This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vOyMcyqkPvCzm9NNFA_dOnOu23k.cer File: vOyMcyqkPvCzm9NNFA_dOnOu23k.cer (raw, json) Hash identifier: LdjwY2AgcwXfdNVnrkuhhGYNIXqcllfveAWyk/1koSg= Subject key identifier: BC:EC:8C:73:2A:A4:3E:F0:B3:9B:D3:4D:14:0F:DD:3A:73:AE:DB:79 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC867BD10EB6FF83BB4F9AAE6175071 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9d/61158a-7246-4b47-b496-c40c0dbe1de0/1/vOyMcyqkPvCzm9NNFA_dOnOu23k.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9d/61158a-7246-4b47-b496-c40c0dbe1de0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:18:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 141.57.0.0/16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:67:bd:10:eb:6f:f8:3b:b4:f9:aa:e6:17:50:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bcec8c732aa43ef0b39bd34d140fdd3a73aedb79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:0a:21:c8:f2:29:d0:b4:b9:11:71:6b:2f:18: 2a:29:ce:2d:21:fa:d5:16:65:68:af:67:06:55:cf: 03:f8:d4:2c:35:59:8a:ea:7f:20:a3:33:97:71:73: fd:4b:f9:56:8e:de:3c:db:88:57:c1:6e:cf:ae:ea: e9:88:f9:49:68:d1:94:bd:ed:20:08:00:48:c7:8e: fb:db:cc:d1:62:3c:2c:6b:a1:b8:e8:50:4b:b7:11: 08:24:5a:b4:96:67:5b:45:20:3b:1e:29:d7:2d:99: 75:ee:e6:05:f6:49:d9:1c:24:e8:19:30:c7:b5:14: e4:ae:1a:bb:24:26:05:ca:6f:3a:d1:27:a0:83:be: 76:dd:77:ff:2b:35:11:de:4b:d8:e8:5a:53:ae:27: 50:25:03:02:08:3f:87:2d:75:0b:02:57:6b:00:38: 8a:e6:27:1d:a0:bd:c3:60:d0:90:53:ee:08:13:46: 7d:31:f5:58:f8:21:49:95:4c:e3:28:49:de:e4:65: 80:c1:9a:51:aa:68:22:c7:67:2f:85:af:9d:cf:db: 5b:40:cd:07:2e:e0:90:5b:80:22:ce:0a:7f:5e:68: c7:35:2c:6b:53:e2:c1:bd:e6:ec:24:02:33:eb:44: 55:26:7f:27:be:c2:3b:b6:84:aa:07:9d:08:4c:ce: 85:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:EC:8C:73:2A:A4:3E:F0:B3:9B:D3:4D:14:0F:DD:3A:73:AE:DB:79 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/61158a-7246-4b47-b496-c40c0dbe1de0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/61158a-7246-4b47-b496-c40c0dbe1de0/1/vOyMcyqkPvCzm9NNFA_dOnOu23k.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.57.0.0/16 Signature Algorithm: sha256WithRSAEncryption 65:ee:7c:d8:3a:9e:ba:fe:64:47:0e:1b:76:24:b0:e6:a1:3a: 16:3f:32:c3:cd:be:a4:e6:39:7f:14:42:00:be:9f:3a:a9:2a: ea:98:84:11:8b:02:36:c7:9d:f4:61:5a:bb:79:b8:5a:b8:23: 6a:6c:5b:7f:7a:f2:a0:6d:70:35:85:d3:1a:92:9f:88:a8:b1: dc:ae:be:4a:25:64:b7:43:60:af:ac:75:b4:11:e0:fd:3d:ee: 2b:07:e7:a3:70:c9:e1:72:bb:74:49:fa:e4:c7:52:60:8c:9d: 38:86:5e:2d:7c:c6:e8:c6:7a:bf:2b:f4:dc:d4:dd:db:d3:f2: 16:e0:45:20:c9:66:80:78:4c:01:93:8b:5c:37:f6:11:de:da: b4:6b:e3:32:e8:a6:15:14:f2:75:ba:4e:75:fd:11:40:d2:bb: 3f:3a:ae:16:9f:7a:00:a1:ca:93:ea:aa:d1:61:28:d9:be:9d: d8:da:8d:df:12:e4:47:58:46:97:8b:56:2b:e5:00:e2:a1:a0: 72:3e:53:ae:a3:a7:ba:87:e1:3e:be:3f:a8:4d:9c:36:09:42: 33:24:6b:b4:60:3f:98:b2:00:43:8a:45:f1:78:e3:87:d4:47: 09:21:85:4d:62:63:e9:33:93:db:17:1d:2c:60:68:93:1a:74: d7:17:22:e3 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgISAZt6yGe9EOtv+Du0+armF1BxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiY2VjOGM3MzJhYTQzZWYwYjM5YmQzNGQxNDBmZGQzYTczYWVkYjc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwohyPIp0LS5EXFrLxgqKc4tIfrV FmVor2cGVc8D+NQsNVmK6n8gozOXcXP9S/lWjt4824hXwW7PrurpiPlJaNGUve0g CABIx47728zRYjwsa6G46FBLtxEIJFq0lmdbRSA7HinXLZl17uYF9knZHCToGTDH tRTkrhq7JCYFym860Segg7523Xf/KzUR3kvY6FpTridQJQMCCD+HLXULAldrADiK 5icdoL3DYNCQU+4IE0Z9MfVY+CFJlUzjKEne5GWAwZpRqmgix2cvha+dz9tbQM0H LuCQW4Aizgp/XmjHNSxrU+LBvebsJAIz60RVJn8nvsI7toSqB50ITM6FQQIDAQAB o4ICgzCCAn8wHQYDVR0OBBYEFLzsjHMqpD7ws5vTTRQP3Tpzrtt5MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzlkLzYxMTU4 YS03MjQ2LTRiNDctYjQ5Ni1jNDBjMGRiZTFkZTAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWQvNjExNThh LTcyNDYtNGI0Ny1iNDk2LWM0MGMwZGJlMWRlMC8xL3ZPeU1jeXFrUHZDem05Tk5G QV9kT25PdTIzay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUF BwEHAQH/BA8wDTALBAIAATAFAwMAjTkwDQYJKoZIhvcNAQELBQADggEBAGXufNg6 nrr+ZEcOG3YksOahOhY/MsPNvqTmOX8UQgC+nzqpKuqYhBGLAjbHnfRhWrt5uFq4 I2psW3968qBtcDWF0xqSn4iosdyuvkolZLdDYK+sdbQR4P097isH56NwyeFyu3RJ +uTHUmCMnTiGXi18xujGer8r9NzU3dvT8hbgRSDJZoB4TAGTi1w39hHe2rRr4zLo phUU8nW6TnX9EUDSuz86rhafegChypPqqtFhKNm+ndjajd8S5EdYRpeLVivlAOKh oHI+U66jp7qH4T6+P6hNnDYJQjMka7RgP5iyAEOKRfF444fURwkhhU1iY+kzk9sX HSxgaJMadNcXIuM= -----END CERTIFICATE-----Generated at Tue Jan 27 13:03:17 2026 by rpki-client