This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VqSYe_jGtM3WV7vC0KXhPptibLk.cer File: VqSYe_jGtM3WV7vC0KXhPptibLk.cer (raw, json) Hash identifier: Co+8X/borW87mICcrdUrU8kwgQplZR9xdzUCiXhB748= Subject key identifier: 56:A4:98:7B:F8:C6:B4:CD:D6:57:BB:C2:D0:A5:E1:3E:9B:62:6C:B9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC8F4CF214D3C8F304E08A61346BDC4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0b/8809dd-667a-4047-8104-de58698b6470/1/VqSYe_jGtM3WV7vC0KXhPptibLk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0b/8809dd-667a-4047-8104-de58698b6470/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:19:08 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 60206 AS: 199103 AS: 199168 IP: 37.139.160.0/19 IP: 45.95.164.0/22 IP: 45.143.48.0/22 IP: 45.153.208.0/22 IP: 45.158.48.0/22 IP: 46.255.32.0/21 IP: 78.137.0.0/18 IP: 83.142.48.0/22 IP: 89.200.232.0/21 IP: 91.105.200.0/21 IP: 91.211.136.0/22 IP: 91.217.144.0/24 IP: 91.244.0.0/18 IP: 92.43.80.0/22 IP: 92.118.220.0/22 IP: 103.35.160.0/22 IP: 103.237.44.0/22 IP: 109.227.64.0/18 IP: 152.89.20.0/22 IP: 176.67.0.0/19 IP: 178.216.16.0/21 IP: 185.3.148.0/22 IP: 185.41.192.0/22 IP: 185.62.96.0/22 IP: 185.96.28.0/22 IP: 185.103.40.0/22 IP: 185.128.92.0/22 IP: 185.176.108.0 -- 185.176.115.255 IP: 185.203.244.0/22 IP: 185.208.112.0/22 IP: 185.220.92.0/22 IP: 185.228.100.0/22 IP: 193.106.80.0/22 IP: 194.1.220.0/23 IP: 212.55.64.0/19 IP: 213.108.52.0/22 IP: 217.115.96.0/20 IP: 2a02:c780::/29 IP: 2a0a:1480::/29 IP: 2a0b:f3c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 11 Feb 2026 00:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:f4:cf:21:4d:3c:8f:30:4e:08:a6:13:46:bd:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=56a4987bf8c6b4cdd657bbc2d0a5e13e9b626cb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:df:b1:61:c4:fb:57:b4:01:62:c6:61:85:a2: 9d:cc:ee:81:4f:79:9b:13:e0:2e:30:75:3f:2d:a7: 4d:8e:bc:ec:68:cd:38:1c:66:94:45:6b:dc:d3:5a: 79:03:a2:70:a9:a2:64:a4:dd:dc:54:05:77:89:a9: e0:d4:3d:39:0e:24:20:7f:1e:51:be:d8:f3:b0:fb: ec:cf:d2:17:97:da:aa:9b:39:54:b8:f6:45:48:e4: 0b:cb:ce:29:86:71:e7:e4:76:da:6e:17:c9:6e:b3: b0:2c:11:ed:8c:f6:23:b3:91:94:82:36:19:38:25: d1:84:b8:dc:23:c2:26:bf:49:c1:64:24:69:e2:9f: 8f:eb:aa:bd:e2:7a:eb:d3:5f:76:74:70:e5:5c:b1: 96:f7:e5:d4:28:28:69:4c:0a:83:58:84:20:fe:f8: 03:f3:8d:bc:22:54:4e:06:2d:7f:7b:4c:52:59:a1: 93:e3:d7:55:c8:55:43:a8:f4:12:8a:b3:1e:cd:02: 5c:8e:79:d9:17:97:35:32:d6:c2:81:b8:53:93:47: 80:aa:6f:cb:b2:b1:0f:d7:47:55:32:ed:2a:9a:5f: ea:37:8a:e4:1e:b8:57:d5:2c:56:7e:2d:20:a8:7c: 46:86:fc:bd:c3:41:ce:c0:c8:b5:e7:9a:cd:76:d0: 8c:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:A4:98:7B:F8:C6:B4:CD:D6:57:BB:C2:D0:A5:E1:3E:9B:62:6C:B9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/8809dd-667a-4047-8104-de58698b6470/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/8809dd-667a-4047-8104-de58698b6470/1/VqSYe_jGtM3WV7vC0KXhPptibLk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.139.160.0/19 45.95.164.0/22 45.143.48.0/22 45.153.208.0/22 45.158.48.0/22 46.255.32.0/21 78.137.0.0/18 83.142.48.0/22 89.200.232.0/21 91.105.200.0/21 91.211.136.0/22 91.217.144.0/24 91.244.0.0/18 92.43.80.0/22 92.118.220.0/22 103.35.160.0/22 103.237.44.0/22 109.227.64.0/18 152.89.20.0/22 176.67.0.0/19 178.216.16.0/21 185.3.148.0/22 185.41.192.0/22 185.62.96.0/22 185.96.28.0/22 185.103.40.0/22 185.128.92.0/22 185.176.108.0-185.176.115.255 185.203.244.0/22 185.208.112.0/22 185.220.92.0/22 185.228.100.0/22 193.106.80.0/22 194.1.220.0/23 212.55.64.0/19 213.108.52.0/22 217.115.96.0/20 IPv6: 2a02:c780::/29 2a0a:1480::/29 2a0b:f3c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 60206 199103 199168 Signature Algorithm: sha256WithRSAEncryption 26:e7:90:af:af:6b:10:f5:96:f3:58:d6:f4:98:90:dc:3a:7b: e7:06:c7:ed:4f:28:c7:39:7b:d0:79:02:37:c4:bd:5e:27:1d: cf:de:98:cc:f0:eb:30:a8:d5:65:36:4d:2d:7e:eb:a4:56:2a: ca:83:4e:38:f3:9f:c1:ef:6f:38:71:81:23:b7:ec:9d:6c:d2: 21:d0:e2:03:f2:21:e9:0b:9f:eb:80:3e:bb:84:44:40:93:9d: 64:3d:9e:2c:e9:3b:ac:0f:08:6e:04:ce:76:90:f0:f7:48:80: 8f:f5:5b:3b:9f:36:fa:b2:fa:27:21:33:15:2b:f8:c1:4f:51: b7:2f:a2:7a:74:75:68:2c:51:63:e4:62:8c:e3:a1:46:2a:70: 21:fa:6a:88:d2:d7:53:1e:76:39:c6:be:b6:28:35:ef:7c:cd: c8:75:c4:65:e3:18:30:20:85:95:3c:59:37:91:9a:c4:a3:ff: 04:05:94:12:20:ce:7c:6c:08:73:d4:b9:74:d8:85:60:ec:8c: 05:17:12:65:23:e2:db:04:71:12:bf:c1:ba:a4:1b:9f:f5:4f: c2:ba:7e:fe:c7:89:72:4d:d8:b5:d2:26:6f:e1:34:d6:cc:9b: 02:6d:54:8d:1e:60:c7:46:15:99:32:17:01:bd:d9:84:82:61: 48:c6:e0:3d -----BEGIN CERTIFICATE----- MIIGozCCBYugAwIBAgISAZt6yPTPIU08jzBOCKYTRr3EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NmE0OTg3YmY4YzZiNGNkZDY1N2JiYzJkMGE1ZTEzZTliNjI2Y2I5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9+xYcT7V7QBYsZhhaKdzO6BT3mb E+AuMHU/LadNjrzsaM04HGaURWvc01p5A6JwqaJkpN3cVAV3iang1D05DiQgfx5R vtjzsPvsz9IXl9qqmzlUuPZFSOQLy84phnHn5HbabhfJbrOwLBHtjPYjs5GUgjYZ OCXRhLjcI8Imv0nBZCRp4p+P66q94nrr0192dHDlXLGW9+XUKChpTAqDWIQg/vgD 8428IlROBi1/e0xSWaGT49dVyFVDqPQSirMezQJcjnnZF5c1MtbCgbhTk0eAqm/L srEP10dVMu0qml/qN4rkHrhX1SxWfi0gqHxGhvy9w0HOwMi155rNdtCMPQIDAQAB o4IDrzCCA6swHQYDVR0OBBYEFFakmHv4xrTN1le7wtCl4T6bYmy5MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBiLzg4MDlk ZC02NjdhLTQwNDctODEwNC1kZTU4Njk4YjY0NzAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGIvODgwOWRk LTY2N2EtNDA0Ny04MTA0LWRlNTg2OThiNjQ3MC8xL1ZxU1llX2pHdE0zV1Y3dkMw S1hoUHB0aWJMay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIBIgYIKwYB BQUHAQcBAf8EggERMIIBDTCB7QQCAAEwgeYDBAUli6ADBAItX6QDBAItjzADBAIt mdADBAItnjADBAMu/yADBAZOiQADBAJTjjADBANZyOgDBANbacgDBAJb04gDBABb 2ZADBAZb9AADBAJcK1ADBAJcdtwDBAJnI6ADBAJn7SwDBAZt40ADBAKYWRQDBAWw QwADBAOy2BADBAK5A5QDBAK5KcADBAK5PmADBAK5YBwDBAK5ZygDBAK5gFwwDAME ArmwbAMEArmwcAMEArnL9AMEArnQcAMEArncXAMEArnkZAMEAsFqUAMEAcIB3AME BdQ3QAMEAtVsNAMEBNlzYDAbBAIAAjAVAwUDKgLHgAMFAyoKFIADBQMqC/PAMCQG CCsGAQUFBwEIAQH/BBUwE6ARMA8CAwDrLgIDAwm/AgMDCgAwDQYJKoZIhvcNAQEL BQADggEBACbnkK+vaxD1lvNY1vSYkNw6e+cGx+1PKMc5e9B5AjfEvV4nHc/emMzw 6zCo1WU2TS1+66RWKsqDTjjzn8HvbzhxgSO37J1s0iHQ4gPyIekLn+uAPruERECT nWQ9nizpO6wPCG4EznaQ8PdIgI/1WzufNvqy+ichMxUr+MFPUbcvonp0dWgsUWPk YozjoUYqcCH6aojS11MedjnGvrYoNe98zch1xGXjGDAghZU8WTeRmsSj/wQFlBIg znxsCHPUuXTYhWDsjAUXEmUj4tsEcRK/wbqkG5/1T8K6fv7HiXJN2LXSJm/hNNbM mwJtVI0eYMdGFZkyFwG92YSCYUjG4D0= -----END CERTIFICATE-----Generated at Tue Feb 10 07:47:30 2026 by rpki-client