This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VUg02oYAyWxf3pEnj1IObA0m__M.cer File: VUg02oYAyWxf3pEnj1IObA0m__M.cer (raw, json) Hash identifier: +llmqVweB7CrFHC+wWa2JvWXc09DMQYvRRSM0Yita6M= Subject key identifier: 55:48:34:DA:86:00:C9:6C:5F:DE:91:27:8F:52:0E:6C:0D:26:FF:F3 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C7009F2D37F297EB92BDAE6BAF9566 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/de/c8aa4e-dd01-4a1a-8cc0-edf409fedfca/1/VUg02oYAyWxf3pEnj1IObA0m__M.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/de/c8aa4e-dd01-4a1a-8cc0-edf409fedfca/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:18:09 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 43414 IP: 185.185.244.0/22 IP: 2a0b:6980::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:00:9f:2d:37:f2:97:eb:92:bd:ae:6b:af:95:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=554834da8600c96c5fde91278f520e6c0d26fff3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f1:43:cc:8d:59:b0:a3:31:cb:1d:82:e2:41: 7e:12:c2:06:26:42:8b:5a:c4:0f:2f:43:51:37:66: e1:04:c3:d6:e2:7c:ef:a9:7b:1c:bf:83:ea:c0:d8: 02:8b:15:23:33:70:3c:a7:49:8a:b9:ec:ba:c3:a1: f0:44:a4:9d:61:1c:68:5c:af:89:8e:04:77:0f:64: 58:c4:bd:4b:ce:66:5d:e3:e1:1e:1c:90:20:e6:81: ab:21:98:f1:90:44:23:7c:96:51:ce:89:f9:0c:3f: f0:f4:09:0d:c6:30:07:f5:48:ac:3a:e6:00:98:cf: f1:d0:13:b4:61:7a:17:7b:8f:35:2f:dc:3c:28:94: ff:c7:7b:a9:5a:c6:b7:4d:d6:3c:de:8a:39:c2:9d: 6c:44:c9:2a:51:00:7d:bf:bd:62:2e:32:b7:f5:bf: dd:3b:5d:b1:e0:fb:56:90:7c:f9:fc:89:cc:75:b5: b3:76:4c:ff:39:bc:16:e0:c1:6e:2e:82:9c:ca:9b: 65:ce:fe:c3:bb:e9:e2:a9:9c:7c:77:77:6b:9b:1e: 7c:c8:6b:58:61:d2:9d:92:46:34:f1:ae:74:74:0e: 99:8b:55:26:39:80:99:e0:8d:7d:ee:0e:1a:e2:fa: 7f:55:c0:39:a7:ea:62:d1:c8:88:e7:4a:ca:c5:38: eb:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:48:34:DA:86:00:C9:6C:5F:DE:91:27:8F:52:0E:6C:0D:26:FF:F3 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c8aa4e-dd01-4a1a-8cc0-edf409fedfca/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c8aa4e-dd01-4a1a-8cc0-edf409fedfca/1/VUg02oYAyWxf3pEnj1IObA0m__M.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.185.244.0/22 IPv6: 2a0b:6980::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 43414 Signature Algorithm: sha256WithRSAEncryption 29:64:ff:11:2d:19:ad:a2:62:ea:1d:41:14:ee:95:f2:19:06: 16:4b:11:53:b1:1f:74:cc:cf:17:c5:a7:09:c4:75:ed:5a:95: 99:26:0c:06:c5:09:93:04:4d:3f:b5:02:eb:bd:42:70:04:c5: 93:1a:7d:9e:e5:3e:22:9c:22:95:01:be:03:b4:93:27:23:32: b6:01:5f:46:a4:c6:e2:7f:8d:52:8c:e3:d9:e7:cf:1b:c2:ea: 0d:70:1b:f1:b2:36:17:77:07:70:37:d5:0e:9f:e9:3d:24:26: 48:92:34:a3:d0:0a:44:97:1e:13:81:09:c2:3a:c0:67:bc:63: 2e:f6:35:c8:ee:d1:3d:6a:40:96:59:72:42:38:30:cf:17:51: 38:d5:c9:4f:71:68:a7:7e:57:0b:94:44:f9:92:39:ea:da:e7: 45:b0:d6:c8:1e:64:54:ad:f3:12:55:69:40:8f:77:28:e6:ac: a4:37:a9:d0:fe:b6:f2:e3:5e:20:0d:6e:8a:7d:c2:10:61:3d: 81:e9:92:db:b9:fd:7b:06:09:0c:7d:79:1e:2d:e5:5e:58:36: c7:fe:bb:23:53:c5:71:63:75:ee:f2:fb:f8:89:7b:31:f1:a2: 6b:7d:73:36:ac:91:02:90:a5:26:6e:93:53:0f:ad:df:23:22: 9b:c1:cd:dd -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt3xwCfLTfyl+uSva5rr5VmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NTQ4MzRkYTg2MDBjOTZjNWZkZTkxMjc4ZjUyMGU2YzBkMjZmZmYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfFDzI1ZsKMxyx2C4kF+EsIGJkKL WsQPL0NRN2bhBMPW4nzvqXscv4PqwNgCixUjM3A8p0mKuey6w6HwRKSdYRxoXK+J jgR3D2RYxL1LzmZd4+EeHJAg5oGrIZjxkEQjfJZRzon5DD/w9AkNxjAH9UisOuYA mM/x0BO0YXoXe481L9w8KJT/x3upWsa3TdY83oo5wp1sRMkqUQB9v71iLjK39b/d O12x4PtWkHz5/InMdbWzdkz/ObwW4MFuLoKcyptlzv7Du+niqZx8d3drmx58yGtY YdKdkkY08a50dA6Zi1UmOYCZ4I197g4a4vp/VcA5p+pi0ciI50rKxTjrHQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFFVINNqGAMlsX96RJ49SDmwNJv/zMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RlL2M4YWE0 ZS1kZDAxLTRhMWEtOGNjMC1lZGY0MDlmZWRmY2EvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGUvYzhhYTRl LWRkMDEtNGExYS04Y2MwLWVkZjQwOWZlZGZjYS8xL1ZVZzAyb1lBeVd4ZjNwRW5q MUlPYkEwbV9fTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCubn0MA0EAgACMAcDBQMqC2mAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwCpljANBgkqhkiG9w0BAQsFAAOCAQEAKWT/ES0ZraJi 6h1BFO6V8hkGFksRU7EfdMzPF8WnCcR17VqVmSYMBsUJkwRNP7UC671CcATFkxp9 nuU+IpwilQG+A7STJyMytgFfRqTG4n+NUozj2efPG8LqDXAb8bI2F3cHcDfVDp/p PSQmSJI0o9AKRJceE4EJwjrAZ7xjLvY1yO7RPWpAlllyQjgwzxdRONXJT3Fop35X C5RE+ZI56trnRbDWyB5kVK3zElVpQI93KOaspDep0P628uNeIA1uin3CEGE9gemS 27n9ewYJDH15Hi3lXlg2x/67I1PFcWN17vL7+Il7MfGia31zNqyRApClJm6TUw+t 3yMim8HN3Q== -----END CERTIFICATE-----Generated at Mon Feb 9 18:27:59 2026 by rpki-client