This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VtDjso8r4z7FqdLKAKxkFVU2y8Y.cer File: VtDjso8r4z7FqdLKAKxkFVU2y8Y.cer (raw, json) Hash identifier: 0FPeKDHLOGBnClnntq6MHpfBWrK8/tZOWgs5r76fUTM= Subject key identifier: 56:D0:E3:B2:8F:2B:E3:3E:C5:A9:D2:CA:00:AC:64:15:55:36:CB:C6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C6B287628F780654984E44CA4B7120 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/VtDjso8r4z7FqdLKAKxkFVU2y8Y.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:17:49 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 8376 IP: 37.202.64.0/18 IP: 46.185.128.0/17 IP: 79.173.192.0/18 IP: 86.108.0.0/17 IP: 92.253.0.0/17 IP: 94.249.0.0/17 IP: 149.200.128.0/17 IP: 185.98.220.0/22 IP: 194.165.128.0/19 IP: 213.186.160.0/19 IP: 217.23.32.0/20 IP: 2a01:9700::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:b2:87:62:8f:78:06:54:98:4e:44:ca:4b:71:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=56d0e3b28f2be33ec5a9d2ca00ac64155536cbc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:62:c3:24:ad:04:00:6e:23:80:d6:78:da:a6: d0:fc:bd:d6:9e:97:11:50:f4:20:e8:01:42:6a:31: 44:84:ee:e6:61:d2:37:97:24:7b:5b:b7:24:3d:4c: 56:47:96:7a:a2:0f:3c:59:0d:3a:ca:47:d4:45:c8: cc:cd:ef:28:ba:d5:66:9a:d8:6e:9b:f1:1f:90:f5: 70:7a:22:ff:09:07:f9:a8:0c:80:b1:58:93:03:a7: 54:51:f0:36:8f:4e:46:b8:c2:40:99:db:2c:2d:ef: d2:89:31:45:f7:16:20:f9:dc:5f:f8:1e:b8:19:45: ab:8b:41:f0:75:a0:a6:c4:6b:0d:fd:f8:cf:04:63: 0b:89:c8:93:3f:ff:5e:66:ca:9a:e0:b1:d3:c3:dc: a1:e8:2a:99:b8:56:bf:7a:17:a8:48:4a:65:84:e0: 6b:7a:b7:19:c5:8c:6b:b2:98:a5:bf:98:7a:d4:eb: 31:cf:cf:76:14:ab:40:c8:5b:07:3a:ee:0c:7f:05: b8:27:48:ee:e7:1d:90:4e:e0:12:be:f6:8f:86:3b: 2a:46:cc:34:e0:da:cc:53:99:53:63:bc:b0:92:df: 90:6b:4f:30:1a:d0:02:6e:5f:77:6e:26:9b:be:c1: eb:90:67:22:05:b4:bb:c1:02:5d:2b:1a:1b:e2:48: 81:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:D0:E3:B2:8F:2B:E3:3E:C5:A9:D2:CA:00:AC:64:15:55:36:CB:C6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/VtDjso8r4z7FqdLKAKxkFVU2y8Y.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.202.64.0/18 46.185.128.0/17 79.173.192.0/18 86.108.0.0/17 92.253.0.0/17 94.249.0.0/17 149.200.128.0/17 185.98.220.0/22 194.165.128.0/19 213.186.160.0/19 217.23.32.0/20 IPv6: 2a01:9700::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 8376 Signature Algorithm: sha256WithRSAEncryption 36:30:3b:8c:9f:76:87:8b:f3:1d:04:23:92:0d:97:cb:3e:d5: 3d:fb:1a:18:95:37:d4:b4:a0:44:0a:97:76:88:6f:cc:4f:b4: a3:3b:7f:56:4f:9b:0a:4c:f0:e7:3a:d9:38:91:c3:36:5a:13: f9:7d:88:fa:fd:66:86:49:2c:fe:01:71:a0:4f:1f:d2:0c:91: 46:cc:7c:3d:59:41:0d:6a:62:f3:72:6f:ea:44:36:08:fa:9f: da:d8:39:f5:4f:78:b0:13:af:9a:7e:6c:78:26:43:9a:86:0e: b8:9f:7a:64:45:69:c9:2a:fc:1d:65:ef:ce:a3:77:10:69:69: 63:fd:59:2a:90:0c:f7:77:57:3e:da:df:68:7c:73:83:89:40: 6c:dc:4b:13:1c:ae:96:ec:32:02:b4:d0:9b:4d:28:07:6a:a6: 5e:6e:35:88:f8:80:f0:e8:d1:e4:85:22:6a:96:fc:45:25:4b: ae:b3:47:9b:66:f4:c6:d1:5a:98:32:71:08:ee:48:08:72:8b: 66:99:17:81:fa:6a:35:a0:58:e1:52:75:aa:d0:ee:e0:ad:ab: 85:01:54:b4:5d:60:69:77:74:76:d2:1e:9f:7d:b3:7f:55:86: d6:cb:ab:b9:42:ad:e8:89:9a:9d:7e:e8:2a:f0:53:67:7f:fa: 59:cb:a2:b6 -----BEGIN CERTIFICATE----- MIIF3jCCBMagAwIBAgISAZt3xrKHYo94BlSYTkTKS3EgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NmQwZTNiMjhmMmJlMzNlYzVhOWQyY2EwMGFjNjQxNTU1MzZjYmM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGLDJK0EAG4jgNZ42qbQ/L3WnpcR UPQg6AFCajFEhO7mYdI3lyR7W7ckPUxWR5Z6og88WQ06ykfURcjMze8outVmmthu m/EfkPVweiL/CQf5qAyAsViTA6dUUfA2j05GuMJAmdssLe/SiTFF9xYg+dxf+B64 GUWri0HwdaCmxGsN/fjPBGMLiciTP/9eZsqa4LHTw9yh6CqZuFa/eheoSEplhOBr ercZxYxrspilv5h61Osxz892FKtAyFsHOu4MfwW4J0ju5x2QTuASvvaPhjsqRsw0 4NrMU5lTY7ywkt+Qa08wGtACbl93biabvsHrkGciBbS7wQJdKxob4kiBIQIDAQAB o4IC6jCCAuYwHQYDVR0OBBYEFFbQ47KPK+M+xanSygCsZBVVNsvGMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JlL2ZmYmY2 YS03MmYwLTQwMWYtYjJjMy04YjhkNzIxNzIwOTAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmUvZmZiZjZh LTcyZjAtNDAxZi1iMmMzLThiOGQ3MjE3MjA5MC8xL1Z0RGpzbzhyNHo3RnFkTEtB S3hrRlZVMnk4WS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGoGCCsGAQUF BwEHAQH/BFswWTBIBAIAATBCAwQGJcpAAwQHLrmAAwQGT63AAwQHVmwAAwQHXP0A AwQHXvkAAwQHlciAAwQCuWLcAwQFwqWAAwQF1bqgAwQE2RcgMA0EAgACMAcDBQMq AZcAMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAiC4MA0GCSqGSIb3DQEBCwUAA4IB AQA2MDuMn3aHi/MdBCOSDZfLPtU9+xoYlTfUtKBECpd2iG/MT7SjO39WT5sKTPDn Otk4kcM2WhP5fYj6/WaGSSz+AXGgTx/SDJFGzHw9WUENamLzcm/qRDYI+p/a2Dn1 T3iwE6+afmx4JkOahg64n3pkRWnJKvwdZe/Oo3cQaWlj/VkqkAz3d1c+2t9ofHOD iUBs3EsTHK6W7DICtNCbTSgHaqZebjWI+IDw6NHkhSJqlvxFJUuus0ebZvTG0VqY MnEI7kgIcotmmReB+mo1oFjhUnWq0O7grauFAVS0XWBpd3R20h6ffbN/VYbWy6u5 Qq3oiZqdfugq8FNnf/pZy6K2 -----END CERTIFICATE-----Generated at Mon Feb 9 15:11:28 2026 by rpki-client