This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VbIFm3SNbd1cWgwdNel173uohEI.cer File: VbIFm3SNbd1cWgwdNel173uohEI.cer (raw, json) Hash identifier: iOV/OBK9s8emdMqS7CS2tgmcloXf5PeXOJi2lWUnhIY= Subject key identifier: 55:B2:05:9B:74:8D:6D:DD:5C:5A:0C:1D:35:E9:75:EF:7B:A8:84:42 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCB3616DACC74FEEC9F79828638C8F8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2e/f8e67f-8dd1-4f2c-8de9-23064e21d14d/1/VbIFm3SNbd1cWgwdNel173uohEI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2e/f8e67f-8dd1-4f2c-8de9-23064e21d14d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:20:28 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.30.64.0 -- 193.30.66.255 IP: 193.30.68.0 -- 193.30.79.255 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:36:16:da:cc:74:fe:ec:9f:79:82:86:38:c8:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:20:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=55b2059b748d6ddd5c5a0c1d35e975ef7ba88442 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:51:57:de:23:61:09:ff:51:9e:6c:aa:d9:ec: 6d:09:7a:04:11:e1:78:9a:01:cd:ef:ed:1b:0c:99: 00:a1:c7:e6:98:36:e0:9f:7f:e4:18:ba:3f:2d:fd: 14:27:a3:dd:72:6b:cc:db:a6:16:a1:ad:1a:95:da: 57:31:99:71:58:9d:75:92:99:e6:f1:65:0a:b3:28: e4:14:2a:62:4b:4c:08:d4:9b:3d:87:69:70:f4:6c: b3:a3:ff:37:29:1e:08:96:69:3b:fa:e5:e7:12:66: e7:b1:59:35:3e:fb:1d:1b:3c:41:81:10:b6:17:08: 82:8b:cb:62:65:a7:99:64:f9:53:3b:8d:16:d4:e6: b7:e2:f6:b4:9d:2a:e3:f6:ee:f3:00:56:de:4e:3d: 00:5a:d9:d5:e4:eb:45:a7:72:23:67:45:10:8c:89: 13:08:40:25:9e:ef:da:8e:93:b2:6b:05:9e:fb:54: 2e:6b:dc:51:73:ba:f0:85:ef:79:4f:3b:50:c5:a5: 65:fb:69:22:06:a0:28:c2:70:bf:b6:d0:99:53:14: b7:85:16:a4:03:a4:ee:c5:6e:9d:4e:87:c9:bd:a7: d8:a6:df:0e:42:27:14:8e:4d:0c:43:7e:e1:33:42: c2:a2:b0:16:2a:2f:8b:f5:dd:5d:60:0e:16:b5:35: 61:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:B2:05:9B:74:8D:6D:DD:5C:5A:0C:1D:35:E9:75:EF:7B:A8:84:42 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f8e67f-8dd1-4f2c-8de9-23064e21d14d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f8e67f-8dd1-4f2c-8de9-23064e21d14d/1/VbIFm3SNbd1cWgwdNel173uohEI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.30.64.0-193.30.66.255 193.30.68.0-193.30.79.255 Signature Algorithm: sha256WithRSAEncryption 70:7d:07:70:24:20:96:dc:a8:9b:b2:56:d9:05:6f:95:0d:18: 56:c9:f7:22:52:fb:63:cd:54:66:57:bc:81:d7:e5:e0:88:86: b6:cd:d8:19:69:58:87:3d:c5:17:87:b8:3c:20:b0:a0:b6:76: 1c:b6:12:dd:d1:8a:8e:a4:b0:46:5e:3e:23:08:ab:e5:5b:79: fc:47:45:c6:a8:a4:98:05:dd:dc:47:f7:11:fb:aa:84:69:71: 86:c6:98:d9:85:b9:dd:61:d9:0f:7e:cc:14:df:b2:60:7a:c9: 52:10:38:36:90:c2:45:b2:fe:ba:73:5e:8b:08:76:8f:ee:ae: c7:5f:4d:03:86:a2:85:c2:fa:53:e3:2b:e5:73:5a:6e:c4:92: 3e:8d:45:6d:e9:5c:fa:69:4c:14:a5:a9:4a:c0:8d:6d:9d:b1: 3b:bd:5b:b2:51:50:f2:40:9c:d6:4e:73:a0:1e:e1:a4:d3:c1: 6a:f2:5e:92:4b:a2:f9:dc:65:90:41:4e:c4:7e:e5:a0:ce:d2: c3:b5:3c:a0:6a:cb:60:0a:bf:ef:79:3f:6d:45:72:d3:b7:82: fe:64:df:c6:4f:8f:25:f8:a0:63:23:df:c9:16:13:43:7e:f0: 75:28:db:4f:27:1f:97:4b:1c:72:c5:e1:bd:68:b6:e4:27:27: 0c:5b:54:3a -----BEGIN CERTIFICATE----- MIIFjjCCBHagAwIBAgISAZt9yzYW2sx0/uyfeYKGOMj4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgyMDI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NWIyMDU5Yjc0OGQ2ZGRkNWM1YTBjMWQzNWU5NzVlZjdiYTg4NDQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFFX3iNhCf9Rnmyq2extCXoEEeF4 mgHN7+0bDJkAocfmmDbgn3/kGLo/Lf0UJ6PdcmvM26YWoa0aldpXMZlxWJ11kpnm 8WUKsyjkFCpiS0wI1Js9h2lw9Gyzo/83KR4Ilmk7+uXnEmbnsVk1PvsdGzxBgRC2 FwiCi8tiZaeZZPlTO40W1Oa34va0nSrj9u7zAFbeTj0AWtnV5OtFp3IjZ0UQjIkT CEAlnu/ajpOyawWe+1Qua9xRc7rwhe95TztQxaVl+2kiBqAownC/ttCZUxS3hRak A6TuxW6dTofJvafYpt8OQicUjk0MQ37hM0LCorAWKi+L9d1dYA4WtTVh/wIDAQAB o4ICmjCCApYwHQYDVR0OBBYEFFWyBZt0jW3dXFoMHTXpde97qIRCMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJlL2Y4ZTY3 Zi04ZGQxLTRmMmMtOGRlOS0yMzA2NGUyMWQxNGQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmUvZjhlNjdm LThkZDEtNGYyYy04ZGU5LTIzMDY0ZTIxZDE0ZC8xL1ZiSUZtM1NOYmQxY1dnd2RO ZWwxNzN1b2hFSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDUGCCsGAQUF BwEHAQH/BCYwJDAiBAIAATAcMAwDBAbBHkADBADBHkIwDAMEAsEeRAMEBMEeQDAN BgkqhkiG9w0BAQsFAAOCAQEAcH0HcCQgltyom7JW2QVvlQ0YVsn3IlL7Y81UZle8 gdfl4IiGts3YGWlYhz3FF4e4PCCwoLZ2HLYS3dGKjqSwRl4+Iwir5Vt5/EdFxqik mAXd3Ef3EfuqhGlxhsaY2YW53WHZD37MFN+yYHrJUhA4NpDCRbL+unNeiwh2j+6u x19NA4aihcL6U+Mr5XNabsSSPo1Fbelc+mlMFKWpSsCNbZ2xO71bslFQ8kCc1k5z oB7hpNPBavJekkui+dxlkEFOxH7loM7Sw7U8oGrLYAq/73k/bUVy07eC/mTfxk+P JfigYyPfyRYTQ37wdSjbTycfl0sccsXhvWi25CcnDFtUOg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:49:36 2026 by rpki-client