This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vYUxTRPHgsBS3QIrPk4gFCtkFw4.cer File: vYUxTRPHgsBS3QIrPk4gFCtkFw4.cer (raw, json) Hash identifier: 59NE3MenSq46e/Wy1oaFUWrbTU8yRMc4DIMHoxdUvyY= Subject key identifier: BD:85:31:4D:13:C7:82:C0:52:DD:02:2B:3E:4E:20:14:2B:64:17:0E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5C2C34FDBA04D6019BB2649EED718C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9c/052d38-6080-4e79-8a4b-625515ff5944/1/vYUxTRPHgsBS3QIrPk4gFCtkFw4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9c/052d38-6080-4e79-8a4b-625515ff5944/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:19:11 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 211629 IP: 185.252.203.0/24 IP: 2a10:b340::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:2c:34:fd:ba:04:d6:01:9b:b2:64:9e:ed:71:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:19:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bd85314d13c782c052dd022b3e4e20142b64170e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:b8:25:a3:48:5f:ae:f5:5a:93:5e:5e:5e:b1: 6e:80:4d:01:b5:5c:32:12:bd:be:73:1c:b8:4a:21: ae:1b:53:95:d7:d4:7e:19:88:f0:e3:46:c5:49:f9: de:96:d7:5b:63:f0:1f:45:83:ca:31:4d:f9:79:dd: 88:fc:49:04:d6:72:e2:37:5f:bd:a3:ed:da:00:b0: 07:95:85:37:28:fa:e9:61:49:20:9c:8a:04:6a:f5: 38:09:d2:5d:04:f5:72:3b:74:56:f9:f8:5c:e9:3c: 2d:b7:4e:e3:5c:b9:ca:b7:fa:41:8e:83:8e:b9:e5: 7a:e9:f6:19:0f:6f:7c:8d:24:75:8c:ee:4a:76:1b: d8:45:bd:be:a1:76:1c:c4:85:b6:f8:47:59:46:61: 8b:01:4d:96:67:66:99:77:16:d1:56:f7:58:ed:a2: e7:cc:4f:45:6a:6c:98:d8:63:9d:3b:ba:4b:83:04: 6d:11:3e:8c:8e:5f:a3:68:6a:7b:eb:e2:cb:1a:f1: 3f:d3:32:1d:76:5c:7f:e2:92:a1:4d:5c:85:44:1c: 8a:a9:e2:fa:00:46:22:4c:3b:8a:d0:19:6d:01:2d: 91:2e:dc:3b:aa:17:e6:be:cb:27:3d:ac:0a:6d:4f: 8e:62:be:ff:be:34:52:bd:21:2a:0f:b9:1e:19:0c: b3:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:85:31:4D:13:C7:82:C0:52:DD:02:2B:3E:4E:20:14:2B:64:17:0E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/052d38-6080-4e79-8a4b-625515ff5944/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/052d38-6080-4e79-8a4b-625515ff5944/1/vYUxTRPHgsBS3QIrPk4gFCtkFw4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.252.203.0/24 IPv6: 2a10:b340::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 211629 Signature Algorithm: sha256WithRSAEncryption a2:6d:06:17:ab:58:c4:68:13:3d:73:20:3d:e9:fd:06:7b:67: 44:9e:5c:9a:67:86:74:8b:ad:a9:50:12:bf:d0:31:a2:ee:c8: bb:27:61:c7:04:10:d0:b0:97:7f:c9:a5:68:e0:55:4d:cd:f6: 62:b7:9b:5f:28:a8:15:dd:13:bc:37:29:5f:c7:58:f5:2f:51: df:50:60:15:9e:ec:d9:21:b5:78:60:70:81:23:98:18:27:65: fd:9b:80:bb:bd:6b:38:97:e1:69:e2:19:63:f2:e4:da:ab:da: fa:18:ea:61:cd:83:a7:61:18:e7:67:19:72:5b:c5:e2:ee:3c: 08:86:25:f1:08:d1:4e:35:2d:5f:28:b2:21:fb:e2:2f:64:37: 0b:54:7b:0d:75:be:87:11:d0:bd:91:c3:8d:86:42:5f:1f:a6: 59:54:8e:bc:2c:a9:4a:d5:af:78:5f:dd:bf:10:8c:8d:98:62: 6f:01:e5:ba:2d:fe:78:ce:69:d2:c6:50:d2:ff:0a:c4:48:34: 4c:51:45:bc:a3:7c:52:1e:39:b7:cf:1c:f8:e2:31:9b:ee:a1: 7c:4b:02:97:ef:2d:bf:a9:0b:55:40:f9:de:e0:1a:29:bf:82: 34:ed:2d:d5:8d:55:13:fd:03:26:6a:1c:4f:50:9d:8a:1b:df: b5:0e:d8:81 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt9XCw0/boE1gGbsmSe7XGMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZDg1MzE0ZDEzYzc4MmMwNTJkZDAyMmIzZTRlMjAxNDJiNjQxNzBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrglo0hfrvVak15eXrFugE0BtVwy Er2+cxy4SiGuG1OV19R+GYjw40bFSfneltdbY/AfRYPKMU35ed2I/EkE1nLiN1+9 o+3aALAHlYU3KPrpYUkgnIoEavU4CdJdBPVyO3RW+fhc6Twtt07jXLnKt/pBjoOO ueV66fYZD298jSR1jO5KdhvYRb2+oXYcxIW2+EdZRmGLAU2WZ2aZdxbRVvdY7aLn zE9FamyY2GOdO7pLgwRtET6Mjl+jaGp76+LLGvE/0zIddlx/4pKhTVyFRByKqeL6 AEYiTDuK0BltAS2RLtw7qhfmvssnPawKbU+OYr7/vjRSvSEqD7keGQyzswIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFL2FMU0Tx4LAUt0CKz5OIBQrZBcOMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzljLzA1MmQz OC02MDgwLTRlNzktOGE0Yi02MjU1MTVmZjU5NDQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWMvMDUyZDM4 LTYwODAtNGU3OS04YTRiLTYyNTUxNWZmNTk0NC8xL3ZZVXhUUlBIZ3NCUzNRSXJQ azRnRkN0a0Z3NC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAufzLMA0EAgACMAcDBQMqELNAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM6rTANBgkqhkiG9w0BAQsFAAOCAQEAom0GF6tYxGgT PXMgPen9BntnRJ5cmmeGdIutqVASv9Axou7IuydhxwQQ0LCXf8mlaOBVTc32Yreb XyioFd0TvDcpX8dY9S9R31BgFZ7s2SG1eGBwgSOYGCdl/ZuAu71rOJfhaeIZY/Lk 2qva+hjqYc2Dp2EY52cZclvF4u48CIYl8QjRTjUtXyiyIfviL2Q3C1R7DXW+hxHQ vZHDjYZCXx+mWVSOvCypStWveF/dvxCMjZhibwHlui3+eM5p0sZQ0v8KxEg0TFFF vKN8Uh45t88c+OIxm+6hfEsCl+8tv6kLVUD53uAaKb+CNO0t1Y1VE/0DJmocT1Cd ihvftQ7YgQ== -----END CERTIFICATE-----Generated at Mon Feb 9 15:05:45 2026 by rpki-client