This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VNZdBt4mXaK11YjgbfiBbvRbLhc.cer File: VNZdBt4mXaK11YjgbfiBbvRbLhc.cer (raw, json) Hash identifier: IgHIZx3TrSzKu8yCyyC6Bit44xBXUcKNe3oEG4u4w9Y= Subject key identifier: 54:D6:5D:06:DE:26:5D:A2:B5:D5:88:E0:6D:F8:81:6E:F4:5B:2E:17 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019AF3C75DEE61B51E11CF29D007DC1838A8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e5/4ea873-fafc-40d1-aaeb-a1397870b166/1/VNZdBt4mXaK11YjgbfiBbvRbLhc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e5/4ea873-fafc-40d1-aaeb-a1397870b166/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Sat 06 Dec 2025 13:08:40 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 203921 IP: 2a11:46c0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c7:5d:ee:61:b5:1e:11:cf:29:d0:07:dc:18:38:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 6 13:08:40 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=54d65d06de265da2b5d588e06df8816ef45b2e17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:dd:13:d5:ed:6e:ee:c2:9a:93:57:e8:b3:78: 62:41:17:35:b5:cf:c1:9a:61:bc:85:03:c8:81:ec: 6b:17:bb:9c:e4:86:01:5e:8e:09:33:50:65:62:a7: 4c:91:80:c0:23:82:67:1a:98:cd:dc:da:91:d2:f5: b8:bc:a4:7a:ee:ce:2e:0e:21:88:2e:48:3b:be:68: 52:68:e6:17:26:02:dd:eb:8a:a4:c6:8a:1b:c8:f6: 9f:54:ea:96:b3:0a:82:e4:10:ab:44:ed:06:65:0d: 09:9d:ec:37:9b:75:06:84:c4:52:30:bd:9d:33:60: 78:8c:ca:67:63:53:e5:09:68:f2:be:f1:f4:4b:14: ee:87:3c:e7:f6:62:85:0a:0d:a1:23:09:3f:04:11: 23:68:95:15:61:5d:e5:dc:73:00:87:fb:fd:43:7a: ae:c8:29:7e:3c:da:08:ee:23:3f:48:01:b4:de:a5: 38:8a:62:42:24:44:b3:79:d8:a8:49:80:80:ed:6c: 13:77:30:e1:03:e0:55:8c:dc:b3:ca:85:5c:0f:67: 17:73:f5:85:97:57:58:47:06:d9:e7:59:d3:c3:3c: 8f:a8:a8:92:04:f1:5b:4b:d0:87:fd:3c:31:d5:82: 73:13:58:07:32:62:fe:21:a6:b1:8d:d5:95:3b:aa: 45:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:D6:5D:06:DE:26:5D:A2:B5:D5:88:E0:6D:F8:81:6E:F4:5B:2E:17 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4ea873-fafc-40d1-aaeb-a1397870b166/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4ea873-fafc-40d1-aaeb-a1397870b166/1/VNZdBt4mXaK11YjgbfiBbvRbLhc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a11:46c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 203921 Signature Algorithm: sha256WithRSAEncryption 6e:e6:fa:00:7b:f1:b1:04:d8:8c:a3:fc:05:6f:a3:ff:a6:22: aa:64:f3:da:64:bc:73:2f:7a:fe:df:23:e8:69:68:35:50:04: 5d:fa:17:a9:13:4f:57:13:bd:62:33:99:e9:f0:14:c1:87:9d: 70:0d:4a:cd:d2:96:d2:9c:37:3b:35:e3:50:00:a6:6d:4f:d6: a8:c0:6f:fa:3f:0b:0a:16:1c:50:98:56:4b:c9:65:f1:cd:c8: 1a:ec:1c:d5:8c:14:9c:3a:cb:6e:4e:a3:10:1d:56:96:86:ff: 49:a6:1e:77:31:84:3e:69:90:29:56:71:0e:4c:46:87:dc:15: 53:50:8b:37:6f:87:c8:fa:0e:72:0c:9e:ca:e3:76:d9:60:26: ac:ff:01:bd:79:17:a1:3a:bb:57:4a:91:df:82:10:43:4c:bb: 6e:9c:8b:15:30:f8:90:44:7b:65:ca:15:f5:cb:b5:fa:d3:eb: a0:2d:8e:7b:a2:3e:d2:2f:e0:5b:44:45:e4:3a:a2:a8:8a:70: a0:f5:32:4c:08:4f:f1:7a:d0:6d:b7:b4:71:e9:df:98:2f:1a: 7b:1e:77:83:e8:95:f6:1d:86:fb:a7:79:3e:3f:8e:9a:47:a3: 86:04:e0:21:a4:e8:f5:a9:e4:c5:bb:96:53:f7:46:95:da:32: 27:f9:a7:5c -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgISAZrzx13uYbUeEc8p0AfcGDioMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjA2MTMwODQwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NGQ2NWQwNmRlMjY1ZGEyYjVkNTg4ZTA2ZGY4ODE2ZWY0NWIyZTE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0d0T1e1u7sKak1fos3hiQRc1tc/B mmG8hQPIgexrF7uc5IYBXo4JM1BlYqdMkYDAI4JnGpjN3NqR0vW4vKR67s4uDiGI Lkg7vmhSaOYXJgLd64qkxoobyPafVOqWswqC5BCrRO0GZQ0Jnew3m3UGhMRSML2d M2B4jMpnY1PlCWjyvvH0SxTuhzzn9mKFCg2hIwk/BBEjaJUVYV3l3HMAh/v9Q3qu yCl+PNoI7iM/SAG03qU4imJCJESzedioSYCA7WwTdzDhA+BVjNyzyoVcD2cXc/WF l1dYRwbZ51nTwzyPqKiSBPFbS9CH/Twx1YJzE1gHMmL+IaaxjdWVO6pF2wIDAQAB o4ICoTCCAp0wHQYDVR0OBBYEFFTWXQbeJl2itdWI4G34gW70Wy4XMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U1LzRlYTg3 My1mYWZjLTQwZDEtYWFlYi1hMTM5Nzg3MGIxNjYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTUvNGVhODcz LWZhZmMtNDBkMS1hYWViLWExMzk3ODcwYjE2Ni8xL1ZOWmRCdDRtWGFLMTFZamdi ZmlCYnZSYkxoYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF BwEHAQH/BBEwDzANBAIAAjAHAwUAKhFGwDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMDHJEwDQYJKoZIhvcNAQELBQADggEBAG7m+gB78bEE2Iyj/AVvo/+mIqpk89pk vHMvev7fI+hpaDVQBF36F6kTT1cTvWIzmenwFMGHnXANSs3SltKcNzs141AApm1P 1qjAb/o/CwoWHFCYVkvJZfHNyBrsHNWMFJw6y25OoxAdVpaG/0mmHncxhD5pkClW cQ5MRofcFVNQizdvh8j6DnIMnsrjdtlgJqz/Ab15F6E6u1dKkd+CEENMu26cixUw +JBEe2XKFfXLtfrT66AtjnuiPtIv4FtEReQ6oqiKcKD1MkwIT/F60G23tHHp35gv Gnsed4PolfYdhvuneT4/jppHo4YE4CGk6PWp5MW7llP3RpXaMif5p1w= -----END CERTIFICATE-----Generated at Sun Dec 7 17:15:59 2025 by rpki-client