This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VeMLoOzG5pGJRjVh1OpUwj0Tjzw.cer File: VeMLoOzG5pGJRjVh1OpUwj0Tjzw.cer (raw, json) Hash identifier: xPsJf3jXecnqwpKfFKhTWxXCcTKNF2B9k8MOTL2nJ8I= Subject key identifier: 55:E3:0B:A0:EC:C6:E6:91:89:46:35:61:D4:EA:54:C2:3D:13:8F:3C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B88448779A888FC1DE5F75A406BFB Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8c/c0b53a-eeec-4038-9238-f81ac56cc3dc/1/VeMLoOzG5pGJRjVh1OpUwj0Tjzw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8c/c0b53a-eeec-4038-9238-f81ac56cc3dc/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:37 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 205891 IP: 5.182.68.0/22 IP: 185.55.212.0/22 IP: 2a02:4e20::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:88:44:87:79:a8:88:fc:1d:e5:f7:5a:40:6b:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=55e30ba0ecc6e69189463561d4ea54c23d138f3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:dc:a8:13:0c:5e:12:bf:58:d9:8e:3a:f4:36: 87:25:cc:2c:66:ae:0e:19:a3:36:93:57:bf:59:3b: f8:31:f9:2f:38:2d:4e:fc:17:c9:2e:ab:b8:c1:1e: d6:6f:78:ee:9f:92:e3:ba:28:ad:51:0f:79:05:07: 27:56:50:03:0c:0d:57:10:5e:9c:96:dd:8b:73:92: 77:07:f3:cf:30:78:e6:8d:9a:b5:d3:bd:cc:1c:87: 22:6b:8d:a4:c2:09:81:89:06:ff:3d:e6:96:72:18: 66:dc:4c:7d:b0:76:d8:4a:99:f8:b1:f7:5e:a0:8b: 16:d1:89:8d:da:61:1f:1e:62:54:17:17:c5:ca:f1: 46:9f:6c:b7:9f:68:16:d2:c7:c6:9f:59:30:98:7c: eb:37:df:49:e8:11:24:32:e5:cc:e8:3d:0e:70:0d: de:97:5c:10:7c:76:e4:ba:17:2e:cc:52:03:67:b1: 13:99:30:91:9e:0a:e5:f2:eb:67:a3:7d:bd:cc:95: 34:78:c6:81:26:e4:e8:db:9b:cf:13:57:7c:ba:86: 25:18:2a:d7:ce:51:fd:ed:35:48:6d:aa:0b:cd:5c: 22:b4:f0:a2:52:9f:f2:1f:b5:38:b9:1b:37:95:bf: 28:ec:7b:ef:44:1f:71:22:f1:5a:7b:bf:46:91:65: a1:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:E3:0B:A0:EC:C6:E6:91:89:46:35:61:D4:EA:54:C2:3D:13:8F:3C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/c0b53a-eeec-4038-9238-f81ac56cc3dc/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/c0b53a-eeec-4038-9238-f81ac56cc3dc/1/VeMLoOzG5pGJRjVh1OpUwj0Tjzw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.182.68.0/22 185.55.212.0/22 IPv6: 2a02:4e20::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 205891 Signature Algorithm: sha256WithRSAEncryption 61:61:dc:a2:5b:49:14:61:c6:87:b8:fc:91:86:05:ce:2b:fb: 80:ac:95:02:8e:4d:e2:f7:4a:c5:e5:74:a9:28:ef:63:e6:48: 47:5d:f0:b7:db:d9:c7:ca:c2:74:7b:0b:1c:eb:41:43:1a:25: f4:5d:70:28:c0:3a:8f:e2:d8:aa:33:9a:75:3d:24:eb:ee:ce: 9d:14:33:00:2f:85:70:fe:51:15:dd:0d:85:ce:28:06:6b:85: 81:92:12:6a:15:d1:7b:fd:d2:af:f7:9b:eb:4b:4d:5a:58:ec: 3b:72:ae:21:ce:9d:3c:07:d5:20:94:f7:0e:93:0a:c6:62:3e: 19:76:a4:76:7a:1f:42:56:f6:f3:c4:63:0d:53:7a:1f:43:4c: 49:8b:86:1f:36:14:1b:36:b7:1a:5a:56:56:96:95:e8:56:8c: b1:67:b4:7f:9f:3b:fb:d5:eb:70:9b:4a:1d:57:2b:13:eb:3e: 5f:af:e3:03:75:b3:e5:fc:e3:e2:4b:5c:59:4d:08:14:72:c6: 64:ed:15:a9:b8:ec:ca:ce:81:f4:43:12:7e:53:4b:b8:54:e1: d2:fe:bc:67:b1:04:18:d0:3e:09:88:e1:d0:f1:02:8d:91:52: ef:9d:ed:6a:4a:75:92:f1:a9:58:5b:4a:c0:95:18:ed:79:59: d5:3c:05:a8 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt6W4hEh3moiPwd5fdaQGv7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NWUzMGJhMGVjYzZlNjkxODk0NjM1NjFkNGVhNTRjMjNkMTM4ZjNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA89yoEwxeEr9Y2Y469DaHJcwsZq4O GaM2k1e/WTv4MfkvOC1O/BfJLqu4wR7Wb3jun5LjuiitUQ95BQcnVlADDA1XEF6c lt2Lc5J3B/PPMHjmjZq1073MHIcia42kwgmBiQb/PeaWchhm3Ex9sHbYSpn4sfde oIsW0YmN2mEfHmJUFxfFyvFGn2y3n2gW0sfGn1kwmHzrN99J6BEkMuXM6D0OcA3e l1wQfHbkuhcuzFIDZ7ETmTCRngrl8utno329zJU0eMaBJuTo25vPE1d8uoYlGCrX zlH97TVIbaoLzVwitPCiUp/yH7U4uRs3lb8o7HvvRB9xIvFae79GkWWhEwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFFXjC6DsxuaRiUY1YdTqVMI9E488MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhjL2MwYjUz YS1lZWVjLTQwMzgtOTIzOC1mODFhYzU2Y2MzZGMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGMvYzBiNTNh LWVlZWMtNDAzOC05MjM4LWY4MWFjNTZjYzNkYy8xL1ZlTUxvT3pHNXBHSlJqVmgx T3BVd2owVGp6dy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCBbZEAwQCuTfUMA0EAgACMAcDBQAqAk4gMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMkQzANBgkqhkiG9w0BAQsFAAOCAQEAYWHc oltJFGHGh7j8kYYFziv7gKyVAo5N4vdKxeV0qSjvY+ZIR13wt9vZx8rCdHsLHOtB Qxol9F1wKMA6j+LYqjOadT0k6+7OnRQzAC+FcP5RFd0Nhc4oBmuFgZISahXRe/3S r/eb60tNWljsO3KuIc6dPAfVIJT3DpMKxmI+GXakdnofQlb288RjDVN6H0NMSYuG HzYUGza3GlpWVpaV6FaMsWe0f587+9XrcJtKHVcrE+s+X6/jA3Wz5fzj4ktcWU0I FHLGZO0Vqbjsys6B9EMSflNLuFTh0v68Z7EEGNA+CYjh0PECjZFS753takp1kvGp WFtKwJUY7XlZ1TwFqA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:57:05 2026 by rpki-client