This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vOLbTWWaY-QstUTFf5mjNvfZjtA.cer File: vOLbTWWaY-QstUTFf5mjNvfZjtA.cer (raw, json) Hash identifier: 0bo89xvLi85cYs8PI9kQet9sUH2qYzpiLH6EWsYqqBY= Subject key identifier: BC:E2:DB:4D:65:9A:63:E4:2C:B5:44:C5:7F:99:A3:36:F7:D9:8E:D0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB07970EF8DBAE5B1125A891C20BEF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/de/b41866-0578-4557-978a-76c2920ec333/1/vOLbTWWaY-QstUTFf5mjNvfZjtA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/de/b41866-0578-4557-978a-76c2920ec333/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:17:53 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 51831 IP: 91.221.34.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:07:97:0e:f8:db:ae:5b:11:25:a8:91:c2:0b:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bce2db4d659a63e42cb544c57f99a336f7d98ed0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:00:5f:4e:c1:a8:8d:b4:c2:d4:0f:9e:09:d9: e8:e8:c8:2b:de:ea:6e:9f:26:50:d3:84:ca:0a:2e: 84:92:57:a1:33:cd:6a:6a:14:c2:ad:51:bc:3d:81: d6:ac:40:cf:f9:be:0c:1e:a3:8d:3f:c7:98:b0:11: eb:4e:ab:aa:07:87:74:c1:a0:d2:fc:03:73:36:87: 12:34:f6:a5:9c:9b:9c:39:b8:19:b2:f7:92:a7:f7: 78:24:d3:c6:54:6c:3d:e7:75:6c:8b:0b:81:29:88: 1f:99:ea:68:c8:62:da:71:1a:cf:cd:09:43:9c:3b: 50:55:92:2c:5a:ec:47:ef:e0:c8:a3:8c:a9:a5:5a: d2:49:29:09:72:8c:a8:e8:12:21:54:1e:c8:69:b2: 9f:5e:5a:52:1c:bf:6c:c6:94:c0:49:d5:e2:cb:aa: 17:cd:28:af:ee:ba:ca:21:eb:30:cb:c0:ef:48:d6: 38:7e:91:9b:4e:9a:92:4b:35:79:b5:d5:ff:a5:de: 17:bc:75:28:6f:71:54:c8:56:05:2a:fd:7d:eb:49: fe:5d:26:89:39:2d:98:96:fa:06:fb:98:ea:61:34: a4:6c:e2:a4:00:e1:39:3e:49:ef:a8:e7:57:d9:67: e8:f3:4d:c5:06:71:72:70:cf:4b:51:58:f6:e6:95: 1a:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:E2:DB:4D:65:9A:63:E4:2C:B5:44:C5:7F:99:A3:36:F7:D9:8E:D0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b41866-0578-4557-978a-76c2920ec333/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b41866-0578-4557-978a-76c2920ec333/1/vOLbTWWaY-QstUTFf5mjNvfZjtA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.221.34.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 51831 Signature Algorithm: sha256WithRSAEncryption aa:3b:78:a4:75:b1:d8:22:d4:7e:13:30:87:33:e4:5a:c3:5d: 96:95:fc:64:a2:63:f1:a3:e2:24:58:a4:c0:5d:dc:1a:b5:d8: 18:ad:61:08:34:97:13:fe:6e:8b:7c:d1:0d:05:1b:32:ec:9b: c6:49:83:8f:b5:23:36:57:d5:cb:20:d8:49:28:90:a6:78:3f: 54:44:a7:17:b4:85:c3:8a:b6:1f:7d:de:59:9b:01:fc:db:be: 65:fa:a6:ff:89:de:24:a1:31:27:92:63:bb:b4:8c:47:14:a0: 5c:c0:90:25:14:7e:be:7e:48:26:a0:48:78:fb:dc:fb:36:ff: b5:28:d0:06:19:95:0b:8f:f6:bb:02:49:52:81:95:63:b0:46: 92:8a:fe:4f:46:11:d1:f4:b4:03:30:fd:43:2c:8b:df:f6:eb: 36:45:cf:1e:a8:f7:33:da:4d:03:83:c1:dd:60:d2:a3:4d:6a: cc:09:1c:27:2a:eb:49:54:17:e4:fa:cf:ba:82:90:c9:f1:bf: 7a:0f:17:9e:c6:25:46:a1:6b:bb:42:0a:a5:89:b9:02:a6:98: 72:de:f0:b1:99:b3:3a:96:88:d2:86:34:c1:24:57:b8:d2:93: d2:fe:e6:ad:c0:28:a3:c7:60:53:3b:5a:54:2e:1e:5c:9d:ea: c7:05:c2:3e -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt26weXDvjbrlsRJaiRwgvvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiY2UyZGI0ZDY1OWE2M2U0MmNiNTQ0YzU3Zjk5YTMzNmY3ZDk4ZWQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8QBfTsGojbTC1A+eCdno6Mgr3upu nyZQ04TKCi6EklehM81qahTCrVG8PYHWrEDP+b4MHqONP8eYsBHrTquqB4d0waDS /ANzNocSNPalnJucObgZsveSp/d4JNPGVGw953VsiwuBKYgfmepoyGLacRrPzQlD nDtQVZIsWuxH7+DIo4yppVrSSSkJcoyo6BIhVB7IabKfXlpSHL9sxpTASdXiy6oX zSiv7rrKIeswy8DvSNY4fpGbTpqSSzV5tdX/pd4XvHUob3FUyFYFKv1960n+XSaJ OS2YlvoG+5jqYTSkbOKkAOE5PknvqOdX2Wfo803FBnFycM9LUVj25pUaTQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFLzi201lmmPkLLVExX+Zozb32Y7QMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RlL2I0MTg2 Ni0wNTc4LTQ1NTctOTc4YS03NmMyOTIwZWMzMzMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGUvYjQxODY2 LTA1NzgtNDU1Ny05NzhhLTc2YzI5MjBlYzMzMy8xL3ZPTGJUV1dhWS1Rc3RVVEZm NW1qTnZmWmp0QS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQBW90iMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDKdzANBgkqhkiG9w0BAQsFAAOCAQEAqjt4pHWx2CLUfhMwhzPkWsNdlpX8ZKJj 8aPiJFikwF3cGrXYGK1hCDSXE/5ui3zRDQUbMuybxkmDj7UjNlfVyyDYSSiQpng/ VESnF7SFw4q2H33eWZsB/Nu+Zfqm/4neJKExJ5Jju7SMRxSgXMCQJRR+vn5IJqBI ePvc+zb/tSjQBhmVC4/2uwJJUoGVY7BGkor+T0YR0fS0AzD9QyyL3/brNkXPHqj3 M9pNA4PB3WDSo01qzAkcJyrrSVQX5PrPuoKQyfG/eg8XnsYlRqFru0IKpYm5AqaY ct7wsZmzOpaI0oY0wSRXuNKT0v7mrcAoo8dgUztaVC4eXJ3qxwXCPg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:41:18 2026 by rpki-client