This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vTUGBpFDM_e_wsDR-NPD5LcqMC0.cer File: vTUGBpFDM_e_wsDR-NPD5LcqMC0.cer (raw, json) Hash identifier: 7qqyZOXvwejQ59cco6rc+PivgRA+b3RHw6YJsQS3ZuY= Subject key identifier: BD:35:06:06:91:43:33:F7:BF:C2:C0:D1:F8:D3:C3:E4:B7:2A:30:2D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CECEF2E14BD3999334BF002F2E34CE1 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0c/f0c9d7-168f-4e10-b5a1-cdc8f9bbc372/1/vTUGBpFDM_e_wsDR-NPD5LcqMC0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0c/f0c9d7-168f-4e10-b5a1-cdc8f9bbc372/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:17:41 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.142.132.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:ef:2e:14:bd:39:99:33:4b:f0:02:f2:e3:4c:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bd350606914333f7bfc2c0d1f8d3c3e4b72a302d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:ef:75:79:19:b8:a2:1a:75:62:6b:4d:d4:af: 7b:a7:24:46:40:28:d5:f7:09:20:86:64:f0:b3:c1: 62:79:27:a3:8f:eb:0c:4c:f4:68:e8:c0:2e:22:54: 4a:5d:8a:43:40:7b:74:ab:ba:cd:bb:b2:f3:05:78: fa:e9:85:82:f5:92:d2:0a:4c:d3:01:b0:58:17:0d: c0:d4:c5:ca:a7:a7:19:3a:47:a5:08:cc:2b:df:2c: 65:f3:1c:eb:76:b9:fa:78:e4:16:71:d5:9e:90:6b: 8d:15:ac:ef:e3:6a:67:1d:9b:14:2a:73:26:50:9b: 09:dd:5d:f9:4b:13:3e:75:f4:b8:5e:64:12:d3:3b: 3e:b2:49:e4:3c:9e:f7:f0:5b:81:30:7d:fd:ee:e7: 75:7b:dd:41:5a:c2:57:7b:19:be:89:7d:8b:9e:b5: e4:6f:85:2a:d7:2a:e9:3f:1c:1e:1c:74:b5:39:7c: 4e:5f:19:9c:8a:9d:d2:8f:87:98:e2:ec:52:88:44: 6e:42:4b:07:e5:09:2c:6e:57:59:38:0c:9d:7e:0a: 22:d8:08:f8:00:9b:29:b0:95:63:74:7a:dd:75:a5: e4:ac:89:05:7e:c1:4f:e0:af:b3:b3:dd:6f:83:99: f2:2e:93:ce:98:a7:34:4c:5e:91:bc:a9:88:fe:02: 12:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:35:06:06:91:43:33:F7:BF:C2:C0:D1:F8:D3:C3:E4:B7:2A:30:2D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f0c9d7-168f-4e10-b5a1-cdc8f9bbc372/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f0c9d7-168f-4e10-b5a1-cdc8f9bbc372/1/vTUGBpFDM_e_wsDR-NPD5LcqMC0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.142.132.0/24 Signature Algorithm: sha256WithRSAEncryption 2d:fe:ce:75:9c:e3:92:9f:6e:5c:c0:c6:49:31:03:d5:9e:29: 68:c5:6a:da:dd:6e:96:33:83:ca:1e:c7:88:b5:73:21:72:a6: fe:22:c5:fc:44:0c:a7:b6:5a:b5:f0:e6:ea:7d:b3:8e:85:9b: d2:0f:31:fe:c0:f3:7c:3a:54:3e:e0:d6:fe:fc:0c:9b:5e:9b: 26:d6:21:53:18:f3:22:1b:22:7f:88:67:a9:48:a6:5a:c2:ac: 68:36:2c:34:3c:08:c8:7c:cf:5e:9e:75:7e:c7:9f:d3:0f:45: 23:84:0d:51:54:3a:ca:8e:6a:4b:88:37:89:7f:04:5c:a0:ed: 0e:50:7a:ce:b0:df:c5:0c:33:42:65:26:82:e1:6b:12:93:09: 1a:84:df:80:42:2c:dc:3e:1a:08:69:6f:33:c1:06:c7:5f:9d: 91:e7:bf:cd:8c:15:62:6a:05:a8:13:90:4b:a3:08:dd:aa:6c: b1:73:cd:10:6b:1b:cb:2a:59:40:db:05:87:c6:95:f0:f1:d6: 4b:52:dd:e2:76:15:d9:b6:51:71:13:46:8b:67:43:b1:0c:13: 0b:ea:53:ae:ec:9b:6a:f9:a8:4c:e0:bf:8d:64:b6:d7:0e:af: 2a:e5:b6:7a:0e:f3:fd:a4:19:20:bf:c4:e1:93:a4:aa:fc:44: 05:5d:b9:0c -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt87O8uFL05mTNL8ALy40zhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZDM1MDYwNjkxNDMzM2Y3YmZjMmMwZDFmOGQzYzNlNGI3MmEzMDJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4u91eRm4ohp1YmtN1K97pyRGQCjV 9wkghmTws8FieSejj+sMTPRo6MAuIlRKXYpDQHt0q7rNu7LzBXj66YWC9ZLSCkzT AbBYFw3A1MXKp6cZOkelCMwr3yxl8xzrdrn6eOQWcdWekGuNFazv42pnHZsUKnMm UJsJ3V35SxM+dfS4XmQS0zs+sknkPJ738FuBMH397ud1e91BWsJXexm+iX2LnrXk b4Uq1yrpPxweHHS1OXxOXxmcip3Sj4eY4uxSiERuQksH5QksbldZOAydfgoi2Aj4 AJspsJVjdHrddaXkrIkFfsFP4K+zs91vg5nyLpPOmKc0TF6RvKmI/gISXwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFL01BgaRQzP3v8LA0fjTw+S3KjAtMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBjL2YwYzlk Ny0xNjhmLTRlMTAtYjVhMS1jZGM4ZjliYmMzNzIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGMvZjBjOWQ3 LTE2OGYtNGUxMC1iNWExLWNkYzhmOWJiYzM3Mi8xL3ZUVUdCcEZETV9lX3dzRFIt TlBENUxjcU1DMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW46EMA0GCSqGSIb3DQEBCwUAA4IBAQAt/s51 nOOSn25cwMZJMQPVniloxWra3W6WM4PKHseItXMhcqb+IsX8RAyntlq18ObqfbOO hZvSDzH+wPN8OlQ+4Nb+/AybXpsm1iFTGPMiGyJ/iGepSKZawqxoNiw0PAjIfM9e nnV+x5/TD0UjhA1RVDrKjmpLiDeJfwRcoO0OUHrOsN/FDDNCZSaC4WsSkwkahN+A QizcPhoIaW8zwQbHX52R57/NjBViagWoE5BLowjdqmyxc80QaxvLKllA2wWHxpXw 8dZLUt3idhXZtlFxE0aLZ0OxDBML6lOu7Jtq+ahM4L+NZLbXDq8q5bZ6DvP9pBkg v8Thk6Sq/EQFXbkM -----END CERTIFICATE-----Generated at Mon Feb 9 19:42:16 2026 by rpki-client