7ySWXU005YO5as/b2YEvuDwoCchlaSWiBsrSc13bCC IMqJcB2a0Wht3UdibBnm3xSHQh1l2COvUUNPYUL4xzniDuJSKtCeVJ2hmFMtPIto 3BOSuIiRvjOKHmRbYQUEyUeZnH50IsELl/mm+8YIPzGW9V/4cUlsbMXLMdT1fmr9 AC6iapphGX81vhUJZAPSzAz2tyQyzvCP9eIQmMLTCTdaBdKVEEf7H39TAwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFICZ/hUud2R6O/jwWqzGDLq4sPPxMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFjLzAwOTVl Zi04YTM5LTQ0ZDEtYTlhNi01YmFlZjNmYzI5NWQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWMvMDA5NWVm LThhMzktNDRkMS1hOWE2LTViYWVmM2ZjMjk1ZC8xL2dKbi1GUzUzWkhvNy1QQmFy TVlNdXJpdzhfRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQATV/dMA0GCSqGSIb3DQEBCwUAA4IBAQAAvgho 1KZ4WD4zAE5v+Kfb51bJUMKWhb/WhTaHPo42yTN1zy3gLyvJmqkfdbrqeaWMVF3C 44ntarZMjpB7eGoRr3rlkspjEonRg6sKlv7erJrXNcPLvTbpO1ZkBMCAe60YL6aS P7H8JR/lrm7Xqw3+xlzrrv/kAlKZPeCOHQU/XrDv2q9+jAVOJzcvIEbHWrqhLYg7 Kzj6mkXft7XFKJn576Q86nrb52+PnPro+Q/WZDLF7QIhrbOk+7rwSVEmJYmDEsb1 KmZFWrhYHubHZwjOQq1saE7t1rpeQgojzmWxYdhOur1ooqkj48+PXym2OF6VfEhR nrtvxmDh6burbMUw -----END CERTIFICATE-----Generated at Thu Jan 22 09:06:52 2026 by rpki-client