This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VEkF6q1M6mw_LWUMCPrj1EUYZ1I.cer File: VEkF6q1M6mw_LWUMCPrj1EUYZ1I.cer (raw, json) Hash identifier: QJ1bsW9oW8Era/b9U9eIs85i13ebTkmuK2AEeK0DwoQ= Subject key identifier: 54:49:05:EA:AD:4C:EA:6C:3F:2D:65:0C:08:FA:E3:D4:45:18:67:52 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ED57BAB67903960EE0D5B142AA0A14 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d0/99ccfa-c96f-4d12-b18f-5b3a41125bea/1/VEkF6q1M6mw_LWUMCPrj1EUYZ1I.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d0/99ccfa-c96f-4d12-b18f-5b3a41125bea/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:19:16 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 210941 IP: 2001:67c:810::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:57:ba:b6:79:03:96:0e:e0:d5:b1:42:aa:0a:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:19:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=544905eaad4cea6c3f2d650c08fae3d445186752 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:86:25:92:fe:bc:b9:77:ce:c1:5c:75:d2:31: f7:00:4b:3d:df:61:7a:b1:74:3f:05:f4:e0:9d:a9: 07:b5:1d:6f:d5:ea:01:b1:46:b9:a1:af:67:d7:0c: cd:5e:45:f0:aa:3f:03:2d:97:34:8c:c2:68:33:87: c2:7b:99:e2:f5:38:ef:15:1e:53:e3:a2:60:5f:4f: 7f:2d:81:81:3c:21:db:08:7d:64:60:f0:e2:29:90: eb:1e:1f:a0:c0:e9:f4:18:f2:6f:f6:25:08:75:25: 60:73:64:cb:d3:f9:89:be:71:56:6e:af:5f:44:c5: 48:66:c9:b7:7c:b1:93:1f:8f:00:f0:0e:6a:12:6d: 11:f7:3f:a0:9d:46:2c:e4:ef:58:c2:21:1a:43:91: 5a:51:c3:49:f1:fa:97:c6:5b:89:d3:e4:f1:66:85: 6a:c6:fd:7d:eb:24:2a:04:10:d3:3c:df:81:73:59: 3e:0e:97:a8:7f:83:f1:1d:5a:33:5b:ff:7b:d7:ea: a1:73:3a:7f:b6:d3:89:93:63:20:f1:a7:5b:cd:2c: 98:b6:dd:4e:4e:ba:8a:6f:c6:50:0c:be:2a:ee:cc: 8c:35:ae:f9:86:dc:74:16:3f:f2:c2:4a:47:1a:3c: 85:34:4e:8b:d2:3a:75:ea:73:ac:96:47:27:18:bc: de:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:49:05:EA:AD:4C:EA:6C:3F:2D:65:0C:08:FA:E3:D4:45:18:67:52 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/99ccfa-c96f-4d12-b18f-5b3a41125bea/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/99ccfa-c96f-4d12-b18f-5b3a41125bea/1/VEkF6q1M6mw_LWUMCPrj1EUYZ1I.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:810::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 210941 Signature Algorithm: sha256WithRSAEncryption 97:78:d1:dd:cf:4e:6b:fd:5e:9b:3d:bb:67:a3:24:86:cd:df: 93:f4:ae:a5:5b:d8:5c:1d:ea:5b:93:c8:af:e0:53:f0:8c:ac: de:c0:f4:4c:52:1c:7f:bc:f6:75:ea:bf:1e:4a:fe:4b:01:00: 8a:d2:ff:c3:74:bc:b0:bb:2e:c3:9c:56:06:4d:08:03:6f:1b: 48:4a:44:2a:35:a9:f4:a5:f7:e4:d1:dc:cf:62:65:15:3d:88: ca:76:b6:d7:55:74:c5:d0:bf:80:7a:02:e4:fe:ad:01:b5:c5: 4c:39:8e:66:61:c2:4e:ac:6b:62:a5:0f:f6:49:46:ab:cb:0f: e0:6d:84:db:48:cf:cd:4d:63:14:4c:b3:2a:3b:69:55:44:d8: 28:6b:7f:b5:90:bb:c7:45:46:a6:f7:3e:82:f2:b1:ba:49:83: 12:5d:d8:9d:6c:53:c5:49:4e:ae:50:86:03:60:74:8d:9e:19: 3e:3b:5d:4d:e7:c0:25:0d:32:b6:d3:20:5d:9c:79:ff:76:c2: 3f:3e:bd:00:48:45:e2:b3:c2:d3:9c:ac:12:aa:f4:36:a5:e2: f2:a3:c5:24:6b:3f:1a:66:92:c3:54:6f:d7:3c:d4:1e:16:79: b5:ee:65:82:26:14:31:85:c6:6c:1a:bc:99:9f:30:54:75:ad: fb:a4:74:cf -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZt57Ve6tnkDlg7g1bFCqgoUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NDQ5MDVlYWFkNGNlYTZjM2YyZDY1MGMwOGZhZTNkNDQ1MTg2NzUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4Ylkv68uXfOwVx10jH3AEs932F6 sXQ/BfTgnakHtR1v1eoBsUa5oa9n1wzNXkXwqj8DLZc0jMJoM4fCe5ni9TjvFR5T 46JgX09/LYGBPCHbCH1kYPDiKZDrHh+gwOn0GPJv9iUIdSVgc2TL0/mJvnFWbq9f RMVIZsm3fLGTH48A8A5qEm0R9z+gnUYs5O9YwiEaQ5FaUcNJ8fqXxluJ0+TxZoVq xv196yQqBBDTPN+Bc1k+Dpeof4PxHVozW/971+qhczp/ttOJk2Mg8adbzSyYtt1O TrqKb8ZQDL4q7syMNa75htx0Fj/ywkpHGjyFNE6L0jp16nOslkcnGLzeEwIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFFRJBeqtTOpsPy1lDAj649RFGGdSMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2QwLzk5Y2Nm YS1jOTZmLTRkMTItYjE4Zi01YjNhNDExMjViZWEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDAvOTljY2Zh LWM5NmYtNGQxMi1iMThmLTViM2E0MTEyNWJlYS8xL1ZFa0Y2cTFNNm13X0xXVU1D UHJqMUVVWVoxSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAgQMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwM3/TANBgkqhkiG9w0BAQsFAAOCAQEAl3jR3c9Oa/1emz27Z6Mkhs3fk/Su pVvYXB3qW5PIr+BT8Iys3sD0TFIcf7z2deq/Hkr+SwEAitL/w3S8sLsuw5xWBk0I A28bSEpEKjWp9KX35NHcz2JlFT2Iyna211V0xdC/gHoC5P6tAbXFTDmOZmHCTqxr YqUP9klGq8sP4G2E20jPzU1jFEyzKjtpVUTYKGt/tZC7x0VGpvc+gvKxukmDEl3Y nWxTxUlOrlCGA2B0jZ4ZPjtdTefAJQ0yttMgXZx5/3bCPz69AEhF4rPC05ysEqr0 NqXi8qPFJGs/GmaSw1Rv1zzUHhZ5te5lgiYUMYXGbBq8mZ8wVHWt+6R0zw== -----END CERTIFICATE-----Generated at Mon Feb 9 16:52:05 2026 by rpki-client