This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HS_vvRaPGGYeyhVWncYhj4Z0aUI.cer File: HS_vvRaPGGYeyhVWncYhj4Z0aUI.cer (raw, json) Hash identifier: bu1PkVlow5nm6Qi1qXAOv7iL/UkeMR/Ml19ytfl6/Bw= Subject key identifier: 1D:2F:EF:BD:16:8F:18:66:1E:CA:15:56:9D:C6:21:8F:86:74:69:42 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E38BAA4A9A40474402D1AD56A8B0892 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:20:05 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 140.203.0.0/16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:ba:a4:a9:a4:04:74:40:2d:1a:d5:6a:8b:08:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:20:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1d2fefbd168f18661eca15569dc6218f86746942 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:06:5a:3c:5b:38:74:2e:fb:1c:e9:c3:0e:ff: 95:47:38:76:d8:73:d9:1f:16:46:ac:be:d7:6f:ad: 5e:ca:88:93:bf:db:f4:fb:33:c9:8c:28:a8:16:8d: ed:0b:98:42:8d:df:62:1e:ef:72:9a:4e:39:1d:e2: 46:f8:5b:3b:6c:46:07:fd:b8:c5:7a:87:fe:76:ec: 14:44:61:0a:79:e7:55:6c:77:d5:20:fb:85:4f:0a: 6a:82:dd:50:1a:bc:ac:80:7e:ba:69:bf:a3:84:87: e0:d4:23:c9:35:1a:34:e0:7a:69:64:99:67:ee:46: c2:a4:3f:0a:fc:d0:e6:88:bc:44:0b:52:65:6e:85: 32:1d:a8:a8:e7:af:df:38:be:7a:02:90:5a:8b:c4: b0:a1:17:f5:97:1e:7d:ce:b7:10:8f:29:5f:47:fa: 1e:f5:22:7e:4e:94:69:5c:39:11:b2:cd:f2:15:9a: 82:85:e6:d4:90:f9:8f:06:fc:c0:b8:66:28:37:39: 4e:1c:78:eb:b0:06:48:8e:0d:4d:c4:d8:98:cd:ce: 32:64:18:0e:bc:13:e1:f0:94:1c:56:3d:65:e5:ab: 26:8f:28:a1:1f:25:12:d1:8e:c6:cb:b4:87:88:31: 82:99:dc:85:72:2f:71:01:70:7d:9b:f1:da:17:5b: 77:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:2F:EF:BD:16:8F:18:66:1E:CA:15:56:9D:C6:21:8F:86:74:69:42 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 140.203.0.0/16 Signature Algorithm: sha256WithRSAEncryption 52:be:92:db:92:ec:cb:c6:95:4d:92:94:6e:2f:4c:f8:f3:25: eb:a7:4f:18:b4:67:0a:aa:96:28:4a:b1:8e:da:df:fd:0f:06: 0d:3e:b3:2e:fb:00:77:66:98:d9:65:25:a8:89:58:1e:e3:b3: 09:7f:62:44:11:67:d1:82:e9:72:fc:0b:58:89:5a:f6:d3:69: 9f:7d:ef:3f:7f:87:7a:c7:20:6e:3f:d0:e3:e2:5e:83:81:aa: 22:45:b2:35:80:3f:2c:b2:c3:9e:5a:ec:5a:ac:30:11:8a:a8: ea:87:f9:52:94:08:2b:01:51:0a:80:a1:1c:4c:55:6e:86:13: 98:f4:67:47:51:3d:6b:27:51:d0:a0:bf:e3:b4:4b:9c:e3:29: 05:14:2c:66:4d:46:43:14:0a:ef:48:7e:9c:f4:f5:24:95:0e: b7:ea:8e:9f:e8:40:7e:4b:39:09:86:ed:fb:c0:3f:da:26:07: c5:e5:95:36:0b:84:54:45:3a:e3:1d:1f:1b:64:0f:6d:e3:6e: f1:5f:9d:f5:67:ab:b0:38:28:0f:b3:85:0e:b6:d9:da:4c:56: ba:c3:aa:5e:d4:1c:0d:9d:d8:63:32:e4:f9:36:99:4f:6e:6a: 8b:6f:f7:f7:93:f1:14:82:30:90:ce:ee:cc:db:8d:b2:9b:ad: fc:64:69:88 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgISAZt+OLqkqaQEdEAtGtVqiwiSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAyMDA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZDJmZWZiZDE2OGYxODY2MWVjYTE1NTY5ZGM2MjE4Zjg2NzQ2OTQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQZaPFs4dC77HOnDDv+VRzh22HPZ HxZGrL7Xb61eyoiTv9v0+zPJjCioFo3tC5hCjd9iHu9ymk45HeJG+Fs7bEYH/bjF eof+duwURGEKeedVbHfVIPuFTwpqgt1QGrysgH66ab+jhIfg1CPJNRo04HppZJln 7kbCpD8K/NDmiLxEC1JlboUyHaio56/fOL56ApBai8SwoRf1lx59zrcQjylfR/oe 9SJ+TpRpXDkRss3yFZqChebUkPmPBvzAuGYoNzlOHHjrsAZIjg1NxNiYzc4yZBgO vBPh8JQcVj1l5asmjyihHyUS0Y7Gy7SHiDGCmdyFci9xAXB9m/HaF1t3nwIDAQAB o4ICgzCCAn8wHQYDVR0OBBYEFB0v770WjxhmHsoVVp3GIY+GdGlCMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUzL2MyZGY1 OS05ZjFlLTQ4ZGYtODQ2Ni1jNjQ5NTg1M2NjMWEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTMvYzJkZjU5 LTlmMWUtNDhkZi04NDY2LWM2NDk1ODUzY2MxYS8xL0hTX3Z2UmFQR0dZZXloVldu Y1loajRaMGFVSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUF BwEHAQH/BA8wDTALBAIAATAFAwMAjMswDQYJKoZIhvcNAQELBQADggEBAFK+ktuS 7MvGlU2SlG4vTPjzJeunTxi0ZwqqlihKsY7a3/0PBg0+sy77AHdmmNllJaiJWB7j swl/YkQRZ9GC6XL8C1iJWvbTaZ997z9/h3rHIG4/0OPiXoOBqiJFsjWAPyyyw55a 7FqsMBGKqOqH+VKUCCsBUQqAoRxMVW6GE5j0Z0dRPWsnUdCgv+O0S5zjKQUULGZN RkMUCu9Ifpz09SSVDrfqjp/oQH5LOQmG7fvAP9omB8XllTYLhFRFOuMdHxtkD23j bvFfnfVnq7A4KA+zhQ622dpMVrrDql7UHA2d2GMy5Pk2mU9uaotv9/eT8RSCMJDO 7szbjbKbrfxkaYg= -----END CERTIFICATE-----Generated at Tue Jan 27 01:17:46 2026 by rpki-client