This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vbFDmW3-_19JzSsJuUHQ1eV4s_8.cer File: vbFDmW3-_19JzSsJuUHQ1eV4s_8.cer (raw, json) Hash identifier: n2HXY/Ea1Jkj9pJqZJtxCZMbX7yAkQm195APj1tZ0Ns= Subject key identifier: BD:B1:43:99:6D:FE:FF:5F:49:CD:2B:09:B9:41:D0:D5:E5:78:B3:FF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E375454527618C38359ED73987BFADE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e8/fbd911-8d37-4e3e-9599-fc29caa5db7a/1/vbFDmW3-_19JzSsJuUHQ1eV4s_8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e8/fbd911-8d37-4e3e-9599-fc29caa5db7a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:18:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 44706 IP: 185.135.128.0/22 IP: 195.191.165.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:54:54:52:76:18:c3:83:59:ed:73:98:7b:fa:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bdb143996dfeff5f49cd2b09b941d0d5e578b3ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:76:ce:4b:11:1b:e2:bb:ee:91:e2:fe:bb:9c: 58:d2:48:95:55:8b:86:89:c8:58:d1:97:93:2c:14: b6:09:04:ac:09:0d:ca:0d:3d:8c:6b:61:7a:93:7c: be:eb:0d:8f:40:c0:45:2c:6d:f7:2d:a2:fe:13:74: 4f:f3:29:ab:c6:d6:56:2e:ce:57:86:ce:bd:27:b2: 9a:b3:9a:a6:d2:c4:a6:e5:76:cc:cc:c0:50:1f:31: 9b:1d:5a:e8:54:f9:ff:f2:79:50:93:42:06:fd:76: 95:dc:4f:7f:0d:3d:ad:1e:41:2f:3d:d5:2b:ae:1b: 9a:3c:7c:71:3a:3a:7b:00:fc:56:c4:c2:c2:f2:d7: 72:a4:bd:23:56:b5:7d:7b:7a:fc:57:f2:d7:a0:19: aa:53:47:c7:e0:a7:fb:69:a7:89:6c:a2:23:c1:91: fa:01:8c:87:ed:0e:0d:61:3f:07:53:97:63:0f:2b: 41:bc:97:5d:57:08:c2:88:f7:e0:19:68:09:99:b3: e9:65:99:98:e2:09:01:fc:09:07:2e:d5:b5:9a:42: bf:9a:3a:78:84:0c:df:f7:e4:07:9e:e2:68:ee:8f: 68:81:77:6e:39:f4:ff:88:98:02:8a:26:fb:6a:c9: a9:ca:f1:f3:8c:9b:ba:a7:4e:50:da:8c:7b:a4:87: 9a:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:B1:43:99:6D:FE:FF:5F:49:CD:2B:09:B9:41:D0:D5:E5:78:B3:FF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/fbd911-8d37-4e3e-9599-fc29caa5db7a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/fbd911-8d37-4e3e-9599-fc29caa5db7a/1/vbFDmW3-_19JzSsJuUHQ1eV4s_8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.135.128.0/22 195.191.165.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 44706 Signature Algorithm: sha256WithRSAEncryption 7c:03:5f:c3:5b:83:0b:c7:9d:e9:4f:bd:67:e1:4a:cc:09:72: 1f:44:b7:e3:5e:59:07:b9:07:3c:67:fd:62:a3:2e:5a:dc:d4: 21:04:74:e9:58:db:8a:f9:39:3b:b4:7f:61:06:47:1e:d2:ee: 77:6a:5c:33:4a:be:5d:1d:b7:6f:f9:4b:44:e3:e1:62:57:61: 15:e2:4a:0f:f9:2d:e6:56:01:f2:a2:c0:72:d3:d0:bf:76:03: 6f:54:2a:0d:d1:d8:88:5f:f1:bf:b9:b0:b2:9c:2d:21:a1:d7: f2:01:7b:71:52:16:48:bd:a3:97:5e:38:1a:79:9d:b0:fe:46: 99:82:92:cb:4b:be:54:9e:de:a5:e4:28:cf:ee:6a:fe:d8:36: 4b:71:61:07:49:bf:eb:97:19:b0:88:6c:d0:f1:79:5d:68:ca: e4:ab:d9:98:6f:32:16:3f:09:e7:3f:c0:96:eb:b8:a7:e6:8a: 60:25:21:15:15:e0:22:ae:6d:0d:48:7d:fd:33:d3:15:d5:8d: 06:31:67:12:85:aa:e4:d4:10:34:84:ba:74:fa:6f:b7:4e:a0: 6d:0b:b0:59:51:de:98:09:d3:65:d4:9c:51:8c:4f:77:a8:98: e6:9a:c7:1c:f9:ad:df:a3:61:fe:fc:93:6e:da:7a:d9:4d:9e: a1:5e:e1:9d -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZt+N1RUUnYYw4NZ7XOYe/reMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZGIxNDM5OTZkZmVmZjVmNDljZDJiMDliOTQxZDBkNWU1NzhiM2ZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXbOSxEb4rvukeL+u5xY0kiVVYuG ichY0ZeTLBS2CQSsCQ3KDT2Ma2F6k3y+6w2PQMBFLG33LaL+E3RP8ymrxtZWLs5X hs69J7Kas5qm0sSm5XbMzMBQHzGbHVroVPn/8nlQk0IG/XaV3E9/DT2tHkEvPdUr rhuaPHxxOjp7APxWxMLC8tdypL0jVrV9e3r8V/LXoBmqU0fH4Kf7aaeJbKIjwZH6 AYyH7Q4NYT8HU5djDytBvJddVwjCiPfgGWgJmbPpZZmY4gkB/AkHLtW1mkK/mjp4 hAzf9+QHnuJo7o9ogXduOfT/iJgCiib7asmpyvHzjJu6p05Q2ox7pIea+QIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFL2xQ5lt/v9fSc0rCblB0NXleLP/MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U4L2ZiZDkx MS04ZDM3LTRlM2UtOTU5OS1mYzI5Y2FhNWRiN2EvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTgvZmJkOTEx LThkMzctNGUzZS05NTk5LWZjMjljYWE1ZGI3YS8xL3ZiRkRtVzMtXzE5SnpTc0p1 VUhRMWVWNHNfOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQCuYeAAwQAw7+lMBoGCCsGAQUFBwEIAQH/BAsw CaAHMAUCAwCuojANBgkqhkiG9w0BAQsFAAOCAQEAfANfw1uDC8ed6U+9Z+FKzAly H0S3415ZB7kHPGf9YqMuWtzUIQR06Vjbivk5O7R/YQZHHtLud2pcM0q+XR23b/lL ROPhYldhFeJKD/kt5lYB8qLActPQv3YDb1QqDdHYiF/xv7mwspwtIaHX8gF7cVIW SL2jl144GnmdsP5GmYKSy0u+VJ7epeQoz+5q/tg2S3FhB0m/65cZsIhs0PF5XWjK 5KvZmG8yFj8J5z/Aluu4p+aKYCUhFRXgIq5tDUh9/TPTFdWNBjFnEoWq5NQQNIS6 dPpvt06gbQuwWVHemAnTZdScUYxPd6iY5prHHPmt36Nh/vyTbtp62U2eoV7hnQ== -----END CERTIFICATE-----Generated at Fri Jan 9 17:09:02 2026 by rpki-client