This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vfyN37hBh58OUw3OO3-Fgn8MGT8.cer File: vfyN37hBh58OUw3OO3-Fgn8MGT8.cer (raw, json) Hash identifier: /nqsB35qNl/iJZ285guqvn/u15JlXaEQFhkmTRFEuuU= Subject key identifier: BD:FC:8D:DF:B8:41:87:9F:0E:53:0D:CE:3B:7F:85:82:7F:0C:19:3F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7911227B1D091F7E64B2CB69093AF7C1 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d4/7b2f20-49ad-4712-9c3e-b1d4f8a86d09/1/vfyN37hBh58OUw3OO3-Fgn8MGT8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d4/7b2f20-49ad-4712-9c3e-b1d4f8a86d09/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:44 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 29410 IP: 192.118.0.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:22:7b:1d:09:1f:7e:64:b2:cb:69:09:3a:f7:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bdfc8ddfb841879f0e530dce3b7f85827f0c193f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:39:a2:92:a8:0c:49:a7:ae:c5:d4:f6:86:6a: 2a:ca:ea:44:13:41:d4:6b:90:10:6b:66:87:90:bf: 0a:5f:1a:4f:6b:3e:06:0a:f2:66:eb:91:5a:24:37: 97:5c:5e:03:d2:1d:3c:14:78:e6:08:8f:15:2f:1d: 86:7a:cc:19:6f:22:b5:88:c2:cb:d9:59:f3:77:dc: 89:ba:f2:e7:ca:73:f0:17:18:40:0b:b5:03:ac:ca: 42:be:14:97:2e:bd:c0:da:aa:1d:bd:5a:4f:1b:2a: 5f:de:d6:43:44:2e:ef:e9:ce:1c:33:96:4c:de:51: 61:65:89:d6:7b:02:64:1c:78:a3:ed:c6:49:0e:ce: fe:eb:47:b1:32:ea:56:ec:63:42:5d:e6:fe:1c:2a: b1:4f:ef:6c:91:c0:11:3d:25:66:1a:69:c3:96:75: ca:77:9c:04:cc:b3:ca:4d:5a:82:4b:89:bd:9f:aa: e6:e1:df:fa:b6:79:6c:10:e6:b1:96:bc:3d:eb:58: ef:0f:aa:d3:81:8a:4a:2b:a3:21:0f:ff:f4:21:3b: 25:08:1d:22:54:19:b5:f1:2e:d0:04:08:69:c4:d2: 27:a8:64:1f:2b:3a:55:2c:92:2c:d2:64:bb:28:93: f6:4c:4d:05:2e:c4:5e:d3:71:1e:04:4f:c6:34:b0: 33:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:FC:8D:DF:B8:41:87:9F:0E:53:0D:CE:3B:7F:85:82:7F:0C:19:3F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/7b2f20-49ad-4712-9c3e-b1d4f8a86d09/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/7b2f20-49ad-4712-9c3e-b1d4f8a86d09/1/vfyN37hBh58OUw3OO3-Fgn8MGT8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.118.0.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 29410 Signature Algorithm: sha256WithRSAEncryption 23:02:e2:79:fb:be:14:22:80:7e:6e:7d:c8:84:c5:e0:8d:8d: 7c:f9:03:d8:e5:dc:cf:8d:7a:bf:4e:11:d1:8a:78:4c:e6:f8: a7:cb:b0:66:e0:b4:21:98:45:43:f3:61:83:03:bc:48:56:73: dd:79:8e:5e:e7:b0:34:5f:0f:54:d0:dd:4f:b0:75:c9:8c:6e: d5:68:38:27:45:86:79:83:ad:a9:79:b3:71:1d:e4:11:aa:bc: 1e:da:dd:9e:f4:c2:55:79:9c:82:e1:92:61:ac:4d:bb:c6:c3: 6a:55:8c:31:95:65:2a:66:dc:b0:c3:55:13:97:f9:16:4e:9c: 42:05:eb:ea:09:87:f5:4b:d5:07:4a:64:f5:33:2f:5c:e9:8c: 50:5b:52:62:99:5e:97:93:7a:d9:42:30:60:17:90:81:82:d1: 90:0e:e0:45:3f:07:3c:dc:28:37:4d:38:4f:45:ca:c2:1f:b3: c9:f0:84:24:0c:11:aa:77:28:83:52:22:ff:6f:22:f2:20:e1: e0:b6:36:db:af:ef:e6:82:56:46:92:f8:ab:e2:2f:d8:02:b1: ce:95:5b:98:02:ce:c9:e3:9b:ff:19:bd:a8:7c:ed:ae:1b:2c: 39:76:9f:9b:1a:09:f0:e1:07:48:4d:72:e3:5c:63:b9:f9:43: 03:ca:4c:55 -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISAZt5ESJ7HQkffmSyy2kJOvfBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZGZjOGRkZmI4NDE4NzlmMGU1MzBkY2UzYjdmODU4MjdmMGMxOTNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTmikqgMSaeuxdT2hmoqyupEE0HU a5AQa2aHkL8KXxpPaz4GCvJm65FaJDeXXF4D0h08FHjmCI8VLx2GeswZbyK1iMLL 2Vnzd9yJuvLnynPwFxhAC7UDrMpCvhSXLr3A2qodvVpPGypf3tZDRC7v6c4cM5ZM 3lFhZYnWewJkHHij7cZJDs7+60exMupW7GNCXeb+HCqxT+9skcARPSVmGmnDlnXK d5wEzLPKTVqCS4m9n6rm4d/6tnlsEOaxlrw961jvD6rTgYpKK6MhD//0ITslCB0i VBm18S7QBAhpxNInqGQfKzpVLJIs0mS7KJP2TE0FLsRe03EeBE/GNLAzCwIDAQAB o4ICnzCCApswHQYDVR0OBBYEFL38jd+4QYefDlMNzjt/hYJ/DBk/MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q0LzdiMmYy MC00OWFkLTQ3MTItOWMzZS1iMWQ0ZjhhODZkMDkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDQvN2IyZjIw LTQ5YWQtNDcxMi05YzNlLWIxZDRmOGE4NmQwOS8xL3ZmeU4zN2hCaDU4T1V3M09P My1GZ244TUdUOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCwHYAMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQC AnLiMA0GCSqGSIb3DQEBCwUAA4IBAQAjAuJ5+74UIoB+bn3IhMXgjY18+QPY5dzP jXq/ThHRinhM5viny7Bm4LQhmEVD82GDA7xIVnPdeY5e57A0Xw9U0N1PsHXJjG7V aDgnRYZ5g62pebNxHeQRqrwe2t2e9MJVeZyC4ZJhrE27xsNqVYwxlWUqZtyww1UT l/kWTpxCBevqCYf1S9UHSmT1My9c6YxQW1JimV6Xk3rZQjBgF5CBgtGQDuBFPwc8 3Cg3TThPRcrCH7PJ8IQkDBGqdyiDUiL/byLyIOHgtjbbr+/mglZGkvir4i/YArHO lVuYAs7J45v/Gb2ofO2uGyw5dp+bGgnw4QdITXLjXGO5+UMDykxV -----END CERTIFICATE-----Generated at Mon Feb 9 15:07:53 2026 by rpki-client