This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vJ7I21lyYHXuKfXvyQth5zwH968.cer File: vJ7I21lyYHXuKfXvyQth5zwH968.cer (raw, json) Hash identifier: fn2xHNAp9XaPouoVX81p1UGlkAn9T76WV8MCdgiqtgg= Subject key identifier: BC:9E:C8:DB:59:72:60:75:EE:29:F5:EF:C9:0B:61:E7:3C:07:F7:AF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEDC298EC26B85998289F0FE6072A61 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/11/8b50e6-927a-4d3b-9422-e57fbdae5903/1/vJ7I21lyYHXuKfXvyQth5zwH968.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/11/8b50e6-927a-4d3b-9422-e57fbdae5903/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:35 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 1926 IP: 153.1.0.0/16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:c2:98:ec:26:b8:59:98:28:9f:0f:e6:07:2a:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bc9ec8db59726075ee29f5efc90b61e73c07f7af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:22:2e:dd:fa:6e:cf:07:04:fc:66:43:cd:11: 25:f1:c2:29:63:5f:f8:4a:72:37:f6:ff:c8:a9:00: 87:13:d2:24:88:78:14:5b:06:8b:29:49:b6:79:21: c9:67:4d:30:d3:80:9d:6f:9d:d7:3d:c6:f2:c2:08: aa:c8:9f:e1:3d:c7:49:50:87:83:bc:56:40:04:22: a6:62:f4:96:30:79:55:34:e7:ce:6f:9d:9d:d8:09: 30:d2:8d:2e:7e:e6:c7:bb:fd:c6:14:ee:c5:ff:65: a3:5f:ab:d2:b5:a0:16:c8:b3:2f:1b:48:d9:8b:50: f8:61:98:84:e1:9a:cc:c9:33:9f:5e:e1:85:fd:35: 75:07:3c:d1:dd:f5:a0:73:7a:42:f3:33:18:bd:d2: 9e:b2:67:68:d4:07:da:19:0c:dd:b7:d7:48:38:49: fc:10:fa:55:12:72:2b:73:2e:d0:20:fd:85:a4:b3: 54:e9:7a:39:e4:87:55:33:e2:7a:69:fc:e0:dd:b4: ae:6a:26:60:7a:df:07:c9:10:36:d0:0a:da:16:bc: ea:3e:2d:5d:fb:84:f8:69:2f:87:53:c7:77:2d:e6: c8:0b:c7:4d:5e:18:b5:17:c3:48:33:1c:40:f8:2f: 19:52:5d:37:b2:cc:14:a3:8d:94:66:96:e9:87:8c: 37:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:9E:C8:DB:59:72:60:75:EE:29:F5:EF:C9:0B:61:E7:3C:07:F7:AF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/8b50e6-927a-4d3b-9422-e57fbdae5903/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/8b50e6-927a-4d3b-9422-e57fbdae5903/1/vJ7I21lyYHXuKfXvyQth5zwH968.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 153.1.0.0/16 sbgp-autonomousSysNum: critical Autonomous System Numbers: 1926 Signature Algorithm: sha256WithRSAEncryption 69:62:91:4e:04:91:56:0d:fb:ed:ee:0e:04:2c:36:eb:4e:c0: 10:5a:87:c8:d8:88:de:fa:d1:a5:d4:fa:12:c2:34:80:aa:48: 9e:f0:59:6a:fb:44:79:f3:59:ae:bc:37:b1:96:80:20:05:2a: 96:40:5c:9c:73:39:5b:08:94:30:ee:89:4a:21:61:d4:5d:00: 4a:52:ca:99:73:45:15:12:da:0b:bb:42:73:fc:ea:d4:c8:96: 8b:63:9f:8f:80:d7:5f:44:2d:4c:37:35:df:78:a9:c5:fa:a8: 63:ab:b7:19:78:46:0c:fe:a2:20:a6:06:6a:5c:d3:d5:ce:5c: f7:f5:a0:46:72:1b:28:f0:da:46:16:54:1d:b5:96:da:39:f6: 55:14:8f:71:37:9a:c8:ce:72:c0:37:10:b4:da:92:41:5e:c5: ac:1e:70:0f:04:ab:76:db:8e:19:0b:30:be:89:c8:44:f5:fe: ed:ce:f0:06:f9:14:4a:86:97:71:bd:db:4c:f2:23:cd:8e:61: f8:51:5a:7f:34:21:71:70:e6:6c:7e:27:6f:20:6c:49:8d:ad: 12:34:86:a0:85:78:7b:49:1e:1b:bd:27:a0:75:9d:19:21:b7: 77:66:e7:59:03:db:47:de:f7:2c:23:92:4d:dc:e9:da:54:fe: 5e:76:31:cb -----BEGIN CERTIFICATE----- MIIFkjCCBHqgAwIBAgISAZt87cKY7Ca4WZgonw/mByphMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYzllYzhkYjU5NzI2MDc1ZWUyOWY1ZWZjOTBiNjFlNzNjMDdmN2FmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyIu3fpuzwcE/GZDzREl8cIpY1/4 SnI39v/IqQCHE9IkiHgUWwaLKUm2eSHJZ00w04Cdb53XPcbywgiqyJ/hPcdJUIeD vFZABCKmYvSWMHlVNOfOb52d2Akw0o0ufubHu/3GFO7F/2WjX6vStaAWyLMvG0jZ i1D4YZiE4ZrMyTOfXuGF/TV1BzzR3fWgc3pC8zMYvdKesmdo1AfaGQzdt9dIOEn8 EPpVEnIrcy7QIP2FpLNU6Xo55IdVM+J6afzg3bSuaiZget8HyRA20AraFrzqPi1d +4T4aS+HU8d3LebIC8dNXhi1F8NIMxxA+C8ZUl03sswUo42UZpbph4w37QIDAQAB o4ICnjCCApowHQYDVR0OBBYEFLyeyNtZcmB17in178kLYec8B/evMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzExLzhiNTBl Ni05MjdhLTRkM2ItOTQyMi1lNTdmYmRhZTU5MDMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTEvOGI1MGU2 LTkyN2EtNGQzYi05NDIyLWU1N2ZiZGFlNTkwMy8xL3ZKN0kyMWx5WUhYdUtmWHZ5 UXRoNXp3SDk2OC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUF BwEHAQH/BA8wDTALBAIAATAFAwMAmQEwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC B4YwDQYJKoZIhvcNAQELBQADggEBAGlikU4EkVYN++3uDgQsNutOwBBah8jYiN76 0aXU+hLCNICqSJ7wWWr7RHnzWa68N7GWgCAFKpZAXJxzOVsIlDDuiUohYdRdAEpS yplzRRUS2gu7QnP86tTIlotjn4+A119ELUw3Nd94qcX6qGOrtxl4Rgz+oiCmBmpc 09XOXPf1oEZyGyjw2kYWVB21lto59lUUj3E3msjOcsA3ELTakkFexawecA8Eq3bb jhkLML6JyET1/u3O8Ab5FEqGl3G920zyI82OYfhRWn80IXFw5mx+J28gbEmNrRI0 hqCFeHtJHhu9J6B1nRkht3dm51kD20fe9ywjkk3c6dpU/l52Mcs= -----END CERTIFICATE-----Generated at Mon Feb 9 19:51:42 2026 by rpki-client