This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jFfcx-UvWLNCtwyD2qIaEGrFkpE.cer File: jFfcx-UvWLNCtwyD2qIaEGrFkpE.cer (raw, json) Hash identifier: hx7yxcZgp6cvA+y97/wwYhYaqtYwufJJYQZ5eo/qQtE= Subject key identifier: 8C:57:DC:C7:E5:2F:58:B3:42:B7:0C:83:DA:A2:1A:10:6A:C5:92:91 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C11049619B4E191E54105AC1C5E4737 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/db/e83399-0a14-42ac-9fd6-41306c27d6f0/1/jFfcx-UvWLNCtwyD2qIaEGrFkpE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/db/e83399-0a14-42ac-9fd6-41306c27d6f0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:17:28 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 208881 IP: 45.14.36.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:04:96:19:b4:e1:91:e5:41:05:ac:1c:5e:47:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8c57dcc7e52f58b342b70c83daa21a106ac59291 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:df:80:3f:96:54:9a:4b:6d:7e:41:a0:6c:f4: e5:56:9a:8e:90:fa:c9:19:79:58:45:80:f7:26:07: f3:a4:6d:ab:99:70:4b:a8:f7:86:3f:6e:a1:b5:d0: 7c:f3:97:b0:8e:c8:50:f8:28:7c:a8:a7:86:10:49: cd:b2:87:d6:a9:4e:5e:96:ab:3d:ec:e1:a3:ef:d1: d3:8e:1e:49:ec:a0:b8:16:84:d5:e2:1b:b4:d7:6f: 61:21:9c:51:4c:3b:9f:75:0d:a1:2f:3a:fd:03:4d: 89:19:9d:57:25:89:fd:5d:57:a8:92:0e:51:c9:ce: 7f:8e:9a:43:89:41:a6:e4:47:dc:78:cc:df:40:f4: 9e:7d:ac:6d:35:f8:17:0a:0f:2e:ad:d7:a3:12:0a: 1e:54:9a:18:68:76:2e:08:77:4d:68:78:02:7f:06: 40:58:2e:4a:ea:39:0e:c0:6a:5b:25:cb:78:ba:50: 79:14:52:f5:4b:2b:19:ea:0d:2f:30:8e:5e:15:e6: 57:28:82:25:87:8d:60:7d:76:cf:35:23:1c:5f:7c: 47:c7:0c:34:a1:d3:d4:a4:0a:61:3c:ee:bc:35:e3: 51:fd:13:1d:6c:b5:47:07:65:30:14:a6:97:3c:c9: 13:1d:17:64:ce:eb:73:3b:24:21:3d:83:56:55:2d: ec:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:57:DC:C7:E5:2F:58:B3:42:B7:0C:83:DA:A2:1A:10:6A:C5:92:91 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e83399-0a14-42ac-9fd6-41306c27d6f0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e83399-0a14-42ac-9fd6-41306c27d6f0/1/jFfcx-UvWLNCtwyD2qIaEGrFkpE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.14.36.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 208881 Signature Algorithm: sha256WithRSAEncryption 62:14:35:e7:30:6b:99:a9:31:2c:64:b4:16:6b:45:92:89:91: bd:81:9a:9a:1b:de:95:f0:ce:08:68:ec:1b:74:27:9f:1b:91: 4c:61:ce:71:6d:46:92:e9:33:ab:4f:e0:f2:bb:98:2c:08:68: 07:7a:f4:66:07:d1:91:e1:d4:02:15:fa:fe:08:09:5a:f6:e5: 02:9a:5c:08:a2:ae:e5:6c:f4:c1:0f:2b:d4:be:63:ed:fd:77: 38:9e:75:5a:82:64:f5:7f:8d:1f:1d:bc:8b:24:e3:ca:e1:9b: cf:02:96:88:eb:7d:71:ae:f3:30:84:dc:42:b7:82:04:62:b0: 5d:9c:ea:d4:57:38:b0:ee:f6:1c:43:78:bd:16:25:0c:f6:24: 22:1a:99:26:4b:64:47:37:ec:06:97:a2:d1:0f:d6:23:8e:ec: 26:a7:31:90:71:cc:6c:95:7b:0a:29:25:df:b7:bf:64:e0:fa: 8a:06:c1:1e:6c:ff:20:cf:ff:a5:45:89:4b:0d:64:d8:5f:67: e9:9e:18:86:de:ba:dd:da:2b:9e:45:b4:94:e5:ee:cd:d5:1a: 61:44:f3:c1:36:65:f4:cf:f6:4b:1a:3d:20:5b:62:d0:94:61: 0d:3f:68:49:58:c3:e5:46:4d:6f:6a:79:f1:37:f3:a9:5e:c9: f1:c3:b2:76 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt8EQSWGbThkeVBBawcXkc3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YzU3ZGNjN2U1MmY1OGIzNDJiNzBjODNkYWEyMWExMDZhYzU5MjkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApN+AP5ZUmkttfkGgbPTlVpqOkPrJ GXlYRYD3JgfzpG2rmXBLqPeGP26htdB885ewjshQ+Ch8qKeGEEnNsofWqU5elqs9 7OGj79HTjh5J7KC4FoTV4hu0129hIZxRTDufdQ2hLzr9A02JGZ1XJYn9XVeokg5R yc5/jppDiUGm5EfceMzfQPSefaxtNfgXCg8urdejEgoeVJoYaHYuCHdNaHgCfwZA WC5K6jkOwGpbJct4ulB5FFL1SysZ6g0vMI5eFeZXKIIlh41gfXbPNSMcX3xHxww0 odPUpAphPO68NeNR/RMdbLVHB2UwFKaXPMkTHRdkzutzOyQhPYNWVS3sBQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFIxX3MflL1izQrcMg9qiGhBqxZKRMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RiL2U4MzM5 OS0wYTE0LTQyYWMtOWZkNi00MTMwNmMyN2Q2ZjAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGIvZTgzMzk5 LTBhMTQtNDJhYy05ZmQ2LTQxMzA2YzI3ZDZmMC8xL2pGZmN4LVV2V0xOQ3R3eUQy cUlhRUdyRmtwRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCLQ4kMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMv8TANBgkqhkiG9w0BAQsFAAOCAQEAYhQ15zBrmakxLGS0FmtFkomRvYGamhve lfDOCGjsG3QnnxuRTGHOcW1Gkukzq0/g8ruYLAhoB3r0ZgfRkeHUAhX6/ggJWvbl AppcCKKu5Wz0wQ8r1L5j7f13OJ51WoJk9X+NHx28iyTjyuGbzwKWiOt9ca7zMITc QreCBGKwXZzq1Fc4sO72HEN4vRYlDPYkIhqZJktkRzfsBpei0Q/WI47sJqcxkHHM bJV7Cikl37e/ZOD6igbBHmz/IM//pUWJSw1k2F9n6Z4Yht663dornkW0lOXuzdUa YUTzwTZl9M/2Sxo9IFti0JRhDT9oSVjD5UZNb2p58TfzqV7J8cOydg== -----END CERTIFICATE-----Generated at Mon Feb 9 15:09:37 2026 by rpki-client