This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VLJNiVv5wKX9AApFo0dRCyoIf7g.cer File: VLJNiVv5wKX9AApFo0dRCyoIf7g.cer (raw, json) Hash identifier: zTMiingCPMKncTqLZIhnW8F6L6OiNfBTvQ2EPEjjGEQ= Subject key identifier: 54:B2:4D:89:5B:F9:C0:A5:FD:00:0A:45:A3:47:51:0B:2A:08:7F:B8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C7F5AC5B4A9D9DBE2BEC3B5E76724BE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/dc/d21679-2ad2-4df5-80b0-fcb9bd05b1ab/1/VLJNiVv5wKX9AApFo0dRCyoIf7g.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/dc/d21679-2ad2-4df5-80b0-fcb9bd05b1ab/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:17:59 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 60433 AS: 201023 IP: 147.78.228.0/22 IP: 185.32.8.0/22 IP: 2a04:4d80::/29 IP: 2a09:2a40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:5a:c5:b4:a9:d9:db:e2:be:c3:b5:e7:67:24:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=54b24d895bf9c0a5fd000a45a347510b2a087fb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:28:14:e1:69:84:a4:c2:e0:9b:c4:93:12:df: 70:92:83:1f:b0:fa:5d:41:02:03:af:51:a6:41:db: 50:cc:78:32:1c:be:44:df:dd:c3:76:97:8f:cb:36: 4f:ec:ca:3c:b9:e0:30:e2:05:85:cc:f7:09:68:d9: f1:df:96:d9:fc:2e:65:f3:dc:97:04:4f:91:bd:52: 43:53:b7:54:c4:a8:ce:90:e6:df:7d:96:1e:e8:e7: 5d:11:4c:0d:2d:06:29:31:fc:c0:1d:9a:0e:15:c5: 63:a4:fd:ce:cc:46:06:6d:3b:26:0a:11:ff:0c:e7: b4:bd:7b:ed:cf:06:85:a3:81:02:0a:d4:c1:92:4e: 45:78:04:af:8a:39:05:cd:f8:68:be:51:0b:e2:eb: 32:01:73:e6:c7:a4:08:38:e5:78:ad:da:4c:cb:02: 45:84:08:f4:58:f2:08:3a:32:42:db:1e:c4:f9:91: f3:27:1b:5e:88:be:8b:14:81:8b:36:2c:0e:c2:99: 26:bb:3b:9b:d3:47:05:6a:cb:0a:d7:18:f9:a0:85: c8:b1:49:a9:04:75:65:60:8c:f4:80:ec:9d:37:1e: c6:4c:c8:b3:45:1d:02:04:2c:71:a6:2e:33:d9:26: 4d:3c:cc:c1:5d:7b:a6:09:aa:bd:32:54:83:bf:a4: c0:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:B2:4D:89:5B:F9:C0:A5:FD:00:0A:45:A3:47:51:0B:2A:08:7F:B8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d21679-2ad2-4df5-80b0-fcb9bd05b1ab/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d21679-2ad2-4df5-80b0-fcb9bd05b1ab/1/VLJNiVv5wKX9AApFo0dRCyoIf7g.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.78.228.0/22 185.32.8.0/22 IPv6: 2a04:4d80::/29 2a09:2a40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 60433 201023 Signature Algorithm: sha256WithRSAEncryption 15:0e:81:4b:68:dc:92:46:a2:03:0d:57:10:41:6d:79:1b:79: bd:74:1e:3f:dd:f7:40:20:fc:cf:50:12:c3:7e:89:9c:26:34: 92:47:e3:5f:93:ad:ac:e9:95:e2:19:b6:30:b2:cd:04:29:73: 9f:3f:fd:82:6b:04:fb:a1:71:67:bc:21:a4:87:86:dd:05:72: 00:58:a1:02:0b:ab:61:c9:fd:6b:c4:bd:68:09:04:33:97:c5: 4f:49:bd:5b:a1:1f:41:fc:11:de:f5:7d:35:05:bc:1b:ce:22: e0:88:88:15:8e:f9:b7:2c:04:10:6b:ea:3d:ef:30:64:b3:9e: 06:ae:b6:07:d7:71:2d:c1:62:fe:fa:01:f1:53:f6:5e:82:f8: 08:b0:9d:d4:39:10:e6:c7:bb:5e:54:07:0b:6c:ed:67:f5:b6: 47:30:7a:a9:d1:b3:56:ee:95:3c:8d:25:15:05:3a:81:de:31: 3f:a6:fb:79:b0:26:09:3e:cd:90:be:ef:f2:12:78:7f:80:56: 79:da:54:ea:34:83:2a:e6:cc:71:d9:9c:73:4d:05:68:ae:20: a9:e2:61:67:30:04:16:cb:ce:93:6a:b2:16:65:04:23:94:b3: ed:4b:ee:e0:04:64:cc:40:1d:ec:9b:5d:88:89:b7:29:dd:25: 4a:64:72:1b -----BEGIN CERTIFICATE----- MIIFtTCCBJ2gAwIBAgISAZt8f1rFtKnZ2+K+w7XnZyS+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NGIyNGQ4OTViZjljMGE1ZmQwMDBhNDVhMzQ3NTEwYjJhMDg3ZmI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9SgU4WmEpMLgm8STEt9wkoMfsPpd QQIDr1GmQdtQzHgyHL5E393DdpePyzZP7Mo8ueAw4gWFzPcJaNnx35bZ/C5l89yX BE+RvVJDU7dUxKjOkObffZYe6OddEUwNLQYpMfzAHZoOFcVjpP3OzEYGbTsmChH/ DOe0vXvtzwaFo4ECCtTBkk5FeASvijkFzfhovlEL4usyAXPmx6QIOOV4rdpMywJF hAj0WPIIOjJC2x7E+ZHzJxteiL6LFIGLNiwOwpkmuzub00cFassK1xj5oIXIsUmp BHVlYIz0gOydNx7GTMizRR0CBCxxpi4z2SZNPMzBXXumCaq9MlSDv6TANwIDAQAB o4ICwTCCAr0wHQYDVR0OBBYEFFSyTYlb+cCl/QAKRaNHUQsqCH+4MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RjL2QyMTY3 OS0yYWQyLTRkZjUtODBiMC1mY2I5YmQwNWIxYWIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGMvZDIxNjc5 LTJhZDItNGRmNS04MGIwLWZjYjliZDA1YjFhYi8xL1ZMSk5pVnY1d0tYOUFBcEZv MGRSQ3lvSWY3Zy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDsGCCsGAQUF BwEHAQH/BCwwKjASBAIAATAMAwQCk07kAwQCuSAIMBQEAgACMA4DBQMqBE2AAwUD KgkqQDAfBggrBgEFBQcBCAEB/wQQMA6gDDAKAgMA7BECAwMRPzANBgkqhkiG9w0B AQsFAAOCAQEAFQ6BS2jckkaiAw1XEEFteRt5vXQeP933QCD8z1ASw36JnCY0kkfj X5OtrOmV4hm2MLLNBClznz/9gmsE+6FxZ7whpIeG3QVyAFihAgurYcn9a8S9aAkE M5fFT0m9W6EfQfwR3vV9NQW8G84i4IiIFY75tywEEGvqPe8wZLOeBq62B9dxLcFi /voB8VP2XoL4CLCd1DkQ5se7XlQHC2ztZ/W2RzB6qdGzVu6VPI0lFQU6gd4xP6b7 ebAmCT7NkL7v8hJ4f4BWedpU6jSDKubMcdmcc00FaK4gqeJhZzAEFsvOk2qyFmUE I5Sz7Uvu4ARkzEAd7JtdiIm3Kd0lSmRyGw== -----END CERTIFICATE-----Generated at Mon Feb 9 15:04:23 2026 by rpki-client