This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vgXqx8OvU1UcnmI2U906198VVLs.cer File: vgXqx8OvU1UcnmI2U906198VVLs.cer (raw, json) Hash identifier: ywJC0LDeI6x0lZ99NvzohHOER1iFZIROMkDw1VIJmM4= Subject key identifier: BE:05:EA:C7:C3:AF:53:55:1C:9E:62:36:53:DD:3A:D7:DF:15:54:BB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC88F58C950186B5F088B873163CF1F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f3/b1901b-5de8-44e5-9f99-cfdaac0a62db/1/vgXqx8OvU1UcnmI2U906198VVLs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f3/b1901b-5de8-44e5-9f99-cfdaac0a62db/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:18:42 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 197795 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:8f:58:c9:50:18:6b:5f:08:8b:87:31:63:cf:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=be05eac7c3af53551c9e623653dd3ad7df1554bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ba:d6:67:20:57:43:07:94:f0:c6:d1:bd:d0: d5:40:43:77:36:3e:46:18:cf:ea:2d:85:db:fe:d6: 33:6b:09:3a:fb:58:b3:20:bd:8c:de:8d:9d:dd:99: 0c:08:1a:a0:41:dd:d9:2e:14:e1:5b:84:10:52:17: cf:24:cc:cf:c9:2d:6b:39:1a:80:8b:f9:24:3b:8f: 4d:bb:ed:f4:3f:a1:bf:0a:88:96:15:65:19:66:1a: aa:0c:76:c8:4a:36:98:03:b2:8c:98:b9:87:f5:51: 29:ec:e1:1e:16:94:50:1a:8a:79:ac:d5:99:7d:4f: bf:0d:12:06:7c:be:71:4e:85:b8:db:af:5c:88:ed: 86:64:ec:06:a7:37:05:d3:4b:db:e5:00:b2:70:72: f1:d1:b1:30:d2:89:67:3a:f8:c7:2e:ed:01:3d:13: 52:00:ef:f0:0c:36:0a:d8:42:97:3a:ea:a0:b4:bf: 92:16:ab:b6:f0:7b:c6:73:dc:4c:4d:26:92:da:8e: 93:b7:c1:4d:f9:a9:78:65:fa:33:79:83:34:da:b1: c1:37:b2:e6:d4:a7:53:e6:17:78:36:fb:9f:a9:65: e0:3c:20:d8:98:62:bf:57:4b:8f:e9:4b:1a:2a:92: 4a:1d:3a:0f:d4:20:d0:c6:fa:72:a1:28:e2:99:6c: f7:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:05:EA:C7:C3:AF:53:55:1C:9E:62:36:53:DD:3A:D7:DF:15:54:BB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b1901b-5de8-44e5-9f99-cfdaac0a62db/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b1901b-5de8-44e5-9f99-cfdaac0a62db/1/vgXqx8OvU1UcnmI2U906198VVLs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 197795 Signature Algorithm: sha256WithRSAEncryption 28:7d:8c:d2:e4:c7:9f:d0:10:c8:10:ea:2b:46:8b:f9:c8:23: bb:0b:45:18:c0:a4:7d:cf:6d:8c:b5:43:f6:ef:94:e9:7e:54: 94:6e:3d:de:29:ba:24:9e:f1:0a:10:a1:93:73:99:3a:49:ba: 1a:e1:c4:4f:67:29:6a:dd:83:91:ad:ab:31:a6:61:48:ec:26: b7:6d:b1:87:b3:1e:85:68:73:4f:b7:ef:95:51:04:a1:69:e0: ba:2f:37:a5:e1:6d:db:f0:e3:53:fc:03:f8:fd:c3:17:17:13: b6:c0:05:ab:de:5d:ff:cd:b3:87:12:16:78:10:c6:40:ff:46: 63:eb:ac:56:d8:5d:5d:c2:5c:57:87:50:5d:a5:f3:1b:c6:f5: e9:4f:85:73:63:5b:d1:fc:dc:89:2d:9c:10:65:bd:88:38:08: c5:74:b7:37:44:5e:a0:2d:48:67:52:50:74:30:72:60:91:dc: 8d:06:2e:9a:eb:75:55:ab:ec:a8:f4:74:92:71:35:15:76:6e: 16:4c:23:88:05:57:1c:1c:1f:42:b8:11:1e:66:49:ca:41:22: 92:15:5f:cd:d7:00:b7:de:34:c0:40:87:6f:62:e4:d5:21:67: f3:de:18:fb:4f:3a:9b:ae:fd:3b:ad:0c:e1:6a:e7:dd:80:6f: 86:43:c1:ab -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt6yI9YyVAYa18Ii4cxY88fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZTA1ZWFjN2MzYWY1MzU1MWM5ZTYyMzY1M2RkM2FkN2RmMTU1NGJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLrWZyBXQweU8MbRvdDVQEN3Nj5G GM/qLYXb/tYzawk6+1izIL2M3o2d3ZkMCBqgQd3ZLhThW4QQUhfPJMzPyS1rORqA i/kkO49Nu+30P6G/CoiWFWUZZhqqDHbISjaYA7KMmLmH9VEp7OEeFpRQGop5rNWZ fU+/DRIGfL5xToW4269ciO2GZOwGpzcF00vb5QCycHLx0bEw0olnOvjHLu0BPRNS AO/wDDYK2EKXOuqgtL+SFqu28HvGc9xMTSaS2o6Tt8FN+al4ZfozeYM02rHBN7Lm 1KdT5hd4NvufqWXgPCDYmGK/V0uP6UsaKpJKHToP1CDQxvpyoSjimWz3zwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFL4F6sfDr1NVHJ5iNlPdOtffFVS7MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YzL2IxOTAx Yi01ZGU4LTQ0ZTUtOWY5OS1jZmRhYWMwYTYyZGIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjMvYjE5MDFi LTVkZTgtNDRlNS05Zjk5LWNmZGFhYzBhNjJkYi8xL3ZnWHF4OE92VTFVY25tSTJV OTA2MTk4VlZMcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMEozANBgkqhkiG9w0BAQsFAAOCAQEAKH2M0uTHn9AQ yBDqK0aL+cgjuwtFGMCkfc9tjLVD9u+U6X5UlG493im6JJ7xChChk3OZOkm6GuHE T2cpat2Dka2rMaZhSOwmt22xh7MehWhzT7fvlVEEoWngui83peFt2/DjU/wD+P3D FxcTtsAFq95d/82zhxIWeBDGQP9GY+usVthdXcJcV4dQXaXzG8b16U+Fc2Nb0fzc iS2cEGW9iDgIxXS3N0ReoC1IZ1JQdDByYJHcjQYumut1VavsqPR0knE1FXZuFkwj iAVXHBwfQrgRHmZJykEikhVfzdcAt940wECHb2Lk1SFn894Y+086m679O60M4Wrn 3YBvhkPBqw== -----END CERTIFICATE-----Generated at Mon Feb 9 22:40:15 2026 by rpki-client