This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_VPDr_MeJ9KhvE2bPudbuKm1eDg.cer File: _VPDr_MeJ9KhvE2bPudbuKm1eDg.cer (raw, json) Hash identifier: 8OAKXNcwWq4T0gHJT8x0MW1lbhv3sJtkceHC7DYgpIw= Subject key identifier: FD:53:C3:AF:F3:1E:27:D2:A1:BC:4D:9B:3E:E7:5B:B8:A9:B5:78:38 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7834FB7054DADBE38EC94B090A78E7E9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d3/d1e68a-1c87-483d-a89d-56dbff14ee05/1/_VPDr_MeJ9KhvE2bPudbuKm1eDg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d3/d1e68a-1c87-483d-a89d-56dbff14ee05/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:16 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 196810 IP: 89.207.232.0/21 IP: 178.23.168.0/21 IP: 185.15.200.0/22 IP: 185.170.16.0/22 IP: 185.213.204.0/22 IP: 185.224.40.0/22 IP: 194.104.2.0/23 IP: 194.104.86.0/23 IP: 2a02:ab40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:fb:70:54:da:db:e3:8e:c9:4b:09:0a:78:e7:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fd53c3aff31e27d2a1bc4d9b3ee75bb8a9b57838 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:0b:80:bf:28:f2:05:d4:8a:f2:e2:fa:61:dd: 5d:9c:ad:0c:78:5e:1c:83:0e:3a:6b:13:22:fb:01: 8a:70:ea:9a:90:cb:45:66:73:82:aa:d1:ed:85:25: ef:e5:ce:9b:33:bc:1f:fc:56:35:8e:09:68:85:84: 78:a9:14:07:9b:50:14:86:4f:0e:eb:d2:98:7a:ed: 7a:45:b2:4e:fe:71:84:11:55:d1:2c:49:08:2b:bc: 8f:2d:ec:4f:07:92:0e:fa:be:c2:dd:5d:03:2b:04: 48:a2:b6:c6:9c:1d:be:e7:b8:23:5f:b0:52:87:40: ff:61:ed:38:d9:5b:dd:a5:7f:7f:df:a8:bf:9b:b6: f1:80:ae:ed:1d:39:57:71:96:77:86:57:8f:f9:5c: 2d:1e:ac:be:7f:39:58:00:e1:98:2d:5e:e8:1f:5c: f5:21:d3:ac:86:5f:6f:e8:81:af:6a:c2:6a:d5:85: 76:72:9e:21:54:92:ae:96:e1:69:bd:c0:5e:f5:91: 05:3c:d4:43:05:4c:36:3a:c4:83:4a:14:c1:43:6d: 14:22:cf:ec:51:e7:5d:96:b0:d0:c2:78:46:af:e4: b3:59:67:e4:0c:89:19:1a:e6:3e:1c:31:46:a4:34: 7a:7b:18:f8:68:ed:b9:30:e4:4c:32:de:86:3f:6a: e9:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:53:C3:AF:F3:1E:27:D2:A1:BC:4D:9B:3E:E7:5B:B8:A9:B5:78:38 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d1e68a-1c87-483d-a89d-56dbff14ee05/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d1e68a-1c87-483d-a89d-56dbff14ee05/1/_VPDr_MeJ9KhvE2bPudbuKm1eDg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.207.232.0/21 178.23.168.0/21 185.15.200.0/22 185.170.16.0/22 185.213.204.0/22 185.224.40.0/22 194.104.2.0/23 194.104.86.0/23 IPv6: 2a02:ab40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 196810 Signature Algorithm: sha256WithRSAEncryption 3e:22:00:0e:46:e0:19:40:2d:af:9b:08:c7:6b:34:c8:fa:96: b3:d3:fb:1a:7f:cd:58:92:ab:72:f9:09:8e:7a:e7:88:7e:0c: 8c:b1:9a:8d:1f:cb:5b:df:af:4b:a9:7c:1c:5b:1d:28:a5:94: 28:eb:4d:74:28:df:92:7e:61:1f:49:be:46:3f:a3:a8:94:c4: 07:aa:5d:81:6f:29:42:21:c3:fd:53:6c:9a:eb:15:e6:ef:21: 63:03:e2:bf:54:a9:b0:08:30:bb:58:d6:16:f6:6d:85:00:e9: 41:85:58:50:1c:5e:c5:b1:9e:9f:80:a6:1e:23:bc:42:c6:e9: 2b:af:32:bb:b7:9e:d9:68:ad:77:6e:0f:a0:b0:76:27:03:0e: 02:b5:84:68:a3:b1:0a:92:67:ab:0c:23:31:3a:13:01:c6:4a: 74:dd:5b:92:da:d7:6b:fd:bb:00:a3:b4:a7:21:60:7f:ca:6f: c5:64:5f:72:8f:64:97:f2:4f:8f:69:7d:07:5f:01:c4:01:5a: f9:85:36:ff:8b:86:8c:83:fb:b8:08:8d:11:87:b0:30:f8:6c: da:4a:c4:ac:42:3c:f6:e7:70:35:26:53:6f:48:f3:21:89:85: 4e:be:93:fb:d0:b1:04:ce:72:93:2a:f9:bd:4e:55:49:ca:f6: 44:87:9f:1e -----BEGIN CERTIFICATE----- MIIFzTCCBLWgAwIBAgISAZt4NPtwVNrb447JSwkKeOfpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZDUzYzNhZmYzMWUyN2QyYTFiYzRkOWIzZWU3NWJiOGE5YjU3ODM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQuAvyjyBdSK8uL6Yd1dnK0MeF4c gw46axMi+wGKcOqakMtFZnOCqtHthSXv5c6bM7wf/FY1jglohYR4qRQHm1AUhk8O 69KYeu16RbJO/nGEEVXRLEkIK7yPLexPB5IO+r7C3V0DKwRIorbGnB2+57gjX7BS h0D/Ye042VvdpX9/36i/m7bxgK7tHTlXcZZ3hleP+VwtHqy+fzlYAOGYLV7oH1z1 IdOshl9v6IGvasJq1YV2cp4hVJKuluFpvcBe9ZEFPNRDBUw2OsSDShTBQ20UIs/s UeddlrDQwnhGr+SzWWfkDIkZGuY+HDFGpDR6exj4aO25MORMMt6GP2rpCQIDAQAB o4IC2TCCAtUwHQYDVR0OBBYEFP1Tw6/zHifSobxNmz7nW7iptXg4MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2QzL2QxZTY4 YS0xYzg3LTQ4M2QtYTg5ZC01NmRiZmYxNGVlMDUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDMvZDFlNjhh LTFjODctNDgzZC1hODlkLTU2ZGJmZjE0ZWUwNS8xL19WUERyX01lSjlLaHZFMmJQ dWRidUttMWVEZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFgGCCsGAQUF BwEHAQH/BEkwRzA2BAIAATAwAwQDWc/oAwQDsheoAwQCuQ/IAwQCuaoQAwQCudXM AwQCueAoAwQBwmgCAwQBwmhWMA0EAgACMAcDBQMqAqtAMBoGCCsGAQUFBwEIAQH/ BAswCaAHMAUCAwMAyjANBgkqhkiG9w0BAQsFAAOCAQEAPiIADkbgGUAtr5sIx2s0 yPqWs9P7Gn/NWJKrcvkJjnrniH4MjLGajR/LW9+vS6l8HFsdKKWUKOtNdCjfkn5h H0m+Rj+jqJTEB6pdgW8pQiHD/VNsmusV5u8hYwPiv1SpsAgwu1jWFvZthQDpQYVY UBxexbGen4CmHiO8QsbpK68yu7ee2Witd24PoLB2JwMOArWEaKOxCpJnqwwjMToT AcZKdN1bktrXa/27AKO0pyFgf8pvxWRfco9kl/JPj2l9B18BxAFa+YU2/4uGjIP7 uAiNEYewMPhs2krErEI89udwNSZTb0jzIYmFTr6T+9CxBM5ykyr5vU5VScr2RIef Hg== -----END CERTIFICATE-----Generated at Mon Feb 9 15:03:51 2026 by rpki-client