This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VYR5uCKzUywZue4BAvmaiYUN8SQ.cer File: VYR5uCKzUywZue4BAvmaiYUN8SQ.cer (raw, json) Hash identifier: TaQHSYBCKwOFCQvDGS0Qe/GUHoM7CcvF1nSw8dl9soM= Subject key identifier: 55:84:79:B8:22:B3:53:2C:19:B9:EE:01:02:F9:9A:89:85:0D:F1:24 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7FF2424DE32313520B75458D6E95A0C6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ec/379625-71be-44fa-9d60-0b591f3a1bf0/1/VYR5uCKzUywZue4BAvmaiYUN8SQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ec/379625-71be-44fa-9d60-0b591f3a1bf0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 18:22:21 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 92.118.212.0/23 IP: 2a09:b1c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:42:4d:e3:23:13:52:0b:75:45:8d:6e:95:a0:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 18:22:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=558479b822b3532c19b9ee0102f99a89850df124 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f4:03:f6:d4:05:df:fb:15:18:cf:91:35:cb: e6:df:5c:2a:58:a8:36:ba:f3:af:64:28:aa:95:b3: 2b:ea:06:fb:6a:14:2a:98:1d:a4:fa:8c:b2:e3:c1: 0e:3b:02:6b:1d:75:01:4f:9b:2c:6c:d9:19:1f:1e: fa:a6:b3:fa:37:98:f6:97:67:e9:08:6f:6a:fc:82: e2:05:e6:f5:0f:48:d2:2c:a4:50:a1:6c:f1:8a:4d: 03:96:12:19:1c:61:26:59:fe:71:13:a2:0c:a6:6e: 30:98:55:a5:13:d8:1e:2c:08:dc:08:73:4f:a8:68: 3c:10:55:48:2e:16:b9:e9:0f:41:3c:e1:d8:0f:ed: 7b:f7:0f:a6:63:c0:9e:73:c0:75:ea:0b:a2:ec:ee: 4e:78:61:9a:67:b3:06:38:34:c2:cd:f5:5b:1c:93: b2:6f:0d:71:85:0e:70:39:8f:bf:cf:89:9d:5b:89: 53:04:0b:d9:20:2b:a9:1a:24:a9:b3:de:cf:05:75: 96:b9:38:e0:c7:50:0d:94:7d:25:26:05:24:6a:cc: 8b:0d:b9:0f:5d:ad:8d:04:92:ac:6d:0c:d2:fc:f5: ef:60:2b:aa:61:69:f6:bc:2b:24:43:70:f8:6b:17: 0f:a8:0b:72:d8:20:2d:da:dc:2c:f1:10:c8:a2:dd: 01:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:84:79:B8:22:B3:53:2C:19:B9:EE:01:02:F9:9A:89:85:0D:F1:24 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/379625-71be-44fa-9d60-0b591f3a1bf0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/379625-71be-44fa-9d60-0b591f3a1bf0/1/VYR5uCKzUywZue4BAvmaiYUN8SQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.118.212.0/23 IPv6: 2a09:b1c0::/29 Signature Algorithm: sha256WithRSAEncryption 4e:a7:6a:d7:8e:a1:44:2b:26:07:08:cd:e3:22:67:22:53:c8: ff:66:dc:2b:33:e1:93:4d:fa:9a:e7:49:ea:86:f2:20:60:4f: d1:8d:57:f0:f3:c3:97:ef:04:e5:d4:39:22:38:58:d7:b1:a4: 09:92:d9:17:29:fe:cc:00:8c:40:0a:50:fc:6d:3c:53:be:e3: ab:13:00:97:04:41:77:8a:35:17:1f:9c:a3:fd:bd:e5:9f:c7: 1d:1a:25:ab:6c:d1:3b:aa:b9:13:59:fd:84:20:24:2d:d0:4d: 7f:58:59:bd:e4:a1:67:05:9d:91:ad:06:54:17:26:ff:6c:79: 1c:a3:ee:b4:7a:78:65:02:42:81:e6:f6:08:d3:26:8a:0a:76: ec:6d:1a:9e:bf:4b:4d:e8:21:c8:d0:a2:f7:fd:fc:01:14:53: 87:e4:45:f7:62:b3:8a:da:67:7a:b4:ae:b2:53:ab:d5:3a:cf: 6e:90:e3:83:a0:31:c3:92:19:fd:cf:9f:db:e8:95:0d:b4:9a: 67:dc:67:4c:7c:25:00:0b:c4:6a:dc:4e:f9:52:74:01:81:ba: 3a:92:73:0e:3a:f9:b6:95:26:8f:a2:aa:aa:0d:35:89:88:9e: 52:5c:bb:a0:5c:0e:d4:bd:37:73:c4:86:e6:7a:64:22:14:94: 85:91:d0:ff -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt/8kJN4yMTUgt1RY1ulaDGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTgyMjIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NTg0NzliODIyYjM1MzJjMTliOWVlMDEwMmY5OWE4OTg1MGRmMTI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/QD9tQF3/sVGM+RNcvm31wqWKg2 uvOvZCiqlbMr6gb7ahQqmB2k+oyy48EOOwJrHXUBT5ssbNkZHx76prP6N5j2l2fp CG9q/ILiBeb1D0jSLKRQoWzxik0DlhIZHGEmWf5xE6IMpm4wmFWlE9geLAjcCHNP qGg8EFVILha56Q9BPOHYD+179w+mY8Cec8B16gui7O5OeGGaZ7MGODTCzfVbHJOy bw1xhQ5wOY+/z4mdW4lTBAvZICupGiSps97PBXWWuTjgx1ANlH0lJgUkasyLDbkP Xa2NBJKsbQzS/PXvYCuqYWn2vCskQ3D4axcPqAty2CAt2tws8RDIot0B3QIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFFWEebgis1MsGbnuAQL5momFDfEkMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VjLzM3OTYy NS03MWJlLTQ0ZmEtOWQ2MC0wYjU5MWYzYTFiZjAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWMvMzc5NjI1 LTcxYmUtNDRmYS05ZDYwLTBiNTkxZjNhMWJmMC8xL1ZZUjV1Q0t6VXl3WnVlNEJB dm1haVlVTjhTUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQBXHbUMA0EAgACMAcDBQMqCbHAMA0GCSqGSIb3 DQEBCwUAA4IBAQBOp2rXjqFEKyYHCM3jImciU8j/ZtwrM+GTTfqa50nqhvIgYE/R jVfw88OX7wTl1DkiOFjXsaQJktkXKf7MAIxAClD8bTxTvuOrEwCXBEF3ijUXH5yj /b3ln8cdGiWrbNE7qrkTWf2EICQt0E1/WFm95KFnBZ2RrQZUFyb/bHkco+60enhl AkKB5vYI0yaKCnbsbRqev0tN6CHI0KL3/fwBFFOH5EX3YrOK2md6tK6yU6vVOs9u kOODoDHDkhn9z5/b6JUNtJpn3GdMfCUAC8Rq3E75UnQBgbo6knMOOvm2lSaPoqqq DTWJiJ5SXLugXA7UvTdzxIbmemQiFJSFkdD/ -----END CERTIFICATE-----Generated at Mon Feb 9 15:07:03 2026 by rpki-client