This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vLlVQVUcebjNWYhuTRK4sTklWsQ.cer File: vLlVQVUcebjNWYhuTRK4sTklWsQ.cer (raw, json) Hash identifier: jFUQR9NBj8eVXKOk57TleTq8KcMdP4kFbdFGrYBZ7gI= Subject key identifier: BC:B9:55:41:55:1C:79:B8:CD:59:88:6E:4D:12:B8:B1:39:25:5A:C4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA74C4C48D89AE9A5DE5CD29DA9D628 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fb/d6694a-28d6-4e16-9d11-6109c738ebf6/1/vLlVQVUcebjNWYhuTRK4sTklWsQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fb/d6694a-28d6-4e16-9d11-6109c738ebf6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:20:51 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 194.110.68.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:4c:4c:48:d8:9a:e9:a5:de:5c:d2:9d:a9:d6:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:20:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bcb95541551c79b8cd59886e4d12b8b139255ac4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:fa:da:92:f2:56:9b:e4:a7:ba:7d:f9:d4:af: 94:09:ba:f8:2d:1e:2a:28:3f:80:ab:de:51:39:ca: e1:a1:2f:d0:de:ab:1c:9b:43:c0:24:8b:02:5b:dc: ad:fd:d9:21:e0:0a:3d:e7:8e:1d:6a:d8:74:58:76: 25:a7:8e:39:27:fb:91:f3:b3:70:74:21:a5:23:0e: 3e:e1:39:88:09:7e:49:8c:68:53:d0:94:11:05:76: 9a:22:bb:2e:95:3f:c4:02:19:af:ef:f6:81:57:e8: 89:c0:6c:ae:90:00:f3:8c:13:89:aa:32:d5:e4:81: 3d:54:4b:95:de:b5:72:ce:f0:02:5a:ad:20:44:52: 95:85:0d:5e:ae:08:91:61:45:07:41:eb:b3:15:45: 23:a5:97:40:81:4a:af:31:e3:4f:53:f9:12:99:e8: dc:6d:04:b4:82:e9:2f:62:d4:b0:a1:8a:a5:13:42: c2:d7:1e:77:52:65:58:f9:21:d0:0b:a8:c4:68:dd: 47:c7:ad:dd:8f:cf:a0:80:1b:62:a6:b3:5b:1c:d3: 5a:f3:58:e9:f3:69:c4:c6:57:74:54:f6:9b:94:a0: c0:f8:89:73:5a:e8:95:84:5b:c0:95:e7:aa:9e:a6: 7c:46:c6:e9:7d:ea:73:39:c2:6d:61:e9:d0:0e:9a: c5:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:B9:55:41:55:1C:79:B8:CD:59:88:6E:4D:12:B8:B1:39:25:5A:C4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/d6694a-28d6-4e16-9d11-6109c738ebf6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/d6694a-28d6-4e16-9d11-6109c738ebf6/1/vLlVQVUcebjNWYhuTRK4sTklWsQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.110.68.0/24 Signature Algorithm: sha256WithRSAEncryption 2d:9f:00:31:6f:17:89:3e:3f:03:97:8b:29:70:ae:e9:a9:44: 92:71:99:a8:40:e4:02:d9:e9:fd:b1:e6:75:37:f5:6e:29:11: 72:1a:e5:8c:d6:82:0d:27:4e:3f:80:7c:a4:0a:fd:0a:da:bb: 3d:68:b6:da:62:7a:8c:0c:1b:2d:1d:aa:c0:a7:40:5b:d4:15: 84:c7:6c:20:09:05:41:61:98:5d:b7:af:01:4b:83:80:38:e7: c4:52:71:78:cb:5a:9e:5c:1b:ce:19:60:fe:03:8e:a8:08:90: 62:f0:e9:b6:5b:d0:4d:47:77:c0:52:3b:cc:c6:1d:07:43:8b: 6a:b1:f6:93:85:b7:ed:bb:95:6f:e7:87:f8:08:71:c0:e6:53: 30:2b:a7:53:75:37:3e:da:e3:62:5d:ce:e1:db:74:da:f3:a8: 1c:5a:0d:1c:54:09:e0:0f:75:18:32:7c:1d:6a:c9:0a:1d:99: fb:25:bc:ad:5a:a7:e8:92:4a:35:20:c8:ea:b0:ea:46:2b:f1: 9b:f9:78:5a:b9:92:64:65:18:d1:6c:bc:70:3c:6e:59:cf:03: 38:7e:c1:a3:c1:c6:5c:ca:20:9f:c9:ee:c5:fa:af:47:dd:9a: 03:29:33:0b:10:19:54:33:61:83:4f:29:00:ce:39:b5:51:44: 14:89:99:5f -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt+p0xMSNia6aXeXNKdqdYoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIyMDUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiY2I5NTU0MTU1MWM3OWI4Y2Q1OTg4NmU0ZDEyYjhiMTM5MjU1YWM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzvrakvJWm+Snun351K+UCbr4LR4q KD+Aq95ROcrhoS/Q3qscm0PAJIsCW9yt/dkh4Ao9544dath0WHYlp445J/uR87Nw dCGlIw4+4TmICX5JjGhT0JQRBXaaIrsulT/EAhmv7/aBV+iJwGyukADzjBOJqjLV 5IE9VEuV3rVyzvACWq0gRFKVhQ1ergiRYUUHQeuzFUUjpZdAgUqvMeNPU/kSmejc bQS0gukvYtSwoYqlE0LC1x53UmVY+SHQC6jEaN1Hx63dj8+ggBtiprNbHNNa81jp 82nExld0VPablKDA+IlzWuiVhFvAleeqnqZ8RsbpfepzOcJtYenQDprF0wIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFLy5VUFVHHm4zVmIbk0SuLE5JVrEMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZiL2Q2Njk0 YS0yOGQ2LTRlMTYtOWQxMS02MTA5YzczOGViZjYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmIvZDY2OTRh LTI4ZDYtNGUxNi05ZDExLTYxMDljNzM4ZWJmNi8xL3ZMbFZRVlVjZWJqTldZaHVU Uks0c1RrbFdzUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwm5EMA0GCSqGSIb3DQEBCwUAA4IBAQAtnwAx bxeJPj8Dl4spcK7pqUSScZmoQOQC2en9seZ1N/VuKRFyGuWM1oINJ04/gHykCv0K 2rs9aLbaYnqMDBstHarAp0Bb1BWEx2wgCQVBYZhdt68BS4OAOOfEUnF4y1qeXBvO GWD+A46oCJBi8Om2W9BNR3fAUjvMxh0HQ4tqsfaThbftu5Vv54f4CHHA5lMwK6dT dTc+2uNiXc7h23Ta86gcWg0cVAngD3UYMnwdaskKHZn7JbytWqfokko1IMjqsOpG K/Gb+XhauZJkZRjRbLxwPG5ZzwM4fsGjwcZcyiCfye7F+q9H3ZoDKTMLEBlUM2GD TykAzjm1UUQUiZlf -----END CERTIFICATE-----Generated at Mon Feb 9 18:27:50 2026 by rpki-client