This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vZLq6eEWmeTOcQWAUZd2wwApYWI.cer File: vZLq6eEWmeTOcQWAUZd2wwApYWI.cer (raw, json) Hash identifier: MNrYZMAiQbMqEoo5rUFQM+DM+UlSyXVf8wQKfxZj7Us= Subject key identifier: BD:92:EA:E9:E1:16:99:E4:CE:71:05:80:51:97:76:C3:00:29:61:62 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B3638940B5E881220E76A3A8F1DD90D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b8/47d213-26da-471a-96cd-c8a9caa3bbe9/1/vZLq6eEWmeTOcQWAUZd2wwApYWI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b8/47d213-26da-471a-96cd-c8a9caa3bbe9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:29 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.26.27.0/24 IP: 194.153.128.0/24 IP: 2001:67c:218c::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:38:94:0b:5e:88:12:20:e7:6a:3a:8f:1d:d9:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bd92eae9e11699e4ce710580519776c300296162 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:96:0c:38:bc:b5:99:ed:53:1c:92:e8:4e:b3: 8f:c4:58:7c:03:a6:79:fd:38:db:90:5c:98:02:2a: bc:54:3d:06:74:1c:3b:79:03:20:9b:a4:d3:99:50: 68:2e:e1:d0:34:83:b2:60:8e:30:e5:aa:7f:dd:07: e0:de:e5:3c:6a:5f:0d:28:aa:9a:46:80:e8:ab:1d: f9:a8:64:46:82:85:d3:4c:3d:28:53:af:b3:25:b2: 01:12:a6:41:e4:1e:d3:d4:eb:7f:6d:21:d7:aa:49: e5:f5:76:00:d6:40:13:ba:00:d1:8d:43:bd:41:0c: 98:89:62:ee:7a:a0:d9:0e:f5:71:6b:7d:48:f8:15: 97:c6:ee:4b:5f:63:08:bf:45:d9:fe:09:58:52:8f: d6:08:e4:19:4f:1d:89:e0:6c:97:c4:63:4f:50:7a: fb:74:74:db:08:e1:00:ca:d5:b2:6f:ac:31:b7:6b: 43:5f:6d:15:16:fc:6d:52:a3:60:49:ef:a7:c5:31: fa:24:91:f1:2c:96:7b:5d:1d:7e:7c:fb:1c:11:58: 1a:77:e5:cc:31:97:70:a9:55:1b:b1:0e:d3:46:a5: d1:d8:a5:66:e3:f6:f6:04:c2:0b:17:c0:3a:ed:cc: a3:a7:90:fd:4d:09:8c:91:4d:86:fe:61:1e:b9:20: d3:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:92:EA:E9:E1:16:99:E4:CE:71:05:80:51:97:76:C3:00:29:61:62 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/47d213-26da-471a-96cd-c8a9caa3bbe9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/47d213-26da-471a-96cd-c8a9caa3bbe9/1/vZLq6eEWmeTOcQWAUZd2wwApYWI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.26.27.0/24 194.153.128.0/24 IPv6: 2001:67c:218c::/48 Signature Algorithm: sha256WithRSAEncryption 21:02:d4:6c:3e:ea:3c:e0:a5:d2:53:59:43:96:f4:be:c0:02: de:21:8a:13:e1:01:fc:88:7b:3b:a7:6d:20:69:0c:27:9e:5f: 22:bb:72:ea:97:9f:ec:9c:eb:f1:fd:2b:19:e5:85:5f:c7:ce: 4b:95:16:db:df:bb:95:a0:f6:6a:1f:d2:b5:78:e0:c6:c6:30: e5:b6:af:c6:ae:d3:ac:a6:1d:2d:c9:35:66:36:6f:6d:dc:04: 8b:6e:74:db:b6:b4:98:fe:97:37:9e:24:4e:e3:06:17:bf:5c: 99:c1:37:ac:f7:45:0c:36:25:70:98:45:6b:de:89:b6:95:10: 9a:48:4b:85:d4:73:bb:df:aa:ca:47:70:a2:7e:c3:88:1b:ed: 47:e4:93:63:37:85:04:78:25:36:49:cf:9d:0d:87:8f:e8:5c: 76:2c:11:6a:fa:76:6a:10:f7:67:56:f6:de:f8:55:e6:f7:8f: 47:34:ad:5a:15:7d:69:a6:0b:2d:19:6b:b2:8c:93:d7:35:7d: c5:2c:f3:e4:8b:03:d9:55:de:d6:13:33:6a:5e:ac:15:e5:44: 42:bc:08:da:95:ab:37:ec:d3:66:64:c6:63:4a:c2:6d:3d:d7: 08:82:bb:a7:94:41:95:10:55:03:0d:da:fd:af:a8:49:10:5b: c6:ac:26:5f -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgISAZt7NjiUC16IEiDnajqPHdkNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZDkyZWFlOWUxMTY5OWU0Y2U3MTA1ODA1MTk3NzZjMzAwMjk2MTYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpYMOLy1me1THJLoTrOPxFh8A6Z5 /TjbkFyYAiq8VD0GdBw7eQMgm6TTmVBoLuHQNIOyYI4w5ap/3Qfg3uU8al8NKKqa RoDoqx35qGRGgoXTTD0oU6+zJbIBEqZB5B7T1Ot/bSHXqknl9XYA1kATugDRjUO9 QQyYiWLueqDZDvVxa31I+BWXxu5LX2MIv0XZ/glYUo/WCOQZTx2J4GyXxGNPUHr7 dHTbCOEAytWyb6wxt2tDX20VFvxtUqNgSe+nxTH6JJHxLJZ7XR1+fPscEVgad+XM MZdwqVUbsQ7TRqXR2KVm4/b2BMILF8A67cyjp5D9TQmMkU2G/mEeuSDTJQIDAQAB o4ICmzCCApcwHQYDVR0OBBYEFL2S6unhFpnkznEFgFGXdsMAKWFiMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I4LzQ3ZDIx My0yNmRhLTQ3MWEtOTZjZC1jOGE5Y2FhM2JiZTkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjgvNDdkMjEz LTI2ZGEtNDcxYS05NmNkLWM4YTljYWEzYmJlOS8xL3ZaTHE2ZUVXbWVUT2NRV0FV WmQyd3dBcFlXSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDYGCCsGAQUF BwEHAQH/BCcwJTASBAIAATAMAwQAwRobAwQAwpmAMA8EAgACMAkDBwAgAQZ8IYww DQYJKoZIhvcNAQELBQADggEBACEC1Gw+6jzgpdJTWUOW9L7AAt4hihPhAfyIezun bSBpDCeeXyK7cuqXn+yc6/H9KxnlhV/HzkuVFtvfu5Wg9mof0rV44MbGMOW2r8au 06ymHS3JNWY2b23cBItudNu2tJj+lzeeJE7jBhe/XJnBN6z3RQw2JXCYRWveibaV EJpIS4XUc7vfqspHcKJ+w4gb7Ufkk2M3hQR4JTZJz50Nh4/oXHYsEWr6dmoQ92dW 9t74Veb3j0c0rVoVfWmmCy0Za7KMk9c1fcUs8+SLA9lV3tYTM2perBXlREK8CNqV qzfs02ZkxmNKwm091wiCu6eUQZUQVQMN2v2vqEkQW8asJl8= -----END CERTIFICATE-----Generated at Mon Feb 9 16:49:19 2026 by rpki-client