This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VKzhXkXvtaAGDAZeJ06o46-wJes.cer File: VKzhXkXvtaAGDAZeJ06o46-wJes.cer (raw, json) Hash identifier: dqXKA9vo71Kqtgy9sZTI+VukpKGj0LbbozLU/MKEQNg= Subject key identifier: 54:AC:E1:5E:45:EF:B5:A0:06:0C:06:5E:27:4E:A8:E3:AF:B0:25:EB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79102AAB471A1F9B158E795C2FD117E2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/77/8efa45-92a8-4513-9f9a-ad2b61380be1/1/VKzhXkXvtaAGDAZeJ06o46-wJes.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/77/8efa45-92a8-4513-9f9a-ad2b61380be1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:17:41 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 12625 IP: 185.102.252.0/22 IP: 193.29.64.0/19 IP: 2a00:7440::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:2a:ab:47:1a:1f:9b:15:8e:79:5c:2f:d1:17:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=54ace15e45efb5a0060c065e274ea8e3afb025eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:fc:79:31:cf:f5:eb:2d:e5:0d:33:aa:20:b0: 41:e9:6b:2f:8a:ed:40:2c:4c:f1:78:54:f1:c6:59: 13:94:61:65:54:80:5f:80:ec:3b:96:c5:31:a4:cd: dd:49:27:f7:38:6c:cc:75:3e:39:59:e1:8b:72:d7: 07:80:13:58:6a:d3:f0:39:bf:1c:d4:bf:7e:92:6c: c6:fe:16:2e:2f:8d:44:45:ca:91:39:9c:96:45:e3: a2:22:a3:c4:93:5b:53:9d:e2:3a:8f:83:2f:eb:b5: 69:46:39:8f:9b:a5:d4:fd:a9:6f:55:6a:f9:84:88: 81:75:87:cf:1f:5c:0e:3a:1b:d4:14:44:a9:52:42: 74:fe:46:38:c8:9e:b8:c3:77:2a:5b:ca:04:38:8e: ce:72:cb:65:c6:32:17:e3:b3:c5:8d:f3:23:79:fe: a7:7e:47:cf:8a:85:9f:10:54:97:2b:b1:21:d0:47: e0:17:74:18:e6:3b:45:2b:60:d1:39:81:36:15:4c: 72:47:85:c9:c6:98:95:72:e1:ab:75:98:8b:24:13: 6b:65:1a:f6:4f:6a:d8:8b:38:2a:e3:60:b3:a9:20: c2:5d:55:5f:e6:28:c1:7f:77:6a:5a:59:58:67:9a: e3:58:2c:2a:9f:1a:8f:15:e8:1b:e7:ee:60:25:02: a2:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:AC:E1:5E:45:EF:B5:A0:06:0C:06:5E:27:4E:A8:E3:AF:B0:25:EB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/8efa45-92a8-4513-9f9a-ad2b61380be1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/8efa45-92a8-4513-9f9a-ad2b61380be1/1/VKzhXkXvtaAGDAZeJ06o46-wJes.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.102.252.0/22 193.29.64.0/19 IPv6: 2a00:7440::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 12625 Signature Algorithm: sha256WithRSAEncryption 36:7b:d3:84:4b:fc:ec:e8:38:ca:79:77:d1:d1:02:ec:b3:bb: b3:1b:fb:fa:9c:fe:50:b7:ab:92:34:93:40:13:93:e9:15:77: 9e:ea:d4:6a:40:fb:ff:27:d8:fb:87:3e:46:24:28:ba:e5:2e: db:8c:b0:c0:08:43:f2:fc:00:9e:28:ac:94:e9:cf:e4:d6:5e: 5a:85:03:4d:dd:49:00:cd:c3:6c:2f:a0:91:10:0d:26:c2:4c: 50:d3:f2:01:8a:3b:e6:13:37:65:db:cf:22:42:db:d8:bf:20: 76:88:03:61:66:85:4f:0f:ec:b8:27:c0:72:23:d5:4c:66:80: 0c:b4:b2:36:a3:ef:ae:3e:d2:31:56:49:c1:81:51:bc:92:b6: 30:15:f0:15:d6:df:7b:05:d8:5a:bf:0c:7f:63:96:52:77:88: da:f1:2f:9f:2d:a8:84:bb:30:64:7d:5d:f6:be:60:c5:5d:3d: 18:04:07:d6:8a:6f:b1:be:12:31:9f:24:38:49:4d:3e:48:72: e9:fb:2d:35:2f:ee:86:da:3a:59:6a:3f:f9:ea:cb:8b:e1:e1: 40:5b:99:0e:47:32:36:4a:e7:14:19:31:eb:fb:dc:53:87:54: d5:13:1a:47:48:08:40:34:72:f1:0b:80:98:8c:31:38:75:64: e6:50:69:35 -----BEGIN CERTIFICATE----- MIIFqDCCBJCgAwIBAgISAZt5ECqrRxofmxWOeVwv0RfiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NGFjZTE1ZTQ1ZWZiNWEwMDYwYzA2NWUyNzRlYThlM2FmYjAyNWViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxfx5Mc/16y3lDTOqILBB6Wsviu1A LEzxeFTxxlkTlGFlVIBfgOw7lsUxpM3dSSf3OGzMdT45WeGLctcHgBNYatPwOb8c 1L9+kmzG/hYuL41ERcqROZyWReOiIqPEk1tTneI6j4Mv67VpRjmPm6XU/alvVWr5 hIiBdYfPH1wOOhvUFESpUkJ0/kY4yJ64w3cqW8oEOI7OcstlxjIX47PFjfMjef6n fkfPioWfEFSXK7Eh0EfgF3QY5jtFK2DROYE2FUxyR4XJxpiVcuGrdZiLJBNrZRr2 T2rYizgq42CzqSDCXVVf5ijBf3dqWllYZ5rjWCwqnxqPFegb5+5gJQKigQIDAQAB o4ICtDCCArAwHQYDVR0OBBYEFFSs4V5F77WgBgwGXidOqOOvsCXrMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc3LzhlZmE0 NS05MmE4LTQ1MTMtOWY5YS1hZDJiNjEzODBiZTEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzcvOGVmYTQ1 LTkyYTgtNDUxMy05ZjlhLWFkMmI2MTM4MGJlMS8xL1ZLemhYa1h2dGFBR0RBWmVK MDZvNDYtd0plcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCuWb8AwQFwR1AMA0EAgACMAcDBQMqAHRAMBkG CCsGAQUFBwEIAQH/BAowCKAGMAQCAjFRMA0GCSqGSIb3DQEBCwUAA4IBAQA2e9OE S/zs6DjKeXfR0QLss7uzG/v6nP5Qt6uSNJNAE5PpFXee6tRqQPv/J9j7hz5GJCi6 5S7bjLDACEPy/ACeKKyU6c/k1l5ahQNN3UkAzcNsL6CREA0mwkxQ0/IBijvmEzdl 288iQtvYvyB2iANhZoVPD+y4J8ByI9VMZoAMtLI2o++uPtIxVknBgVG8krYwFfAV 1t97Bdhavwx/Y5ZSd4ja8S+fLaiEuzBkfV32vmDFXT0YBAfWim+xvhIxnyQ4SU0+ SHLp+y01L+6G2jpZaj/56suL4eFAW5kORzI2SucUGTHr+9xTh1TVExpHSAhANHLx C4CYjDE4dWTmUGk1 -----END CERTIFICATE-----Generated at Mon Jan 26 20:28:40 2026 by rpki-client