This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vB0gk2YmtVdDxllFEt5C75-OkF8.cer File: vB0gk2YmtVdDxllFEt5C75-OkF8.cer (raw, json) Hash identifier: iBKaZ34M/QV572yq3PmaYXammyEKgP1TGuGz7XiLsas= Subject key identifier: BC:1D:20:93:66:26:B5:57:43:C6:59:45:12:DE:42:EF:9F:8E:90:5F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B36592697CDAA31E028B29BDA8A6878 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/vB0gk2YmtVdDxllFEt5C75-OkF8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:37 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 2.56.104.0/22 IP: 2a09:c240::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:59:26:97:cd:aa:31:e0:28:b2:9b:da:8a:68:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bc1d20936626b55743c6594512de42ef9f8e905f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:cc:74:87:ba:4a:0f:c7:71:02:16:81:4d:8f: 67:be:86:29:3a:4a:f0:a7:f9:d8:78:63:0e:81:41: 82:25:cc:1d:82:c4:41:d1:c8:7a:54:e4:28:a8:fb: 1b:f4:53:db:f4:0f:48:b5:60:b6:2c:e6:47:3d:a3: a2:0a:a1:cb:d4:a3:36:0a:60:28:20:05:d5:8f:53: 8c:a4:66:74:f7:7b:19:d9:81:e5:44:91:00:07:0d: 29:44:b1:56:9f:19:03:a4:f9:2b:c1:50:99:bd:40: f7:b1:82:6c:59:20:31:08:ee:d1:08:3d:1f:55:07: ff:c0:bc:ef:37:02:31:97:6a:15:e7:48:bf:41:ab: 3b:9f:e9:df:52:b1:57:fe:7a:3c:fb:84:a1:54:bb: 96:28:03:c7:e0:e0:88:d4:35:1f:04:0a:8f:a6:28: b6:8a:dc:24:e6:bf:35:bb:c4:0e:3e:86:0d:ce:f1: d7:1b:2d:ce:a6:53:f7:a9:d0:e0:ec:db:3f:d0:51: ae:1f:ba:92:a1:da:c5:12:a7:70:2d:2f:2d:53:ad: 3f:07:79:bd:e5:c5:3e:c0:f2:85:33:9c:f0:22:45: 1b:ac:88:81:6c:26:40:d8:0e:55:c6:f2:23:e0:ab: af:54:91:48:ce:27:ee:18:4c:55:dc:a3:84:12:ff: 3b:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:1D:20:93:66:26:B5:57:43:C6:59:45:12:DE:42:EF:9F:8E:90:5F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/vB0gk2YmtVdDxllFEt5C75-OkF8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.56.104.0/22 IPv6: 2a09:c240::/29 Signature Algorithm: sha256WithRSAEncryption 00:2f:ae:f3:4f:b4:65:25:5f:40:aa:9a:07:33:c8:42:49:f8: bb:bc:b5:28:5c:f8:db:ca:17:dd:93:4e:11:93:eb:40:13:70: 0b:5d:1b:1e:3e:62:18:5b:9d:c2:7b:8a:2c:fe:2a:b2:0e:11: 23:48:73:33:3f:05:da:20:8b:a9:4d:a7:c8:dd:d1:ce:7e:58: 98:fa:a2:c7:0e:ff:d3:8b:a4:38:aa:d3:8a:2b:9d:4b:7b:44: 47:be:81:ff:0d:60:ff:75:33:88:d0:4b:84:7c:11:10:e9:df: cc:71:82:51:88:c8:14:e5:c9:6e:17:d1:31:45:1c:ed:d8:62: 2e:19:39:f2:63:a2:d1:88:c2:46:f9:bf:a8:f9:b3:59:7d:64: 57:28:81:8c:f3:a8:b0:9d:f6:96:0d:6b:e6:dd:3f:c2:d8:7f: b0:41:dd:99:41:7e:8a:00:0c:d9:54:63:a7:1b:5a:f5:af:98: b5:3b:b3:d5:ed:ee:f9:ea:cd:a9:b2:fd:ce:55:b3:7e:f2:e0: 41:b7:67:e4:bf:d0:80:20:7d:28:bc:17:e4:19:ea:17:35:4f: ce:c1:3b:ec:17:6b:3b:75:a7:8d:21:19:52:76:98:f4:e3:65: 1b:02:b5:d8:13:32:dc:51:c4:b3:c2:b0:b7:db:a8:c2:2e:6a: 86:67:5a:4f -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt7Nlkml82qMeAospvaimh4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYzFkMjA5MzY2MjZiNTU3NDNjNjU5NDUxMmRlNDJlZjlmOGU5MDVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMx0h7pKD8dxAhaBTY9nvoYpOkrw p/nYeGMOgUGCJcwdgsRB0ch6VOQoqPsb9FPb9A9ItWC2LOZHPaOiCqHL1KM2CmAo IAXVj1OMpGZ093sZ2YHlRJEABw0pRLFWnxkDpPkrwVCZvUD3sYJsWSAxCO7RCD0f VQf/wLzvNwIxl2oV50i/Qas7n+nfUrFX/no8+4ShVLuWKAPH4OCI1DUfBAqPpii2 itwk5r81u8QOPoYNzvHXGy3OplP3qdDg7Ns/0FGuH7qSodrFEqdwLS8tU60/B3m9 5cU+wPKFM5zwIkUbrIiBbCZA2A5VxvIj4KuvVJFIzifuGExV3KOEEv87NQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFLwdIJNmJrVXQ8ZZRRLeQu+fjpBfMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzIyL2JmZGEx Mi03NmIzLTQzYjItODhlOC0xZjFkYzUyYmJiOTgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjIvYmZkYTEy LTc2YjMtNDNiMi04OGU4LTFmMWRjNTJiYmI5OC8xL3ZCMGdrMlltdFZkRHhsbEZF dDVDNzUtT2tGOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCAjhoMA0EAgACMAcDBQMqCcJAMA0GCSqGSIb3 DQEBCwUAA4IBAQAAL67zT7RlJV9AqpoHM8hCSfi7vLUoXPjbyhfdk04Rk+tAE3AL XRsePmIYW53Ce4os/iqyDhEjSHMzPwXaIIupTafI3dHOfliY+qLHDv/Ti6Q4qtOK K51Le0RHvoH/DWD/dTOI0EuEfBEQ6d/McYJRiMgU5cluF9ExRRzt2GIuGTnyY6LR iMJG+b+o+bNZfWRXKIGM86iwnfaWDWvm3T/C2H+wQd2ZQX6KAAzZVGOnG1r1r5i1 O7PV7e756s2psv3OVbN+8uBBt2fkv9CAIH0ovBfkGeoXNU/OwTvsF2s7daeNIRlS dpj042UbArXYEzLcUcSzwrC326jCLmqGZ1pP -----END CERTIFICATE-----Generated at Mon Feb 9 18:25:17 2026 by rpki-client