This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VbU-iTBDTHKlgHoFUIK5hZmycH8.cer File: VbU-iTBDTHKlgHoFUIK5hZmycH8.cer (raw, json) Hash identifier: 7i/5WVPg/RJx+ScTn6DF8Z0945GjznUU9Qo/IlzA3cQ= Subject key identifier: 55:B5:3E:89:30:43:4C:72:A5:80:7A:05:50:82:B9:85:99:B2:70:7F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797E7B407A9E1F9EAD5CAD5A63297485 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/10/b3fdd7-088a-4f62-8c2a-945407a017b2/1/VbU-iTBDTHKlgHoFUIK5hZmycH8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/10/b3fdd7-088a-4f62-8c2a-945407a017b2/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:10 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 29107 AS: 39148 IP: 77.87.144.0/21 IP: 92.249.64.0/18 IP: 178.54.0.0/17 IP: 193.201.80.0/23 IP: 194.0.88.0/22 IP: 195.69.84.0/22 IP: 2001:67c:2b14::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:7b:40:7a:9e:1f:9e:ad:5c:ad:5a:63:29:74:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=55b53e8930434c72a5807a055082b98599b2707f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:46:b5:f7:fb:ed:87:81:37:b3:39:04:28:74: 5c:84:b9:b1:b5:1d:62:a0:13:01:7e:44:db:d3:4e: 09:89:2c:81:f2:61:ee:95:bb:84:80:8a:39:47:bb: bb:13:ae:78:a8:f0:f1:ee:e5:a7:d9:f4:67:25:6c: 19:2b:42:65:a2:6a:7b:b9:d0:7d:47:56:78:61:31: 89:cf:fd:e6:ce:86:bd:af:90:25:01:cf:53:38:ed: 52:6f:74:7b:5c:a5:25:f4:29:aa:fd:8e:29:2b:94: 11:40:57:36:ca:84:c4:8c:30:d5:26:6d:65:4f:57: bc:f7:5c:68:ea:69:d3:28:13:96:01:85:01:77:ec: 24:f4:49:4b:b9:b2:78:b2:12:1e:bc:c3:bc:1a:92: 30:6a:e0:7f:7f:a8:1c:a9:e8:89:9a:bb:3f:9f:83: 94:61:a3:f9:c3:16:75:da:0f:79:a7:9c:f8:04:25: 12:fd:4c:c1:33:74:c9:72:f4:29:0a:15:b9:ab:07: ac:d2:35:c0:f5:58:72:8f:ad:0d:65:5f:28:d6:f8: 08:e5:15:bd:dd:bc:f1:e1:0a:30:c6:cc:50:1e:97: 66:1a:aa:ea:ca:f3:9b:02:be:4f:80:51:40:f6:1e: 5f:e4:92:03:42:da:3c:33:91:d8:d5:4d:82:95:a1: cd:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:B5:3E:89:30:43:4C:72:A5:80:7A:05:50:82:B9:85:99:B2:70:7F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b3fdd7-088a-4f62-8c2a-945407a017b2/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b3fdd7-088a-4f62-8c2a-945407a017b2/1/VbU-iTBDTHKlgHoFUIK5hZmycH8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.87.144.0/21 92.249.64.0/18 178.54.0.0/17 193.201.80.0/23 194.0.88.0/22 195.69.84.0/22 IPv6: 2001:67c:2b14::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 29107 39148 Signature Algorithm: sha256WithRSAEncryption 1b:e7:03:32:82:ae:b5:78:75:80:1c:08:fa:3e:95:47:53:d6: 6b:27:75:58:f4:53:60:f6:c1:01:23:70:93:7b:60:2d:5c:ec: a5:92:36:b3:35:cd:ed:54:1b:d4:28:31:6e:92:d9:a7:33:52: e0:40:57:2f:32:a0:16:08:92:a2:d7:48:e1:17:b4:c9:fa:bb: a1:15:ea:ae:55:90:b3:1e:7e:0e:3b:63:2a:5a:b7:14:4d:0c: e7:3c:ee:bb:5f:df:80:93:ca:42:7d:03:82:87:6e:47:66:a6: f8:04:09:80:87:19:f5:c3:f4:8c:18:1d:96:58:8a:8b:b0:0e: 1f:67:7d:a4:b8:52:4d:4a:c4:44:07:36:22:6b:73:a4:18:e0: b7:28:ac:06:5f:76:6b:e5:fa:6d:c9:d0:cb:43:c8:a7:39:2f: cc:46:93:8f:c0:bf:1c:7d:c1:2f:eb:1b:36:1f:da:e6:eb:c7: 8c:a7:81:2d:ed:8a:dc:8d:31:8d:c3:9d:01:34:02:5f:fb:37: 11:c7:f1:8b:3e:8c:f4:12:a8:45:7d:26:04:b2:1c:fa:a9:b0: cc:07:b0:7d:ac:eb:a1:77:3a:5c:59:4f:35:9c:8f:dc:b4:9c: 73:9d:a6:58:ae:49:0c:a9:3e:a2:f8:03:46:58:31:6e:7c:e2: e8:64:5a:66 -----BEGIN CERTIFICATE----- MIIFxzCCBK+gAwIBAgISAZt5fntAep4fnq1crVpjKXSFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NWI1M2U4OTMwNDM0YzcyYTU4MDdhMDU1MDgyYjk4NTk5YjI3MDdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0a19/vth4E3szkEKHRchLmxtR1i oBMBfkTb004JiSyB8mHulbuEgIo5R7u7E654qPDx7uWn2fRnJWwZK0Jlomp7udB9 R1Z4YTGJz/3mzoa9r5AlAc9TOO1Sb3R7XKUl9Cmq/Y4pK5QRQFc2yoTEjDDVJm1l T1e891xo6mnTKBOWAYUBd+wk9ElLubJ4shIevMO8GpIwauB/f6gcqeiJmrs/n4OU YaP5wxZ12g95p5z4BCUS/UzBM3TJcvQpChW5qwes0jXA9Vhyj60NZV8o1vgI5RW9 3bzx4QowxsxQHpdmGqrqyvObAr5PgFFA9h5f5JIDQto8M5HY1U2ClaHNiQIDAQAB o4IC0zCCAs8wHQYDVR0OBBYEFFW1PokwQ0xypYB6BVCCuYWZsnB/MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEwL2IzZmRk Ny0wODhhLTRmNjItOGMyYS05NDU0MDdhMDE3YjIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTAvYjNmZGQ3 LTA4OGEtNGY2Mi04YzJhLTk0NTQwN2EwMTdiMi8xL1ZiVS1pVEJEVEhLbGdIb0ZV SUs1aFpteWNIOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CME4GCCsGAQUF BwEHAQH/BD8wPTAqBAIAATAkAwQDTVeQAwQGXPlAAwQHsjYAAwQBwclQAwQCwgBY AwQCw0VUMA8EAgACMAkDBwAgAQZ8KxQwHgYIKwYBBQUHAQgBAf8EDzANoAswCQIC cbMCAwCY7DANBgkqhkiG9w0BAQsFAAOCAQEAG+cDMoKutXh1gBwI+j6VR1PWayd1 WPRTYPbBASNwk3tgLVzspZI2szXN7VQb1CgxbpLZpzNS4EBXLzKgFgiSotdI4Re0 yfq7oRXqrlWQsx5+DjtjKlq3FE0M5zzuu1/fgJPKQn0DgoduR2am+AQJgIcZ9cP0 jBgdlliKi7AOH2d9pLhSTUrERAc2ImtzpBjgtyisBl92a+X6bcnQy0PIpzkvzEaT j8C/HH3BL+sbNh/a5uvHjKeBLe2K3I0xjcOdATQCX/s3Ecfxiz6M9BKoRX0mBLIc +qmwzAewfazroXc6XFlPNZyP3LScc52mWK5JDKk+ovgDRlgxbnzi6GRaZg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:43:38 2026 by rpki-client