This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VRDNubrguTLHmin42XktMJ9617c.cer File: VRDNubrguTLHmin42XktMJ9617c.cer (raw, json) Hash identifier: SLG2MW4XddXbNWIQ2mGSdZ4dbhkflJ/hG+hE/r4dEV0= Subject key identifier: 55:10:CD:B9:BA:E0:B9:32:C7:9A:29:F8:D9:79:2D:30:9F:7A:D7:B7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7834A3BFA40C8CC058F523BEDD379166 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/67/770966-7dac-4e1c-b3ed-df5902013cdf/1/VRDNubrguTLHmin42XktMJ9617c.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/67/770966-7dac-4e1c-b3ed-df5902013cdf/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:17:54 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 213935 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:a3:bf:a4:0c:8c:c0:58:f5:23:be:dd:37:91:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5510cdb9bae0b932c79a29f8d9792d309f7ad7b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:d8:ad:05:3b:f6:c1:af:46:bc:a8:9d:b1:86: ba:41:c3:f6:27:a9:ac:91:8e:f6:da:51:4a:f2:29: be:00:38:b4:ff:c6:30:40:09:af:03:12:fd:22:1c: 60:44:aa:10:96:71:bb:1e:a2:1b:da:80:16:d9:e9: 6b:24:98:8a:7c:55:f9:fb:20:fd:e4:fc:93:2b:31: a5:72:d2:f3:6b:d0:bc:f5:af:5a:87:6b:83:d2:f3: 8c:02:a2:db:76:8d:f5:1d:0e:95:01:9a:cf:c8:47: 86:f3:e5:92:8f:05:a4:e5:8b:f8:67:03:83:da:0c: 72:51:14:c9:04:7c:06:da:c1:75:dd:c5:9d:ba:9b: 8a:73:f8:e0:1e:40:54:d9:f2:7d:11:1e:b2:93:35: 96:ff:a8:49:11:a8:23:f6:28:38:5c:44:76:8e:2a: f1:3e:6d:28:24:98:ae:9d:ad:29:47:24:4c:29:b8: 26:d5:23:38:5b:7a:52:6a:7d:a6:df:66:b8:9c:03: 25:8a:be:f2:d6:34:6e:f2:30:17:21:aa:a3:74:fd: 1e:ab:9b:db:f2:a1:63:08:75:a7:72:a0:75:fa:e1: 7f:fd:af:6e:ab:98:07:f2:0f:97:6e:73:4d:f3:30: b7:26:d1:39:f0:9d:f1:e2:69:5d:ea:15:d8:d6:84: 53:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:10:CD:B9:BA:E0:B9:32:C7:9A:29:F8:D9:79:2D:30:9F:7A:D7:B7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/770966-7dac-4e1c-b3ed-df5902013cdf/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/770966-7dac-4e1c-b3ed-df5902013cdf/1/VRDNubrguTLHmin42XktMJ9617c.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 213935 Signature Algorithm: sha256WithRSAEncryption 98:94:cd:a6:0b:95:34:8f:ac:7c:0d:b5:1e:c9:db:9e:f1:e6: d5:35:35:95:23:80:8b:81:63:28:b6:97:1a:f5:9b:09:10:70: 37:28:40:a1:0a:e4:e9:c2:cf:0f:f1:1b:fe:b2:5b:8e:32:a5: 23:8e:a3:6a:f5:b8:42:48:ef:88:22:25:96:0e:56:60:38:69: ef:33:ec:d6:45:30:63:29:eb:2c:b1:ac:85:7b:2b:de:18:0b: cb:a8:85:10:17:f2:1b:34:02:e1:45:96:ea:ba:b5:ff:18:ad: e3:76:18:c3:66:6c:d1:46:5b:31:c1:ae:63:f8:7f:26:7f:ee: 6f:57:5a:16:d6:ec:af:fb:9a:b8:e8:b4:12:3c:0f:61:f1:4e: 36:02:0c:56:1a:2c:6f:b6:55:cc:c7:0a:f2:4e:c8:82:81:26: 19:f5:e2:fc:51:39:35:9e:7f:0f:70:04:cb:d4:da:1c:25:ea: b1:80:8c:98:94:6d:e0:82:5c:09:fa:30:8f:78:28:3e:e8:9c: 32:ea:e4:95:04:00:d5:d1:98:7e:f9:6a:d7:44:22:60:59:f9: ba:ff:9f:53:bd:65:10:5e:68:84:39:9d:9a:c2:5b:24:8d:fd: 11:78:f5:a1:05:ad:fa:c3:19:47:be:ae:75:f0:8a:48:bd:e8: e1:88:f0:7f -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt4NKO/pAyMwFj1I77dN5FmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NTEwY2RiOWJhZTBiOTMyYzc5YTI5ZjhkOTc5MmQzMDlmN2FkN2I3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA49itBTv2wa9GvKidsYa6QcP2J6ms kY722lFK8im+ADi0/8YwQAmvAxL9IhxgRKoQlnG7HqIb2oAW2elrJJiKfFX5+yD9 5PyTKzGlctLza9C89a9ah2uD0vOMAqLbdo31HQ6VAZrPyEeG8+WSjwWk5Yv4ZwOD 2gxyURTJBHwG2sF13cWdupuKc/jgHkBU2fJ9ER6ykzWW/6hJEagj9ig4XER2jirx Pm0oJJiuna0pRyRMKbgm1SM4W3pSan2m32a4nAMlir7y1jRu8jAXIaqjdP0eq5vb 8qFjCHWncqB1+uF//a9uq5gH8g+XbnNN8zC3JtE58J3x4mld6hXY1oRTSQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFFUQzbm64Lkyx5op+Nl5LTCfete3MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY3Lzc3MDk2 Ni03ZGFjLTRlMWMtYjNlZC1kZjU5MDIwMTNjZGYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjcvNzcwOTY2 LTdkYWMtNGUxYy1iM2VkLWRmNTkwMjAxM2NkZi8xL1ZSRE51YnJndVRMSG1pbjQy WGt0TUo5NjE3Yy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNDrzANBgkqhkiG9w0BAQsFAAOCAQEAmJTNpguVNI+s fA21HsnbnvHm1TU1lSOAi4FjKLaXGvWbCRBwNyhAoQrk6cLPD/Eb/rJbjjKlI46j avW4QkjviCIllg5WYDhp7zPs1kUwYynrLLGshXsr3hgLy6iFEBfyGzQC4UWW6rq1 /xit43YYw2Zs0UZbMcGuY/h/Jn/ub1daFtbsr/uauOi0EjwPYfFONgIMVhosb7ZV zMcK8k7IgoEmGfXi/FE5NZ5/D3AEy9TaHCXqsYCMmJRt4IJcCfowj3goPuicMurk lQQA1dGYfvlq10QiYFn5uv+fU71lEF5ohDmdmsJbJI39EXj1oQWt+sMZR76udfCK SL3o4Yjwfw== -----END CERTIFICATE-----Generated at Mon Feb 9 15:02:49 2026 by rpki-client