This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vdJEIU12Ro0_tyq60Yku8j3t6Xg.cer File: vdJEIU12Ro0_tyq60Yku8j3t6Xg.cer (raw, json) Hash identifier: t0LzGxqeQWS/cMpBAc0dwd687GPfEbgbNPNUaTzfvVo= Subject key identifier: BD:D2:44:21:4D:76:46:8D:3F:B7:2A:BA:D1:89:2E:F2:3D:ED:E9:78 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F834A113A9DA9E89FB9C3ECD2B1B4DD Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:21:09 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 8404 AS: 35097 IP: 31.10.128.0/17 IP: 46.126.0.0/15 IP: 46.140.0.0/16 IP: 62.2.0.0/16 IP: 77.56.0.0/14 IP: 80.218.0.0/15 IP: 81.7.224.0/19 IP: 84.20.32.0 -- 84.20.55.255 IP: 84.72.0.0/14 IP: 178.82.0.0/16 IP: 185.235.156.0/22 IP: 194.29.0.0/19 IP: 194.153.157.128/27 IP: 195.202.192.0/18 IP: 212.47.160.0/19 IP: 213.193.64.0/18 IP: 217.162.0.0/16 IP: 217.168.32.0/19 IP: 2a00:e2c0::/32 IP: 2a02:aa00::/27 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:4a:11:3a:9d:a9:e8:9f:b9:c3:ec:d2:b1:b4:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:21:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bdd244214d76468d3fb72abad1892ef23dede978 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:0e:89:ba:b7:0b:3e:38:21:fb:1e:fe:aa:22: 6b:03:1a:ce:1d:89:12:0e:1f:eb:70:93:2e:36:cc: ec:3e:34:0e:b8:c0:ac:89:df:2d:a5:d6:dd:d1:01: 13:78:08:43:ae:05:3b:f6:40:52:0f:06:ce:89:79: 72:5c:49:e8:f7:4c:29:1b:d5:d1:c1:46:ca:fc:7b: f0:52:88:a9:d1:36:73:52:2d:3b:23:94:79:cb:6a: ac:8d:64:1d:ef:06:d6:a6:4a:aa:73:42:35:0e:5f: 33:36:3e:e2:b0:0b:f2:68:ec:0d:f4:85:dc:59:db: 52:86:d9:a5:22:fb:40:4c:f1:7d:9d:6b:e0:f3:93: a6:77:ae:ec:e1:e5:3d:b4:9d:9e:20:98:62:b3:08: e1:02:df:df:35:42:36:f0:3f:b6:45:c7:2c:03:ab: 9c:07:d8:65:ef:b6:4d:2e:e8:66:2e:60:ea:3e:47: 5c:12:74:b7:aa:06:ab:d5:55:e2:71:de:4c:20:ee: 13:1f:f1:4b:82:70:c5:40:75:21:81:c1:c8:0d:aa: ae:7d:64:34:1d:41:75:62:5e:4b:3a:77:7a:47:ab: c4:ad:62:1d:51:3b:83:77:5e:26:33:a3:ed:5d:68: 5a:36:ab:e1:fa:d9:bd:67:50:9f:72:70:90:a2:ed: 2d:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:D2:44:21:4D:76:46:8D:3F:B7:2A:BA:D1:89:2E:F2:3D:ED:E9:78 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.10.128.0/17 46.126.0.0/15 46.140.0.0/16 62.2.0.0/16 77.56.0.0/14 80.218.0.0/15 81.7.224.0/19 84.20.32.0-84.20.55.255 84.72.0.0/14 178.82.0.0/16 185.235.156.0/22 194.29.0.0/19 194.153.157.128/27 195.202.192.0/18 212.47.160.0/19 213.193.64.0/18 217.162.0.0/16 217.168.32.0/19 IPv6: 2a00:e2c0::/32 2a02:aa00::/27 sbgp-autonomousSysNum: critical Autonomous System Numbers: 8404 35097 Signature Algorithm: sha256WithRSAEncryption 2d:a1:ac:c7:2f:b9:1b:75:91:34:66:16:ee:ca:ab:95:76:5a: 1a:af:2a:3d:c8:6b:6e:76:05:ff:67:03:71:49:93:bd:e4:61: 86:6f:46:eb:81:5c:3b:01:61:10:07:22:d0:52:47:6a:d8:aa: f1:85:f3:a0:a7:2a:fd:3a:0c:1d:2c:33:9b:bb:a8:22:70:10: 02:e4:bf:d0:24:6a:2b:d3:da:c6:11:ef:84:65:26:a7:9e:dd: 78:c2:3b:69:0b:52:6c:2e:f1:c7:11:04:b3:45:68:c8:6f:3e: 9a:55:ed:f9:1c:f4:c5:3c:fb:38:7d:61:98:9c:02:66:e0:55: e0:d0:6e:fc:be:22:7d:31:9b:07:0b:02:5a:63:94:9b:3d:65: 7c:f1:f6:66:61:9f:57:49:56:ee:32:64:71:fe:84:78:95:10: 11:2f:52:2d:57:76:81:02:b3:e7:df:66:59:8f:ea:a7:c4:e7: c2:61:2d:d9:57:19:3b:c0:95:94:64:b7:60:c9:22:75:19:47: 5e:0d:88:73:55:d3:76:c3:21:80:18:e6:d4:df:0c:7d:fe:9d: f7:0d:d9:22:9f:0f:f6:99:27:3b:73:6b:3e:00:b5:56:01:be: a2:a0:b7:61:2f:2d:cb:b0:28:cd:d5:91:d1:29:49:7e:15:e6: ba:aa:e2:9c -----BEGIN CERTIFICATE----- MIIGGDCCBQCgAwIBAgISAZt/g0oROp2p6J+5w+zSsbTdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZGQyNDQyMTRkNzY0NjhkM2ZiNzJhYmFkMTg5MmVmMjNkZWRlOTc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAig6JurcLPjgh+x7+qiJrAxrOHYkS Dh/rcJMuNszsPjQOuMCsid8tpdbd0QETeAhDrgU79kBSDwbOiXlyXEno90wpG9XR wUbK/HvwUoip0TZzUi07I5R5y2qsjWQd7wbWpkqqc0I1Dl8zNj7isAvyaOwN9IXc WdtShtmlIvtATPF9nWvg85Omd67s4eU9tJ2eIJhiswjhAt/fNUI28D+2RccsA6uc B9hl77ZNLuhmLmDqPkdcEnS3qgar1VXicd5MIO4TH/FLgnDFQHUhgcHIDaqufWQ0 HUF1Yl5LOnd6R6vErWIdUTuDd14mM6PtXWhaNqvh+tm9Z1CfcnCQou0tCQIDAQAB o4IDJDCCAyAwHQYDVR0OBBYEFL3SRCFNdkaNP7cqutGJLvI97el4MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q0Lzc1NmVl Zi02NjI5LTQ2M2EtOTlmZi00NmE0M2VmMDIyMWIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDQvNzU2ZWVm LTY2MjktNDYzYS05OWZmLTQ2YTQzZWYwMjIxYi8xL3ZkSkVJVTEyUm8wX3R5cTYw WWt1OGozdDZYZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGeBggrBgEF BQcBBwEB/wSBjjCBizBzBAIAATBtAwQHHwqAAwMBLn4DAwAujAMDAD4CAwMCTTgD AwFQ2gMEBVEH4DAMAwQFVBQgAwQDVBQwAwMCVEgDAwCyUgMEArnrnAMEBcIdAAMF BcKZnYADBAbDysADBAXUL6ADBAbVwUADAwDZogMEBdmoIDAUBAIAAjAOAwUAKgDi wAMFBSoCqgAwHgYIKwYBBQUHAQgBAf8EDzANoAswCQICINQCAwCJGTANBgkqhkiG 9w0BAQsFAAOCAQEALaGsxy+5G3WRNGYW7sqrlXZaGq8qPchrbnYF/2cDcUmTveRh hm9G64FcOwFhEAci0FJHatiq8YXzoKcq/ToMHSwzm7uoInAQAuS/0CRqK9PaxhHv hGUmp57deMI7aQtSbC7xxxEEs0VoyG8+mlXt+Rz0xTz7OH1hmJwCZuBV4NBu/L4i fTGbBwsCWmOUmz1lfPH2ZmGfV0lW7jJkcf6EeJUQES9SLVd2gQKz599mWY/qp8Tn wmEt2VcZO8CVlGS3YMkidRlHXg2Ic1XTdsMhgBjm1N8Mff6d9w3ZIp8P9pknO3Nr PgC1VgG+oqC3YS8ty7AozdWR0SlJfhXmuqrinA== -----END CERTIFICATE-----Generated at Fri Jan 9 01:10:30 2026 by rpki-client