This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vGY2Z5cyOLGE2e79NrvzgQukttk.cer File: vGY2Z5cyOLGE2e79NrvzgQukttk.cer (raw, json) Hash identifier: aONLskKYWb2zgSwl8AmVEfdJbjyG5DCbcEMXWCoOsek= Subject key identifier: BC:66:36:67:97:32:38:B1:84:D9:EE:FD:36:BB:F3:81:0B:A4:B6:D9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B1E639D73543A43EF0D0BADC5D11C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ed/0b951a-8e6c-4445-9c2d-9f00c72620f6/1/vGY2Z5cyOLGE2e79NrvzgQukttk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ed/0b951a-8e6c-4445-9c2d-9f00c72620f6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:10 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 198608 IP: 5.57.48.0/21 IP: 185.168.244.0/22 IP: 2a01:4c40::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:1e:63:9d:73:54:3a:43:ef:0d:0b:ad:c5:d1:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bc663667973238b184d9eefd36bbf3810ba4b6d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:00:6e:42:d3:af:d3:de:75:60:75:37:56:2f: 8d:dd:27:bd:c5:50:b1:de:25:69:f5:68:37:28:e7: 2d:17:50:fc:9e:2b:9b:57:a3:e1:85:c4:eb:d8:9d: c7:36:18:c3:40:42:74:cb:e6:18:3c:ce:a5:b7:c5: 14:1c:16:12:ae:15:a1:77:49:ab:17:5d:28:7b:2f: e3:7e:60:84:d3:cd:1b:1b:6b:cf:5d:c7:cb:3b:82: 41:7f:1a:f5:32:77:52:7c:64:1a:9e:f8:e3:94:e3: c7:21:50:17:71:24:16:73:88:62:37:11:96:1b:c4: 8d:ce:71:ee:73:5f:89:d8:56:f0:13:d8:24:aa:2b: 0c:d4:80:e6:e0:5f:f5:cd:22:44:36:35:49:30:4d: b5:a6:24:33:e3:81:60:b0:a0:b8:6c:e4:5f:5f:9c: 2c:a6:10:ab:fb:74:01:0b:37:9e:7d:7b:b7:5e:01: e5:e3:2e:eb:d4:87:93:64:c8:68:01:2f:22:bb:df: 1e:c3:21:d7:e7:ce:df:61:fc:e9:b7:b6:b0:c5:32: b1:9c:d4:4b:4c:67:aa:5c:25:b9:43:b3:86:7c:9e: 52:ac:b5:e3:6b:1d:ca:ec:29:a8:eb:f8:ad:07:2c: d7:3e:d1:2a:6c:1c:45:89:c9:49:e5:e0:fd:09:72: 20:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:66:36:67:97:32:38:B1:84:D9:EE:FD:36:BB:F3:81:0B:A4:B6:D9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/0b951a-8e6c-4445-9c2d-9f00c72620f6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/0b951a-8e6c-4445-9c2d-9f00c72620f6/1/vGY2Z5cyOLGE2e79NrvzgQukttk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.57.48.0/21 185.168.244.0/22 IPv6: 2a01:4c40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 198608 Signature Algorithm: sha256WithRSAEncryption 2a:e0:fd:18:72:e3:86:bc:b0:35:31:a7:4c:67:af:17:25:6b: b0:b5:55:9d:ea:42:a8:18:76:ec:a1:f8:11:87:99:5d:61:61: 21:49:42:5c:9c:28:61:c4:64:ac:66:2c:2e:05:a2:cb:b6:cb: 42:d8:69:bb:2e:2a:4e:79:fe:6d:9a:fe:f1:df:98:c2:3d:23: 27:6d:f1:71:ac:11:f8:90:83:95:84:0c:bf:6d:2b:a1:59:dd: d9:b7:53:c5:21:45:cf:d0:02:f7:5b:4e:8f:bd:1e:6d:5a:81: 1e:e8:be:99:62:bb:e8:01:0e:b0:32:9b:a4:8e:95:af:1d:d8: 5e:d1:e7:e2:b0:2e:98:3e:b0:f7:cc:13:b4:b2:1d:46:7b:ee: c7:b6:40:4e:4d:69:7f:43:78:87:9c:8d:e8:72:ce:69:4c:24: d8:ab:5c:69:ed:bf:4b:6b:be:dd:27:fd:0c:7e:61:f2:32:d2: fd:98:26:fd:49:bd:d1:c9:28:76:c4:0d:f1:94:e0:0e:35:9b: 41:d7:56:9d:b9:ca:a8:51:ef:6b:bc:d0:cd:f1:7c:0b:27:9d: fb:0a:c5:97:91:b8:86:c7:74:f7:57:ef:25:b2:95:35:e7:d1: 88:f5:a1:da:ad:09:52:f8:19:24:45:9e:17:97:83:f4:cb:51: c4:c2:77:75 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt6Wx5jnXNUOkPvDQutxdEcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYzY2MzY2Nzk3MzIzOGIxODRkOWVlZmQzNmJiZjM4MTBiYTRiNmQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkABuQtOv0951YHU3Vi+N3Se9xVCx 3iVp9Wg3KOctF1D8niubV6PhhcTr2J3HNhjDQEJ0y+YYPM6lt8UUHBYSrhWhd0mr F10oey/jfmCE080bG2vPXcfLO4JBfxr1MndSfGQanvjjlOPHIVAXcSQWc4hiNxGW G8SNznHuc1+J2FbwE9gkqisM1IDm4F/1zSJENjVJME21piQz44FgsKC4bORfX5ws phCr+3QBCzeefXu3XgHl4y7r1IeTZMhoAS8iu98ewyHX587fYfzpt7awxTKxnNRL TGeqXCW5Q7OGfJ5SrLXjax3K7Cmo6/itByzXPtEqbBxFiclJ5eD9CXIgMQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFLxmNmeXMjixhNnu/Ta784ELpLbZMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VkLzBiOTUx YS04ZTZjLTQ0NDUtOWMyZC05ZjAwYzcyNjIwZjYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWQvMGI5NTFh LThlNmMtNDQ0NS05YzJkLTlmMDBjNzI2MjBmNi8xL3ZHWTJaNWN5T0xHRTJlNzlO cnZ6Z1F1a3R0ay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQDBTkwAwQCuaj0MA0EAgACMAcDBQAqAUxAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMH0DANBgkqhkiG9w0BAQsFAAOCAQEAKuD9 GHLjhrywNTGnTGevFyVrsLVVnepCqBh27KH4EYeZXWFhIUlCXJwoYcRkrGYsLgWi y7bLQthpuy4qTnn+bZr+8d+Ywj0jJ23xcawR+JCDlYQMv20roVnd2bdTxSFFz9AC 91tOj70ebVqBHui+mWK76AEOsDKbpI6Vrx3YXtHn4rAumD6w98wTtLIdRnvux7ZA Tk1pf0N4h5yN6HLOaUwk2Ktcae2/S2u+3Sf9DH5h8jLS/Zgm/Um90ckodsQN8ZTg DjWbQddWnbnKqFHva7zQzfF8Cyed+wrFl5G4hsd091fvJbKVNefRiPWh2q0JUvgZ JEWeF5eD9MtRxMJ3dQ== -----END CERTIFICATE-----Generated at Mon Feb 9 16:49:39 2026 by rpki-client