This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vGiS6ZyEocXcmxLhFNZ68WwkqdY.cer File: vGiS6ZyEocXcmxLhFNZ68WwkqdY.cer (raw, json) Hash identifier: BsVpA5qDlJXjyNe3oFqdeMbNcaob2+uHrLP4rL7ehso= Subject key identifier: BC:68:92:E9:9C:84:A1:C5:DC:9B:12:E1:14:D6:7A:F1:6C:24:A9:D6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B775953FB5467A7032D124413BEF4A99A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/53/62d9dd-72f2-42a7-9982-b64e0f6a09ca/1/vGiS6ZyEocXcmxLhFNZ68WwkqdY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/53/62d9dd-72f2-42a7-9982-b64e0f6a09ca/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:18:21 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 5.8.251.0/24 IP: 46.102.158.0/23 IP: 94.177.134.0/23 IP: 2a0a:5d80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:53:fb:54:67:a7:03:2d:12:44:13:be:f4:a9:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bc6892e99c84a1c5dc9b12e114d67af16c24a9d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f0:7b:f9:ea:5d:e6:1f:33:1d:c0:3a:4e:f8: 2d:e5:f3:2f:9c:c6:7b:bc:c6:a7:2b:0b:be:e2:1f: 99:f6:25:92:8a:83:b4:da:55:00:75:72:88:47:68: 1d:59:39:eb:b6:5f:28:46:8a:6e:7c:af:23:91:b9: 61:90:3c:37:a6:db:78:3a:d4:e9:23:2c:7e:76:de: 11:ff:33:6a:a0:f9:b1:c0:b9:cb:50:0c:42:30:3a: 34:59:08:d6:f9:14:54:36:90:f7:93:93:3f:21:ac: 61:1e:13:1d:9f:a3:ef:d8:71:0b:e4:b7:24:1e:47: e0:28:31:94:c0:85:5c:a7:91:ca:7d:15:41:b4:36: f1:34:bb:54:ff:2a:e3:e0:77:0f:67:f6:fd:2b:83: 6e:51:21:a6:cf:b4:80:8d:80:2b:a0:43:ec:0a:73: eb:55:28:c7:41:25:3e:99:6a:e9:ec:50:90:82:4d: fc:d4:9e:7f:a4:c8:16:a1:6a:7a:76:fc:33:84:1d: 49:88:c3:30:61:2a:71:bf:b1:62:29:f7:85:d2:a2: 74:35:c2:66:fd:7b:5a:e6:23:59:20:1e:de:a4:64: 1d:64:3f:9b:23:7e:03:85:30:20:22:ba:30:f1:ee: 01:4c:8e:b5:94:1f:00:56:aa:ba:69:d8:c4:dc:a9: 4c:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:68:92:E9:9C:84:A1:C5:DC:9B:12:E1:14:D6:7A:F1:6C:24:A9:D6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/62d9dd-72f2-42a7-9982-b64e0f6a09ca/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/62d9dd-72f2-42a7-9982-b64e0f6a09ca/1/vGiS6ZyEocXcmxLhFNZ68WwkqdY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.8.251.0/24 46.102.158.0/23 94.177.134.0/23 IPv6: 2a0a:5d80::/29 Signature Algorithm: sha256WithRSAEncryption a2:7e:35:ec:84:fd:ef:e5:b0:3f:25:3f:e5:2b:55:c3:5a:01: 53:96:b1:34:53:d6:e6:51:d6:df:95:31:e8:79:c0:92:0e:65: 6d:f0:9e:78:ee:9d:f7:f7:3b:69:a8:be:2c:1e:b0:e0:e0:80: 19:e7:d9:0a:f0:68:08:3c:cb:bc:c0:e7:5c:d6:70:db:a7:79: 48:f4:dd:af:6d:6d:13:a4:4f:45:3b:a7:5d:ae:56:d8:f2:1c: 7a:da:04:d3:be:51:b6:b1:03:77:b0:e1:5a:1f:87:3e:2d:67: e3:9e:e0:32:15:96:79:38:a5:0f:9c:48:54:5b:fb:f0:1c:d4: 9a:10:26:3b:58:70:0e:5e:ba:23:9b:8b:b1:8c:a4:10:15:7b: 5d:81:a1:c2:75:d4:04:1d:b1:43:91:29:a4:fe:c0:53:72:ce: 3e:48:16:16:23:b3:df:6e:9f:19:f7:7a:ef:d1:63:51:d2:79: 33:06:02:ed:93:44:ff:35:6d:c8:d6:c4:53:e6:72:65:a6:15: 62:32:ff:42:f7:90:b0:7f:63:e0:3e:19:2c:0c:e5:08:68:e0: 50:b3:a9:44:f4:bd:91:ae:49:f8:69:f5:b0:94:15:81:77:b4: 5c:27:49:d1:e3:24:44:9a:7b:79:e0:98:01:b2:f9:c2:e3:d7: 93:8d:7b:a2 -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISAZt3WVP7VGenAy0SRBO+9KmaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYzY4OTJlOTljODRhMWM1ZGM5YjEyZTExNGQ2N2FmMTZjMjRhOWQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfB7+epd5h8zHcA6Tvgt5fMvnMZ7 vManKwu+4h+Z9iWSioO02lUAdXKIR2gdWTnrtl8oRopufK8jkblhkDw3ptt4OtTp Iyx+dt4R/zNqoPmxwLnLUAxCMDo0WQjW+RRUNpD3k5M/IaxhHhMdn6Pv2HEL5Lck HkfgKDGUwIVcp5HKfRVBtDbxNLtU/yrj4HcPZ/b9K4NuUSGmz7SAjYAroEPsCnPr VSjHQSU+mWrp7FCQgk381J5/pMgWoWp6dvwzhB1JiMMwYSpxv7FiKfeF0qJ0NcJm /Xta5iNZIB7epGQdZD+bI34DhTAgIrow8e4BTI61lB8AVqq6adjE3KlMQwIDAQAB o4ICnzCCApswHQYDVR0OBBYEFLxokumchKHF3JsS4RTWevFsJKnWMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUzLzYyZDlk ZC03MmYyLTQyYTctOTk4Mi1iNjRlMGY2YTA5Y2EvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTMvNjJkOWRk LTcyZjItNDJhNy05OTgyLWI2NGUwZjZhMDljYS8xL3ZHaVM2WnlFb2NYY214TGhG Tlo2OFd3a3FkWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQABQj7AwQBLmaeAwQBXrGGMA0EAgACMAcDBQMq Cl2AMA0GCSqGSIb3DQEBCwUAA4IBAQCifjXshP3v5bA/JT/lK1XDWgFTlrE0U9bm UdbflTHoecCSDmVt8J547p339ztpqL4sHrDg4IAZ59kK8GgIPMu8wOdc1nDbp3lI 9N2vbW0TpE9FO6ddrlbY8hx62gTTvlG2sQN3sOFaH4c+LWfjnuAyFZZ5OKUPnEhU W/vwHNSaECY7WHAOXrojm4uxjKQQFXtdgaHCddQEHbFDkSmk/sBTcs4+SBYWI7Pf bp8Z93rv0WNR0nkzBgLtk0T/NW3I1sRT5nJlphViMv9C95Cwf2PgPhksDOUIaOBQ s6lE9L2Rrkn4afWwlBWBd7RcJ0nR4yREmnt54JgBsvnC49eTjXui -----END CERTIFICATE-----Generated at Tue Jan 20 01:00:19 2026 by rpki-client