This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VwFSjCouLEaRPAsoyjVw84gPGlY.cer File: VwFSjCouLEaRPAsoyjVw84gPGlY.cer (raw, json) Hash identifier: dJHj4QP1MlkwkxGCVIiWP9qFGOC1Lz/Sq9EfvU6NIuo= Subject key identifier: 57:01:52:8C:2A:2E:2C:46:91:3C:0B:28:CA:35:70:F3:88:0F:1A:56 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B1A30C52CE1CE9C1AF94733C419D4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8a/a41c6d-f142-4c25-8997-63fae389a4db/1/VwFSjCouLEaRPAsoyjVw84gPGlY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8a/a41c6d-f142-4c25-8997-63fae389a4db/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:09 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.242.124.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:1a:30:c5:2c:e1:ce:9c:1a:f9:47:33:c4:19:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5701528c2a2e2c46913c0b28ca3570f3880f1a56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:81:9d:99:a4:bd:91:a4:34:0e:33:dd:74:0f: df:ee:99:dc:38:88:f8:ad:f9:a3:ab:88:e5:60:16: 3a:96:8e:f7:53:55:74:5f:36:dd:13:e7:0e:fa:b7: 52:92:7e:29:57:54:17:fd:24:87:83:6d:56:3f:b1: 7d:be:c4:f4:e9:1d:29:c6:fc:44:56:b8:45:1a:0b: 0f:5c:11:54:25:f4:97:9d:0e:4d:5c:98:3a:8e:a1: 0d:b0:2f:3e:8b:00:59:8a:b3:b6:aa:12:65:77:0e: d2:55:e4:91:8e:79:f4:1c:31:bf:71:b5:f8:09:1f: 24:06:df:44:91:33:5e:56:f1:2d:c2:2c:36:eb:04: 0c:a3:2c:d0:90:31:84:87:49:1c:83:2a:c7:e9:e3: b8:b0:9d:3e:00:58:5d:1c:3e:4d:36:62:45:13:1d: d1:c7:29:dc:bb:ca:84:fa:d8:0c:dd:d7:fa:35:7d: 66:e2:fa:b2:83:fa:3e:ec:b1:3c:62:a9:2d:56:fe: 2f:06:0f:40:59:0e:80:d4:66:85:dc:11:1a:43:06: 02:2f:7d:08:cc:ff:d1:6b:e6:7a:21:7d:3d:a3:79: a9:c2:02:c5:dc:9e:60:65:0c:f4:bc:c9:a7:3e:96: 0c:e9:07:7a:3a:20:01:4c:ed:28:4c:d3:85:63:a7: b7:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:01:52:8C:2A:2E:2C:46:91:3C:0B:28:CA:35:70:F3:88:0F:1A:56 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/a41c6d-f142-4c25-8997-63fae389a4db/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/a41c6d-f142-4c25-8997-63fae389a4db/1/VwFSjCouLEaRPAsoyjVw84gPGlY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.242.124.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:05:5b:b0:e2:8d:0d:1c:46:17:f2:2a:c7:47:c3:4c:22:d8: 55:54:cb:2d:f9:85:bc:d9:61:3e:44:8d:18:19:11:b7:31:ae: 96:67:1f:06:08:0a:9d:32:b5:bc:c4:cf:7c:b6:bd:4a:eb:48: 14:ef:1d:f1:09:9e:c0:1f:b4:59:00:0e:16:86:60:23:c9:23: df:9b:1c:e6:a5:c8:9b:cd:51:0c:a8:32:e7:71:b8:fc:17:ef: 19:d5:b5:5a:d8:9f:6a:44:56:9a:b2:0c:59:a6:f0:20:0e:f5: c2:a5:7f:5f:81:3e:82:4e:a9:81:29:53:c3:45:e2:0d:60:f8: 40:5a:b5:7f:8b:0e:c5:d3:04:81:96:54:42:50:76:2a:ca:49: 04:e9:2e:2d:98:3d:d2:b0:2b:7d:f1:c0:9a:6c:ab:c8:44:80: 1a:b5:df:6a:40:52:56:43:92:80:6c:ef:18:18:5f:ba:d5:c0: e2:f1:b3:a9:a5:0f:60:8e:2d:74:9f:10:05:1f:cd:8a:13:83: 93:dc:da:bc:69:54:b5:ba:ec:81:b8:8d:61:17:34:93:6d:a0: fe:70:cb:73:40:26:be:fd:94:35:8a:60:75:9f:8e:9e:a5:42: 35:09:fd:9d:b6:22:a7:dc:12:63:17:95:46:1b:ce:0b:01:55: e8:0f:b1:ba -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt6WxowxSzhzpwa+UczxBnUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NzAxNTI4YzJhMmUyYzQ2OTEzYzBiMjhjYTM1NzBmMzg4MGYxYTU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4GdmaS9kaQ0DjPddA/f7pncOIj4 rfmjq4jlYBY6lo73U1V0XzbdE+cO+rdSkn4pV1QX/SSHg21WP7F9vsT06R0pxvxE VrhFGgsPXBFUJfSXnQ5NXJg6jqENsC8+iwBZirO2qhJldw7SVeSRjnn0HDG/cbX4 CR8kBt9EkTNeVvEtwiw26wQMoyzQkDGEh0kcgyrH6eO4sJ0+AFhdHD5NNmJFEx3R xyncu8qE+tgM3df6NX1m4vqyg/o+7LE8YqktVv4vBg9AWQ6A1GaF3BEaQwYCL30I zP/Ra+Z6IX09o3mpwgLF3J5gZQz0vMmnPpYM6Qd6OiABTO0oTNOFY6e3kQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFFcBUowqLixGkTwLKMo1cPOIDxpWMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhhL2E0MWM2 ZC1mMTQyLTRjMjUtODk5Ny02M2ZhZTM4OWE0ZGIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGEvYTQxYzZk LWYxNDItNGMyNS04OTk3LTYzZmFlMzg5YTRkYi8xL1Z3RlNqQ291TEVhUlBBc295 alZ3ODRnUEdsWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwfJ8MA0GCSqGSIb3DQEBCwUAA4IBAQBLBVuw 4o0NHEYX8irHR8NMIthVVMst+YW82WE+RI0YGRG3Ma6WZx8GCAqdMrW8xM98tr1K 60gU7x3xCZ7AH7RZAA4WhmAjySPfmxzmpcibzVEMqDLncbj8F+8Z1bVa2J9qRFaa sgxZpvAgDvXCpX9fgT6CTqmBKVPDReINYPhAWrV/iw7F0wSBllRCUHYqykkE6S4t mD3SsCt98cCabKvIRIAatd9qQFJWQ5KAbO8YGF+61cDi8bOppQ9gji10nxAFH82K E4OT3Nq8aVS1uuyBuI1hFzSTbaD+cMtzQCa+/ZQ1imB1n46epUI1Cf2dtiKn3BJj F5VGG84LAVXoD7G6 -----END CERTIFICATE-----Generated at Mon Feb 9 18:25:14 2026 by rpki-client