This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VDxwGANHJZY6lxyWqMqrWYyuY4o.cer File: VDxwGANHJZY6lxyWqMqrWYyuY4o.cer (raw, json) Hash identifier: Vdzk2qAnMUevf8H/dlVeO0r2EMP2J45kD9fah43ZYlc= Subject key identifier: 54:3C:70:18:03:47:25:96:3A:97:1C:96:A8:CA:AB:59:8C:AE:63:8A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B2831A43332CF4CA854F6B689829F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/45/509d0b-acd1-4958-a3cd-375f2449a8c1/1/VDxwGANHJZY6lxyWqMqrWYyuY4o.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/45/509d0b-acd1-4958-a3cd-375f2449a8c1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:13 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.155.74.0/24 IP: 2a13:9800::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 15:05:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:28:31:a4:33:32:cf:4c:a8:54:f6:b6:89:82:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=543c7018034725963a971c96a8caab598cae638a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f2:6d:57:e8:c1:cf:27:a1:81:39:d1:6a:93: a7:03:aa:26:b8:85:22:29:94:cd:68:08:68:a4:de: 83:fa:15:5e:73:32:42:9c:d6:c9:ab:0e:4d:2c:bc: a8:08:89:e7:b9:de:ae:3c:74:70:4d:98:8c:32:7a: c8:ed:a7:b4:59:1a:3b:d7:b0:ae:90:44:56:09:cd: 9a:10:0c:a7:fc:1e:e0:97:75:6f:5a:86:4d:11:f2: 5b:8a:50:83:5b:48:d6:0f:48:b3:37:1d:ac:9f:a6: 1d:5f:e4:46:bb:93:78:00:d3:c1:44:41:23:05:4f: d9:73:c5:b9:35:f4:7e:fd:64:46:f8:0f:2c:b9:76: ae:c6:dd:3b:12:47:3a:bf:93:8f:db:56:1b:7f:55: 8a:1f:6f:0c:a4:76:63:5c:82:d2:f6:13:4c:a7:7d: d9:a9:75:f9:b2:20:a8:95:5b:97:c8:be:41:0d:c4: 1c:9e:ed:fe:92:74:7c:47:24:42:49:75:ed:de:51: 31:96:ed:51:83:7c:b8:9a:46:8c:ff:44:03:6b:12: fe:39:1f:a6:ec:a5:a7:06:e0:8b:5e:f8:ba:40:12: aa:da:9a:7e:23:e2:c8:da:8e:94:b7:31:e7:e1:85: 9c:18:10:ef:1f:45:fb:e2:9d:c3:34:82:93:1e:4d: a2:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:3C:70:18:03:47:25:96:3A:97:1C:96:A8:CA:AB:59:8C:AE:63:8A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/509d0b-acd1-4958-a3cd-375f2449a8c1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/509d0b-acd1-4958-a3cd-375f2449a8c1/1/VDxwGANHJZY6lxyWqMqrWYyuY4o.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.155.74.0/24 IPv6: 2a13:9800::/29 Signature Algorithm: sha256WithRSAEncryption 22:3e:f6:47:61:a7:17:4b:2c:8d:ea:e2:b0:e6:ad:10:ff:dc: 2b:90:a3:4c:ce:0b:07:38:21:6a:76:ca:c4:9b:a7:f1:9d:b5: dc:e1:32:61:d4:4f:87:96:77:5d:af:f4:8c:f6:0b:cc:1d:3a: 7c:f1:53:b5:51:56:47:df:7e:d4:d3:b5:c1:9e:e1:cc:42:e6: e3:eb:8d:1d:ac:27:dd:5e:77:d4:4c:7b:11:81:8c:a6:38:de: cd:fe:c9:2c:a9:1a:61:fe:61:69:11:cb:48:63:d2:9d:98:dc: f7:dc:bb:2b:c0:7d:82:d1:60:ac:7d:2a:34:7b:63:da:f1:e2: 1d:f4:21:08:22:8e:05:80:93:88:92:ac:ea:2a:0c:4b:79:52: 69:c6:c3:2c:35:6a:db:43:89:82:6e:08:e1:65:f5:e9:8c:74: d8:06:6e:33:25:58:d3:6e:42:c2:7c:33:6e:d3:6f:b2:f6:42: e1:9f:2f:3e:4c:57:57:8d:81:06:e1:f9:2c:e4:2e:31:d8:6c: c0:4a:39:34:5a:77:38:af:ab:59:bd:1f:0b:fa:b2:4e:da:72: fe:0f:f6:5d:e8:77:8b:a3:eb:8e:f9:4c:a6:55:1e:f1:60:e1: 4e:66:c3:3f:74:28:2b:6f:84:98:93:c8:3c:63:92:b2:cf:7e: 4b:35:d0:0c -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt6WygxpDMyz0yoVPa2iYKfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NDNjNzAxODAzNDcyNTk2M2E5NzFjOTZhOGNhYWI1OThjYWU2MzhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPJtV+jBzyehgTnRapOnA6omuIUi KZTNaAhopN6D+hVeczJCnNbJqw5NLLyoCInnud6uPHRwTZiMMnrI7ae0WRo717Cu kERWCc2aEAyn/B7gl3VvWoZNEfJbilCDW0jWD0izNx2sn6YdX+RGu5N4ANPBREEj BU/Zc8W5NfR+/WRG+A8suXauxt07Ekc6v5OP21Ybf1WKH28MpHZjXILS9hNMp33Z qXX5siColVuXyL5BDcQcnu3+knR8RyRCSXXt3lExlu1Rg3y4mkaM/0QDaxL+OR+m 7KWnBuCLXvi6QBKq2pp+I+LI2o6UtzHn4YWcGBDvH0X74p3DNIKTHk2iBwIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFFQ8cBgDRyWWOpcclqjKq1mMrmOKMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ1LzUwOWQw Yi1hY2QxLTQ5NTgtYTNjZC0zNzVmMjQ0OWE4YzEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDUvNTA5ZDBi LWFjZDEtNDk1OC1hM2NkLTM3NWYyNDQ5YThjMS8xL1ZEeHdHQU5ISlpZNmx4eVdx TXFyV1l5dVk0by5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAuZtKMA0EAgACMAcDBQMqE5gAMA0GCSqGSIb3 DQEBCwUAA4IBAQAiPvZHYacXSyyN6uKw5q0Q/9wrkKNMzgsHOCFqdsrEm6fxnbXc 4TJh1E+Hlnddr/SM9gvMHTp88VO1UVZH337U07XBnuHMQubj640drCfdXnfUTHsR gYymON7N/sksqRph/mFpEctIY9KdmNz33LsrwH2C0WCsfSo0e2Pa8eId9CEIIo4F gJOIkqzqKgxLeVJpxsMsNWrbQ4mCbgjhZfXpjHTYBm4zJVjTbkLCfDNu02+y9kLh ny8+TFdXjYEG4fks5C4x2GzASjk0Wnc4r6tZvR8L+rJO2nL+D/Zd6HeLo+uO+Uym VR7xYOFOZsM/dCgrb4SYk8g8Y5Kyz35LNdAM -----END CERTIFICATE-----Generated at Mon Feb 2 17:16:27 2026 by rpki-client