This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vBBuTYL7rjTBUqNdQ9D99J1Uvp4.cer File: vBBuTYL7rjTBUqNdQ9D99J1Uvp4.cer (raw, json) Hash identifier: Ioee/nFu2z2kdjvvmsPpP1hfbdyckfd0/fYBjh50Dsw= Subject key identifier: BC:10:6E:4D:82:FB:AE:34:C1:52:A3:5D:43:D0:FD:F4:9D:54:BE:9E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F84C3A78D9EBD79858E4CBE4F83187F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/21/084b6d-523f-48c0-a037-6349a17abb43/1/vBBuTYL7rjTBUqNdQ9D99J1Uvp4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/21/084b6d-523f-48c0-a037-6349a17abb43/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:22:45 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 12737 AS: 208912 IP: 5.189.192.0/21 IP: 5.189.240.0/21 IP: 45.15.112.0/22 IP: 185.82.244.0/22 IP: 185.91.176.0/22 IP: 185.126.128.0/22 IP: 217.144.172.0/22 IP: 2a05:ec40::/29 IP: 2a0e:ab80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:c3:a7:8d:9e:bd:79:85:8e:4c:be:4f:83:18:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:22:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bc106e4d82fbae34c152a35d43d0fdf49d54be9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:9b:7b:15:4a:fe:22:1d:3d:df:1b:99:e2:d8: 56:9f:95:70:92:ba:f0:84:16:77:eb:49:7a:d2:d2: 12:38:26:c7:9b:20:96:3d:95:60:7c:09:44:82:00: 1c:fe:93:78:66:43:18:55:aa:0c:d5:16:85:19:e2: ba:fd:ad:ee:44:5b:d4:b5:ca:2b:77:5a:ff:43:31: 9c:24:b7:35:32:5b:f1:ea:65:bf:bf:59:79:32:97: 9d:56:c9:2c:78:60:b2:a9:3d:ab:fd:fe:d8:33:18: e3:fa:4e:2b:fc:e2:f6:8f:fa:f4:22:44:fc:3e:0d: 5a:d6:ea:35:65:aa:29:0b:b9:5c:f0:eb:95:9c:23: da:a1:f6:13:03:29:10:16:99:6e:b1:85:c0:e2:45: fc:9a:c4:67:74:ca:71:d7:ba:ac:a6:08:72:1e:26: e1:90:d7:79:29:f7:16:52:7c:2a:d9:59:1e:75:3d: ef:f2:45:93:28:99:5b:aa:63:4a:48:7e:aa:74:14: 3c:68:cf:42:f7:6c:86:00:f5:65:cb:29:0c:ea:91: 78:fe:a6:59:95:06:a3:1e:20:ea:26:1a:25:a6:2b: 16:33:71:3f:41:38:f9:a7:d6:f3:ab:f8:94:23:e5: 4e:95:4c:b5:06:14:30:07:cb:f5:90:da:3d:11:2f: 68:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:10:6E:4D:82:FB:AE:34:C1:52:A3:5D:43:D0:FD:F4:9D:54:BE:9E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/084b6d-523f-48c0-a037-6349a17abb43/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/084b6d-523f-48c0-a037-6349a17abb43/1/vBBuTYL7rjTBUqNdQ9D99J1Uvp4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.189.192.0/21 5.189.240.0/21 45.15.112.0/22 185.82.244.0/22 185.91.176.0/22 185.126.128.0/22 217.144.172.0/22 IPv6: 2a05:ec40::/29 2a0e:ab80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 12737 208912 Signature Algorithm: sha256WithRSAEncryption 71:ec:59:34:e9:28:13:29:64:1d:be:57:94:ab:ee:1f:aa:54: 44:92:b0:8f:fa:4b:8f:fc:ab:de:b1:35:ba:e5:60:36:83:2b: 70:98:fc:f5:8d:c7:00:f7:c9:e8:73:48:ad:f0:9a:7d:49:9b: 19:ea:ab:90:0c:26:4c:b4:e0:8c:1a:dd:9b:93:9b:7c:3e:b3: 88:84:5b:d0:7d:66:e2:89:d4:84:bc:b4:fd:94:c3:d1:2c:47: f2:7b:60:69:d1:76:95:c1:b9:a3:61:b4:79:8e:1a:70:b1:a6: 0c:45:c6:73:d9:fa:0b:5d:1a:32:94:70:ba:f8:88:a7:4c:ef: 96:13:be:2b:20:ca:0c:01:67:93:54:17:ea:f8:a9:43:24:0d: 31:82:8b:97:11:41:db:41:a4:5a:0e:fa:87:4c:b0:08:8a:46: 97:b7:88:ed:0a:1d:b7:b2:26:5a:90:18:88:ff:cc:e3:bd:15: 77:41:e1:ac:c6:fb:e5:2e:df:59:77:6d:25:af:d8:4e:d4:de: b3:5d:5c:c9:3f:35:e3:ad:77:00:3d:b0:b4:62:f8:4d:7e:ce: 3c:37:b9:e3:f1:8d:80:f3:98:85:fe:03:c2:25:84:72:44:34: 3d:9b:d1:22:29:01:35:e6:47:58:3a:eb:bb:6a:e5:c3:14:61: 79:62:39:fc -----BEGIN CERTIFICATE----- MIIF0jCCBLqgAwIBAgISAZt/hMOnjZ69eYWOTL5Pgxh/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMjQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYzEwNmU0ZDgyZmJhZTM0YzE1MmEzNWQ0M2QwZmRmNDlkNTRiZTllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5t7FUr+Ih093xuZ4thWn5Vwkrrw hBZ360l60tISOCbHmyCWPZVgfAlEggAc/pN4ZkMYVaoM1RaFGeK6/a3uRFvUtcor d1r/QzGcJLc1Mlvx6mW/v1l5MpedVskseGCyqT2r/f7YMxjj+k4r/OL2j/r0IkT8 Pg1a1uo1ZaopC7lc8OuVnCPaofYTAykQFplusYXA4kX8msRndMpx17qspghyHibh kNd5KfcWUnwq2VkedT3v8kWTKJlbqmNKSH6qdBQ8aM9C92yGAPVlyykM6pF4/qZZ lQajHiDqJholpisWM3E/QTj5p9bzq/iUI+VOlUy1BhQwB8v1kNo9ES9oAwIDAQAB o4IC3jCCAtowHQYDVR0OBBYEFLwQbk2C+640wVKjXUPQ/fSdVL6eMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzIxLzA4NGI2 ZC01MjNmLTQ4YzAtYTAzNy02MzQ5YTE3YWJiNDMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjEvMDg0YjZk LTUyM2YtNDhjMC1hMDM3LTYzNDlhMTdhYmI0My8xL3ZCQnVUWUw3cmpUQlVxTmRR OUQ5OUoxVXZwNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFkGCCsGAQUF BwEHAQH/BEowSDAwBAIAATAqAwQDBb3AAwQDBb3wAwQCLQ9wAwQCuVL0AwQCuVuw AwQCuX6AAwQC2ZCsMBQEAgACMA4DBQMqBexAAwUDKg6rgDAeBggrBgEFBQcBCAEB /wQPMA2gCzAJAgIxwQIDAzAQMA0GCSqGSIb3DQEBCwUAA4IBAQBx7Fk06SgTKWQd vleUq+4fqlREkrCP+kuP/KvesTW65WA2gytwmPz1jccA98noc0it8Jp9SZsZ6quQ DCZMtOCMGt2bk5t8PrOIhFvQfWbiidSEvLT9lMPRLEfye2Bp0XaVwbmjYbR5jhpw saYMRcZz2foLXRoylHC6+IinTO+WE74rIMoMAWeTVBfq+KlDJA0xgouXEUHbQaRa DvqHTLAIikaXt4jtCh23siZakBiI/8zjvRV3QeGsxvvlLt9Zd20lr9hO1N6zXVzJ PzXjrXcAPbC0YvhNfs48N7nj8Y2A85iF/gPCJYRyRDQ9m9EiKQE15kdYOuu7auXD FGF5Yjn8 -----END CERTIFICATE-----Generated at Mon Feb 9 15:09:55 2026 by rpki-client