This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vfo2M0bBL4PGDXtc_e_s0-f_Dio.cer File: vfo2M0bBL4PGDXtc_e_s0-f_Dio.cer (raw, json) Hash identifier: A9EP8ff6wbWitQ5KVeYl+fakdEdhbF0VZM8pqH2F3yc= Subject key identifier: BD:FA:36:33:46:C1:2F:83:C6:0D:7B:5C:FD:EF:EC:D3:E7:FF:0E:2A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F81FBFCC04F1354197ACA173ECD9AE7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/74/ddf06e-db8b-4589-a656-1716146644e6/1/vfo2M0bBL4PGDXtc_e_s0-f_Dio.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/74/ddf06e-db8b-4589-a656-1716146644e6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:19:43 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 59842 IP: 91.220.245.0/24 IP: 185.36.12.0/22 IP: 2a00:eaa0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:81:fb:fc:c0:4f:13:54:19:7a:ca:17:3e:cd:9a:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:19:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bdfa363346c12f83c60d7b5cfdefecd3e7ff0e2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:b0:e3:eb:1e:68:46:9e:35:c9:8e:84:af:f7: f8:e5:56:3e:bd:8f:33:a0:01:57:06:0f:57:36:f2: 07:fc:c9:05:c7:bd:1f:22:14:ea:dd:eb:a7:9c:67: 87:70:52:49:b2:54:53:6c:e4:f0:78:8e:93:c5:a7: ed:94:8c:1f:9a:5e:ae:ff:fd:bc:1d:73:1f:ed:d7: c4:bf:ca:c1:7e:92:ab:5b:a2:40:89:35:0b:54:c5: bd:74:aa:d5:7f:71:64:0a:77:3f:d9:f8:5e:47:32: ec:a9:71:8a:aa:56:58:93:22:74:a9:ff:a2:53:37: d8:ef:11:d3:fb:a0:3c:57:a5:41:56:14:35:f5:60: 8e:67:f9:10:ac:93:64:a7:b6:63:56:c1:f0:7a:9b: a5:44:cf:ab:5e:2d:e6:c3:6a:16:6d:a6:c7:76:1f: 04:cb:fd:72:f0:d7:f3:3e:64:74:1d:2e:42:a3:c7: e7:d0:11:1e:b0:9f:dc:7b:3a:25:48:e6:e2:eb:f1: 26:34:b3:c6:df:a2:f8:ea:a5:f1:55:cd:be:81:ae: 4a:44:b9:a0:78:e3:be:1e:4e:81:c9:a0:0b:de:e1: 2c:d3:1e:9f:c4:d4:31:95:a8:af:2f:3c:ae:00:e8: 1e:65:a8:ab:aa:26:16:29:82:a6:eb:a3:bd:0c:17: b3:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:FA:36:33:46:C1:2F:83:C6:0D:7B:5C:FD:EF:EC:D3:E7:FF:0E:2A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ddf06e-db8b-4589-a656-1716146644e6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ddf06e-db8b-4589-a656-1716146644e6/1/vfo2M0bBL4PGDXtc_e_s0-f_Dio.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.220.245.0/24 185.36.12.0/22 IPv6: 2a00:eaa0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 59842 Signature Algorithm: sha256WithRSAEncryption 5e:e7:6e:0d:db:ad:38:b7:f2:15:5f:43:f3:0c:1b:84:c9:d9: a5:ff:59:86:17:bc:69:53:db:e2:07:61:61:02:98:74:7b:8e: b4:bf:75:fe:43:90:aa:59:81:88:28:d5:d8:77:c9:f2:35:ef: 64:f8:da:dc:2a:61:b0:81:1a:70:97:6a:a4:26:dc:11:9a:a5: e3:f8:56:65:33:1d:45:c7:90:b7:08:0e:94:29:a0:f4:62:7a: f3:55:cb:ef:21:6e:82:b9:bc:fc:fc:16:75:22:86:40:5b:42: a7:b0:03:98:88:80:3c:01:08:ab:1c:29:dc:8a:81:74:2d:cd: 9f:19:56:df:74:2b:69:e6:25:4a:1f:4d:be:ea:ea:4e:f9:8b: 07:17:11:2d:60:68:09:cc:e1:8a:3d:c0:98:44:45:28:b7:10: 6a:02:5c:6a:56:37:99:d5:0f:50:65:71:15:20:e9:8e:ef:89: e7:07:1a:d2:c5:f1:42:8d:85:fa:0f:d7:09:a3:5b:83:bf:d4: 2a:6d:5f:18:0b:72:31:aa:6a:24:5a:a3:81:66:fc:a9:d7:a7: bc:c4:e2:b5:65:00:e0:03:99:6f:13:a3:4f:6c:73:72:8f:cd: 53:6e:32:d7:45:03:45:cf:ee:7a:24:7a:47:57:c8:96:23:41: 57:0d:96:cb -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt/gfv8wE8TVBl6yhc+zZrnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYxOTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZGZhMzYzMzQ2YzEyZjgzYzYwZDdiNWNmZGVmZWNkM2U3ZmYwZTJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLDj6x5oRp41yY6Er/f45VY+vY8z oAFXBg9XNvIH/MkFx70fIhTq3eunnGeHcFJJslRTbOTweI6TxaftlIwfml6u//28 HXMf7dfEv8rBfpKrW6JAiTULVMW9dKrVf3FkCnc/2fheRzLsqXGKqlZYkyJ0qf+i UzfY7xHT+6A8V6VBVhQ19WCOZ/kQrJNkp7ZjVsHwepulRM+rXi3mw2oWbabHdh8E y/1y8NfzPmR0HS5Co8fn0BEesJ/cezolSObi6/EmNLPG36L46qXxVc2+ga5KRLmg eOO+Hk6ByaAL3uEs0x6fxNQxlaivLzyuAOgeZairqiYWKYKm66O9DBez7QIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFL36NjNGwS+Dxg17XP3v7NPn/w4qMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc0L2RkZjA2 ZS1kYjhiLTQ1ODktYTY1Ni0xNzE2MTQ2NjQ0ZTYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzQvZGRmMDZl LWRiOGItNDU4OS1hNjU2LTE3MTYxNDY2NDRlNi8xL3ZmbzJNMGJCTDRQR0RYdGNf ZV9zMC1mX0Rpby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQAW9z1AwQCuSQMMA0EAgACMAcDBQAqAOqgMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwDpwjANBgkqhkiG9w0BAQsFAAOCAQEAXudu DdutOLfyFV9D8wwbhMnZpf9Zhhe8aVPb4gdhYQKYdHuOtL91/kOQqlmBiCjV2HfJ 8jXvZPja3CphsIEacJdqpCbcEZql4/hWZTMdRceQtwgOlCmg9GJ681XL7yFugrm8 /PwWdSKGQFtCp7ADmIiAPAEIqxwp3IqBdC3NnxlW33QraeYlSh9NvurqTvmLBxcR LWBoCczhij3AmERFKLcQagJcalY3mdUPUGVxFSDpju+J5wca0sXxQo2F+g/XCaNb g7/UKm1fGAtyMapqJFqjgWb8qdenvMTitWUA4AOZbxOjT2xzco/NU24y10UDRc/u eiR6R1fIliNBVw2Wyw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:44:02 2026 by rpki-client