This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vhqIfnZTot5E8TFj4YcDcyaimgM.cer File: vhqIfnZTot5E8TFj4YcDcyaimgM.cer (raw, json) Hash identifier: E0t5YIfc2HbWk1hGWY4QXVSKq440PAnyYmORkTGLUVk= Subject key identifier: BE:1A:88:7E:76:53:A2:DE:44:F1:31:63:E1:87:03:73:26:A2:9A:03 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F8577ED5F33CAC608E1BAF75D108BD8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/34/8b443e-f3c8-4ba0-9e96-86c541ca9d71/1/vhqIfnZTot5E8TFj4YcDcyaimgM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/34/8b443e-f3c8-4ba0-9e96-86c541ca9d71/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:23:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 39398 IP: 5.199.224.0/21 IP: 185.119.248.0/22 IP: 2a13:b800::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:77:ed:5f:33:ca:c6:08:e1:ba:f7:5d:10:8b:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:23:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=be1a887e7653a2de44f13163e187037326a29a03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:14:f1:c9:2b:41:a8:ca:d6:5c:9a:8d:a6:8f: 65:35:40:95:f9:7e:b4:cd:a6:4f:c3:e3:c9:cc:d3: 04:72:f7:5e:24:70:0d:db:a1:9c:97:7c:77:6d:de: c5:42:a3:11:d0:b5:2f:a8:c1:6a:f6:87:92:7c:db: a8:80:95:32:9c:d4:b5:95:23:df:cb:f9:29:0f:74: 66:95:e1:2b:04:fa:17:1f:74:34:23:9e:05:67:2b: 92:df:f8:25:f9:ef:02:ed:86:7d:cd:82:3a:43:86: 9e:15:31:0a:72:47:38:0b:7d:65:7c:2f:90:56:e0: 63:c7:50:d0:db:24:9c:03:d0:46:e5:9e:a8:e1:94: 9a:dc:1b:bf:42:ea:fe:52:98:21:39:05:89:37:7f: 5c:7c:c8:27:b9:96:3c:1e:38:f3:bd:38:43:ad:ad: 8a:dd:0c:4f:ff:79:ec:27:75:b3:12:a7:ec:8b:bf: 82:dc:df:a6:f4:ef:93:85:a3:12:ef:cc:cd:30:38: 99:39:d0:a6:73:bd:cd:57:d0:8a:0b:0c:32:83:82: db:02:7c:f0:45:dd:8c:ad:21:3d:b5:cc:01:f0:7d: ca:22:6c:10:46:e9:3c:b9:60:15:95:9d:41:79:a1: 4c:cd:ac:fc:d8:08:9a:0f:38:aa:62:a0:33:c5:3c: d9:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:1A:88:7E:76:53:A2:DE:44:F1:31:63:E1:87:03:73:26:A2:9A:03 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8b443e-f3c8-4ba0-9e96-86c541ca9d71/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8b443e-f3c8-4ba0-9e96-86c541ca9d71/1/vhqIfnZTot5E8TFj4YcDcyaimgM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.199.224.0/21 185.119.248.0/22 IPv6: 2a13:b800::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 39398 Signature Algorithm: sha256WithRSAEncryption 0a:bb:c2:af:c5:07:d4:06:24:27:67:3e:c8:f2:9a:0e:04:10: 7c:3d:3a:6d:6f:ae:ff:5c:d1:8c:ff:ef:e2:de:35:de:6d:d2: 3e:ba:f7:bf:aa:72:45:5e:4f:a3:78:54:92:80:35:2d:21:8f: 7c:c1:83:60:79:4b:36:92:03:0e:2d:ed:22:12:e3:67:9a:0a: e6:7a:01:e7:9d:ea:a0:b9:75:79:13:77:ba:3e:ee:da:3b:e8: 8e:4b:fa:3c:c6:39:24:40:b0:47:59:00:c3:6c:64:b2:5d:cd: a1:94:18:e1:34:d2:32:c4:91:39:a0:03:64:1f:82:3d:dd:dc: 07:67:75:52:90:c1:16:59:94:42:5a:77:ac:8a:ca:b0:46:48: ab:81:eb:54:e5:ba:fd:f0:68:c4:62:bc:45:89:31:91:e5:4c: 53:01:a7:00:54:5d:d2:50:a1:16:8f:bf:dc:a3:6a:af:1e:10: 9b:b2:13:05:9b:8c:a9:5f:59:b4:23:88:25:34:c4:37:7d:84: 76:32:d8:13:c3:9a:d2:f1:93:44:86:c1:29:19:cc:5c:77:da: 1f:f0:6b:26:0a:6a:de:fe:eb:70:db:82:6b:83:0a:71:0f:e2: 62:ab:40:0f:89:c9:e8:d0:97:af:d7:9a:16:70:28:bf:a5:e9: 31:07:6e:22 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt/hXftXzPKxgjhuvddEIvYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZTFhODg3ZTc2NTNhMmRlNDRmMTMxNjNlMTg3MDM3MzI2YTI5YTAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhTxyStBqMrWXJqNpo9lNUCV+X60 zaZPw+PJzNMEcvdeJHAN26Gcl3x3bd7FQqMR0LUvqMFq9oeSfNuogJUynNS1lSPf y/kpD3RmleErBPoXH3Q0I54FZyuS3/gl+e8C7YZ9zYI6Q4aeFTEKckc4C31lfC+Q VuBjx1DQ2yScA9BG5Z6o4ZSa3Bu/Qur+UpghOQWJN39cfMgnuZY8HjjzvThDra2K 3QxP/3nsJ3WzEqfsi7+C3N+m9O+ThaMS78zNMDiZOdCmc73NV9CKCwwyg4LbAnzw Rd2MrSE9tcwB8H3KImwQRuk8uWAVlZ1BeaFMzaz82AiaDziqYqAzxTzZKwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFL4aiH52U6LeRPExY+GHA3MmopoDMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM0LzhiNDQz ZS1mM2M4LTRiYTAtOWU5Ni04NmM1NDFjYTlkNzEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzQvOGI0NDNl LWYzYzgtNGJhMC05ZTk2LTg2YzU0MWNhOWQ3MS8xL3ZocUlmblpUb3Q1RThURmo0 WWNEY3lhaW1nTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQDBcfgAwQCuXf4MA0EAgACMAcDBQAqE7gAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwCZ5jANBgkqhkiG9w0BAQsFAAOCAQEACrvC r8UH1AYkJ2c+yPKaDgQQfD06bW+u/1zRjP/v4t413m3SPrr3v6pyRV5Po3hUkoA1 LSGPfMGDYHlLNpIDDi3tIhLjZ5oK5noB553qoLl1eRN3uj7u2jvojkv6PMY5JECw R1kAw2xksl3NoZQY4TTSMsSROaADZB+CPd3cB2d1UpDBFlmUQlp3rIrKsEZIq4Hr VOW6/fBoxGK8RYkxkeVMUwGnAFRd0lChFo+/3KNqrx4Qm7ITBZuMqV9ZtCOIJTTE N32EdjLYE8Oa0vGTRIbBKRnMXHfaH/BrJgpq3v7rcNuCa4MKcQ/iYqtAD4nJ6NCX r9eaFnAov6XpMQduIg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:28:02 2026 by rpki-client