This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer File: 87VkazYDeZJMttnD2ZZpzn87LKI.cer (raw, json) Hash identifier: +3jSS4f8HE9CfbmsecWA/DKAFsvjDxemjmrO8evdX3A= Subject key identifier: F3:B5:64:6B:36:03:79:92:4C:B6:D9:C3:D9:96:69:CE:7F:3B:2C:A2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B36CE2735CD0A1B59399C0893EB1623 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:19:07 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 28968 AS: 198396 IP: 62.181.34.0 -- 62.181.39.255 IP: 62.181.46.0 -- 62.181.51.255 IP: 62.181.56.0/21 IP: 77.232.32.0/22 IP: 77.232.48.0/23 IP: 212.59.96.0/20 IP: 2a00:f460::/32 IP: 2a04:2780::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:ce:27:35:cd:0a:1b:59:39:9c:08:93:eb:16:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f3b5646b360379924cb6d9c3d99669ce7f3b2ca2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:cd:00:a3:2e:8f:2a:ca:8f:d0:b7:e4:a1:fe: a8:62:bb:c5:ab:e7:48:5a:e8:a5:d8:a6:a5:4a:42: 0d:7b:dd:2a:d0:07:97:55:d4:e4:37:ed:16:ff:09: 38:b1:52:70:5a:84:0f:12:15:d4:00:48:1a:ce:72: 99:c4:e6:c4:98:a8:59:c7:2a:c5:bc:8d:8c:21:36: ea:ec:8a:4c:9a:cc:9d:f0:0c:a0:66:66:00:99:ce: 15:17:3b:9c:61:a7:d0:75:67:7c:9f:5e:33:dc:f8: 59:2b:39:60:ca:85:b1:69:85:fe:14:19:cb:93:e5: a7:fa:5b:06:ec:d4:d4:84:77:16:9f:f4:06:cb:c7: ca:c4:a5:eb:c8:42:cf:d1:f4:dc:b0:11:25:cb:c3: 57:ce:d4:f0:9e:31:85:3f:96:7b:7e:c0:ea:69:e6: 87:4a:b8:e4:7a:13:48:b9:fa:34:9e:93:d1:a6:0f: 24:e6:37:ca:90:92:e0:b0:df:23:ae:ff:02:e6:4b: ee:b4:ea:8f:ec:40:07:02:de:21:32:fc:36:71:e5: 46:95:1d:d1:f1:45:60:14:89:a2:1f:36:c8:44:67: 94:26:d6:b8:a4:be:9d:7d:ea:a4:11:6b:79:f5:df: 63:92:84:62:f2:f3:26:e6:d5:a7:b5:d5:2d:6a:9c: 2a:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:B5:64:6B:36:03:79:92:4C:B6:D9:C3:D9:96:69:CE:7F:3B:2C:A2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.181.34.0-62.181.39.255 62.181.46.0-62.181.51.255 62.181.56.0/21 77.232.32.0/22 77.232.48.0/23 212.59.96.0/20 IPv6: 2a00:f460::/32 2a04:2780::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28968 198396 Signature Algorithm: sha256WithRSAEncryption 06:36:85:f7:23:26:1f:42:50:25:cc:67:eb:eb:a3:77:bd:c8: da:57:fc:43:35:eb:29:76:5d:91:14:bf:18:00:00:aa:11:06: 9c:a6:17:b8:43:fb:e7:7f:18:c4:59:7f:fe:b8:62:a3:e7:51: 15:f9:a6:e7:4a:c3:8a:e8:cc:a3:16:47:e1:ea:cb:51:76:89: f7:e4:de:bd:d3:69:26:07:1c:0a:bf:e9:ba:26:c3:7d:72:af: a2:a2:1d:c6:e8:7c:08:90:25:4f:78:b8:1f:52:41:ae:a7:34: 70:a6:de:35:3b:45:52:75:d8:4a:1c:c8:28:d0:8e:d6:a0:c0: c3:4d:ce:cc:54:99:b7:ce:9c:87:2d:4a:72:4d:5c:5f:1d:ad: b9:0f:5b:5e:12:33:51:0c:16:fc:df:05:40:d5:29:59:42:64: d6:08:14:21:6e:48:12:19:db:9e:be:0b:35:15:97:b7:15:19: 09:d9:8b:57:72:42:2c:2a:e4:12:5f:ac:6f:5f:88:a2:c8:c5: f5:8a:eb:13:0f:a1:37:e6:8c:81:a5:e0:9d:e9:b0:ff:f9:d5: a4:87:cb:b9:81:c8:17:5f:05:44:f0:e1:07:12:e0:4d:da:7c: d5:f0:4d:c7:08:21:c3:a0:4b:65:33:2a:9a:61:1d:7f:01:b8: 15:6b:b3:c0 -----BEGIN CERTIFICATE----- MIIF3DCCBMSgAwIBAgISAZt7Ns4nNc0KG1k5nAiT6xYjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmM2I1NjQ2YjM2MDM3OTkyNGNiNmQ5YzNkOTk2NjljZTdmM2IyY2EyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAms0Aoy6PKsqP0Lfkof6oYrvFq+dI Wuil2KalSkINe90q0AeXVdTkN+0W/wk4sVJwWoQPEhXUAEgaznKZxObEmKhZxyrF vI2MITbq7IpMmsyd8AygZmYAmc4VFzucYafQdWd8n14z3PhZKzlgyoWxaYX+FBnL k+Wn+lsG7NTUhHcWn/QGy8fKxKXryELP0fTcsBEly8NXztTwnjGFP5Z7fsDqaeaH SrjkehNIufo0npPRpg8k5jfKkJLgsN8jrv8C5kvutOqP7EAHAt4hMvw2ceVGlR3R 8UVgFImiHzbIRGeUJta4pL6dfeqkEWt59d9jkoRi8vMm5tWntdUtapwqKwIDAQAB o4IC6DCCAuQwHQYDVR0OBBYEFPO1ZGs2A3mSTLbZw9mWac5/OyyiMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FjLzU3MmVh Ni0xNDM2LTRmMjYtYWY1Ny01OTc1OTEzZjUyYzUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWMvNTcyZWE2 LTE0MzYtNGYyNi1hZjU3LTU5NzU5MTNmNTJjNS8xLzg3VmthellEZVpKTXR0bkQy Wlpwem44N0xLSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGMGCCsGAQUF BwEHAQH/BFQwUjA6BAIAATA0MAwDBAE+tSIDBAM+tSAwDAMEAT61LgMEAj61MAME Az61OAMEAk3oIAMEAU3oMAMEBNQ7YDAUBAIAAjAOAwUAKgD0YAMFAyoEJ4AwHgYI KwYBBQUHAQgBAf8EDzANoAswCQICcSgCAwMG/DANBgkqhkiG9w0BAQsFAAOCAQEA BjaF9yMmH0JQJcxn6+ujd73I2lf8QzXrKXZdkRS/GAAAqhEGnKYXuEP7538YxFl/ /rhio+dRFfmm50rDiujMoxZH4erLUXaJ9+TevdNpJgccCr/puibDfXKvoqIdxuh8 CJAlT3i4H1JBrqc0cKbeNTtFUnXYShzIKNCO1qDAw03OzFSZt86chy1Kck1cXx2t uQ9bXhIzUQwW/N8FQNUpWUJk1ggUIW5IEhnbnr4LNRWXtxUZCdmLV3JCLCrkEl+s b1+IosjF9YrrEw+hN+aMgaXgnemw//nVpIfLuYHIF18FRPDhBxLgTdp81fBNxwgh w6BLZTMqmmEdfwG4FWuzwA== -----END CERTIFICATE-----Generated at Mon Jan 26 08:05:18 2026 by rpki-client