This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vaHlX3ROFBK9dT_Sd7d0CNzfjLQ.cer File: vaHlX3ROFBK9dT_Sd7d0CNzfjLQ.cer (raw, json) Hash identifier: BZtJxROZplNwxxvC3IZ/08sk4yAO1AxlBK4pzSpKK7k= Subject key identifier: BD:A1:E5:5F:74:4E:14:12:BD:75:3F:D2:77:B7:74:08:DC:DF:8C:B4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C12AE523F012A3EB7EB0CF2A956B556 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6f/3cd45f-0b79-43b7-a9e6-c0bcedb34274/1/vaHlX3ROFBK9dT_Sd7d0CNzfjLQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6f/3cd45f-0b79-43b7-a9e6-c0bcedb34274/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:19:17 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 44377 IP: 45.137.248.0/22 IP: 45.143.216.0/22 IP: 77.81.160.0/22 IP: 92.242.224.0/19 IP: 185.121.200.0/22 IP: 193.19.220.0/22 IP: 2a13:ca80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:ae:52:3f:01:2a:3e:b7:eb:0c:f2:a9:56:b5:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:19:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bda1e55f744e1412bd753fd277b77408dcdf8cb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:9b:4d:f5:7b:3e:f8:b0:c9:74:cb:ea:8b:b6: a1:db:13:16:d4:6a:78:af:fb:0b:6d:a5:1f:d2:fd: ea:2a:84:95:98:3d:80:9d:58:90:83:28:b6:c6:fc: 95:f6:19:51:26:41:8b:53:5f:f2:39:d0:b0:b1:ad: 49:cd:2e:29:6b:62:ae:1c:3c:6c:3e:77:74:5d:fc: fc:f9:2b:c4:11:06:03:9d:e4:3d:ed:d6:65:74:df: ef:56:21:03:74:61:71:59:2b:1e:5a:7e:ac:d2:75: 93:b6:a4:17:3c:2e:df:ea:95:a8:5e:7b:6b:d1:1c: b6:eb:8a:ae:db:c6:dc:d6:43:c6:dc:5c:a6:9a:e6: 34:ff:b4:71:7c:a8:b6:eb:60:9a:08:7a:d7:c6:72: df:6b:91:e1:2a:c8:69:84:15:da:57:b0:98:9d:d6: a7:a4:76:3a:92:18:99:ae:42:58:d9:56:f2:3d:81: 99:ec:fa:ac:86:9e:8d:a8:77:cd:ff:b0:69:05:cd: 89:58:34:6d:36:0a:53:69:f9:8d:0e:f2:45:61:a6: dc:cd:09:12:14:e4:65:dc:af:17:3c:a7:cc:eb:5a: 8a:96:af:8c:9c:f2:cc:af:30:20:ec:93:54:72:c1: 67:fa:c9:e5:1f:f8:d8:02:2e:97:b4:f9:34:57:80: 3d:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:A1:E5:5F:74:4E:14:12:BD:75:3F:D2:77:B7:74:08:DC:DF:8C:B4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3cd45f-0b79-43b7-a9e6-c0bcedb34274/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3cd45f-0b79-43b7-a9e6-c0bcedb34274/1/vaHlX3ROFBK9dT_Sd7d0CNzfjLQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.137.248.0/22 45.143.216.0/22 77.81.160.0/22 92.242.224.0/19 185.121.200.0/22 193.19.220.0/22 IPv6: 2a13:ca80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 44377 Signature Algorithm: sha256WithRSAEncryption 58:11:64:3e:b6:f6:8b:31:14:fe:4b:25:29:3f:81:a8:58:6b: ed:26:e2:79:60:75:af:be:33:26:4b:51:62:46:4a:98:63:50: 0e:58:ae:02:14:97:33:c3:2e:35:25:b0:23:c0:21:bd:9f:60: 9d:1d:0f:98:01:90:bf:df:2e:66:fd:aa:39:42:c9:fe:ec:30: 1e:16:10:ec:37:da:be:2e:96:b4:54:d7:de:72:9e:88:7f:95: 0b:23:ad:b5:db:63:5e:ca:6a:81:f0:4c:c6:f0:cc:94:58:3f: 5b:ae:f3:4c:61:36:ba:ea:4f:24:71:4b:2e:44:6d:68:b9:04: f4:e6:21:6f:17:da:f8:83:d3:a7:3a:56:cf:60:67:b8:66:72: d0:bb:51:17:ef:a6:de:0e:27:dc:fa:bf:52:e8:fb:05:9d:7c: d3:5c:6b:38:7f:22:b7:94:07:d7:1a:7c:f7:f3:44:83:fa:da: af:58:69:13:25:74:98:86:0f:0b:ec:92:9d:b8:d6:13:54:a4: 65:dd:86:38:ab:ce:50:79:05:5e:f5:09:07:80:d0:ef:73:54: 54:1f:53:28:75:91:5a:42:83:2d:65:6d:26:19:25:10:89:a1: ad:81:04:2a:4f:d4:4d:bb:5e:e6:e7:04:78:31:3d:88:84:fa: 06:7a:97:64 -----BEGIN CERTIFICATE----- MIIFwTCCBKmgAwIBAgISAZt8Eq5SPwEqPrfrDPKpVrVWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZGExZTU1Zjc0NGUxNDEyYmQ3NTNmZDI3N2I3NzQwOGRjZGY4Y2I0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZtN9Xs++LDJdMvqi7ah2xMW1Gp4 r/sLbaUf0v3qKoSVmD2AnViQgyi2xvyV9hlRJkGLU1/yOdCwsa1JzS4pa2KuHDxs Pnd0Xfz8+SvEEQYDneQ97dZldN/vViEDdGFxWSseWn6s0nWTtqQXPC7f6pWoXntr 0Ry264qu28bc1kPG3FymmuY0/7RxfKi262CaCHrXxnLfa5HhKshphBXaV7CYndan pHY6khiZrkJY2VbyPYGZ7Pqshp6NqHfN/7BpBc2JWDRtNgpTafmNDvJFYabczQkS FORl3K8XPKfM61qKlq+MnPLMrzAg7JNUcsFn+snlH/jYAi6XtPk0V4A9pwIDAQAB o4ICzTCCAskwHQYDVR0OBBYEFL2h5V90ThQSvXU/0ne3dAjc34y0MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZmLzNjZDQ1 Zi0wYjc5LTQzYjctYTllNi1jMGJjZWRiMzQyNzQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmYvM2NkNDVm LTBiNzktNDNiNy1hOWU2LWMwYmNlZGIzNDI3NC8xL3ZhSGxYM1JPRkJLOWRUX1Nk N2QwQ056ZmpMUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEwGCCsGAQUF BwEHAQH/BD0wOzAqBAIAATAkAwQCLYn4AwQCLY/YAwQCTVGgAwQFXPLgAwQCuXnI AwQCwRPcMA0EAgACMAcDBQMqE8qAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCt WTANBgkqhkiG9w0BAQsFAAOCAQEAWBFkPrb2izEU/kslKT+BqFhr7SbieWB1r74z JktRYkZKmGNQDliuAhSXM8MuNSWwI8AhvZ9gnR0PmAGQv98uZv2qOULJ/uwwHhYQ 7Dfavi6WtFTX3nKeiH+VCyOttdtjXspqgfBMxvDMlFg/W67zTGE2uupPJHFLLkRt aLkE9OYhbxfa+IPTpzpWz2BnuGZy0LtRF++m3g4n3Pq/Uuj7BZ1801xrOH8it5QH 1xp89/NEg/rar1hpEyV0mIYPC+ySnbjWE1SkZd2GOKvOUHkFXvUJB4DQ73NUVB9T KHWRWkKDLWVtJhklEImhrYEEKk/UTbte5ucEeDE9iIT6BnqXZA== -----END CERTIFICATE-----Generated at Mon Feb 9 20:50:03 2026 by rpki-client