This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vFvbl-lHb1BjgViIbU2XAmpbeqY.cer File: vFvbl-lHb1BjgViIbU2XAmpbeqY.cer (raw, json) Hash identifier: 7PIe8IeZJoIq/uCKty4lIds4V41I+/n8Mla1o1A9Eek= Subject key identifier: BC:5B:DB:97:E9:47:6F:50:63:81:58:88:6D:4D:97:02:6A:5B:7A:A6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EAD14DAB2EBC415948F045279459E0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/0/BC5BDB97E9476F50638158886D4D97026A5B7AA6.mft caRepository: rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/0/ Notify URL: https://rpki.leitecastro.com/notification.xml Certificate not before: Thu 01 Jan 2026 00:17:39 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 200454 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:d1:4d:ab:2e:bc:41:59:48:f0:45:27:94:59:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bc5bdb97e9476f50638158886d4d97026a5b7aa6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:d5:6f:30:8d:4f:e1:1c:88:e8:3d:fe:bf:50: 13:09:5b:a3:fb:98:fc:82:72:7e:93:08:5a:97:6d: 73:45:ec:3e:cf:ac:f0:45:58:17:e4:66:95:06:aa: 3d:69:71:aa:8c:09:bc:b9:c9:5f:3a:9a:2a:83:aa: ac:c3:90:10:ef:26:49:56:1d:19:de:43:d1:6c:40: fe:b4:19:44:5a:56:59:52:5d:df:82:63:40:d0:f8: 10:a7:eb:83:6a:ce:bc:4e:89:fd:6b:52:02:86:e7: e2:51:b0:00:b2:33:87:5a:e6:e2:e7:7c:1b:d9:49: 32:6d:47:25:26:55:d5:49:db:7b:65:29:f4:ef:a0: 8a:b9:23:cb:dc:12:77:1c:a9:70:0e:5a:eb:4b:9c: f1:f7:c3:d5:19:8b:bd:c7:0e:96:f6:71:0e:7f:2d: 80:4d:f5:cb:c9:8b:1b:3a:22:92:9d:7b:71:a3:7a: 53:cf:3c:22:36:1d:10:dd:01:b0:4d:27:f3:d9:83: 37:1f:94:75:2b:e8:c9:dd:0e:47:f3:96:cd:a4:23: 7c:13:37:12:0a:67:6c:19:57:17:b2:88:fd:be:ee: 54:47:1d:32:7f:24:b9:a5:3a:9a:b0:d8:87:95:f3: 13:1d:7c:b5:f5:f2:c6:2b:5f:9e:09:46:2f:ee:57: 1d:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:5B:DB:97:E9:47:6F:50:63:81:58:88:6D:4D:97:02:6A:5B:7A:A6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/0/ RPKI Manifest - URI:rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/0/BC5BDB97E9476F50638158886D4D97026A5B7AA6.mft RPKI Notify - URI:https://rpki.leitecastro.com/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 200454 Signature Algorithm: sha256WithRSAEncryption 14:06:38:c8:4f:2e:5c:4f:8b:c2:66:e7:93:54:b1:40:a3:5f: 2f:d8:4c:af:ee:73:c8:87:47:bb:9c:87:d6:13:67:7c:81:ce: 3f:d6:04:e4:ce:19:4c:f9:c3:9a:cb:d3:a7:65:90:d5:6f:5c: 6e:73:fa:62:0a:3c:9b:fb:9a:0b:1b:af:cc:09:d1:ac:ae:62: 41:ba:00:c2:5e:5e:10:9a:69:ad:73:18:76:da:1c:98:f6:c6: 11:2b:f4:b7:ce:91:10:61:5b:dd:f1:b7:20:01:fa:2e:77:4b: 38:1e:50:97:66:bc:f6:84:9c:d5:d7:5d:22:9c:6a:f1:27:65: ff:fc:67:ba:ad:47:dc:16:02:0e:43:9e:a0:75:99:8f:1d:61: 4f:30:9d:05:10:2a:62:e9:2e:09:33:bb:03:a9:0c:5f:fc:fe: 62:69:49:62:a3:84:b0:42:7c:c9:2d:13:f1:8c:6a:ec:b1:a3: 85:e2:bc:36:e7:38:a9:f0:2b:c5:2f:6c:e1:88:30:da:50:fa: 40:5d:4c:52:51:0d:b2:6a:ff:5a:e6:f1:e8:97:4d:35:28:0b: 0f:dc:0b:d4:f0:30:29:34:77:b5:b3:a8:6c:e5:cd:07:ff:83: 21:ff:39:1f:08:e8:d3:62:30:d0:3d:34:04:f0:17:54:c4:8a: 4f:16:9a:1c -----BEGIN CERTIFICATE----- MIIFSjCCBDKgAwIBAgISAZt26tFNqy68QVlI8EUnlFngMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYzViZGI5N2U5NDc2ZjUwNjM4MTU4ODg2ZDRkOTcwMjZhNWI3YWE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3NVvMI1P4RyI6D3+v1ATCVuj+5j8 gnJ+kwhal21zRew+z6zwRVgX5GaVBqo9aXGqjAm8uclfOpoqg6qsw5AQ7yZJVh0Z 3kPRbED+tBlEWlZZUl3fgmNA0PgQp+uDas68Ton9a1IChufiUbAAsjOHWubi53wb 2UkybUclJlXVSdt7ZSn076CKuSPL3BJ3HKlwDlrrS5zx98PVGYu9xw6W9nEOfy2A TfXLyYsbOiKSnXtxo3pTzzwiNh0Q3QGwTSfz2YM3H5R1K+jJ3Q5H85bNpCN8EzcS CmdsGVcXsoj9vu5URx0yfyS5pTqasNiHlfMTHXy19fLGK1+eCUYv7lcd1wIDAQAB o4ICVjCCAlIwHQYDVR0OBBYEFLxb25fpR29QY4FYiG1NlwJqW3qmMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwgfsGCCsGAQUFBwELBIHuMIHrMEAGCCsGAQUFBzAFhjRyc3lu YzovL3Jwa2kubGVpdGVjYXN0cm8uY29tL3JlcG8vQ0FTVFJPLUlOVEVSTkVULzAv MGwGCCsGAQUFBzAKhmByc3luYzovL3Jwa2kubGVpdGVjYXN0cm8uY29tL3JlcG8v Q0FTVFJPLUlOVEVSTkVULzAvQkM1QkRCOTdFOTQ3NkY1MDYzODE1ODg4NkQ0RDk3 MDI2QTVCN0FBNi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnBraS5sZWl0ZWNh c3Ryby5jb20vbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3lu YzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdF SElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAa BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDDwYwDQYJKoZIhvcNAQELBQADggEBABQG OMhPLlxPi8Jm55NUsUCjXy/YTK/uc8iHR7uch9YTZ3yBzj/WBOTOGUz5w5rL06dl kNVvXG5z+mIKPJv7mgsbr8wJ0ayuYkG6AMJeXhCaaa1zGHbaHJj2xhEr9LfOkRBh W93xtyAB+i53SzgeUJdmvPaEnNXXXSKcavEnZf/8Z7qtR9wWAg5DnqB1mY8dYU8w nQUQKmLpLgkzuwOpDF/8/mJpSWKjhLBCfMktE/GMauyxo4XivDbnOKnwK8UvbOGI MNpQ+kBdTFJRDbJq/1rm8eiXTTUoCw/cC9TwMCk0d7WzqGzlzQf/gyH/OR8I6NNi MNA9NATwF1TEik8Wmhw= -----END CERTIFICATE-----Generated at Mon Feb 9 19:42:36 2026 by rpki-client