This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer File: vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer (raw, json) Hash identifier: 5lJuieZg9LmpSFOapw/2GYKMabfAwkYQZqqgHXf9txU= Subject key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ED4852561103A8DC39BFD44E57DF1A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:19:12 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 8285 AS: 203866 AS: 213814 IP: 185.118.76.0/22 IP: 193.68.64.0/19 IP: 194.8.5.0 -- 194.8.8.255 IP: 213.21.192.0/18 IP: 2a06:e8c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:48:52:56:11:03:a8:dc:39:bf:d4:4e:57:df:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:2b:c0:83:72:50:64:70:df:de:1b:51:d2:6f: d2:c1:70:57:89:a4:bd:d8:fa:3f:a5:8d:64:d8:d5: 83:57:3e:b6:88:eb:d5:b0:c1:8c:b8:3e:48:5f:78: 5a:8f:0c:78:9b:d1:c1:db:3b:76:1d:ba:ed:9f:f0: e7:34:e1:27:92:b0:f9:1c:1e:1d:ce:b4:94:37:c4: a7:e9:32:ec:b9:a2:f8:b5:ae:3c:ad:5a:8b:ea:92: b4:c2:11:9d:84:6c:52:98:93:b9:af:ca:e6:15:dc: 19:f0:52:a1:ac:f6:44:40:65:35:4b:e8:43:ad:d7: 86:b2:a2:a8:8e:fa:c0:c6:9f:75:ab:29:5f:ba:67: 0b:e2:02:a2:95:9b:64:6d:66:80:a7:16:3b:70:92: e2:0c:c3:a9:0c:b1:44:e3:b7:45:b4:bd:e8:02:3a: 56:a2:53:2e:5e:68:cb:cc:d3:d3:88:4b:3c:86:95: 55:2a:53:14:14:9d:f7:f4:26:ce:3d:62:b3:8a:06: e6:1c:22:97:77:d5:d3:80:51:62:c5:84:fd:1a:3f: 3e:2f:61:f8:7d:75:6c:86:f3:b1:0e:eb:ac:b1:ea: 94:ce:85:80:a0:56:7c:70:e4:a1:a2:54:35:4b:b6: 5a:a5:44:b1:40:22:e4:98:0e:85:76:77:00:84:4f: 05:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.118.76.0/22 193.68.64.0/19 194.8.5.0-194.8.8.255 213.21.192.0/18 IPv6: 2a06:e8c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 8285 203866 213814 Signature Algorithm: sha256WithRSAEncryption 88:31:3f:61:4b:1e:f6:cf:b3:53:48:37:7b:c6:3e:64:dc:74: fa:57:e4:2c:c3:53:20:86:35:db:90:12:da:ba:d6:5f:ad:3e: 87:84:dc:e4:f2:54:8e:7d:64:70:19:f3:28:61:0e:6a:03:d4: 0a:8c:0d:f6:02:f3:3d:1e:d5:86:09:52:bd:8e:4e:76:a0:1b: 14:c6:39:82:91:e9:5f:a1:28:aa:c0:cb:12:5f:5c:20:3e:e5: 89:1c:8c:b6:98:35:02:6e:59:52:2f:2d:c1:a9:65:71:48:22: 1f:b3:7c:0c:d4:1c:3d:e4:65:e0:dc:93:2e:cc:e1:5b:a8:cd: 6a:27:62:08:36:fd:ba:e0:4b:c9:3c:70:30:22:ae:d9:e3:9f: 6a:a8:7e:0a:bb:90:2c:e5:0f:95:45:82:70:b8:5d:ee:88:67: f3:9f:af:d1:10:ef:f5:e0:b8:f4:6e:af:34:74:6d:be:f1:4e: f8:63:bb:75:c7:4a:6b:dd:27:22:86:64:70:35:fc:09:a7:80: cf:93:ac:9c:cc:40:91:7a:13:97:42:e1:91:d3:23:c5:39:9f: 1f:78:e2:36:70:49:1a:00:a7:05:75:4b:6b:d0:28:60:38:b8: 43:52:1a:cf:b0:c7:6d:4d:89:99:5e:73:9d:f8:12:6b:0f:22: 23:bc:18:4f -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgISAZt57UhSVhEDqNw5v9ROV98aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiY2ZkZmU2ZGNhOGFjN2JmYTFhOTQ1MGVmOTlmZDMxNWVkMDJhY2Q5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCvAg3JQZHDf3htR0m/SwXBXiaS9 2Po/pY1k2NWDVz62iOvVsMGMuD5IX3hajwx4m9HB2zt2Hbrtn/DnNOEnkrD5HB4d zrSUN8Sn6TLsuaL4ta48rVqL6pK0whGdhGxSmJO5r8rmFdwZ8FKhrPZEQGU1S+hD rdeGsqKojvrAxp91qylfumcL4gKilZtkbWaApxY7cJLiDMOpDLFE47dFtL3oAjpW olMuXmjLzNPTiEs8hpVVKlMUFJ339CbOPWKzigbmHCKXd9XTgFFixYT9Gj8+L2H4 fXVshvOxDuusseqUzoWAoFZ8cOSholQ1S7ZapUSxQCLkmA6FdncAhE8F1QIDAQAB o4IC0jCCAs4wHQYDVR0OBBYEFLz9/m3Kise/oalFDvmf0xXtAqzZMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2QwL2M5ZGUx My01Yjc0LTQxM2QtYjJmYi0xYWYyNDY1YThlZWMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDAvYzlkZTEz LTViNzQtNDEzZC1iMmZiLTFhZjI0NjVhOGVlYy8xL3ZQMy1iY3FLeDctaHFVVU8t Wl9URmUwQ3JOay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEgGCCsGAQUF BwEHAQH/BDkwNzAmBAIAATAgAwQCuXZMAwQFwURAMAwDBADCCAUDBADCCAgDBAbV FcAwDQQCAAIwBwMFAyoG6MAwIwYIKwYBBQUHAQgBAf8EFDASoBAwDgICIF0CAwMc WgIDA0M2MA0GCSqGSIb3DQEBCwUAA4IBAQCIMT9hSx72z7NTSDd7xj5k3HT6V+Qs w1MghjXbkBLautZfrT6HhNzk8lSOfWRwGfMoYQ5qA9QKjA32AvM9HtWGCVK9jk52 oBsUxjmCkelfoSiqwMsSX1wgPuWJHIy2mDUCbllSLy3BqWVxSCIfs3wM1Bw95GXg 3JMuzOFbqM1qJ2IINv264EvJPHAwIq7Z459qqH4Ku5As5Q+VRYJwuF3uiGfzn6/R EO/14Lj0bq80dG2+8U74Y7t1x0pr3ScihmRwNfwJp4DPk6yczECRehOXQuGR0yPF OZ8feOI2cEkaAKcFdUtr0ChgOLhDUhrPsMdtTYmZXnOd+BJrDyIjvBhP -----END CERTIFICATE-----Generated at Tue Jan 20 09:26:34 2026 by rpki-client