This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.cer File: vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.cer (raw, json) Hash identifier: SWm2TFHi+RkGz/akVGncPeo/7o9Zz2Ro7NLGD6zPSrA= Subject key identifier: BC:12:78:64:CD:43:04:85:50:ED:16:99:C5:84:B5:C1:4D:80:E0:98 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C80D633C14306EB933C485378B6FFF5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:19:36 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 15743 AS: 205831 IP: 37.131.240.0/21 IP: 62.48.64.0/19 IP: 185.210.208.0/22 IP: 193.35.198.0/23 IP: 193.35.218.0/23 IP: 193.98.1.0/24 IP: 194.45.127.0/24 IP: 217.26.224.0/21 IP: 2a00:e68::/29 IP: 2a0b:2c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:d6:33:c1:43:06:eb:93:3c:48:53:78:b6:ff:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:19:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bc127864cd43048550ed1699c584b5c14d80e098 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:93:99:b9:61:a4:2c:c0:95:c5:11:09:90:a8: 9b:b3:5f:a5:bc:34:55:ae:f1:46:b6:c6:e3:9a:90: a7:4d:44:87:d7:e7:0a:2f:9d:17:c6:59:f9:21:e2: 97:46:32:2f:0e:04:70:54:30:68:ee:ff:3f:ab:d0: 0a:2c:ab:5c:a8:7e:c6:b6:ae:db:c7:ae:a5:22:91: 87:6e:23:a2:4f:3d:ef:ce:91:a1:4c:99:ce:8e:fa: 37:91:1a:b3:4f:ca:47:ab:bd:48:87:5a:9e:28:8a: 17:b0:f2:eb:e4:53:d0:c8:07:7e:dd:1f:65:c7:6e: 46:c5:bb:1a:a0:50:c0:92:e4:3b:5e:9f:89:c5:cc: 2e:81:b0:ec:94:ec:58:0f:79:91:44:08:d3:92:26: b5:23:4d:eb:8a:e6:e8:b1:5d:e1:d3:96:3e:42:d4: aa:b1:47:d5:5b:2b:d1:ed:4d:cc:4a:85:c1:b1:bd: d5:0f:76:0d:7f:a5:c0:a1:a1:94:74:03:5b:0d:5e: 2c:bb:e7:e1:e5:42:b2:b8:69:79:fb:96:76:26:af: 21:3d:38:94:37:2d:ae:da:1d:3b:f4:08:ad:b8:28: fe:b5:83:17:dd:5a:34:88:42:c2:f1:1c:69:19:28: 70:9a:c1:31:c3:91:c3:a6:2f:b1:92:59:0c:6d:11: 4d:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:12:78:64:CD:43:04:85:50:ED:16:99:C5:84:B5:C1:4D:80:E0:98 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.131.240.0/21 62.48.64.0/19 185.210.208.0/22 193.35.198.0/23 193.35.218.0/23 193.98.1.0/24 194.45.127.0/24 217.26.224.0/21 IPv6: 2a00:e68::/29 2a0b:2c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 15743 205831 Signature Algorithm: sha256WithRSAEncryption 67:2d:5c:6a:ad:38:f2:fa:b3:c6:4a:b1:48:e5:33:09:cd:4b: e2:9f:3d:6e:b0:53:b4:5d:98:bf:09:f9:76:2d:78:a1:73:51: a2:a9:49:0c:83:8e:15:12:31:26:5f:02:ad:40:30:6b:1b:41: 43:bd:b9:41:ae:fb:b0:24:b4:57:f0:ac:4a:8d:12:fd:0a:bd: 07:89:e0:c1:b4:0b:0f:dc:a8:04:b4:9e:eb:f6:11:99:f8:b9: 66:0a:f4:2c:49:20:5c:b5:a4:23:b8:60:82:a2:b1:b0:26:9a: 2d:a8:f0:15:d0:99:09:05:39:2b:2d:1e:3d:20:77:c1:39:7c: cc:2a:21:f6:fc:e9:1c:37:c7:b8:4d:68:ff:68:52:7f:aa:02: be:7f:ea:8e:a7:6f:4b:32:1d:1b:32:c2:76:c5:e4:fc:34:18: 9e:34:12:c9:6f:cb:a1:11:6f:b2:b3:b8:a7:06:ab:a9:87:e7: a1:8a:12:c4:42:60:56:c5:36:c0:7a:3a:c5:4b:f7:12:5c:c4: b6:51:ef:9e:34:6a:31:d9:cd:0d:cc:24:e1:db:64:d9:fa:d3: a0:a2:35:96:c4:f4:c5:dc:35:7b:eb:4c:09:f0:f9:45:d7:8e: 2a:ea:e8:e8:98:9f:e7:7f:28:b5:2e:98:80:2d:4b:b5:d0:93: 3f:b5:da:2d -----BEGIN CERTIFICATE----- MIIF2DCCBMCgAwIBAgISAZt8gNYzwUMG65M8SFN4tv/1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxOTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYzEyNzg2NGNkNDMwNDg1NTBlZDE2OTljNTg0YjVjMTRkODBlMDk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypOZuWGkLMCVxREJkKibs1+lvDRV rvFGtsbjmpCnTUSH1+cKL50Xxln5IeKXRjIvDgRwVDBo7v8/q9AKLKtcqH7Gtq7b x66lIpGHbiOiTz3vzpGhTJnOjvo3kRqzT8pHq71Ih1qeKIoXsPLr5FPQyAd+3R9l x25GxbsaoFDAkuQ7Xp+JxcwugbDslOxYD3mRRAjTkia1I03riubosV3h05Y+QtSq sUfVWyvR7U3MSoXBsb3VD3YNf6XAoaGUdANbDV4su+fh5UKyuGl5+5Z2Jq8hPTiU Ny2u2h079AituCj+tYMX3Vo0iELC8RxpGShwmsExw5HDpi+xklkMbRFN8wIDAQAB o4IC5DCCAuAwHQYDVR0OBBYEFLwSeGTNQwSFUO0WmcWEtcFNgOCYMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y4LzhhM2Ji NS05ZDk1LTQ5NTMtOTM4OC0wMzFmNDA3YjMyNjMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjgvOGEzYmI1 LTlkOTUtNDk1My05Mzg4LTAzMWY0MDdiMzI2My8xL3ZCSjRaTTFEQklWUTdSYVp4 WVMxd1UyQTRKZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF8GCCsGAQUF BwEHAQH/BFAwTjA2BAIAATAwAwQDJYPwAwQFPjBAAwQCudLQAwQBwSPGAwQBwSPa AwQAwWIBAwQAwi1/AwQD2RrgMBQEAgACMA4DBQMqAA5oAwUDKgsCwDAeBggrBgEF BQcBCAEB/wQPMA2gCzAJAgI9fwIDAyQHMA0GCSqGSIb3DQEBCwUAA4IBAQBnLVxq rTjy+rPGSrFI5TMJzUvinz1usFO0XZi/Cfl2LXihc1GiqUkMg44VEjEmXwKtQDBr G0FDvblBrvuwJLRX8KxKjRL9Cr0HieDBtAsP3KgEtJ7r9hGZ+LlmCvQsSSBctaQj uGCCorGwJpotqPAV0JkJBTkrLR49IHfBOXzMKiH2/OkcN8e4TWj/aFJ/qgK+f+qO p29LMh0bMsJ2xeT8NBieNBLJb8uhEW+ys7inBquph+ehihLEQmBWxTbAejrFS/cS XMS2Ue+eNGox2c0NzCTh22TZ+tOgojWWxPTF3DV760wJ8PlF144q6ujomJ/nfyi1 LpiALUu10JM/tdot -----END CERTIFICATE-----Generated at Mon Feb 9 15:11:09 2026 by rpki-client