This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vatssugHrs69fgOoCAj6sj2cRxY.cer File: vatssugHrs69fgOoCAj6sj2cRxY.cer (raw, json) Hash identifier: mCjf92aHi1HslTkEmAW/Mhds2+yH4+Hd1ktXSTVDvfk= Subject key identifier: BD:AB:6C:B2:E8:07:AE:CE:BD:7E:03:A8:08:08:FA:B2:3D:9C:47:16 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEDA8443E5B09546527FB94CDAB4528 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/vatssugHrs69fgOoCAj6sj2cRxY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:28 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 199556 AS: 207843 IP: 2.58.164.0/22 IP: 2a0f:91c0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:a8:44:3e:5b:09:54:65:27:fb:94:cd:ab:45:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bdab6cb2e807aecebd7e03a80808fab23d9c4716 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e4:56:4f:a1:65:a7:6d:42:5f:fd:b7:92:5b: 5d:6c:49:d5:86:1a:37:99:c6:11:f3:4a:99:3e:2d: a0:0b:6e:c2:d4:ed:48:20:35:f5:dd:25:20:84:d1: 51:a1:56:31:9b:68:b9:0d:57:f4:37:d5:5a:13:96: 8d:33:36:3c:ec:b2:13:97:b6:5a:e9:aa:ec:c0:78: cc:74:60:4c:59:6a:1b:5f:a0:27:5c:79:f1:2e:0c: 85:84:28:86:c9:12:9b:83:b3:0f:43:a6:e3:ee:28: f3:d9:84:4f:b3:a5:62:9a:86:65:9a:76:af:e1:2f: 06:0e:1c:16:e1:f9:71:de:b3:3e:ba:ad:5d:2b:8a: 49:32:c6:25:95:ec:65:05:8d:db:b3:0c:cd:99:41: ab:16:95:75:4e:5c:a2:da:b8:e3:ca:d1:6e:42:bd: 84:4d:e1:68:8a:51:fb:c7:27:c2:46:e4:6d:4d:3e: 0c:2e:48:20:4a:fb:48:c8:f3:88:d9:e4:5e:ab:3c: 35:c6:21:fc:21:4a:08:51:81:ae:fb:4c:bf:13:db: 11:53:04:d0:30:b3:c1:ad:99:70:48:6a:1c:13:e0: 88:c0:4a:4a:d8:95:6e:29:98:0f:b6:63:11:17:eb: 34:29:05:22:8b:02:da:57:3d:9c:c5:dc:d3:ad:76: ea:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:AB:6C:B2:E8:07:AE:CE:BD:7E:03:A8:08:08:FA:B2:3D:9C:47:16 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/vatssugHrs69fgOoCAj6sj2cRxY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.58.164.0/22 IPv6: 2a0f:91c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 199556 207843 Signature Algorithm: sha256WithRSAEncryption 9f:84:00:cf:5a:a9:78:5d:ae:c2:30:5a:43:3c:36:18:00:aa: a6:cc:67:9f:db:61:99:f4:78:49:58:b4:b7:ee:03:22:eb:e0: 9d:6e:1a:51:62:06:f7:17:f9:1e:aa:f8:5c:dd:73:56:51:c2: 46:4e:0b:78:d4:6f:92:ef:2d:da:4a:0a:1e:a3:37:af:99:b6: f2:a4:0a:83:60:21:fa:fe:d8:2a:18:72:38:e5:6d:ea:b0:93: 11:fe:20:b2:cb:4c:48:f5:04:7b:7b:b2:67:13:21:c6:0e:d4: 00:bd:11:de:06:c8:5f:ce:9f:8d:5e:5a:b6:56:3a:b4:67:c7: 62:c8:81:81:96:68:90:5e:5d:07:be:fe:87:69:c3:6e:f1:19: 00:09:28:12:57:fa:36:52:5f:1d:f4:c7:28:02:ff:54:1b:1f: 3f:43:1c:e0:94:be:f4:1a:b9:4c:83:37:99:21:83:02:46:c8: d2:8f:74:2d:d3:ac:42:63:86:af:ed:c1:80:df:2e:af:5b:55: 51:9d:f0:b7:86:eb:98:30:cc:11:9e:a0:c4:55:00:30:3c:48: 0d:02:1b:6f:53:86:43:98:a5:c2:14:b6:9d:13:be:d8:77:f0: 20:f8:bc:18:ce:a8:17:0f:cb:47:71:f3:93:ff:28:14:09:e6: c4:0c:77:a8 -----BEGIN CERTIFICATE----- MIIFqDCCBJCgAwIBAgISAZt87ahEPlsJVGUn+5TNq0UoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZGFiNmNiMmU4MDdhZWNlYmQ3ZTAzYTgwODA4ZmFiMjNkOWM0NzE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuRWT6Flp21CX/23kltdbEnVhho3 mcYR80qZPi2gC27C1O1IIDX13SUghNFRoVYxm2i5DVf0N9VaE5aNMzY87LITl7Za 6arswHjMdGBMWWobX6AnXHnxLgyFhCiGyRKbg7MPQ6bj7ijz2YRPs6VimoZlmnav 4S8GDhwW4flx3rM+uq1dK4pJMsYllexlBY3bswzNmUGrFpV1Tlyi2rjjytFuQr2E TeFoilH7xyfCRuRtTT4MLkggSvtIyPOI2eReqzw1xiH8IUoIUYGu+0y/E9sRUwTQ MLPBrZlwSGocE+CIwEpK2JVuKZgPtmMRF+s0KQUiiwLaVz2cxdzTrXbqZwIDAQAB o4ICtDCCArAwHQYDVR0OBBYEFL2rbLLoB67OvX4DqAgI+rI9nEcWMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZhLzliNDUz MC03NmU0LTQ0MDEtYTg3Yi0yOWY3OGMyNzk4OWYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmEvOWI0NTMw LTc2ZTQtNDQwMS1hODdiLTI5Zjc4YzI3OTg5Zi8xL3ZhdHNzdWdIcnM2OWZnT29D QWo2c2oyY1J4WS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCAjqkMA0EAgACMAcDBQAqD5HAMB8GCCsGAQUF BwEIAQH/BBAwDqAMMAoCAwMLhAIDAyvjMA0GCSqGSIb3DQEBCwUAA4IBAQCfhADP Wql4Xa7CMFpDPDYYAKqmzGef22GZ9HhJWLS37gMi6+CdbhpRYgb3F/keqvhc3XNW UcJGTgt41G+S7y3aSgoeozevmbbypAqDYCH6/tgqGHI45W3qsJMR/iCyy0xI9QR7 e7JnEyHGDtQAvRHeBshfzp+NXlq2Vjq0Z8diyIGBlmiQXl0Hvv6HacNu8RkACSgS V/o2Ul8d9McoAv9UGx8/QxzglL70GrlMgzeZIYMCRsjSj3Qt06xCY4av7cGA3y6v W1VRnfC3huuYMMwRnqDEVQAwPEgNAhtvU4ZDmKXCFLadE77Yd/Ag+LwYzqgXD8tH cfOT/ygUCebEDHeo -----END CERTIFICATE-----Generated at Mon Feb 9 16:53:05 2026 by rpki-client