This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vP7i_2ht6InD9Y3x2fXit41kHeQ.cer File: vP7i_2ht6InD9Y3x2fXit41kHeQ.cer (raw, json) Hash identifier: UUm5z9OC4ODoBmBuii77MsJ0Sq0VKs/Lw6pLfVaT4iY= Subject key identifier: BC:FE:E2:FF:68:6D:E8:89:C3:F5:8D:F1:D9:F5:E2:B7:8D:64:1D:E4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77589391A6B487FAEC2B241056288F7E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4f/60277c-d037-485c-a4b0-db3993cc5125/1/vP7i_2ht6InD9Y3x2fXit41kHeQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4f/60277c-d037-485c-a4b0-db3993cc5125/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:17:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 51428 IP: 31.134.32.0/20 IP: 178.212.176.0/21 IP: 2001:678:62c::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:93:91:a6:b4:87:fa:ec:2b:24:10:56:28:8f:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bcfee2ff686de889c3f58df1d9f5e2b78d641de4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:ee:29:59:11:b5:00:75:9a:cb:85:2d:77:8b: 7f:67:ef:d8:e9:3d:6f:04:0a:66:02:3c:8f:08:46: c0:cf:a6:75:7b:e7:1c:b8:33:95:7a:ac:1c:21:69: e9:5e:7c:bf:40:fa:10:98:15:fd:07:6c:b6:6a:80: c7:23:9c:3c:f2:74:34:31:10:2c:e7:e6:89:ca:58: 42:05:00:e5:c2:82:91:62:9e:43:3a:49:ad:ee:b5: 86:fe:fc:6f:1d:fa:40:d9:7d:3d:ec:b2:5e:d9:fe: 69:36:4a:48:cf:12:95:1e:93:fa:cd:de:90:32:c6: ba:e2:2a:e3:03:5e:5c:10:b3:19:ce:2c:2a:7f:81: 6d:f4:96:65:27:7f:2f:30:48:73:61:bd:46:96:6c: 41:a5:37:08:7c:02:eb:2e:e6:e1:27:10:29:d8:02: 71:86:50:c3:93:c2:67:5f:bb:ae:67:67:4c:74:d9: 79:e7:3d:0e:f4:ab:bd:91:b9:c0:1c:0f:0f:4f:c7: 87:30:78:49:c5:a9:77:14:24:17:18:05:03:d1:b6: 8a:87:19:69:f4:a1:ee:21:1f:ab:22:b8:d2:c5:fc: 48:b1:0f:d2:f0:e4:05:42:bb:0a:f2:0e:02:74:7f: a2:8e:a9:83:95:27:79:16:2c:97:03:90:72:ea:5a: 3d:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:FE:E2:FF:68:6D:E8:89:C3:F5:8D:F1:D9:F5:E2:B7:8D:64:1D:E4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/60277c-d037-485c-a4b0-db3993cc5125/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/60277c-d037-485c-a4b0-db3993cc5125/1/vP7i_2ht6InD9Y3x2fXit41kHeQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.134.32.0/20 178.212.176.0/21 IPv6: 2001:678:62c::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 51428 Signature Algorithm: sha256WithRSAEncryption a0:da:fb:92:81:df:32:c2:48:47:7f:0d:17:13:f3:c4:be:b6: 64:12:a8:c8:b5:64:a3:36:e0:34:a4:5b:4f:93:63:10:e6:8a: b0:96:8e:b7:e4:3b:70:06:e2:0c:f6:21:4f:50:fe:78:30:f6: 28:a9:44:21:17:81:3b:aa:e2:f8:b0:9f:2e:93:b9:30:1d:6b: 94:88:54:79:02:9d:94:c3:6d:9c:b2:42:7e:c1:0e:06:5d:7c: 71:e4:55:f9:e9:9a:9d:d4:55:e7:ee:76:97:31:42:9e:bd:4d: fb:62:a6:17:bf:e4:3c:95:8b:77:c9:8d:8e:0f:ac:fa:cb:ef: 54:d1:6c:3b:3b:57:12:c4:e5:b1:95:bc:5e:a3:91:63:06:3b: 6c:f7:1e:7b:bc:94:69:43:35:fe:31:10:62:1c:b7:b4:cb:fa: 65:20:0d:d3:30:40:64:d9:0f:35:35:c5:ed:ea:ee:88:29:53: 2b:98:77:ca:61:19:eb:3b:67:73:ed:17:d9:05:92:86:37:2f: 5e:87:3f:62:96:e3:8c:bc:6a:f0:28:94:a7:9f:10:13:26:2b: 94:9f:e7:67:a5:bf:5f:f9:e0:55:6a:36:b9:ec:07:e6:a3:1d: 93:48:9c:b4:ee:5b:cb:7d:75:45:f9:b3:52:bc:c5:88:be:99: 57:5d:9a:8b -----BEGIN CERTIFICATE----- MIIFqzCCBJOgAwIBAgISAZt3WJORprSH+uwrJBBWKI9+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiY2ZlZTJmZjY4NmRlODg5YzNmNThkZjFkOWY1ZTJiNzhkNjQxZGU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2e4pWRG1AHWay4Utd4t/Z+/Y6T1v BApmAjyPCEbAz6Z1e+ccuDOVeqwcIWnpXny/QPoQmBX9B2y2aoDHI5w88nQ0MRAs 5+aJylhCBQDlwoKRYp5DOkmt7rWG/vxvHfpA2X097LJe2f5pNkpIzxKVHpP6zd6Q Msa64irjA15cELMZziwqf4Ft9JZlJ38vMEhzYb1GlmxBpTcIfALrLubhJxAp2AJx hlDDk8JnX7uuZ2dMdNl55z0O9Ku9kbnAHA8PT8eHMHhJxal3FCQXGAUD0baKhxlp 9KHuIR+rIrjSxfxIsQ/S8OQFQrsK8g4CdH+ijqmDlSd5FiyXA5By6lo9TwIDAQAB o4ICtzCCArMwHQYDVR0OBBYEFLz+4v9obeiJw/WN8dn14reNZB3kMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRmLzYwMjc3 Yy1kMDM3LTQ4NWMtYTRiMC1kYjM5OTNjYzUxMjUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGYvNjAyNzdj LWQwMzctNDg1Yy1hNGIwLWRiMzk5M2NjNTEyNS8xL3ZQN2lfMmh0NkluRDlZM3gy ZlhpdDQxa0hlUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDYGCCsGAQUF BwEHAQH/BCcwJTASBAIAATAMAwQEH4YgAwQDstSwMA8EAgACMAkDBwAgAQZ4Biww GgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAMjkMA0GCSqGSIb3DQEBCwUAA4IBAQCg 2vuSgd8ywkhHfw0XE/PEvrZkEqjItWSjNuA0pFtPk2MQ5oqwlo635DtwBuIM9iFP UP54MPYoqUQhF4E7quL4sJ8uk7kwHWuUiFR5Ap2Uw22cskJ+wQ4GXXxx5FX56Zqd 1FXn7naXMUKevU37YqYXv+Q8lYt3yY2OD6z6y+9U0Ww7O1cSxOWxlbxeo5FjBjts 9x57vJRpQzX+MRBiHLe0y/plIA3TMEBk2Q81NcXt6u6IKVMrmHfKYRnrO2dz7RfZ BZKGNy9ehz9iluOMvGrwKJSnnxATJiuUn+dnpb9f+eBVaja57Afmox2TSJy07lvL fXVF+bNSvMWIvplXXZqL -----END CERTIFICATE-----Generated at Mon Feb 9 19:39:38 2026 by rpki-client