This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vWqnNi02eSy8-oNgm111zJZfP68.cer File: vWqnNi02eSy8-oNgm111zJZfP68.cer (raw, json) Hash identifier: bvwvd07wiRqpumVs9bfwMgLSrQyo1L48+u5mOgvN4RQ= Subject key identifier: BD:6A:A7:36:2D:36:79:2C:BC:FA:83:60:9B:5D:75:CC:96:5F:3F:AF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA6FB65D4D968F5D8AE1476E1299627 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/35/f9a8ec-f582-475c-8cc9-d5c8635bec88/1/vWqnNi02eSy8-oNgm111zJZfP68.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/35/f9a8ec-f582-475c-8cc9-d5c8635bec88/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:20:31 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 208669 IP: 85.202.92.0/22 IP: 2a10:1900::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:fb:65:d4:d9:68:f5:d8:ae:14:76:e1:29:96:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:20:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bd6aa7362d36792cbcfa83609b5d75cc965f3faf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:e1:30:00:c4:99:e8:8d:57:eb:96:ca:0b:73: 9c:b1:8f:32:2f:25:f9:8b:c9:af:3c:77:dd:01:ea: 38:95:3f:3c:46:e2:ba:c8:58:4c:fc:10:b3:58:b6: 45:fe:e0:0c:48:da:e5:b3:d7:ef:9b:ef:e6:d0:da: f2:2b:7e:5b:46:83:c3:7a:59:7a:57:7f:40:20:77: 40:a8:8d:c3:19:3f:56:1f:a8:2e:02:29:a5:4b:7b: b6:49:a3:e2:a3:6d:34:34:64:ba:7a:15:18:81:11: 02:87:ab:09:34:90:92:c0:55:93:42:e6:2c:e4:fa: 00:ab:51:5a:c5:5d:59:25:7b:50:bd:8c:c6:b7:96: 7a:10:6b:02:3f:d5:30:97:72:36:b4:1b:b8:d6:75: 67:63:19:34:92:11:bb:3a:33:8e:f0:c9:d4:9c:39: a2:b7:e8:e3:32:d4:ab:8f:24:47:2b:99:a8:20:67: a9:fc:bc:2f:d7:af:d1:70:f1:04:47:e7:5b:70:85: a2:80:80:ac:ad:22:d9:07:db:a9:92:e9:b9:4d:47: 65:77:31:39:cb:86:cd:23:7d:77:71:fd:4c:18:be: ec:93:cb:97:85:2d:a8:7f:fd:ad:f1:5b:ad:2f:f4: cd:ce:58:e2:b7:af:96:74:b0:7d:59:09:37:44:a0: 20:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:6A:A7:36:2D:36:79:2C:BC:FA:83:60:9B:5D:75:CC:96:5F:3F:AF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f9a8ec-f582-475c-8cc9-d5c8635bec88/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f9a8ec-f582-475c-8cc9-d5c8635bec88/1/vWqnNi02eSy8-oNgm111zJZfP68.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.202.92.0/22 IPv6: 2a10:1900::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 208669 Signature Algorithm: sha256WithRSAEncryption b0:19:06:9b:e0:73:f2:01:ba:f2:da:77:f9:a3:66:bd:34:2f: 4a:0c:f0:32:1b:68:94:d4:05:4f:33:b4:89:f3:1d:d6:05:f4: 00:d0:4e:46:5c:8f:97:bd:a4:26:30:b5:6c:2d:d0:3b:dc:ff: 74:ef:98:91:ce:a8:41:7c:79:c8:5e:7f:0f:5d:3e:36:de:c2: 67:b1:fa:e6:b6:dc:27:0d:fd:36:66:36:28:fd:4f:a4:f8:ff: e7:68:ab:ed:c3:91:0b:cf:a6:bc:f4:77:95:bd:ee:97:dc:0e: d4:61:63:9c:99:43:48:28:1e:15:6e:06:72:3a:32:43:3f:9f: 71:4c:d4:57:ea:d4:19:d7:30:9c:5e:8a:52:19:6d:64:b7:85: a1:3b:da:60:61:aa:89:10:8e:16:38:65:fb:2d:42:19:28:80: 06:e3:6a:98:47:34:a3:4a:56:93:04:1c:4f:37:3e:92:68:7f: f5:7c:4c:f5:f8:6b:80:f6:19:bc:43:a0:54:28:bc:ea:8d:bb: f7:f6:c0:98:6d:78:58:4e:af:2b:4f:34:1a:66:02:70:63:bb: ee:c3:88:a4:00:fb:3b:5d:de:a6:64:48:67:02:87:ff:35:91: d2:0d:22:e0:a1:e4:ec:cd:aa:ea:90:b8:35:7e:45:b6:6c:9e: 25:1c:ba:0a -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt+pvtl1Nlo9diuFHbhKZYnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIyMDMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZDZhYTczNjJkMzY3OTJjYmNmYTgzNjA5YjVkNzVjYzk2NWYzZmFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0uEwAMSZ6I1X65bKC3OcsY8yLyX5 i8mvPHfdAeo4lT88RuK6yFhM/BCzWLZF/uAMSNrls9fvm+/m0NryK35bRoPDell6 V39AIHdAqI3DGT9WH6guAimlS3u2SaPio200NGS6ehUYgRECh6sJNJCSwFWTQuYs 5PoAq1FaxV1ZJXtQvYzGt5Z6EGsCP9Uwl3I2tBu41nVnYxk0khG7OjOO8MnUnDmi t+jjMtSrjyRHK5moIGep/Lwv16/RcPEER+dbcIWigICsrSLZB9upkum5TUdldzE5 y4bNI313cf1MGL7sk8uXhS2of/2t8VutL/TNzljit6+WdLB9WQk3RKAgAwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFL1qpzYtNnksvPqDYJtddcyWXz+vMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM1L2Y5YThl Yy1mNTgyLTQ3NWMtOGNjOS1kNWM4NjM1YmVjODgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzUvZjlhOGVj LWY1ODItNDc1Yy04Y2M5LWQ1Yzg2MzViZWM4OC8xL3ZXcW5OaTAyZVN5OC1vTmdt MTExekpaZlA2OC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCVcpcMA0EAgACMAcDBQMqEBkAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMvHTANBgkqhkiG9w0BAQsFAAOCAQEAsBkGm+Bz8gG6 8tp3+aNmvTQvSgzwMhtolNQFTzO0ifMd1gX0ANBORlyPl72kJjC1bC3QO9z/dO+Y kc6oQXx5yF5/D10+Nt7CZ7H65rbcJw39NmY2KP1PpPj/52ir7cORC8+mvPR3lb3u l9wO1GFjnJlDSCgeFW4GcjoyQz+fcUzUV+rUGdcwnF6KUhltZLeFoTvaYGGqiRCO Fjhl+y1CGSiABuNqmEc0o0pWkwQcTzc+kmh/9XxM9fhrgPYZvEOgVCi86o279/bA mG14WE6vK080GmYCcGO77sOIpAD7O13epmRIZwKH/zWR0g0i4KHk7M2q6pC4NX5F tmyeJRy6Cg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:26:51 2026 by rpki-client