This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vGY8bnedrpvbBGhU8Yn-jFw8MuE.cer File: vGY8bnedrpvbBGhU8Yn-jFw8MuE.cer (raw, json) Hash identifier: WHujk3laRV7KwBPVafHcm7kUwEJAOK3xJFnEiNSsLHg= Subject key identifier: BC:66:3C:6E:77:9D:AE:9B:DB:04:68:54:F1:89:FE:8C:5C:3C:32:E1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F852E4049E6C1703317ABFF3B798802 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c7/7a8f3f-304c-4a26-aeca-18bdfe8cc0cd/1/vGY8bnedrpvbBGhU8Yn-jFw8MuE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c7/7a8f3f-304c-4a26-aeca-18bdfe8cc0cd/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:23:13 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 47586 IP: 37.77.108.0/22 IP: 80.249.204.0/22 IP: 87.239.0.0/21 IP: 91.214.56.0/22 IP: 93.190.16.0/21 IP: 109.235.184.0/21 IP: 146.19.211.0/24 IP: 158.58.128.0/21 IP: 185.30.116.0/22 IP: 193.0.148.0/22 IP: 194.114.128.0/22 IP: 195.64.156.0/23 IP: 2a00:b160::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:2e:40:49:e6:c1:70:33:17:ab:ff:3b:79:88:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:23:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bc663c6e779dae9bdb046854f189fe8c5c3c32e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:75:19:94:a5:4d:d4:ec:71:96:c4:c6:cd:d2: a5:d2:4d:6d:f2:ec:80:6c:9b:78:1d:86:3d:91:c6: 43:ba:84:d1:90:a9:ff:53:2a:51:7e:f0:bd:41:93: ad:85:b6:e8:af:b0:75:c3:64:da:5e:39:c2:3f:ea: 42:58:e4:17:86:41:44:23:74:f7:74:65:2f:1d:4b: bc:be:94:ca:d0:71:d9:02:3b:88:44:5c:b0:5c:6d: 72:e9:93:85:ef:89:01:b6:da:dd:2b:48:9f:be:e8: 30:03:57:70:bb:28:44:c2:ce:15:bf:72:ad:1c:64: f4:7f:58:9c:8a:65:da:6f:f5:1f:f5:4c:97:2c:8e: 32:ea:81:a9:a9:76:06:62:a6:8a:04:51:96:31:8f: 4e:8a:66:f8:30:29:d7:c0:2e:e5:f8:be:aa:ce:19: ab:7c:49:ba:50:0f:72:2d:48:6a:16:fa:6c:82:f7: b1:24:c1:e8:18:d0:9e:b6:e2:1e:25:81:f9:4b:3f: 65:91:70:3d:f4:3a:96:e1:00:14:34:17:eb:67:07: a6:12:d7:21:a9:74:21:54:4f:96:b7:37:0c:db:6e: 03:69:35:43:dd:32:65:e9:2f:eb:56:0d:f4:30:58: f1:ee:c1:17:de:2d:82:83:1d:95:60:12:26:78:08: 88:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:66:3C:6E:77:9D:AE:9B:DB:04:68:54:F1:89:FE:8C:5C:3C:32:E1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7a8f3f-304c-4a26-aeca-18bdfe8cc0cd/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7a8f3f-304c-4a26-aeca-18bdfe8cc0cd/1/vGY8bnedrpvbBGhU8Yn-jFw8MuE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.77.108.0/22 80.249.204.0/22 87.239.0.0/21 91.214.56.0/22 93.190.16.0/21 109.235.184.0/21 146.19.211.0/24 158.58.128.0/21 185.30.116.0/22 193.0.148.0/22 194.114.128.0/22 195.64.156.0/23 IPv6: 2a00:b160::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 47586 Signature Algorithm: sha256WithRSAEncryption 59:74:de:0a:00:5a:22:a2:4f:35:72:be:ca:46:d2:50:74:86: d1:a7:11:49:88:51:5a:03:67:63:b3:74:e5:2d:28:6b:ab:6a: 6e:0c:c7:b9:fb:49:4e:ee:d9:fe:c7:01:cc:1c:f7:f4:6b:0a: d9:2e:30:b3:20:b8:eb:7b:82:28:fa:a0:e6:d4:0e:13:8f:b9: b0:49:ca:cc:50:7f:a7:be:ca:f6:bb:c9:96:fc:c1:9b:b1:a2: b4:75:63:4b:e5:6f:1d:9c:4c:d4:cf:30:c2:c1:0e:66:96:98: d5:da:e4:9f:c5:69:fb:24:e1:b6:c3:24:f2:05:72:cc:25:16: 82:a6:d8:58:32:4e:4b:7f:d2:9b:39:e2:12:b6:35:54:36:37: 65:8e:81:66:21:3e:c5:d0:b3:7f:cb:97:6b:78:aa:8c:70:26: 26:de:d0:a4:fc:e9:9d:2c:d8:eb:ea:50:c1:37:3e:ed:18:7c: 36:48:d2:ea:0b:fc:2d:0e:d8:9e:3f:ef:3a:ef:68:4f:bd:fd: 9b:07:c4:df:e6:62:2e:9a:b4:2b:dc:98:84:ed:93:19:a8:d1: c0:64:78:4f:e7:9e:17:34:3a:b0:fa:9e:1c:cc:4c:d7:48:eb: ed:59:fe:dd:1d:07:71:23:3c:8f:af:2e:94:d2:29:00:a3:74: d3:a9:25:61 -----BEGIN CERTIFICATE----- MIIF5TCCBM2gAwIBAgISAZt/hS5ASebBcDMXq/87eYgCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMzEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYzY2M2M2ZTc3OWRhZTliZGIwNDY4NTRmMTg5ZmU4YzVjM2MzMmUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyXUZlKVN1OxxlsTGzdKl0k1t8uyA bJt4HYY9kcZDuoTRkKn/UypRfvC9QZOthbbor7B1w2TaXjnCP+pCWOQXhkFEI3T3 dGUvHUu8vpTK0HHZAjuIRFywXG1y6ZOF74kBttrdK0ifvugwA1dwuyhEws4Vv3Kt HGT0f1icimXab/Uf9UyXLI4y6oGpqXYGYqaKBFGWMY9Oimb4MCnXwC7l+L6qzhmr fEm6UA9yLUhqFvpsgvexJMHoGNCetuIeJYH5Sz9lkXA99DqW4QAUNBfrZwemEtch qXQhVE+WtzcM224DaTVD3TJl6S/rVg30MFjx7sEX3i2Cgx2VYBImeAiIHwIDAQAB o4IC8TCCAu0wHQYDVR0OBBYEFLxmPG53na6b2wRoVPGJ/oxcPDLhMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M3LzdhOGYz Zi0zMDRjLTRhMjYtYWVjYS0xOGJkZmU4Y2MwY2QvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzcvN2E4ZjNm LTMwNGMtNGEyNi1hZWNhLTE4YmRmZThjYzBjZC8xL3ZHWThibmVkcnB2YkJHaFU4 WW4takZ3OE11RS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMHAGCCsGAQUF BwEHAQH/BGEwXzBOBAIAATBIAwQCJU1sAwQCUPnMAwQDV+8AAwQCW9Y4AwQDXb4Q AwQDbeu4AwQAkhPTAwQDnjqAAwQCuR50AwQCwQCUAwQCwnKAAwQBw0CcMA0EAgAC MAcDBQAqALFgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwC54jANBgkqhkiG9w0B AQsFAAOCAQEAWXTeCgBaIqJPNXK+ykbSUHSG0acRSYhRWgNnY7N05S0oa6tqbgzH uftJTu7Z/scBzBz39GsK2S4wsyC463uCKPqg5tQOE4+5sEnKzFB/p77K9rvJlvzB m7GitHVjS+VvHZxM1M8wwsEOZpaY1drkn8Vp+yThtsMk8gVyzCUWgqbYWDJOS3/S mzniErY1VDY3ZY6BZiE+xdCzf8uXa3iqjHAmJt7QpPzpnSzY6+pQwTc+7Rh8NkjS 6gv8LQ7Ynj/vOu9oT739mwfE3+ZiLpq0K9yYhO2TGajRwGR4T+eeFzQ6sPqeHMxM 10jr7Vn+3R0HcSM8j68ulNIpAKN006klYQ== -----END CERTIFICATE-----Generated at Mon Feb 9 16:49:42 2026 by rpki-client