This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vWSXBH8g1vcI19tCVXtpj7-z2Ps.cer File: vWSXBH8g1vcI19tCVXtpj7-z2Ps.cer (raw, json) Hash identifier: wq7mHPFiTn5kkU497VyH9F8ZKPJl5wut18qc/fKZUcg= Subject key identifier: BD:64:97:04:7F:20:D6:F7:08:D7:DB:42:55:7B:69:8F:BF:B3:D8:FB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5A8641F597CC95BD038CE939EB3452 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/18/5833f3-2421-41b0-be2e-82a107c4a7e2/1/vWSXBH8g1vcI19tCVXtpj7-z2Ps.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/18/5833f3-2421-41b0-be2e-82a107c4a7e2/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:18:31 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 41371 IP: 77.240.32.0/24 IP: 77.240.34.0/24 IP: 77.240.36.0/23 IP: 77.240.40.0/22 IP: 88.151.176.0/21 IP: 2a05:f040::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:86:41:f5:97:cc:95:bd:03:8c:e9:39:eb:34:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bd6497047f20d6f708d7db42557b698fbfb3d8fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b1:c5:41:72:b7:8a:76:5e:75:82:30:6e:03: c3:33:01:13:68:82:8e:28:d9:64:1a:de:a9:42:ea: 57:1a:c3:0d:27:7a:9b:f5:60:ef:35:76:b1:8c:2b: 60:f9:99:e4:cf:fe:4e:6d:02:28:12:3a:c0:1b:45: aa:d5:86:14:65:73:4c:c9:2a:5d:41:0f:23:97:9a: 52:e9:52:15:2f:ca:54:34:93:1b:e5:aa:f2:36:4f: 0c:3c:24:19:32:05:81:44:3e:d6:02:92:b9:ee:ad: e4:95:93:7c:3f:41:89:3f:54:a0:82:05:c2:69:b3: b6:7e:8c:5e:b1:db:c3:f8:6f:36:51:1d:da:71:88: e0:b1:b0:15:67:d1:c0:5e:15:48:6d:18:2d:f0:8c: 22:15:48:cc:c9:c3:2e:64:04:f5:61:86:77:57:77: e7:f2:6f:ba:0c:85:e4:56:05:be:4e:c6:10:46:b9: 66:94:4b:2f:83:d8:13:d9:61:12:bf:68:63:69:86: 44:be:76:95:88:e7:36:8f:3c:28:7f:b9:27:53:be: 68:c5:00:bb:f1:f7:0b:53:9b:49:0a:37:55:c6:03: f4:e0:ff:1f:cc:e2:36:8f:ab:e4:30:84:ba:42:82: 74:d0:40:6a:b7:74:44:47:9e:83:89:26:19:3d:74: ed:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:64:97:04:7F:20:D6:F7:08:D7:DB:42:55:7B:69:8F:BF:B3:D8:FB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/5833f3-2421-41b0-be2e-82a107c4a7e2/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/5833f3-2421-41b0-be2e-82a107c4a7e2/1/vWSXBH8g1vcI19tCVXtpj7-z2Ps.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.240.32.0/24 77.240.34.0/24 77.240.36.0/23 77.240.40.0/22 88.151.176.0/21 IPv6: 2a05:f040::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 41371 Signature Algorithm: sha256WithRSAEncryption 5f:44:19:e2:d3:b6:a1:3a:3d:1b:58:29:4b:cb:9d:0f:5c:c2: 41:31:66:de:3b:4c:64:83:06:38:1a:20:fe:b9:a0:86:72:7a: c3:39:04:59:91:aa:57:35:8e:8d:1e:8c:68:66:12:d2:62:90: 54:7f:bc:c0:7a:6a:60:6c:34:d0:21:ca:90:20:28:ad:97:72: 74:ce:36:fd:33:54:c5:e4:da:05:ac:4a:94:5b:40:bf:c0:ab: a6:37:59:a3:db:d5:e6:63:5f:13:fc:6d:56:b2:8b:ea:43:1d: 47:b8:51:6f:53:bb:53:c5:fe:d7:df:f0:af:45:34:7d:8d:3e: 97:e2:a6:a7:2a:3b:08:d0:53:b9:63:b6:7a:80:1e:04:f1:18: aa:0f:8a:87:bc:bc:eb:7b:e2:24:a3:0f:1c:80:30:7d:68:af: e0:32:46:5c:09:c3:9e:55:59:e5:a3:29:05:f1:c9:b1:ce:f0: d7:52:23:c9:1d:70:e5:67:06:de:2c:45:5c:56:68:5e:ca:fc: 65:00:8e:2a:89:73:5f:a2:fe:b5:97:19:79:1a:f4:e8:84:1f: e6:08:0f:fb:28:45:45:3b:5b:28:fa:2e:d1:5f:ea:78:f0:cb: 14:a7:6e:02:43:2d:b1:0c:c5:5b:5a:99:7b:d0:f6:3d:c2:05: 15:1f:45:d9 -----BEGIN CERTIFICATE----- MIIFuzCCBKOgAwIBAgISAZt6WoZB9ZfMlb0DjOk56zRSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZDY0OTcwNDdmMjBkNmY3MDhkN2RiNDI1NTdiNjk4ZmJmYjNkOGZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrHFQXK3inZedYIwbgPDMwETaIKO KNlkGt6pQupXGsMNJ3qb9WDvNXaxjCtg+Znkz/5ObQIoEjrAG0Wq1YYUZXNMySpd QQ8jl5pS6VIVL8pUNJMb5aryNk8MPCQZMgWBRD7WApK57q3klZN8P0GJP1SgggXC abO2foxesdvD+G82UR3acYjgsbAVZ9HAXhVIbRgt8IwiFUjMycMuZAT1YYZ3V3fn 8m+6DIXkVgW+TsYQRrlmlEsvg9gT2WESv2hjaYZEvnaViOc2jzwof7knU75oxQC7 8fcLU5tJCjdVxgP04P8fzOI2j6vkMIS6QoJ00EBqt3RER56DiSYZPXTt4QIDAQAB o4ICxzCCAsMwHQYDVR0OBBYEFL1klwR/INb3CNfbQlV7aY+/s9j7MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE4LzU4MzNm My0yNDIxLTQxYjAtYmUyZS04MmExMDdjNGE3ZTIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTgvNTgzM2Yz LTI0MjEtNDFiMC1iZTJlLTgyYTEwN2M0YTdlMi8xL3ZXU1hCSDhnMXZjSTE5dENW WHRwajctejJQcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUF BwEHAQH/BDcwNTAkBAIAATAeAwQATfAgAwQATfAiAwQBTfAkAwQCTfAoAwQDWJew MA0EAgACMAcDBQMqBfBAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwChmzANBgkq hkiG9w0BAQsFAAOCAQEAX0QZ4tO2oTo9G1gpS8udD1zCQTFm3jtMZIMGOBog/rmg hnJ6wzkEWZGqVzWOjR6MaGYS0mKQVH+8wHpqYGw00CHKkCAorZdydM42/TNUxeTa BaxKlFtAv8CrpjdZo9vV5mNfE/xtVrKL6kMdR7hRb1O7U8X+19/wr0U0fY0+l+Km pyo7CNBTuWO2eoAeBPEYqg+Kh7y863viJKMPHIAwfWiv4DJGXAnDnlVZ5aMpBfHJ sc7w11IjyR1w5WcG3ixFXFZoXsr8ZQCOKolzX6L+tZcZeRr06IQf5ggP+yhFRTtb KPou0V/qePDLFKduAkMtsQzFW1qZe9D2PcIFFR9F2Q== -----END CERTIFICATE-----Generated at Mon Feb 9 19:43:13 2026 by rpki-client