This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer File: vfrSPhHPDSSkd1lOugn5msxvH_8.cer (raw, json) Hash identifier: +z63Seug4TPLr/5MpCL+9OclfZHsTFBHKNUOspMeJ14= Subject key identifier: BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB2E04702E5446C4CE42F844BCE22F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:02 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 5537 AS: 25537 AS: 35295 AS: 35569 AS: 39494 AS: 42399 AS: 42751 AS: 43489 AS: 47385 AS: 47595 AS: 48287 IP: 31.177.64.0/19 IP: 77.222.32.0/19 IP: 79.174.64.0/19 IP: 80.93.48.0/20 IP: 89.104.64.0/19 IP: 89.111.128.0/18 IP: 91.189.112.0/21 IP: 91.217.20.0/23 IP: 109.70.24.0/21 IP: 178.210.64.0/19 IP: 185.26.112.0/22 IP: 185.76.144.0/22 IP: 195.24.64.0/21 IP: 2a01:d8::/32 IP: 2a02:408::/32 IP: 2a02:2090::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:2e:04:70:2e:54:46:c4:ce:42:f8:44:bc:e2:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:fb:61:2d:b0:dc:8a:2f:9d:d9:51:5c:77:cb: 6e:13:2d:0a:4b:ec:91:1b:1d:1e:04:6d:e4:92:18: 01:48:1d:cb:9f:18:aa:d4:d8:a4:54:51:2b:7a:1a: 71:77:c8:d5:38:00:f6:d6:fa:be:dc:ad:c2:e6:62: 47:34:de:30:03:ad:63:6a:5b:d0:d9:3a:a1:ab:e3: c1:73:a3:4b:52:8e:1f:ee:1f:c6:2f:67:6a:23:9c: fa:9e:76:df:e4:2d:ff:a1:0a:fe:96:a2:97:31:39: ef:d0:f6:5c:ec:f4:87:1b:1b:9e:91:ad:bb:86:d1: 67:e0:7a:ab:17:b8:5e:f4:cc:5b:de:38:08:00:6c: 51:8d:50:4f:dc:aa:cd:9a:bb:9e:dc:74:2c:87:7d: ba:a3:e5:46:1c:48:55:3a:70:8b:2e:98:03:7d:e3: 8a:bd:e2:3d:68:0c:76:cf:61:4d:29:47:c6:51:4e: 2d:34:78:0e:af:f7:4a:66:01:90:19:75:f1:f3:e1: 9f:79:a2:d6:f0:fd:5c:02:f0:08:9c:f1:d7:56:35: 37:b9:ea:e0:4a:58:f4:5b:0b:da:94:ee:e9:9f:97: a7:98:a3:99:24:47:29:66:64:2a:4b:25:4c:2d:c9: 21:77:68:b6:e5:09:a7:0d:b1:8d:9a:ae:81:6d:41: 2c:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.177.64.0/19 77.222.32.0/19 79.174.64.0/19 80.93.48.0/20 89.104.64.0/19 89.111.128.0/18 91.189.112.0/21 91.217.20.0/23 109.70.24.0/21 178.210.64.0/19 185.26.112.0/22 185.76.144.0/22 195.24.64.0/21 IPv6: 2a01:d8::/32 2a02:408::/32 2a02:2090::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 5537 25537 35295 35569 39494 42399 42751 43489 47385 47595 48287 Signature Algorithm: sha256WithRSAEncryption 6f:61:fe:03:74:ba:dd:95:da:5a:97:e9:1b:98:ca:3b:17:57: f5:07:b0:50:2a:78:14:02:a6:c5:96:5d:51:78:5f:ef:75:33: 09:c4:6b:68:31:ae:b0:8d:c2:d2:f2:c8:ba:7c:3a:d2:5c:f4: 74:c4:73:5d:24:32:ec:2a:38:7c:08:b7:5f:bc:c4:5b:eb:a5: a9:5c:83:a8:e9:55:cb:7e:f4:ad:d0:d1:2a:e2:33:c2:cb:67: 69:78:05:79:e6:44:28:10:e6:58:e2:2f:9e:f4:48:cd:53:a1: 1f:b9:70:17:e7:97:cb:b2:2c:e0:58:a8:90:be:72:05:e8:dd: 63:4e:ec:01:11:e1:9f:97:ed:50:f1:ec:45:06:c6:77:82:3f: de:7b:40:ed:95:40:62:af:f9:33:a9:ad:cd:0e:59:47:da:82: cf:e7:76:89:ac:2f:4e:6c:ed:f6:57:5d:d2:af:5d:cc:f0:be: b4:cd:f7:dd:6a:a4:e8:d4:66:95:9e:51:ee:da:b4:bb:78:6b: 29:38:c4:80:ce:75:9f:9d:59:5a:76:0c:2d:d5:96:15:06:33: 48:09:42:8c:22:81:43:bf:87:f8:6e:dc:55:39:d9:8f:55:e4: f5:d9:49:06:94:51:c7:58:26:9b:ce:a8:11:96:bc:50:e7:64: 36:b6:eb:4d -----BEGIN CERTIFICATE----- MIIGKjCCBRKgAwIBAgISAZt26y4EcC5URsTOQvhEvOIvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZGZhZDIzZTExY2YwZDI0YTQ3NzU5NGViYTA5Zjk5YWNjNmYxZmZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/thLbDcii+d2VFcd8tuEy0KS+yR Gx0eBG3kkhgBSB3Lnxiq1NikVFErehpxd8jVOAD21vq+3K3C5mJHNN4wA61jalvQ 2Tqhq+PBc6NLUo4f7h/GL2dqI5z6nnbf5C3/oQr+lqKXMTnv0PZc7PSHGxueka27 htFn4HqrF7he9Mxb3jgIAGxRjVBP3KrNmrue3HQsh326o+VGHEhVOnCLLpgDfeOK veI9aAx2z2FNKUfGUU4tNHgOr/dKZgGQGXXx8+GfeaLW8P1cAvAInPHXVjU3uerg Slj0WwvalO7pn5enmKOZJEcpZmQqSyVMLckhd2i25QmnDbGNmq6BbUEsVwIDAQAB o4IDNjCCAzIwHQYDVR0OBBYEFL360j4Rzw0kpHdZTroJ+ZrMbx//MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2QzL2UyNTIz OS02YWIwLTQ5MTktYTc2YS00ZjRlNzFlMzIwODQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDMvZTI1MjM5 LTZhYjAtNDkxOS1hNzZhLTRmNGU3MWUzMjA4NC8xL3ZmclNQaEhQRFNTa2QxbE91 Z241bXN4dkhfOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGEBggrBgEF BQcBBwEB/wR1MHMwVAQCAAEwTgMEBR+xQAMEBU3eIAMEBU+uQAMEBFBdMAMEBVlo QAMEBllvgAMEA1u9cAMEAVvZFAMEA21GGAMEBbLSQAMEArkacAMEArlMkAMEA8MY QDAbBAIAAjAVAwUAKgEA2AMFACoCBAgDBQAqAiCQMEoGCCsGAQUFBwEIAQH/BDsw OaA3MDUCAhWhAgJjwQIDAInfAgMAivECAwCaRgIDAKWfAgMApv8CAwCp4QIDALkZ AgMAuesCAwC8nzANBgkqhkiG9w0BAQsFAAOCAQEAb2H+A3S63ZXaWpfpG5jKOxdX 9QewUCp4FAKmxZZdUXhf73UzCcRraDGusI3C0vLIunw60lz0dMRzXSQy7Co4fAi3 X7zEW+ulqVyDqOlVy370rdDRKuIzwstnaXgFeeZEKBDmWOIvnvRIzVOhH7lwF+eX y7Is4FiokL5yBejdY07sARHhn5ftUPHsRQbGd4I/3ntA7ZVAYq/5M6mtzQ5ZR9qC z+d2iawvTmzt9ldd0q9dzPC+tM333Wqk6NRmlZ5R7tq0u3hrKTjEgM51n51ZWnYM LdWWFQYzSAlCjCKBQ7+H+G7cVTnZj1Xk9dlJBpRRx1gmm86oEZa8UOdkNrbrTQ== -----END CERTIFICATE-----Generated at Tue Jan 27 17:49:28 2026 by rpki-client