This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_-vVS_BapQ7OnFJtDNVd5ivbEfs.cer File: _-vVS_BapQ7OnFJtDNVd5ivbEfs.cer (raw, json) Hash identifier: HEqjQMQ0NKeJ+XUWolnzbOzy3xRA5lyrCgfygD0jL8o= Subject key identifier: FF:EB:D5:4B:F0:5A:A5:0E:CE:9C:52:6D:0C:D5:5D:E6:2B:DB:11:FB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C7159BFB069652582EF92DA48FDF8F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c8/91592e-aebe-42b6-8082-6fd67a92f18f/1/_-vVS_BapQ7OnFJtDNVd5ivbEfs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c8/91592e-aebe-42b6-8082-6fd67a92f18f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:18:14 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 47481 AS: 57861 IP: 185.24.46.0/23 IP: 194.35.48.0/22 IP: 194.50.148.0/23 IP: 2a0d:fec0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:15:9b:fb:06:96:52:58:2e:f9:2d:a4:8f:df:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ffebd54bf05aa50ece9c526d0cd55de62bdb11fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:80:6c:6a:53:e4:41:5c:23:6b:9f:d0:39:41: 77:2f:ad:89:86:98:27:8d:64:1c:d1:24:c3:b8:63: 40:b1:ea:26:37:71:cf:22:7a:d9:5b:d2:93:0d:cd: d8:f9:72:da:12:95:c9:0c:72:b8:a9:8c:08:38:eb: e0:82:f6:59:a8:2d:74:af:48:e0:8f:fa:4b:eb:6c: a2:b8:4e:60:71:e3:c1:f0:f4:56:e8:1a:42:39:1c: a3:18:c2:58:bb:f8:19:03:8c:03:2c:5d:47:2b:4f: 73:c0:b3:f9:eb:7c:64:04:17:14:9b:98:27:53:92: 05:a9:5b:bf:61:87:09:7a:dc:46:a9:57:6a:02:26: 6a:c9:a1:1c:bd:71:41:84:4d:e3:ff:92:4c:4b:01: 18:ed:7f:78:a9:c7:1b:f7:16:57:6f:9a:d1:ec:bb: cc:ee:4b:29:9e:ab:c3:6b:f4:77:ef:de:ab:9e:0f: 09:21:53:e6:c0:a7:ec:e4:05:74:b2:3d:6a:0c:85: 3e:1c:82:aa:ee:64:0b:62:ac:a5:a8:42:9a:b6:08: 17:3b:bb:70:d9:25:bd:dd:ae:6c:a8:23:09:fa:fd: 95:06:9b:1e:4a:1d:05:f8:94:05:00:2c:85:8a:de: ac:49:5a:da:ad:82:88:44:ba:ad:95:60:2a:d7:a7: 67:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:EB:D5:4B:F0:5A:A5:0E:CE:9C:52:6D:0C:D5:5D:E6:2B:DB:11:FB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/91592e-aebe-42b6-8082-6fd67a92f18f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/91592e-aebe-42b6-8082-6fd67a92f18f/1/_-vVS_BapQ7OnFJtDNVd5ivbEfs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.24.46.0/23 194.35.48.0/22 194.50.148.0/23 IPv6: 2a0d:fec0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 47481 57861 Signature Algorithm: sha256WithRSAEncryption 21:38:ed:45:f6:ed:6f:f2:73:56:13:4f:d6:65:a3:69:af:72: 01:0b:d9:4d:f3:94:9d:f2:17:a2:3c:80:99:18:18:82:ed:8b: a7:74:f1:3d:eb:67:a2:a5:f7:6b:dd:20:08:90:ad:37:d9:ab: 0e:1f:fe:52:de:b1:ae:ae:90:39:7f:5e:61:9f:91:f0:bc:7b: c4:ff:85:98:ab:a9:50:4f:ef:a2:7b:99:15:ab:12:ee:0c:f0: 77:c1:86:65:db:01:dd:f9:9e:ff:1a:0d:c2:91:af:56:dd:88: a0:1e:b3:91:3f:95:b7:fe:ae:63:12:72:9e:66:15:ea:a6:62: 84:4f:77:41:2b:35:74:74:1c:8e:6a:f6:4e:c6:af:fe:f0:30: 57:47:13:69:4d:4b:28:fe:19:db:e7:f0:76:2b:a4:5a:1b:af: c7:69:a3:62:43:ad:27:a4:62:fd:1a:94:54:39:46:26:e0:5c: b4:8c:3d:59:bc:21:d7:07:7f:3c:48:56:48:52:03:8f:c4:90: df:18:3a:4f:46:50:3d:b2:5c:8f:90:46:c8:31:45:a1:c4:f0: 2b:dc:4b:88:f3:9b:dc:cb:56:52:a2:ac:ec:41:e1:1c:a0:ac: 07:49:20:f6:bd:63:70:8b:78:4f:e8:9e:7a:dd:10:bb:09:62: 10:a4:06:ab -----BEGIN CERTIFICATE----- MIIFtDCCBJygAwIBAgISAZt3xxWb+waWUlgu+S2kj9+PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZmViZDU0YmYwNWFhNTBlY2U5YzUyNmQwY2Q1NWRlNjJiZGIxMWZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4oBsalPkQVwja5/QOUF3L62Jhpgn jWQc0STDuGNAseomN3HPInrZW9KTDc3Y+XLaEpXJDHK4qYwIOOvggvZZqC10r0jg j/pL62yiuE5gcePB8PRW6BpCORyjGMJYu/gZA4wDLF1HK09zwLP563xkBBcUm5gn U5IFqVu/YYcJetxGqVdqAiZqyaEcvXFBhE3j/5JMSwEY7X94qccb9xZXb5rR7LvM 7kspnqvDa/R3796rng8JIVPmwKfs5AV0sj1qDIU+HIKq7mQLYqylqEKatggXO7tw 2SW93a5sqCMJ+v2VBpseSh0F+JQFACyFit6sSVrarYKIRLqtlWAq16dnhQIDAQAB o4ICwDCCArwwHQYDVR0OBBYEFP/r1UvwWqUOzpxSbQzVXeYr2xH7MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M4LzkxNTky ZS1hZWJlLTQyYjYtODA4Mi02ZmQ2N2E5MmYxOGYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzgvOTE1OTJl LWFlYmUtNDJiNi04MDgyLTZmZDY3YTkyZjE4Zi8xL18tdlZTX0JhcFE3T25GSnRE TlZkNWl2YkVmcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQBuRguAwQCwiMwAwQBwjKUMA0EAgACMAcDBQAq Df7AMB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwC5eQIDAOIFMA0GCSqGSIb3DQEB CwUAA4IBAQAhOO1F9u1v8nNWE0/WZaNpr3IBC9lN85Sd8heiPICZGBiC7YundPE9 62eipfdr3SAIkK032asOH/5S3rGurpA5f15hn5HwvHvE/4WYq6lQT++ie5kVqxLu DPB3wYZl2wHd+Z7/Gg3Cka9W3YigHrORP5W3/q5jEnKeZhXqpmKET3dBKzV0dByO avZOxq/+8DBXRxNpTUso/hnb5/B2K6RaG6/HaaNiQ60npGL9GpRUOUYm4Fy0jD1Z vCHXB388SFZIUgOPxJDfGDpPRlA9slyPkEbIMUWhxPAr3EuI85vcy1ZSoqzsQeEc oKwHSSD2vWNwi3hP6J563RC7CWIQpAar -----END CERTIFICATE-----Generated at Mon Feb 9 19:50:36 2026 by rpki-client