This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vhji2fUJydO0VREqoojTNhhYAaA.cer File: vhji2fUJydO0VREqoojTNhhYAaA.cer (raw, json) Hash identifier: X+ArEKOvjwGAIYmeZRS0XjISxRNr6C90FZUUHeaa+F4= Subject key identifier: BE:18:E2:D9:F5:09:C9:D3:B4:55:11:2A:A2:88:D3:36:18:58:01:A0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA5201B50F94B21D282A80F38FFFC15 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ab/6645d5-d193-4a63-85e6-2ca0e5c104fd/1/vhji2fUJydO0VREqoojTNhhYAaA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ab/6645d5-d193-4a63-85e6-2ca0e5c104fd/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:19:37 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 211425 IP: 91.151.85.0/24 IP: 91.151.92.0/24 IP: 193.56.0.0/24 IP: 2a14:d600::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:20:1b:50:f9:4b:21:d2:82:a8:0f:38:ff:fc:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:19:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=be18e2d9f509c9d3b455112aa288d336185801a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b2:c4:0a:67:74:b0:4b:e3:90:79:ca:5d:1c: e2:31:26:d1:58:00:8e:72:94:38:66:15:cc:6c:3f: 3b:51:86:66:cb:10:5b:12:15:6c:08:81:48:09:e3: de:14:83:96:23:30:ba:10:e9:91:63:ff:33:1e:a1: b6:03:11:d4:49:29:a0:4e:f1:93:19:8c:e2:bc:f6: 02:53:da:1f:39:36:9e:20:54:da:e7:27:24:e8:c7: 88:f5:7e:58:48:92:23:38:3d:3b:3b:e9:6b:cd:1b: 75:c1:33:26:82:80:1c:db:1d:13:99:a8:35:69:a9: 08:83:34:b6:df:b2:21:9e:59:c2:2c:3d:fd:57:92: c6:20:e1:d1:07:aa:4a:84:a7:ac:d5:a8:03:5b:a1: 9e:39:7f:b7:05:6b:ed:63:8b:d5:8a:17:ed:98:6f: 7e:72:2b:04:1f:c7:d4:b0:48:5a:f9:02:2d:c0:be: 53:7f:48:2a:17:50:37:20:b9:d5:02:e1:d4:7b:45: 59:86:74:1b:98:f1:35:43:8f:a5:c8:7d:07:0e:cb: de:0c:56:5d:7a:6c:ea:b7:e2:40:42:4a:b8:72:94: e5:41:83:76:ea:b6:a8:50:69:6a:73:1d:93:e0:48: a9:27:d7:bb:c1:a8:d4:03:69:11:10:41:2c:08:62: c7:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:18:E2:D9:F5:09:C9:D3:B4:55:11:2A:A2:88:D3:36:18:58:01:A0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6645d5-d193-4a63-85e6-2ca0e5c104fd/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6645d5-d193-4a63-85e6-2ca0e5c104fd/1/vhji2fUJydO0VREqoojTNhhYAaA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.151.85.0/24 91.151.92.0/24 193.56.0.0/24 IPv6: 2a14:d600::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 211425 Signature Algorithm: sha256WithRSAEncryption 61:0c:99:40:5d:6c:57:4e:e8:03:48:27:5a:2c:2e:ab:0c:bc: 59:62:e8:72:40:66:e5:6a:5e:26:e9:cc:8c:84:05:4f:b5:86: d1:8f:5c:65:cd:e2:3a:7b:f8:39:eb:8d:51:01:53:8e:b4:ff: 81:00:43:e9:21:a1:b3:dd:01:54:08:3c:82:23:6f:7a:26:16: af:f0:44:02:cd:ed:44:f7:e3:83:e2:82:a1:07:41:34:72:ba: 04:20:56:42:79:c2:f4:31:34:50:09:ed:25:5b:7e:34:27:49: b2:3a:25:32:3f:4a:eb:da:25:bc:4a:10:97:9a:ef:fd:e6:fe: e8:8b:da:a4:31:0e:b0:86:d4:9e:32:c6:77:c9:3e:c1:0f:dc: 77:38:e9:cf:b8:6d:91:b5:b6:08:d3:da:58:b4:d0:f3:a7:bc: e7:72:85:04:0d:12:7c:5c:57:f1:a1:a4:72:6a:bd:1f:45:b2: bc:83:47:55:45:93:57:6b:4d:fd:8a:16:60:bd:4a:b7:4e:c5: 44:1b:0a:1d:f9:73:1c:4c:f5:d4:41:63:b9:ca:75:2e:a9:d1: 28:99:dd:10:82:f9:af:01:2a:3b:2b:15:7e:4b:5f:a5:7e:9f: 8c:8b:dc:1a:23:96:94:9c:b2:ce:04:51:7f:8d:13:68:c7:71: f5:e9:17:18 -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISAZt7pSAbUPlLIdKCqA84//wVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxOTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZTE4ZTJkOWY1MDljOWQzYjQ1NTExMmFhMjg4ZDMzNjE4NTgwMWEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAybLECmd0sEvjkHnKXRziMSbRWACO cpQ4ZhXMbD87UYZmyxBbEhVsCIFICePeFIOWIzC6EOmRY/8zHqG2AxHUSSmgTvGT GYzivPYCU9ofOTaeIFTa5yck6MeI9X5YSJIjOD07O+lrzRt1wTMmgoAc2x0Tmag1 aakIgzS237IhnlnCLD39V5LGIOHRB6pKhKes1agDW6GeOX+3BWvtY4vVihftmG9+ cisEH8fUsEha+QItwL5Tf0gqF1A3ILnVAuHUe0VZhnQbmPE1Q4+lyH0HDsveDFZd emzqt+JAQkq4cpTlQYN26raoUGlqcx2T4EipJ9e7wajUA2kREEEsCGLH2QIDAQAB o4ICuzCCArcwHQYDVR0OBBYEFL4Y4tn1CcnTtFURKqKI0zYYWAGgMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FiLzY2NDVk NS1kMTkzLTRhNjMtODVlNi0yY2EwZTVjMTA0ZmQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWIvNjY0NWQ1 LWQxOTMtNGE2My04NWU2LTJjYTBlNWMxMDRmZC8xL3ZoamkyZlVKeWRPMFZSRXFv b2pUTmhoWUFhQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQAW5dVAwQAW5dcAwQAwTgAMA0EAgACMAcDBQMq FNYAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwM54TANBgkqhkiG9w0BAQsFAAOC AQEAYQyZQF1sV07oA0gnWiwuqwy8WWLockBm5WpeJunMjIQFT7WG0Y9cZc3iOnv4 OeuNUQFTjrT/gQBD6SGhs90BVAg8giNveiYWr/BEAs3tRPfjg+KCoQdBNHK6BCBW QnnC9DE0UAntJVt+NCdJsjolMj9K69olvEoQl5rv/eb+6IvapDEOsIbUnjLGd8k+ wQ/cdzjpz7htkbW2CNPaWLTQ86e853KFBA0SfFxX8aGkcmq9H0WyvINHVUWTV2tN /YoWYL1Kt07FRBsKHflzHEz11EFjucp1LqnRKJndEIL5rwEqOysVfktfpX6fjIvc GiOWlJyyzgRRf40TaMdx9ekXGA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:52:46 2026 by rpki-client