This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vMhg2VSXTcqR1bNHtjsiZTZn2m0.cer File: vMhg2VSXTcqR1bNHtjsiZTZn2m0.cer (raw, json) Hash identifier: 9FckZwHJdg1d5nAevdcWAD3PLkP/+jMIpBdWZF08aVc= Subject key identifier: BC:C8:60:D9:54:97:4D:CA:91:D5:B3:47:B6:3B:22:65:36:67:DA:6D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7910400AC7F87E4573F11C47C29002AA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/91/439878-4a95-4478-8163-f370f04265a5/1/vMhg2VSXTcqR1bNHtjsiZTZn2m0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/91/439878-4a95-4478-8163-f370f04265a5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:17:46 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 199509 IP: 217.171.232.0/21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:40:0a:c7:f8:7e:45:73:f1:1c:47:c2:90:02:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bcc860d954974dca91d5b347b63b22653667da6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:2e:26:fb:12:fa:b3:14:d2:84:99:81:39:8b: 37:7d:4c:45:c9:bb:79:22:47:54:88:e4:07:34:ee: 8d:01:0f:dd:69:f5:bf:89:ff:78:7b:76:81:5a:af: 77:64:ea:56:5b:99:5c:e8:25:9c:9d:a5:0d:04:3a: 65:33:97:f8:65:40:9b:5b:1f:80:cb:3b:3f:96:61: b1:cc:ec:32:51:09:a1:bb:b4:e3:a5:69:26:8b:ef: fe:8b:6d:1e:8b:c3:29:60:6a:2f:6e:18:d3:83:bf: ba:c8:dc:75:e1:f2:e3:d7:51:88:02:5a:c4:3f:1a: 94:28:63:e9:e1:0f:32:7e:2b:5f:eb:0b:51:3f:0a: b8:73:3c:c7:ce:05:60:f5:de:31:04:4a:b1:f1:92: 63:cb:5a:96:71:d5:e2:21:f3:a8:f9:89:b4:36:1d: 48:50:c4:b7:98:92:86:51:a6:d5:6f:9d:0d:af:23: 63:b4:e4:85:91:23:2a:da:b3:bf:ff:40:67:9f:b1: dd:94:72:73:6e:01:78:0b:4f:a1:2e:3d:00:9e:30: 6a:d5:f2:74:3c:09:1b:7a:2e:ab:6e:43:27:86:03: 7a:37:52:49:fc:00:92:69:99:9e:3a:83:97:a2:66: f6:b1:a3:58:55:f4:41:c1:be:75:06:29:0e:12:26: f5:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:C8:60:D9:54:97:4D:CA:91:D5:B3:47:B6:3B:22:65:36:67:DA:6D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/439878-4a95-4478-8163-f370f04265a5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/439878-4a95-4478-8163-f370f04265a5/1/vMhg2VSXTcqR1bNHtjsiZTZn2m0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.171.232.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 199509 Signature Algorithm: sha256WithRSAEncryption 5b:e7:7a:9a:a9:3c:0e:5f:e1:74:66:d9:52:f6:4f:bb:22:0f: aa:0b:21:78:d9:b5:7e:ea:7a:27:44:30:83:5b:18:7e:bc:10: 79:62:5f:52:24:32:7c:e4:80:5e:71:b5:20:06:02:46:11:2f: 0b:2a:50:23:22:72:f4:3c:2e:9b:2e:4d:3c:89:22:01:cf:bd: ec:d4:7a:fd:72:c9:98:4e:28:a4:eb:28:07:ca:7b:76:8a:c9: 5b:ea:7e:34:86:50:54:52:3f:59:5e:c5:9b:58:b9:e4:a0:55: 0e:af:31:0b:ed:94:59:20:7c:b1:79:0d:d7:5b:38:82:88:d8: f7:b1:1a:71:c6:8e:d0:03:20:0a:af:cf:2e:c8:7b:ac:5b:2f: 07:b8:26:02:84:1c:5d:d0:20:31:89:86:0a:20:6e:e5:ca:76: 07:05:fe:a3:52:46:59:08:b5:a5:2f:40:3d:30:47:15:9e:11: a9:9f:32:a4:45:bd:f7:7b:a3:c7:db:88:a0:61:ae:6a:98:3c: 95:dd:39:1d:00:74:47:fc:cf:df:b9:d6:26:d3:54:73:14:3b: 52:e5:5f:89:64:d6:92:3a:93:82:14:6b:b2:5d:22:b4:20:fe: ac:a1:b9:0c:c1:f8:a3:e0:73:10:56:fa:08:2f:ed:af:ac:cd: e5:bc:e4:c3 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt5EEAKx/h+RXPxHEfCkAKqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiY2M4NjBkOTU0OTc0ZGNhOTFkNWIzNDdiNjNiMjI2NTM2NjdkYTZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmS4m+xL6sxTShJmBOYs3fUxFybt5 IkdUiOQHNO6NAQ/dafW/if94e3aBWq93ZOpWW5lc6CWcnaUNBDplM5f4ZUCbWx+A yzs/lmGxzOwyUQmhu7TjpWkmi+/+i20ei8MpYGovbhjTg7+6yNx14fLj11GIAlrE PxqUKGPp4Q8yfitf6wtRPwq4czzHzgVg9d4xBEqx8ZJjy1qWcdXiIfOo+Ym0Nh1I UMS3mJKGUabVb50NryNjtOSFkSMq2rO//0Bnn7HdlHJzbgF4C0+hLj0AnjBq1fJ0 PAkbei6rbkMnhgN6N1JJ/ACSaZmeOoOXomb2saNYVfRBwb51BikOEib1PQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFLzIYNlUl03KkdWzR7Y7ImU2Z9ptMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkxLzQzOTg3 OC00YTk1LTQ0NzgtODE2My1mMzcwZjA0MjY1YTUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTEvNDM5ODc4 LTRhOTUtNDQ3OC04MTYzLWYzNzBmMDQyNjVhNS8xL3ZNaGcyVlNYVGNxUjFiTkh0 anNpWlRabjJtMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQD2avoMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMLVTANBgkqhkiG9w0BAQsFAAOCAQEAW+d6mqk8Dl/hdGbZUvZPuyIPqgsheNm1 fup6J0Qwg1sYfrwQeWJfUiQyfOSAXnG1IAYCRhEvCypQIyJy9Dwumy5NPIkiAc+9 7NR6/XLJmE4opOsoB8p7dorJW+p+NIZQVFI/WV7Fm1i55KBVDq8xC+2UWSB8sXkN 11s4gojY97EaccaO0AMgCq/PLsh7rFsvB7gmAoQcXdAgMYmGCiBu5cp2BwX+o1JG WQi1pS9APTBHFZ4RqZ8ypEW993ujx9uIoGGuapg8ld05HQB0R/zP37nWJtNUcxQ7 UuVfiWTWkjqTghRrsl0itCD+rKG5DMH4o+BzEFb6CC/tr6zN5bzkww== -----END CERTIFICATE-----Generated at Mon Feb 9 19:44:00 2026 by rpki-client