This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ViVsbA6dSVdlruOixqdPWAqzZqo.cer File: ViVsbA6dSVdlruOixqdPWAqzZqo.cer (raw, json) Hash identifier: 950JutVPIWxhd9fVlzLfkzuxT6oJbd1J9q5jlv1spQg= Subject key identifier: 56:25:6C:6C:0E:9D:49:57:65:AE:E3:A2:C6:A7:4F:58:0A:B3:66:AA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ECF28D793BB9E68B21DA40DDEE8BC1 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9b/0292d2-84c6-4b4b-b32b-e45f13883439/1/ViVsbA6dSVdlruOixqdPWAqzZqo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9b/0292d2-84c6-4b4b-b32b-e45f13883439/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:50 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 33936 IP: 217.175.16.0/20 IP: 2a02:1750::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:f2:8d:79:3b:b9:e6:8b:21:da:40:dd:ee:8b:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=56256c6c0e9d495765aee3a2c6a74f580ab366aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:2e:3f:d0:82:78:61:7c:f9:42:71:2c:7c:41: 35:0b:3c:07:df:4a:c2:f6:31:82:20:94:f4:8f:50: 8c:3f:d0:ec:32:39:da:9c:c5:5a:9d:79:fc:cd:ad: 71:ce:5d:fe:08:3f:b6:8e:12:b6:5a:b4:66:06:20: f8:95:29:c9:02:6a:d9:23:ce:bf:6d:26:db:99:2d: 06:0f:8b:d9:c8:cf:51:b8:8c:f0:47:e2:6c:55:55: f0:e0:c8:d2:d5:8e:48:e8:70:2a:bf:c5:7c:de:58: 6d:04:ac:ff:fa:af:de:45:d2:b0:5c:34:27:37:50: ae:0f:66:a0:a4:ad:c8:5f:47:ae:14:1c:0a:4a:25: de:04:f7:22:17:32:ca:06:28:9e:2d:15:0c:b4:d9: 32:26:fd:0d:9b:e1:d8:19:a0:fc:92:44:a9:78:c1: a8:d1:a0:de:68:50:ef:6f:7f:be:43:8a:59:ca:3b: 2e:7a:c3:01:98:a5:5b:21:b1:7b:59:43:1f:5e:6c: 43:16:5e:b6:91:a0:61:69:4b:95:cc:77:63:63:a5: 00:f0:95:20:c2:d5:70:1d:d3:08:55:e5:dc:e2:91: 79:47:99:39:58:86:5d:a6:b5:70:e9:57:ba:d6:7f: fe:68:3e:b4:d6:24:d1:aa:f9:7d:86:80:2f:85:49: ed:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:25:6C:6C:0E:9D:49:57:65:AE:E3:A2:C6:A7:4F:58:0A:B3:66:AA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/0292d2-84c6-4b4b-b32b-e45f13883439/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/0292d2-84c6-4b4b-b32b-e45f13883439/1/ViVsbA6dSVdlruOixqdPWAqzZqo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.175.16.0/20 IPv6: 2a02:1750::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 33936 Signature Algorithm: sha256WithRSAEncryption 95:f1:ac:83:6f:f5:f4:cc:35:ed:26:dc:be:0e:80:b6:90:4d: de:e0:98:35:a7:e2:ca:22:8f:7f:66:3f:cc:53:c3:67:a1:d4: 28:59:84:d8:fc:a1:6c:aa:e3:dd:65:f4:9b:39:55:ad:6d:08: f3:11:be:b0:35:ba:8d:c5:48:c6:4d:e3:7a:28:9c:03:c0:03: d6:d7:69:f1:b3:00:39:80:21:62:5a:11:0b:42:95:b0:26:70: bc:31:21:e3:51:52:4e:22:ba:a2:2d:e9:85:02:40:62:8c:50: 8f:49:84:a6:59:d2:7e:e3:5a:a2:42:88:1c:40:e1:03:08:07: a0:1e:7e:a4:d5:5e:21:aa:56:a9:24:48:d5:a2:ba:4f:f7:c4: 89:af:db:04:9f:67:9a:2e:76:21:30:b2:a9:5a:8b:f2:69:92: ac:8c:fc:4f:c2:a7:7b:a3:e9:2a:05:d4:1b:fd:77:47:3c:00: 46:b6:26:d4:ca:5e:a2:ab:87:2b:2f:4d:51:52:67:eb:b4:b4: 71:89:b8:bf:3a:ed:63:d8:08:1c:82:2c:18:78:a7:43:25:ad: a0:61:f7:0f:91:8b:a6:94:e4:f9:b0:0c:72:29:eb:41:1d:93: 74:3c:f4:81:60:9b:b2:01:46:64:1b:1b:f9:d0:cc:ba:a3:ca: 0d:a7:5a:d6 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt57PKNeTu55osh2kDd7ovBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NjI1NmM2YzBlOWQ0OTU3NjVhZWUzYTJjNmE3NGY1ODBhYjM2NmFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmi4/0IJ4YXz5QnEsfEE1CzwH30rC 9jGCIJT0j1CMP9DsMjnanMVanXn8za1xzl3+CD+2jhK2WrRmBiD4lSnJAmrZI86/ bSbbmS0GD4vZyM9RuIzwR+JsVVXw4MjS1Y5I6HAqv8V83lhtBKz/+q/eRdKwXDQn N1CuD2agpK3IX0euFBwKSiXeBPciFzLKBiieLRUMtNkyJv0Nm+HYGaD8kkSpeMGo 0aDeaFDvb3++Q4pZyjsuesMBmKVbIbF7WUMfXmxDFl62kaBhaUuVzHdjY6UA8JUg wtVwHdMIVeXc4pF5R5k5WIZdprVw6Ve61n/+aD601iTRqvl9hoAvhUntJQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFFYlbGwOnUlXZa7josanT1gKs2aqMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzliLzAyOTJk Mi04NGM2LTRiNGItYjMyYi1lNDVmMTM4ODM0MzkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWIvMDI5MmQy LTg0YzYtNGI0Yi1iMzJiLWU0NWYxMzg4MzQzOS8xL1ZpVnNiQTZkU1ZkbHJ1T2l4 cWRQV0Fxelpxby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQE2a8QMA0EAgACMAcDBQAqAhdQMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwCEkDANBgkqhkiG9w0BAQsFAAOCAQEAlfGsg2/19Mw1 7Sbcvg6AtpBN3uCYNafiyiKPf2Y/zFPDZ6HUKFmE2PyhbKrj3WX0mzlVrW0I8xG+ sDW6jcVIxk3jeiicA8AD1tdp8bMAOYAhYloRC0KVsCZwvDEh41FSTiK6oi3phQJA YoxQj0mEplnSfuNaokKIHEDhAwgHoB5+pNVeIapWqSRI1aK6T/fEia/bBJ9nmi52 ITCyqVqL8mmSrIz8T8Kne6PpKgXUG/13RzwARrYm1MpeoquHKy9NUVJn67S0cYm4 vzrtY9gIHIIsGHinQyWtoGH3D5GLppTk+bAMcinrQR2TdDz0gWCbsgFGZBsb+dDM uqPKDada1g== -----END CERTIFICATE-----Generated at Mon Feb 9 15:08:23 2026 by rpki-client