This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VNKgw5g5F2jGGBpz8bQmx1ThdMo.cer File: VNKgw5g5F2jGGBpz8bQmx1ThdMo.cer (raw, json) Hash identifier: iSbiEUG339ehEnV9mADpi1FfPga2Hs4pjGt/RmEWxdk= Subject key identifier: 54:D2:A0:C3:98:39:17:68:C6:18:1A:73:F1:B4:26:C7:54:E1:74:CA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BBB7E149959420E7156560258EA606E37 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0c/3efc5e-b493-43d4-8ea8-4c238c6f03c9/1/VNKgw5g5F2jGGBpz8bQmx1ThdMo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0c/3efc5e-b493-43d4-8ea8-4c238c6f03c9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Wed 14 Jan 2026 07:52:40 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 214446 IP: 2001:67c:13c4::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:bb:7e:14:99:59:42:0e:71:56:56:02:58:ea:60:6e:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 14 07:52:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=54d2a0c398391768c6181a73f1b426c754e174ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:18:de:75:31:08:38:03:5d:10:70:3a:1a:c9: ba:0f:93:c0:30:37:7a:37:dc:57:02:91:f0:40:cf: b8:b7:9f:c8:6a:2f:b6:76:3a:c9:98:16:f4:ce:c0: 1f:af:ca:4f:9d:59:8b:0c:5a:56:53:35:2a:19:77: f1:c9:cf:17:f8:69:33:c9:ff:20:11:a0:8b:55:f2: 07:29:48:90:d1:81:dd:6f:37:53:7c:7e:ca:7d:3f: f5:e7:86:e8:50:15:f5:3c:01:09:b6:9e:1f:6e:01: 4e:e6:55:ec:d3:69:c5:b4:0e:93:23:85:fa:0a:96: 6e:0d:b3:07:86:7a:90:f1:e8:37:20:c5:73:80:3c: ba:1a:5d:0c:fd:01:21:86:74:fd:f6:7d:f0:90:03: c7:a8:84:41:81:3c:ec:d5:0c:61:3e:a9:2e:ea:f6: 2d:9e:98:f9:53:1f:05:ad:6f:83:7a:c7:6d:e7:3a: ba:72:54:94:f5:f7:b9:06:dd:ff:ab:4e:df:50:65: 67:80:9e:87:40:2f:49:e6:67:ff:ae:ae:ef:c6:0b: 49:1e:8e:cb:2d:29:d9:28:44:41:03:bd:f9:76:cd: 5e:94:2d:1a:4b:16:0f:23:b6:76:e1:b7:c9:4a:75: 6b:3a:c2:4e:a7:40:2d:69:ca:fb:d8:4a:b6:92:f6: 8f:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:D2:A0:C3:98:39:17:68:C6:18:1A:73:F1:B4:26:C7:54:E1:74:CA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3efc5e-b493-43d4-8ea8-4c238c6f03c9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3efc5e-b493-43d4-8ea8-4c238c6f03c9/1/VNKgw5g5F2jGGBpz8bQmx1ThdMo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:13c4::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 214446 Signature Algorithm: sha256WithRSAEncryption 6e:5b:c7:9a:cc:94:31:33:d7:2f:c6:ac:5d:b9:96:18:4c:f5: 9d:1c:5d:9a:ab:dc:e6:99:5a:ce:7d:48:1d:80:e3:54:92:bb: 93:f8:28:ef:a0:40:05:a4:2b:bb:dd:d1:e5:27:db:a9:15:81: 32:d0:81:aa:6b:ac:56:b0:c7:f3:1a:1c:70:16:e9:cf:4e:23: d7:ad:7b:5e:a2:6b:25:ea:c7:f8:70:3b:d5:37:3a:91:43:ac: 68:4f:f9:5d:9a:f0:bc:74:a0:c1:c0:e2:e5:1c:ee:f5:dc:51: 7e:fd:bb:fb:86:9c:84:e5:20:b2:e4:b1:02:39:23:56:72:8b: aa:ed:a4:86:70:0e:8a:c4:e5:a4:f2:df:d1:c5:9d:6c:1b:72: e9:25:ef:c9:30:80:87:48:6e:ec:77:a9:8a:51:7a:fa:0d:9b: 77:9c:56:9b:24:ee:64:15:bd:f6:ec:30:d4:b3:0c:42:d9:e5: 08:f8:30:66:43:e0:39:f3:42:b1:5b:5e:77:0a:6f:29:07:8b: 44:6f:1f:13:d4:86:1d:c7:da:5e:2d:1f:38:67:fb:4c:9d:5d: a8:27:96:52:d7:ef:7b:eb:10:c1:3c:15:57:53:04:d8:13:c8: eb:66:12:9c:45:da:2b:15:cf:fb:70:c5:fb:fb:bd:c0:b4:62: ad:2c:cc:5f -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZu7fhSZWUIOcVZWAljqYG43MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTE0MDc1MjQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NGQyYTBjMzk4MzkxNzY4YzYxODFhNzNmMWI0MjZjNzU0ZTE3NGNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1BjedTEIOANdEHA6Gsm6D5PAMDd6 N9xXApHwQM+4t5/Iai+2djrJmBb0zsAfr8pPnVmLDFpWUzUqGXfxyc8X+Gkzyf8g EaCLVfIHKUiQ0YHdbzdTfH7KfT/154boUBX1PAEJtp4fbgFO5lXs02nFtA6TI4X6 CpZuDbMHhnqQ8eg3IMVzgDy6Gl0M/QEhhnT99n3wkAPHqIRBgTzs1QxhPqku6vYt npj5Ux8FrW+Desdt5zq6clSU9fe5Bt3/q07fUGVngJ6HQC9J5mf/rq7vxgtJHo7L LSnZKERBA735ds1elC0aSxYPI7Z24bfJSnVrOsJOp0Atacr72Eq2kvaPmwIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFFTSoMOYORdoxhgac/G0JsdU4XTKMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBjLzNlZmM1 ZS1iNDkzLTQzZDQtOGVhOC00YzIzOGM2ZjAzYzkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGMvM2VmYzVl LWI0OTMtNDNkNC04ZWE4LTRjMjM4YzZmMDNjOS8xL1ZOS2d3NWc1RjJqR0dCcHo4 YlFteDFUaGRNby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfBPEMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwNFrjANBgkqhkiG9w0BAQsFAAOCAQEAblvHmsyUMTPXL8asXbmWGEz1nRxd mqvc5plazn1IHYDjVJK7k/go76BABaQru93R5SfbqRWBMtCBqmusVrDH8xoccBbp z04j1617XqJrJerH+HA71Tc6kUOsaE/5XZrwvHSgwcDi5Rzu9dxRfv27+4achOUg suSxAjkjVnKLqu2khnAOisTlpPLf0cWdbBty6SXvyTCAh0hu7HepilF6+g2bd5xW myTuZBW99uww1LMMQtnlCPgwZkPgOfNCsVtedwpvKQeLRG8fE9SGHcfaXi0fOGf7 TJ1dqCeWUtfve+sQwTwVV1ME2BPI62YSnEXaKxXP+3DF+/u9wLRirSzMXw== -----END CERTIFICATE-----Generated at Tue Jan 20 02:13:39 2026 by rpki-client