This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VBQ77np8z0eAL1Xq5Ve6X8-feV4.cer
File:                     VBQ77np8z0eAL1Xq5Ve6X8-feV4.cer (raw, json)
Hash identifier:          voD4w9K8rgkEWqojfx4r9ksi7oACFLXeWsShtnTVf6M=
Subject key identifier:   54:14:3B:EE:7A:7C:CF:47:80:2F:55:EA:E5:57:BA:5F:CF:9F:79:5E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7C80A5C11FF88B550824790CF1B401B1
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/fd/65e218-d751-4176-81aa-b75b5f37db09/1/VBQ77np8z0eAL1Xq5Ve6X8-feV4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/fd/65e218-d751-4176-81aa-b75b5f37db09/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 02 Jan 2026 02:19:24 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 212076
                          IP: 185.231.65.0/24
                          IP: 2a14:79c0::/29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 06:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:80:a5:c1:1f:f8:8b:55:08:24:79:0c:f1:b4:01:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 02:19:24 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=54143bee7a7ccf47802f55eae557ba5fcf9f795e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:01:a2:0d:a3:2e:5e:a7:9d:71:6e:55:60:df:
                    7d:a0:8a:f0:d5:a7:d0:9b:81:99:c6:8b:42:ef:21:
                    7f:9e:af:aa:28:56:f4:e3:db:c9:c1:b8:25:c3:b3:
                    96:24:c7:41:cd:1f:1a:3b:18:95:4e:cd:f0:e8:8f:
                    a4:8e:aa:7c:c4:19:9a:b4:14:07:0c:f7:50:1c:50:
                    df:c3:04:d5:8f:8b:2f:eb:d1:5f:7a:ab:ac:8c:7b:
                    f5:b8:cc:17:cc:78:a7:89:31:0c:ec:1c:a4:86:c4:
                    d6:8b:61:8b:4c:fe:4f:81:4c:94:e9:98:e6:77:1e:
                    95:ff:98:29:0d:c1:37:55:95:1e:74:4c:93:bc:30:
                    b0:d4:0a:3b:dd:09:7a:17:b6:7e:bb:93:eb:89:13:
                    4e:fa:6b:3f:8a:5e:6f:b9:fb:a7:f7:da:f3:09:59:
                    cb:03:1a:3b:5c:e4:a8:cf:b6:67:f1:a8:6f:0a:24:
                    5c:7b:b1:5e:3f:b1:64:5a:1d:c3:eb:09:6a:34:5d:
                    af:ec:7f:26:84:16:33:34:b1:fa:cb:96:f6:91:73:
                    a2:e0:b3:d8:7b:74:92:03:8d:45:be:d4:00:56:dc:
                    cc:4f:bc:4f:35:01:51:6f:93:b4:45:5a:b2:b8:8e:
                    90:40:c7:3a:f7:bd:33:b2:9b:0d:68:51:2a:0d:4a:
                    0d:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:14:3B:EE:7A:7C:CF:47:80:2F:55:EA:E5:57:BA:5F:CF:9F:79:5E
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/65e218-d751-4176-81aa-b75b5f37db09/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/65e218-d751-4176-81aa-b75b5f37db09/1/VBQ77np8z0eAL1Xq5Ve6X8-feV4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.231.65.0/24
                IPv6:
                  2a14:79c0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  212076

    Signature Algorithm: sha256WithRSAEncryption
         22:ad:c4:ee:5e:9e:51:a4:90:23:a7:00:a1:ec:e9:25:6f:37:
         83:cf:f8:9a:ce:c0:3d:16:7c:75:8e:9a:e7:2a:dd:78:64:9e:
         25:18:f2:5b:e0:75:83:ef:0a:02:b5:57:ad:89:7e:a6:bc:d3:
         cb:ee:4a:ea:21:cf:44:17:53:8d:d2:c0:6b:8b:e2:70:82:ae:
         a4:97:03:8d:e4:7d:59:28:f9:ad:75:30:4a:99:3f:7f:8b:96:
         ef:8d:8b:ae:1e:fa:6a:bc:66:d3:a5:46:7e:6f:2b:50:76:68:
         60:79:e4:65:31:c9:e4:a5:dc:f8:8c:89:4f:cd:c3:8f:77:db:
         50:c4:04:56:95:07:50:ae:ed:cc:e2:35:66:63:74:ab:df:b1:
         4c:d9:12:e7:09:e5:3f:3b:5b:c0:21:b2:27:6a:a1:3e:d4:00:
         97:bb:36:50:b2:0c:4b:a7:ba:9e:6c:e2:79:95:fe:37:76:d9:
         6a:19:7a:e3:45:8e:90:69:5d:21:a9:65:2e:f5:c8:a4:8a:dc:
         4d:1e:2b:b0:f2:23:07:cc:2f:5b:30:ef:8e:8e:69:bc:6d:dc:
         33:de:c2:de:51:91:97:4d:a0:2e:89:e3:0d:43:97:76:26:fd:
         7f:c3:db:ad:47:f6:7b:c0:4d:9d:e7:83:3a:f6:cb:8e:f4:72:
         22:8f:89:5f
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZt8gKXBH/iLVQgkeQzxtAGxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMTAyMDIxOTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NDE0M2JlZTdhN2NjZjQ3ODAyZjU1ZWFlNTU3YmE1ZmNmOWY3OTVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQGiDaMuXqedcW5VYN99oIrw1afQ
m4GZxotC7yF/nq+qKFb049vJwbglw7OWJMdBzR8aOxiVTs3w6I+kjqp8xBmatBQH
DPdQHFDfwwTVj4sv69FfequsjHv1uMwXzHiniTEM7BykhsTWi2GLTP5PgUyU6Zjm
dx6V/5gpDcE3VZUedEyTvDCw1Ao73Ql6F7Z+u5PriRNO+ms/il5vufun99rzCVnL
Axo7XOSoz7Zn8ahvCiRce7FeP7FkWh3D6wlqNF2v7H8mhBYzNLH6y5b2kXOi4LPY
e3SSA41FvtQAVtzMT7xPNQFRb5O0RVqyuI6QQMc6970zspsNaFEqDUoNoQIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFFQUO+56fM9HgC9V6uVXul/Pn3leMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZkLzY1ZTIx
OC1kNzUxLTQxNzYtODFhYS1iNzViNWYzN2RiMDkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmQvNjVlMjE4
LWQ3NTEtNDE3Ni04MWFhLWI3NWI1ZjM3ZGIwOS8xL1ZCUTc3bnA4ejBlQUwxWHE1
VmU2WDgtZmVWNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAuedBMA0EAgACMAcDBQMqFHnAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwM8bDANBgkqhkiG9w0BAQsFAAOCAQEAIq3E7l6eUaSQ
I6cAoezpJW83g8/4ms7APRZ8dY6a5yrdeGSeJRjyW+B1g+8KArVXrYl+przTy+5K
6iHPRBdTjdLAa4vicIKupJcDjeR9WSj5rXUwSpk/f4uW742Lrh76arxm06VGfm8r
UHZoYHnkZTHJ5KXc+IyJT83Dj3fbUMQEVpUHUK7tzOI1ZmN0q9+xTNkS5wnlPztb
wCGyJ2qhPtQAl7s2ULIMS6e6nmzieZX+N3bZahl640WOkGldIallLvXIpIrcTR4r
sPIjB8wvWzDvjo5pvG3cM97C3lGRl02gLonjDUOXdib9f8PbrUf2e8BNneeDOvbL
jvRyIo+JXw==
-----END CERTIFICATE-----
Generated at Mon Feb 9 15:07:20 2026 by rpki-client