This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-vcGbaCaViJCYORuom3Jyx26jjc.cer File: 1-vcGbaCaViJCYORuom3Jyx26jjc.cer (raw, json) Hash identifier: xwydCYejyAXhSy/YnHL0O9Gi56w+xwGJtrG02QNJL3I= Subject key identifier: FA:F7:06:6D:A0:9A:56:22:42:60:E4:6E:A2:6D:C9:CB:1D:BA:8E:37 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCA9860FEAA91F9D1B6C9AB9C1D0766 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/1-vcGbaCaViJCYORuom3Jyx26jjc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:19:47 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 57081 IP: 185.132.112.0/22 IP: 2a06:e180::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:98:60:fe:aa:91:f9:d1:b6:c9:ab:9c:1d:07:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:19:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=faf7066da09a56224260e46ea26dc9cb1dba8e37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:62:c3:f1:f8:14:f9:7a:7e:d1:9e:49:e0:07: 3a:ee:e3:83:6d:0d:21:57:04:26:35:52:79:a0:c5: c5:54:b7:2e:63:13:b9:36:36:1f:e1:22:2f:e9:88: 61:35:fe:26:0b:6b:24:3a:ab:b5:79:c3:d3:40:8d: 32:e9:ca:c0:11:b8:de:f0:71:a8:df:dd:48:c9:32: 04:5b:36:0e:df:47:8b:bf:fd:0c:09:b0:5a:e0:b0: 02:67:68:e4:50:09:e9:9a:0d:7b:8a:2f:2b:9c:8b: 10:fb:e8:59:55:87:6b:df:82:8d:bc:b9:ea:8f:18: 6c:bf:4d:ec:6d:92:37:a7:d4:1c:6f:71:fa:42:b9: 38:c7:69:b5:2c:c4:c0:b2:44:7c:60:3b:80:77:1c: 1e:9d:a3:ef:e4:a5:d3:5b:a4:fa:5a:7f:b9:90:74: 0a:c7:da:69:cb:3c:19:68:13:f1:71:7c:db:05:6e: 54:72:15:a7:a4:5d:d7:76:80:d5:79:5f:b1:b2:dc: c7:16:00:d1:dd:1c:bd:8c:6f:47:15:4c:0f:40:3a: 5e:58:9d:a2:c9:13:ec:61:69:1a:95:d0:30:cb:53: ed:9a:e4:39:38:ff:91:3e:c1:6e:23:24:94:73:3b: af:36:72:41:10:bf:94:76:82:95:4f:77:fe:10:1a: ca:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:F7:06:6D:A0:9A:56:22:42:60:E4:6E:A2:6D:C9:CB:1D:BA:8E:37 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/1-vcGbaCaViJCYORuom3Jyx26jjc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.132.112.0/22 IPv6: 2a06:e180::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 57081 Signature Algorithm: sha256WithRSAEncryption 2e:df:5e:35:3c:70:2d:b3:4c:8f:d6:c7:5d:4f:1d:56:26:91: 06:ee:6b:e8:b4:7e:5e:9b:a5:05:07:a8:c8:0c:2a:0c:1e:d5: 65:b1:ed:a3:d5:be:a2:02:88:aa:8c:47:6b:8e:e7:27:48:27: 41:3f:b3:43:d0:e3:dd:8c:a8:50:03:97:bb:ed:59:8c:ee:02: 98:f3:18:9e:28:29:95:97:bc:5a:a2:7b:28:f0:5c:99:d8:ed: e2:f4:3a:2e:36:15:47:8b:d3:2a:87:50:9a:cf:3b:d9:ca:4c: 91:fe:e6:d1:f7:31:df:16:f1:ba:f4:75:80:69:86:77:68:76: 0a:98:b6:ad:c5:e4:58:b3:70:c7:26:82:71:fe:a1:ee:ac:05: a0:e7:86:35:3a:36:cd:75:27:5f:ba:fb:e2:25:cd:7c:72:fb: 81:51:8f:2d:a3:b2:f9:de:41:ef:00:29:c4:87:a8:03:97:3d: 12:57:a5:f1:1c:94:d9:b3:82:47:5b:63:c1:a7:77:89:4f:6b: 78:49:0d:21:1b:eb:00:11:5f:f2:df:eb:d9:c1:67:57:fa:8b: 98:0c:9e:83:4d:9e:84:39:cc:20:b5:b8:bf:c3:10:ba:f9:0b: 95:03:87:ab:78:bf:51:cd:3a:c4:6a:bf:c5:5c:9b:18:44:aa: 7b:f5:d6:92 -----BEGIN CERTIFICATE----- MIIFpDCCBIygAwIBAgISAZt9yphg/qqR+dG2yaucHQdmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxOTQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYWY3MDY2ZGEwOWE1NjIyNDI2MGU0NmVhMjZkYzljYjFkYmE4ZTM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1GLD8fgU+Xp+0Z5J4Ac67uODbQ0h VwQmNVJ5oMXFVLcuYxO5NjYf4SIv6YhhNf4mC2skOqu1ecPTQI0y6crAEbje8HGo 391IyTIEWzYO30eLv/0MCbBa4LACZ2jkUAnpmg17ii8rnIsQ++hZVYdr34KNvLnq jxhsv03sbZI3p9Qcb3H6Qrk4x2m1LMTAskR8YDuAdxwenaPv5KXTW6T6Wn+5kHQK x9ppyzwZaBPxcXzbBW5UchWnpF3XdoDVeV+xstzHFgDR3Ry9jG9HFUwPQDpeWJ2i yRPsYWkaldAwy1PtmuQ5OP+RPsFuIySUczuvNnJBEL+UdoKVT3f+EBrK6wIDAQAB o4ICsDCCAqwwHQYDVR0OBBYEFPr3Bm2gmlYiQmDkbqJtycsduo43MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2EzLzZkYmMy Zi0wZjBiLTRhMmYtYjE0OS1iNzU5ODMxMjI0NTUvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTMvNmRiYzJm LTBmMGItNGEyZi1iMTQ5LWI3NTk4MzEyMjQ1NS8xLzEtdmNHYmFDYVZpSkNZT1J1 b20zSnl4MjZqamMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEF BQcBBwEB/wQfMB0wDAQCAAEwBgMEArmEcDANBAIAAjAHAwUDKgbhgDAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMA3vkwDQYJKoZIhvcNAQELBQADggEBAC7fXjU8cC2z TI/Wx11PHVYmkQbua+i0fl6bpQUHqMgMKgwe1WWx7aPVvqICiKqMR2uO5ydIJ0E/ s0PQ492MqFADl7vtWYzuApjzGJ4oKZWXvFqieyjwXJnY7eL0Oi42FUeL0yqHUJrP O9nKTJH+5tH3Md8W8br0dYBphndodgqYtq3F5FizcMcmgnH+oe6sBaDnhjU6Ns11 J1+6++IlzXxy+4FRjy2jsvneQe8AKcSHqAOXPRJXpfEclNmzgkdbY8Gnd4lPa3hJ DSEb6wARX/Lf69nBZ1f6i5gMnoNNnoQ5zCC1uL/DELr5C5UDh6t4v1HNOsRqv8Vc mxhEqnv11pI= -----END CERTIFICATE-----Generated at Mon Feb 9 15:06:57 2026 by rpki-client