This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/veGsj467UC_MRFYtwQ2XOIRJO-U.cer File: veGsj467UC_MRFYtwQ2XOIRJO-U.cer (raw, json) Hash identifier: gllWtfGywU4YmpepiFH2kXqcvoJfKSOljAh2LnvCYRo= Subject key identifier: BD:E1:AC:8F:8E:BB:50:2F:CC:44:56:2D:C1:0D:97:38:84:49:3B:E5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A29C0A23F0F218E6BBD57EE498CFD0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/veGsj467UC_MRFYtwQ2XOIRJO-U.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:01 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 210562 IP: 2001:67c:8cc::/48 IP: 2001:67c:b10::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:9c:0a:23:f0:f2:18:e6:bb:d5:7e:e4:98:cf:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bde1ac8f8ebb502fcc44562dc10d973884493be5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:66:57:59:2c:c0:d4:6f:87:8c:55:8e:00:fb: bd:a7:cc:24:99:76:a4:5b:f4:f4:cb:8a:62:23:27: 8e:39:af:22:60:59:98:e5:85:61:03:fd:9d:89:86: 95:62:5f:bd:f2:57:be:50:5e:7f:22:42:7d:69:4a: 19:4e:f7:ab:bf:ba:64:8c:b9:14:df:33:d0:92:43: 2e:52:65:04:c6:a9:7e:e3:b5:f6:ce:1a:dd:9f:92: 77:47:16:1e:81:fb:9c:92:8f:49:e0:f1:20:a4:a2: 5d:46:89:95:1f:b5:7e:95:59:d9:be:d0:a6:aa:be: 6f:3a:55:ba:dc:64:5a:02:c7:df:9b:3d:8a:22:e7: 90:d1:58:66:46:95:0b:19:af:60:ea:28:09:f1:2c: 7f:dd:f1:cc:c2:5c:fa:cb:f3:35:f9:61:05:24:ac: eb:27:8e:e5:d1:9f:22:1f:e5:e5:37:eb:44:a5:b8: 11:e6:ec:b0:f0:e2:79:a4:13:2c:8c:a9:62:81:69: 3b:07:24:17:82:8c:f6:02:4f:1b:bc:6f:f7:b0:86: 10:a1:45:23:1c:0e:13:2f:76:a5:2b:a9:01:81:4b: be:94:c2:9b:88:d9:b9:c9:d5:48:bb:10:11:6a:55: 1c:2b:e0:1f:5c:29:60:4e:cc:f0:c5:b3:71:ed:32: b4:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:E1:AC:8F:8E:BB:50:2F:CC:44:56:2D:C1:0D:97:38:84:49:3B:E5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/veGsj467UC_MRFYtwQ2XOIRJO-U.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:8cc::/48 2001:67c:b10::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 210562 Signature Algorithm: sha256WithRSAEncryption 7c:cd:8a:a6:c5:7a:8d:5f:c4:fb:1e:4f:e4:a0:cb:7e:c5:dd: 5b:59:32:1c:67:a9:25:31:85:a6:8c:96:f9:56:50:3e:78:5d: 2e:f6:fc:b6:a1:0c:27:b8:ac:f7:25:f8:12:64:60:29:d2:dc: a8:20:5c:99:69:3b:a9:dd:44:f3:61:61:f2:bc:95:49:15:7f: 0b:c3:22:cb:0d:bc:b8:3e:59:97:df:78:ec:51:45:ca:41:2c: eb:ff:09:de:f4:68:f5:2f:96:19:ee:df:6d:76:a1:3d:46:55: 8b:84:a6:9c:24:b7:f2:bb:8b:3f:74:94:c0:42:31:d5:a0:02: c0:23:88:f8:44:0e:fa:c3:af:27:c0:0b:bf:e7:de:54:8b:6e: 5e:6e:d7:f7:ce:46:00:3a:af:c5:cd:f4:72:dd:63:75:4d:35: da:39:bd:25:c1:52:91:24:14:ee:d4:67:ae:a1:08:44:32:31: dd:5a:fd:78:ec:85:ee:f7:21:d8:0a:fd:8f:76:c8:cd:9a:1c: 16:94:04:3e:96:f0:bc:2a:84:e1:9d:8e:1e:28:e7:7d:05:9a: 5a:0d:9d:df:4b:1f:68:2b:e2:34:5f:d3:14:7c:ee:4d:a3:54: e6:a3:06:6d:c2:91:31:c8:22:42:0d:16:87:78:d7:5a:00:43: 27:a9:d2:65 -----BEGIN CERTIFICATE----- MIIFoDCCBIigAwIBAgISAZt4opwKI/DyGOa71X7kmM/QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZGUxYWM4ZjhlYmI1MDJmY2M0NDU2MmRjMTBkOTczODg0NDkzYmU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWZXWSzA1G+HjFWOAPu9p8wkmXak W/T0y4piIyeOOa8iYFmY5YVhA/2diYaVYl+98le+UF5/IkJ9aUoZTverv7pkjLkU 3zPQkkMuUmUExql+47X2zhrdn5J3RxYegfucko9J4PEgpKJdRomVH7V+lVnZvtCm qr5vOlW63GRaAsffmz2KIueQ0VhmRpULGa9g6igJ8Sx/3fHMwlz6y/M1+WEFJKzr J47l0Z8iH+XlN+tEpbgR5uyw8OJ5pBMsjKligWk7ByQXgoz2Ak8bvG/3sIYQoUUj HA4TL3alK6kBgUu+lMKbiNm5ydVIuxARalUcK+AfXClgTszwxbNx7TK0jwIDAQAB o4ICrDCCAqgwHQYDVR0OBBYEFL3hrI+Ou1AvzERWLcENlziESTvlMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U4LzgxN2U3 ZC01YjgyLTQ4N2EtOWQ2Zi0xYTUwODA4NjRmYTcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTgvODE3ZTdk LTViODItNDg3YS05ZDZmLTFhNTA4MDg2NGZhNy8xL3ZlR3NqNDY3VUNfTVJGWXR3 UTJYT0lSSk8tVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUF BwEHAQH/BBwwGjAYBAIAAjASAwcAIAEGfAjMAwcAIAEGfAsQMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwM2gjANBgkqhkiG9w0BAQsFAAOCAQEAfM2KpsV6jV/E+x5P 5KDLfsXdW1kyHGepJTGFpoyW+VZQPnhdLvb8tqEMJ7is9yX4EmRgKdLcqCBcmWk7 qd1E82Fh8ryVSRV/C8Miyw28uD5Zl9947FFFykEs6/8J3vRo9S+WGe7fbXahPUZV i4SmnCS38ruLP3SUwEIx1aACwCOI+EQO+sOvJ8ALv+feVItuXm7X985GADqvxc30 ct1jdU012jm9JcFSkSQU7tRnrqEIRDIx3Vr9eOyF7vch2Ar9j3bIzZocFpQEPpbw vCqE4Z2OHijnfQWaWg2d30sfaCviNF/TFHzuTaNU5qMGbcKRMcgiQg0Wh3jXWgBD J6nSZQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:26:40 2026 by rpki-client