This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vNgzeodIrlhibqk9my9YmNAY3fE.cer File: vNgzeodIrlhibqk9my9YmNAY3fE.cer (raw, json) Hash identifier: 7acgpYURDdgxt6uhYbffiMCqeaPdHP+/nH9q2Joll04= Subject key identifier: BC:D8:33:7A:87:48:AE:58:62:6E:A9:3D:9B:2F:58:98:D0:18:DD:F1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B36E29235B599EAAEBCD7FDF1D192E7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/56/8d6068-acca-4777-9448-b7cf6a7b2a29/1/vNgzeodIrlhibqk9my9YmNAY3fE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/56/8d6068-acca-4777-9448-b7cf6a7b2a29/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:19:13 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.16.64.0/21 IP: 193.16.80.0/20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:e2:92:35:b5:99:ea:ae:bc:d7:fd:f1:d1:92:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bcd8337a8748ae58626ea93d9b2f5898d018ddf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:86:7c:f0:a3:b6:70:bb:d5:d1:45:6e:07:ec: a4:03:d0:6c:30:f4:0e:11:5b:2e:51:1a:c9:f4:ba: 3e:b9:1d:e3:1f:a9:e8:da:40:30:6d:ea:93:1e:38: a7:34:4d:67:94:42:65:ff:4f:20:f4:e3:e2:f5:b1: 5a:33:f0:94:ce:1d:da:32:25:d8:43:06:97:e5:c9: 97:2e:b9:7b:b9:4a:49:b3:b0:9f:bc:24:8d:98:c6: 7f:b4:5a:07:1c:da:68:8e:96:ec:cd:e9:20:dc:e6: a3:89:8b:3e:14:51:77:56:1a:df:5a:04:e8:3a:4a: ad:71:54:15:0a:a2:67:6d:b3:df:38:c9:9c:19:24: 28:4f:a6:67:f1:0c:b9:8f:a7:f8:98:dd:de:e2:6c: 00:f9:8f:60:a9:24:c6:22:dd:2a:90:2a:c6:7e:79: a7:ab:d7:f8:9e:13:c6:83:3c:ba:83:2e:e9:97:2f: 23:9e:e5:8e:f1:0f:c1:c3:40:4f:32:93:c5:29:e0: 4f:9d:dc:78:4a:e1:7a:1a:78:08:8b:6f:78:e7:a6: c8:8b:90:48:92:a2:12:df:01:4e:b4:a0:d9:66:72: 57:cb:72:8b:a5:1e:89:73:3a:c9:8f:f6:bf:b5:72: dc:e9:f3:37:9f:d3:3a:49:95:af:5d:00:f8:ab:01: ac:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:D8:33:7A:87:48:AE:58:62:6E:A9:3D:9B:2F:58:98:D0:18:DD:F1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8d6068-acca-4777-9448-b7cf6a7b2a29/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8d6068-acca-4777-9448-b7cf6a7b2a29/1/vNgzeodIrlhibqk9my9YmNAY3fE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.16.64.0/21 193.16.80.0/20 Signature Algorithm: sha256WithRSAEncryption 93:ab:d6:2f:ff:50:1a:9b:8f:85:0a:28:9f:52:10:3e:ea:94: 4e:7c:ef:f1:43:68:9a:4f:f3:2a:70:b5:db:80:2b:5e:df:53: d4:2b:d4:3e:86:66:c9:38:36:68:f0:f0:82:d2:69:5a:61:bd: 92:cd:72:eb:ee:c3:d1:af:d3:66:d7:ba:2d:3f:5a:1a:52:88: 44:59:91:fc:69:32:9a:ea:b6:28:a4:20:06:85:d7:0f:d0:84: d3:70:13:cb:5b:54:32:fb:fc:41:16:74:47:db:b8:24:0e:ce: 8c:21:2a:d7:8a:ca:f5:78:c1:43:bf:4d:46:35:3a:38:cc:40: 25:df:ad:c5:40:2a:15:25:c9:58:4e:15:86:04:98:2a:27:6b: a7:91:f8:17:d0:6d:77:a7:e8:94:b9:a9:81:c5:1f:0f:ec:27: aa:52:e0:86:3f:bf:df:77:65:82:80:32:7c:f2:b7:0d:82:6f: 41:85:d4:c4:9d:1b:e2:51:99:22:6b:14:cf:9d:1c:45:94:47: 59:2e:67:ed:2b:b5:7b:ab:d4:99:07:42:53:d6:f1:cc:18:a1: 9b:d2:85:e1:ec:65:38:53:8c:89:da:21:c8:33:c9:fa:7a:58: 1f:35:fe:94:8d:43:42:06:5a:0f:f2:c5:03:26:a4:f0:93:29: e7:ea:a3:da -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgISAZt7NuKSNbWZ6q681/3x0ZLnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiY2Q4MzM3YTg3NDhhZTU4NjI2ZWE5M2Q5YjJmNTg5OGQwMThkZGYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIZ88KO2cLvV0UVuB+ykA9BsMPQO EVsuURrJ9Lo+uR3jH6no2kAwbeqTHjinNE1nlEJl/08g9OPi9bFaM/CUzh3aMiXY QwaX5cmXLrl7uUpJs7CfvCSNmMZ/tFoHHNpojpbszekg3OajiYs+FFF3VhrfWgTo OkqtcVQVCqJnbbPfOMmcGSQoT6Zn8Qy5j6f4mN3e4mwA+Y9gqSTGIt0qkCrGfnmn q9f4nhPGgzy6gy7ply8jnuWO8Q/Bw0BPMpPFKeBPndx4SuF6GngIi29456bIi5BI kqIS3wFOtKDZZnJXy3KLpR6JczrJj/a/tXLc6fM3n9M6SZWvXQD4qwGsfwIDAQAB o4ICijCCAoYwHQYDVR0OBBYEFLzYM3qHSK5YYm6pPZsvWJjQGN3xMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU2LzhkNjA2 OC1hY2NhLTQ3NzctOTQ0OC1iN2NmNmE3YjJhMjkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTYvOGQ2MDY4 LWFjY2EtNDc3Ny05NDQ4LWI3Y2Y2YTdiMmEyOS8xL3ZOZ3plb2RJcmxoaWJxazlt eTlZbU5BWTNmRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQDwRBAAwQEwRBQMA0GCSqGSIb3DQEBCwUAA4IB AQCTq9Yv/1Aam4+FCiifUhA+6pROfO/xQ2iaT/MqcLXbgCte31PUK9Q+hmbJODZo 8PCC0mlaYb2SzXLr7sPRr9Nm17otP1oaUohEWZH8aTKa6rYopCAGhdcP0ITTcBPL W1Qy+/xBFnRH27gkDs6MISrXisr1eMFDv01GNTo4zEAl363FQCoVJclYThWGBJgq J2unkfgX0G13p+iUuamBxR8P7CeqUuCGP7/fd2WCgDJ88rcNgm9BhdTEnRviUZki axTPnRxFlEdZLmftK7V7q9SZB0JT1vHMGKGb0oXh7GU4U4yJ2iHIM8n6elgfNf6U jUNCBloP8sUDJqTwkynn6qPa -----END CERTIFICATE-----Generated at Mon Feb 9 15:14:12 2026 by rpki-client