This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/A-VjR3yiveae95Q5kflTMwV7PjY.cer File: A-VjR3yiveae95Q5kflTMwV7PjY.cer (raw, json) Hash identifier: sFzFkH2ZGLzSuClcufIrHATPi+RFXaJsYEzMTZ9zW/w= Subject key identifier: 03:E5:63:47:7C:A2:BD:E6:9E:F7:94:39:91:F9:53:33:05:7B:3E:36 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C7FAEE486642E7FBC43982198648983 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7c/7eb074-1331-4dea-9e60-1f1ec400fa50/1/A-VjR3yiveae95Q5kflTMwV7PjY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7c/7eb074-1331-4dea-9e60-1f1ec400fa50/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:18:21 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 214679 IP: 45.88.57.0/24 IP: 2a0d:3480::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:ae:e4:86:64:2e:7f:bc:43:98:21:98:64:89:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=03e563477ca2bde69ef7943991f95333057b3e36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:2f:3d:c6:a3:dd:15:5f:c5:65:86:3e:fb:41: bc:0b:b1:56:21:df:da:ab:74:8f:ab:76:38:ef:cf: 20:30:8e:0c:9b:a6:37:14:a8:b5:ce:3f:9a:49:0a: 5f:dc:5d:90:bf:fe:31:5b:ab:a2:43:9d:f5:32:2f: b8:0f:f2:b3:cd:ef:bc:79:f9:ad:3c:b1:7b:dd:7d: 6c:f7:dd:55:8a:af:88:33:33:f2:ee:21:bb:71:f4: 08:3c:bb:33:ad:89:dc:53:bb:76:f4:b5:b3:fa:0b: fd:08:a2:14:23:7b:80:70:46:ae:cb:c6:89:87:76: 5a:5f:69:d2:1e:9d:e8:ba:ea:46:c1:66:85:7b:90: 5b:cf:52:79:37:77:0f:f5:ac:60:5f:f6:53:07:11: 9f:27:62:ef:c3:40:89:cc:3b:0b:c0:1e:4f:f9:63: b9:f5:ff:01:72:c0:92:0a:cd:2f:df:c2:b3:4f:15: 67:48:da:da:6c:b3:51:e4:9c:83:53:da:7e:cf:4e: db:78:d9:6a:cc:99:85:09:5d:69:27:02:99:dd:df: ec:3e:af:13:54:1c:04:50:a9:15:c3:72:8c:6e:82: 37:09:b2:5a:5d:8a:bc:60:57:dc:ed:b0:a8:46:35: 57:d3:01:43:05:75:9a:be:e5:d7:d8:4f:5a:02:97: 42:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:E5:63:47:7C:A2:BD:E6:9E:F7:94:39:91:F9:53:33:05:7B:3E:36 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/7eb074-1331-4dea-9e60-1f1ec400fa50/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/7eb074-1331-4dea-9e60-1f1ec400fa50/1/A-VjR3yiveae95Q5kflTMwV7PjY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.88.57.0/24 IPv6: 2a0d:3480::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 214679 Signature Algorithm: sha256WithRSAEncryption 65:d4:f1:7c:12:08:6b:33:66:aa:5c:ae:68:f6:10:c7:6e:2e: 04:36:a6:02:d4:10:70:b2:46:dd:d8:e0:1e:40:21:f7:ae:2c: f2:cc:0d:29:9b:0b:f4:8a:83:52:a2:8d:bb:87:02:b7:3f:6f: fa:82:bb:4c:92:48:51:79:1b:2d:01:d5:a0:8e:f3:2d:42:a8: 5b:92:e7:05:14:ce:86:8d:db:7c:bb:fa:8f:72:e1:2e:99:ce: 99:82:63:6b:b1:57:b0:75:1c:18:b6:45:ed:41:6e:89:2d:e4: 99:8d:39:d5:63:52:63:0b:7c:85:4f:0b:8e:4d:02:8d:ac:77: 46:75:86:05:0c:68:da:85:8d:0a:fe:cc:9e:08:a9:ee:80:4f: 72:e4:24:0f:e3:02:95:cc:dd:4f:f6:8f:03:0e:63:ef:25:a4: b8:5b:de:b0:d0:bc:4a:0c:80:6d:f4:a5:d7:1b:5b:8a:40:bd: b3:e4:82:55:13:5f:e5:d0:80:64:53:cc:8c:23:53:8f:a1:72: 2c:1b:b2:f7:9d:8e:f3:f8:30:8a:66:1c:60:36:f5:fb:6d:84: 6f:7a:11:2d:53:79:3b:cd:6f:f8:37:97:f8:b0:c0:c8:71:24: 18:3b:45:23:f9:76:07:be:2f:13:75:46:a8:c3:3b:25:4a:ea: ec:e5:f5:2c -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt8f67khmQuf7xDmCGYZImDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwM2U1NjM0NzdjYTJiZGU2OWVmNzk0Mzk5MWY5NTMzMzA1N2IzZTM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5S89xqPdFV/FZYY++0G8C7FWId/a q3SPq3Y4788gMI4Mm6Y3FKi1zj+aSQpf3F2Qv/4xW6uiQ531Mi+4D/Kzze+8efmt PLF73X1s991Viq+IMzPy7iG7cfQIPLszrYncU7t29LWz+gv9CKIUI3uAcEauy8aJ h3ZaX2nSHp3ouupGwWaFe5Bbz1J5N3cP9axgX/ZTBxGfJ2Lvw0CJzDsLwB5P+WO5 9f8BcsCSCs0v38KzTxVnSNrabLNR5JyDU9p+z07beNlqzJmFCV1pJwKZ3d/sPq8T VBwEUKkVw3KMboI3CbJaXYq8YFfc7bCoRjVX0wFDBXWavuXX2E9aApdCywIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFAPlY0d8or3mnveUOZH5UzMFez42MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdjLzdlYjA3 NC0xMzMxLTRkZWEtOWU2MC0xZjFlYzQwMGZhNTAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2MvN2ViMDc0 LTEzMzEtNGRlYS05ZTYwLTFmMWVjNDAwZmE1MC8xL0EtVmpSM3lpdmVhZTk1UTVr ZmxUTXdWN1BqWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQALVg5MA0EAgACMAcDBQMqDTSAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNGlzANBgkqhkiG9w0BAQsFAAOCAQEAZdTxfBIIazNm qlyuaPYQx24uBDamAtQQcLJG3djgHkAh964s8swNKZsL9IqDUqKNu4cCtz9v+oK7 TJJIUXkbLQHVoI7zLUKoW5LnBRTOho3bfLv6j3LhLpnOmYJja7FXsHUcGLZF7UFu iS3kmY051WNSYwt8hU8Ljk0Cjax3RnWGBQxo2oWNCv7Mngip7oBPcuQkD+MClczd T/aPAw5j7yWkuFvesNC8SgyAbfSl1xtbikC9s+SCVRNf5dCAZFPMjCNTj6FyLBuy 952O8/gwimYcYDb1+22Eb3oRLVN5O81v+DeX+LDAyHEkGDtFI/l2B74vE3VGqMM7 JUrq7OX1LA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:43:44 2026 by rpki-client