This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VPQtulHsKDXT5NCj2MSL8yL2vbU.cer File: VPQtulHsKDXT5NCj2MSL8yL2vbU.cer (raw, json) Hash identifier: r3bjB0FZKIiIBw9hG/KaHx847+vdyWRTtuBXRDHa+Jc= Subject key identifier: 54:F4:2D:BA:51:EC:28:35:D3:E4:D0:A3:D8:C4:8B:F3:22:F6:BD:B5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C133CA2C36F4E0FF166D0A102D70D9F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f0/9a9e14-04ea-413f-8c48-a24fabf56dad/1/VPQtulHsKDXT5NCj2MSL8yL2vbU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f0/9a9e14-04ea-413f-8c48-a24fabf56dad/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:19:54 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 204854 IP: 185.237.76.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:3c:a2:c3:6f:4e:0f:f1:66:d0:a1:02:d7:0d:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:19:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=54f42dba51ec2835d3e4d0a3d8c48bf322f6bdb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:40:6a:b6:44:12:4e:b2:cf:27:0f:d3:8f:61: 88:81:f7:1b:3c:9d:32:67:92:3a:69:fe:cd:30:14: 3c:45:de:0f:d2:7f:39:ad:bc:50:40:7f:45:71:9e: 41:4d:02:4c:f1:07:3a:75:86:a3:ba:68:55:76:dc: aa:ea:bc:62:11:ca:3c:e4:a9:d7:9f:5e:85:0e:e8: c2:08:02:ed:f3:10:6f:88:0e:f1:8b:2a:22:98:25: b3:58:3a:2d:ed:64:20:34:a5:46:2a:87:3e:7e:4f: 14:55:b4:ba:7f:97:5d:f7:c1:e5:08:e7:4e:f4:34: cd:49:a5:c3:06:dc:2c:66:88:a1:60:cd:30:88:51: ef:65:fd:56:dc:68:51:73:fb:b5:49:93:aa:df:54: 38:19:d6:8d:c5:d6:32:ee:24:ad:b4:1c:ab:d2:64: 57:f4:06:e3:7b:b8:e5:72:98:5a:4d:2f:41:54:34: 17:7a:95:84:0a:0a:87:39:4a:ff:ec:1c:27:a2:30: 1e:94:31:07:7a:38:27:98:95:f0:75:e1:c6:fe:1f: 50:ba:aa:c7:db:3a:ae:48:11:26:54:11:a5:6b:46: 17:c5:b7:ee:2d:98:67:9c:3e:4c:5b:26:a4:4a:13: cf:44:1f:e4:dd:ec:12:3f:74:ea:ac:f0:85:e7:85: 6b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:F4:2D:BA:51:EC:28:35:D3:E4:D0:A3:D8:C4:8B:F3:22:F6:BD:B5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9a9e14-04ea-413f-8c48-a24fabf56dad/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9a9e14-04ea-413f-8c48-a24fabf56dad/1/VPQtulHsKDXT5NCj2MSL8yL2vbU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.237.76.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 204854 Signature Algorithm: sha256WithRSAEncryption 46:5f:e5:6b:29:d4:ef:ed:6e:80:e5:02:4e:45:ca:17:fb:04: 94:51:ef:1d:5b:d8:40:8d:68:f3:54:a0:dd:77:d0:da:36:ad: 06:82:1f:86:a5:95:15:58:48:25:18:0f:da:08:83:2e:a0:2a: 73:4c:0b:f4:ee:d0:43:89:72:73:9f:a3:95:14:25:eb:fa:7d: 91:8c:22:51:30:b3:93:9c:81:d3:f6:9e:b6:c6:1a:4e:5f:82: 16:b2:cd:dd:e3:89:6e:f4:1a:16:b2:50:fb:d6:ad:ff:e7:99: 34:d0:4e:73:10:d9:7e:0b:b9:3a:c5:34:f1:6d:1b:13:4c:66: c7:ca:ed:0a:c1:77:26:2f:69:4f:3a:17:1c:38:d6:e7:93:55: 39:bd:56:51:55:02:92:b8:e8:b7:01:d7:64:0d:e3:57:3d:4c: 02:8a:6b:5d:bd:88:76:1c:09:37:9f:c1:fc:69:cf:df:e2:11: 17:0b:44:d7:8f:8b:84:98:9c:f9:42:b9:15:e6:40:14:55:85: ec:5f:49:ed:f8:5a:69:32:dc:e7:42:d5:d8:70:27:ee:f1:d2: b6:f9:dc:d1:0f:f9:d5:3a:cd:26:b1:71:21:dc:7d:04:4a:2e: b0:59:52:d7:9f:88:be:a6:3b:30:9a:ab:c8:5a:59:83:84:3f: ac:5c:df:21 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt8Ezyiw29OD/Fm0KEC1w2fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxOTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NGY0MmRiYTUxZWMyODM1ZDNlNGQwYTNkOGM0OGJmMzIyZjZiZGI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUBqtkQSTrLPJw/Tj2GIgfcbPJ0y Z5I6af7NMBQ8Rd4P0n85rbxQQH9FcZ5BTQJM8Qc6dYajumhVdtyq6rxiEco85KnX n16FDujCCALt8xBviA7xiyoimCWzWDot7WQgNKVGKoc+fk8UVbS6f5dd98HlCOdO 9DTNSaXDBtwsZoihYM0wiFHvZf1W3GhRc/u1SZOq31Q4GdaNxdYy7iSttByr0mRX 9Abje7jlcphaTS9BVDQXepWECgqHOUr/7BwnojAelDEHejgnmJXwdeHG/h9QuqrH 2zquSBEmVBGla0YXxbfuLZhnnD5MWyakShPPRB/k3ewSP3TqrPCF54Vr9wIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFFT0LbpR7Cg10+TQo9jEi/Mi9r21MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YwLzlhOWUx NC0wNGVhLTQxM2YtOGM0OC1hMjRmYWJmNTZkYWQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjAvOWE5ZTE0 LTA0ZWEtNDEzZi04YzQ4LWEyNGZhYmY1NmRhZC8xL1ZQUXR1bEhzS0RYVDVOQ2oy TVNMOHlMMnZiVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCue1MMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMgNjANBgkqhkiG9w0BAQsFAAOCAQEARl/laynU7+1ugOUCTkXKF/sElFHvHVvY QI1o81Sg3XfQ2jatBoIfhqWVFVhIJRgP2giDLqAqc0wL9O7QQ4lyc5+jlRQl6/p9 kYwiUTCzk5yB0/aetsYaTl+CFrLN3eOJbvQaFrJQ+9at/+eZNNBOcxDZfgu5OsU0 8W0bE0xmx8rtCsF3Ji9pTzoXHDjW55NVOb1WUVUCkrjotwHXZA3jVz1MAoprXb2I dhwJN5/B/GnP3+IRFwtE14+LhJic+UK5FeZAFFWF7F9J7fhaaTLc50LV2HAn7vHS tvnc0Q/51TrNJrFxIdx9BEousFlS15+IvqY7MJqryFpZg4Q/rFzfIQ== -----END CERTIFICATE-----Generated at Mon Feb 9 20:49:36 2026 by rpki-client