This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vJxAXxQuU-tnscSZI6t5XoQyjJs.cer File: vJxAXxQuU-tnscSZI6t5XoQyjJs.cer (raw, json) Hash identifier: 3MPxh/vGXEHz4CsFlsZqLp0B4/yKE5ZH9IcMM0im1eA= Subject key identifier: BC:9C:40:5F:14:2E:53:EB:67:B1:C4:99:23:AB:79:5E:84:32:8C:9B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C803BA4544912E2345894E20925BD08 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/31/b816b9-91b0-46da-8e58-91488a34fcc8/1/vJxAXxQuU-tnscSZI6t5XoQyjJs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/31/b816b9-91b0-46da-8e58-91488a34fcc8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:18:57 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 50289 IP: 37.123.216.0/21 IP: 62.78.32.0/19 IP: 185.142.64.0/22 IP: 2a03:a400::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:3b:a4:54:49:12:e2:34:58:94:e2:09:25:bd:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bc9c405f142e53eb67b1c49923ab795e84328c9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:0e:b7:0b:e2:01:1f:88:e5:67:c0:96:0e:74: 03:71:9f:36:7f:a4:62:d7:aa:d2:5c:d5:73:dc:fd: d0:25:ae:6f:63:5d:27:30:60:28:bc:7f:41:ee:cd: a5:1a:3d:cc:3f:8f:92:a5:f4:27:ab:3d:53:f4:02: 5a:14:e9:5b:4d:c8:56:15:55:c9:05:5f:d4:d9:3b: b0:44:24:66:ca:8e:c4:3a:0c:a5:5e:35:1b:12:40: 20:c8:ce:c8:60:94:79:89:bc:12:ff:7b:e5:70:07: 51:2f:79:94:b3:ca:fc:c3:68:13:80:87:05:2a:30: 44:6d:0e:c0:1b:3f:9b:99:7c:f6:e8:f8:c2:ba:b5: 87:09:e7:ae:61:a2:4e:43:d6:0d:24:74:ac:dd:45: d4:ce:bb:9a:7e:d9:e7:76:12:ed:7f:9d:cd:74:69: 53:33:bf:a6:b6:18:4f:a4:11:fe:18:3a:c2:be:30: ce:10:01:81:e6:7e:98:95:26:e5:7d:11:2a:bc:b7: 4e:63:5b:4f:6b:6b:2f:08:8b:93:df:f1:22:af:db: 3d:09:9d:bc:71:21:98:1c:ec:c0:df:e2:f1:be:7a: be:66:a2:ef:c5:34:8d:dd:c8:74:b4:11:f3:b4:be: 4b:1e:5c:8d:4e:01:5b:01:17:eb:c2:ec:fa:99:4e: 93:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:9C:40:5F:14:2E:53:EB:67:B1:C4:99:23:AB:79:5E:84:32:8C:9B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b816b9-91b0-46da-8e58-91488a34fcc8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b816b9-91b0-46da-8e58-91488a34fcc8/1/vJxAXxQuU-tnscSZI6t5XoQyjJs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.123.216.0/21 62.78.32.0/19 185.142.64.0/22 IPv6: 2a03:a400::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 50289 Signature Algorithm: sha256WithRSAEncryption 10:a5:81:0a:d0:8f:9a:e0:cd:67:be:77:d0:a8:ad:2d:9f:e2: d7:f8:c1:40:84:7e:e8:a7:5b:25:8c:03:90:f5:1f:6c:cd:5c: ed:9c:36:e3:0c:61:f5:51:55:4c:31:31:2e:79:a3:7e:26:ee: 58:33:a3:9f:50:8e:5f:66:ac:82:88:68:9b:75:ce:5b:51:a2: 52:67:b9:db:9a:fc:99:34:76:ca:04:9f:0f:50:89:b7:21:71: 21:a4:5b:4b:ee:2d:81:9e:3a:c5:32:aa:62:d8:43:69:c4:d9: d2:fc:fb:92:67:89:96:51:fc:e0:aa:ba:fb:a4:af:bb:a5:0c: ed:16:c0:6b:44:80:8a:f8:b0:0c:90:51:a1:39:68:e0:a1:4a: 56:b8:5a:09:90:7f:2d:67:e8:23:93:e3:d9:93:98:ab:c7:85: 1b:22:17:82:5f:a2:51:a1:89:83:9d:5d:bd:af:db:2f:73:d2: 48:f4:31:92:3e:fa:54:d6:11:c8:80:13:cd:55:f0:a5:fa:08: 7a:8e:9d:33:96:1b:35:93:60:c8:ed:13:13:ce:ae:41:52:9f: ba:06:2f:93:81:57:4b:ff:c6:9a:40:6b:3b:ee:24:f9:cc:fd: fe:85:6d:a1:59:d8:d1:1b:e4:5f:e9:3d:60:d0:e8:d7:db:45: df:57:f4:57 -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISAZt8gDukVEkS4jRYlOIJJb0IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYzljNDA1ZjE0MmU1M2ViNjdiMWM0OTkyM2FiNzk1ZTg0MzI4YzliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQ63C+IBH4jlZ8CWDnQDcZ82f6Ri 16rSXNVz3P3QJa5vY10nMGAovH9B7s2lGj3MP4+SpfQnqz1T9AJaFOlbTchWFVXJ BV/U2TuwRCRmyo7EOgylXjUbEkAgyM7IYJR5ibwS/3vlcAdRL3mUs8r8w2gTgIcF KjBEbQ7AGz+bmXz26PjCurWHCeeuYaJOQ9YNJHSs3UXUzruaftnndhLtf53NdGlT M7+mthhPpBH+GDrCvjDOEAGB5n6YlSblfREqvLdOY1tPa2svCIuT3/Eir9s9CZ28 cSGYHOzA3+Lxvnq+ZqLvxTSN3ch0tBHztL5LHlyNTgFbARfrwuz6mU6T/QIDAQAB o4ICuzCCArcwHQYDVR0OBBYEFLycQF8ULlPrZ7HEmSOreV6EMoybMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMxL2I4MTZi OS05MWIwLTQ2ZGEtOGU1OC05MTQ4OGEzNGZjYzgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzEvYjgxNmI5 LTkxYjAtNDZkYS04ZTU4LTkxNDg4YTM0ZmNjOC8xL3ZKeEFYeFF1VS10bnNjU1pJ NnQ1WG9ReWpKcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQDJXvYAwQFPk4gAwQCuY5AMA0EAgACMAcDBQAq A6QAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDEcTANBgkqhkiG9w0BAQsFAAOC AQEAEKWBCtCPmuDNZ7530KitLZ/i1/jBQIR+6KdbJYwDkPUfbM1c7Zw24wxh9VFV TDExLnmjfibuWDOjn1COX2asgohom3XOW1GiUme525r8mTR2ygSfD1CJtyFxIaRb S+4tgZ46xTKqYthDacTZ0vz7kmeJllH84Kq6+6Svu6UM7RbAa0SAiviwDJBRoTlo 4KFKVrhaCZB/LWfoI5Pj2ZOYq8eFGyIXgl+iUaGJg51dva/bL3PSSPQxkj76VNYR yIATzVXwpfoIeo6dM5YbNZNgyO0TE86uQVKfugYvk4FXS//GmkBrO+4k+cz9/oVt oVnY0RvkX+k9YNDo19tF31f0Vw== -----END CERTIFICATE-----Generated at Mon Feb 9 20:53:09 2026 by rpki-client