This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vCDUGtNXDtiIw7mjlYQ9KMS95w4.cer File: vCDUGtNXDtiIw7mjlYQ9KMS95w4.cer (raw, json) Hash identifier: TLEYnNieT6n04QQjlgguzARKobhCDqFimwqLf5p+6rQ= Subject key identifier: BC:20:D4:1A:D3:57:0E:D8:88:C3:B9:A3:95:84:3D:28:C4:BD:E7:0E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ED247BA465DFCD9813199B69146958 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:19:03 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 48417 IP: 94.247.32.0/21 IP: 185.21.162.0/23 IP: 2a02:db8::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:24:7b:a4:65:df:cd:98:13:19:9b:69:14:69:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bc20d41ad3570ed888c3b9a395843d28c4bde70e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:3a:6b:8b:b7:00:23:a6:ec:34:24:35:37:d4: 13:29:d5:d5:9a:42:54:b2:f7:46:9e:b8:49:8a:68: de:c1:52:bc:2b:96:22:f3:b7:4c:2d:4e:bd:a1:d6: 64:fe:7c:6d:d7:2d:91:cd:8b:ac:32:30:9f:56:6e: 49:a6:9b:60:00:d8:3b:a6:91:69:fc:d0:a6:ed:fb: e1:61:b6:31:75:a0:ed:5a:51:6c:ca:6a:2c:7d:36: 4b:7f:45:b4:ec:62:e1:21:85:7b:8b:a0:bb:0f:98: 6a:89:0c:d1:6c:3e:8a:75:ea:f2:71:43:87:3b:c5: 53:e5:e4:86:80:fa:4f:d8:1c:ec:d7:b0:f4:c1:d5: b9:2e:e2:82:1a:df:f7:ee:c4:66:c7:19:39:8c:fc: e2:ca:dd:63:3b:d6:31:bb:10:f5:0a:84:1a:a4:43: b6:c7:85:d2:fb:0b:82:bf:6e:6a:d7:f9:31:70:02: bb:db:9f:cd:fa:e1:80:c3:16:a5:4f:f2:56:f7:b1: 10:9c:5d:03:86:44:42:d2:5c:5f:22:58:bc:a8:fb: 48:b4:cb:c6:ee:13:4b:7a:79:98:e3:a8:0b:9a:b0: fb:4e:19:c7:e0:95:18:9a:6a:98:dc:69:6f:ee:76: 3f:54:72:5e:d8:4c:47:ab:d8:65:cb:90:4d:6d:4c: 2a:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:20:D4:1A:D3:57:0E:D8:88:C3:B9:A3:95:84:3D:28:C4:BD:E7:0E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.247.32.0/21 185.21.162.0/23 IPv6: 2a02:db8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 48417 Signature Algorithm: sha256WithRSAEncryption 1c:3e:42:4c:41:f6:3c:6a:a1:d0:7a:31:9d:b0:f0:f2:f1:f3: 37:ff:a6:10:03:56:92:13:ff:01:37:62:7c:4a:17:c5:7e:7a: 22:c2:a9:ec:68:0b:cb:7b:c3:3d:2e:6c:e4:9d:12:4c:1f:82: 65:f7:40:3e:4f:1b:7a:2c:ca:31:f4:27:fd:c5:fc:31:a5:82: ab:51:be:d7:fd:a1:b5:c8:4a:5b:85:1b:1c:3e:59:23:4f:ca: 48:97:25:a0:cc:e2:7b:50:55:c7:4c:fe:37:43:f7:11:55:1b: 06:c1:b1:87:fe:be:c1:29:2d:d6:32:f5:6b:23:bf:cd:80:5a: 19:6a:28:23:94:38:9e:75:fa:9e:81:ef:46:21:79:82:8c:5d: 3f:39:c4:4c:4d:ab:46:c4:1b:9c:62:7d:b8:2d:f4:c0:43:55: 7a:08:ef:3f:4b:84:78:14:ca:f2:1b:a7:37:21:dd:60:ba:c4: 3d:c0:70:c9:10:de:78:e9:c6:f2:a9:cb:71:3a:e4:57:9c:dc: ac:9b:16:b1:05:51:99:a2:45:18:39:a9:1c:0a:b6:ee:aa:86: 32:27:6d:cf:b4:96:34:c5:38:da:7c:7f:58:d0:9e:a4:d6:db: cc:ba:e3:d1:b1:b4:4b:f8:9e:30:61:0e:4f:5f:b8:27:e8:d7: 42:52:f5:06 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt57SR7pGXfzZgTGZtpFGlYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYzIwZDQxYWQzNTcwZWQ4ODhjM2I5YTM5NTg0M2QyOGM0YmRlNzBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Dpri7cAI6bsNCQ1N9QTKdXVmkJU svdGnrhJimjewVK8K5Yi87dMLU69odZk/nxt1y2RzYusMjCfVm5JpptgANg7ppFp /NCm7fvhYbYxdaDtWlFsymosfTZLf0W07GLhIYV7i6C7D5hqiQzRbD6KderycUOH O8VT5eSGgPpP2Bzs17D0wdW5LuKCGt/37sRmxxk5jPziyt1jO9YxuxD1CoQapEO2 x4XS+wuCv25q1/kxcAK725/N+uGAwxalT/JW97EQnF0DhkRC0lxfIli8qPtItMvG 7hNLenmY46gLmrD7ThnH4JUYmmqY3Glv7nY/VHJe2ExHq9hly5BNbUwqyQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFLwg1BrTVw7YiMO5o5WEPSjEvecOMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YyLzc5ZmY1 ZC02ZGZlLTQ0MWItYTIxZC0xMzVjNDAyMTdiODYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjIvNzlmZjVk LTZkZmUtNDQxYi1hMjFkLTEzNWM0MDIxN2I4Ni8xL3ZDRFVHdE5YRHRpSXc3bWps WVE5S01TOTV3NC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQDXvcgAwQBuRWiMA0EAgACMAcDBQAqAg24MBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwC9ITANBgkqhkiG9w0BAQsFAAOCAQEAHD5C TEH2PGqh0HoxnbDw8vHzN/+mEANWkhP/ATdifEoXxX56IsKp7GgLy3vDPS5s5J0S TB+CZfdAPk8beizKMfQn/cX8MaWCq1G+1/2htchKW4UbHD5ZI0/KSJcloMzie1BV x0z+N0P3EVUbBsGxh/6+wSkt1jL1ayO/zYBaGWooI5Q4nnX6noHvRiF5goxdPznE TE2rRsQbnGJ9uC30wENVegjvP0uEeBTK8hunNyHdYLrEPcBwyRDeeOnG8qnLcTrk V5zcrJsWsQVRmaJFGDmpHAq27qqGMidtz7SWNMU42nx/WNCepNbbzLrj0bG0S/ie MGEOT1+4J+jXQlL1Bg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:28:05 2026 by rpki-client