This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vi8szxuqOQM-x2pYb4RqNiGPIJ0.cer File: vi8szxuqOQM-x2pYb4RqNiGPIJ0.cer (raw, json) Hash identifier: cD0CUpaEvUQmlrqt3X57FuxEf/TX1o87Fs9Ii8KQS9k= Subject key identifier: BE:2F:2C:CF:1B:AA:39:03:3E:C7:6A:58:6F:84:6A:36:21:8F:20:9D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ECA69F9109F9A83CB9A0AFFC0F736C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/99/97744d-5988-46ae-82f1-64187e30435b/1/vi8szxuqOQM-x2pYb4RqNiGPIJ0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/99/97744d-5988-46ae-82f1-64187e30435b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:30 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 39382 IP: 159.255.200.0/21 IP: 195.234.116.0/22 IP: 2a03:8680::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:a6:9f:91:09:f9:a8:3c:b9:a0:af:fc:0f:73:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=be2f2ccf1baa39033ec76a586f846a36218f209d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c3:45:05:9f:c1:6c:07:e7:f5:b0:88:bc:55: 7f:b4:e3:54:99:e2:cb:d2:6a:a7:98:a0:87:79:78: d3:cb:80:50:ff:de:b3:cd:c6:54:8e:e9:e5:c4:75: 12:7f:21:53:1a:45:92:2a:8b:43:69:0e:30:95:79: 83:b5:f1:7b:b4:78:dd:b6:f9:52:53:17:4b:03:24: 84:20:98:61:1b:21:9d:64:86:82:c9:34:0e:85:24: 57:c1:0c:0d:7e:b2:dc:65:d2:1c:9e:3a:f7:d7:46: 46:5c:44:cb:53:74:1e:f0:c5:ef:b1:e5:47:bd:9a: dc:35:6f:35:d6:f3:be:de:0f:98:49:f8:da:35:6d: 53:07:2e:06:c1:62:ea:9f:5e:56:10:00:44:3b:ed: b0:1a:dd:30:a9:b2:3d:a2:8c:ae:70:ce:d9:43:36: 6c:07:f8:56:82:d8:4a:13:c3:95:03:5a:b3:d3:02: 78:65:5e:2b:63:2b:95:59:20:7a:a9:85:39:fb:ca: 6d:b7:24:55:74:d1:66:03:3e:ba:fc:ff:56:12:55: bf:de:24:ce:1e:5a:2b:dd:d0:39:32:9a:da:62:20: 2d:b9:82:3b:2e:42:13:a4:a8:0a:d0:c8:2c:c1:9b: 13:be:fb:b5:a3:ae:18:32:c2:6c:71:c0:41:c3:61: cc:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:2F:2C:CF:1B:AA:39:03:3E:C7:6A:58:6F:84:6A:36:21:8F:20:9D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/97744d-5988-46ae-82f1-64187e30435b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/97744d-5988-46ae-82f1-64187e30435b/1/vi8szxuqOQM-x2pYb4RqNiGPIJ0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 159.255.200.0/21 195.234.116.0/22 IPv6: 2a03:8680::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 39382 Signature Algorithm: sha256WithRSAEncryption 8c:e8:73:56:bd:d9:b4:da:e1:72:1f:13:5f:bf:a2:ef:5c:c3: ea:88:c0:b3:a1:e4:7f:05:4b:fa:52:bd:a1:41:6c:15:ea:fa: 9f:2d:33:70:e9:8b:73:f9:ce:a1:81:f0:3b:65:16:65:d9:6f: f4:e0:1d:5b:1b:69:dc:6e:9f:f8:af:f5:1e:6f:79:2b:41:14: f7:3f:78:c6:f4:5c:f0:c7:34:9d:5f:51:b4:9a:30:23:6b:39: 44:ae:59:40:0e:ec:52:8a:e4:34:68:9b:fa:a9:92:2f:70:c1: f9:bd:b2:1e:e2:7d:dc:61:de:60:49:b6:52:8f:35:40:29:23: 1f:f4:d5:71:17:19:bd:15:c5:f1:e5:fa:12:84:23:77:40:80: c8:10:41:d0:bf:e4:35:62:41:77:65:0e:0b:02:3f:ac:e1:8f: af:4a:5f:21:66:3d:74:1d:2e:68:ed:2b:b3:b1:06:e0:b4:d9: 3b:ff:f4:99:b2:38:90:7b:9f:fe:4c:03:80:e2:6c:f2:75:40: 51:cc:55:05:b4:25:c5:29:51:d2:9f:ff:9f:c7:ff:56:61:c8: 3f:95:51:51:ac:a1:91:96:f7:15:10:4d:2e:2c:e2:5f:b7:17: 44:e6:1a:04:dc:42:30:6c:f5:29:9e:b6:14:f1:ad:a7:74:24: e3:86:4b:5d -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt57KafkQn5qDy5oK/8D3NsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZTJmMmNjZjFiYWEzOTAzM2VjNzZhNTg2Zjg0NmEzNjIxOGYyMDlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocNFBZ/BbAfn9bCIvFV/tONUmeLL 0mqnmKCHeXjTy4BQ/96zzcZUjunlxHUSfyFTGkWSKotDaQ4wlXmDtfF7tHjdtvlS UxdLAySEIJhhGyGdZIaCyTQOhSRXwQwNfrLcZdIcnjr310ZGXETLU3Qe8MXvseVH vZrcNW811vO+3g+YSfjaNW1TBy4GwWLqn15WEABEO+2wGt0wqbI9ooyucM7ZQzZs B/hWgthKE8OVA1qz0wJ4ZV4rYyuVWSB6qYU5+8pttyRVdNFmAz66/P9WElW/3iTO Hlor3dA5MpraYiAtuYI7LkITpKgK0MgswZsTvvu1o64YMsJsccBBw2HMYQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFL4vLM8bqjkDPsdqWG+EajYhjyCdMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk5Lzk3NzQ0 ZC01OTg4LTQ2YWUtODJmMS02NDE4N2UzMDQzNWIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTkvOTc3NDRk LTU5ODgtNDZhZS04MmYxLTY0MTg3ZTMwNDM1Yi8xL3ZpOHN6eHVxT1FNLXgycFli NFJxTmlHUElKMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQDn//IAwQCw+p0MA0EAgACMAcDBQAqA4aAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwCZ1jANBgkqhkiG9w0BAQsFAAOCAQEAjOhz Vr3ZtNrhch8TX7+i71zD6ojAs6HkfwVL+lK9oUFsFer6ny0zcOmLc/nOoYHwO2UW Zdlv9OAdWxtp3G6f+K/1Hm95K0EU9z94xvRc8Mc0nV9RtJowI2s5RK5ZQA7sUork NGib+qmSL3DB+b2yHuJ93GHeYEm2Uo81QCkjH/TVcRcZvRXF8eX6EoQjd0CAyBBB 0L/kNWJBd2UOCwI/rOGPr0pfIWY9dB0uaO0rs7EG4LTZO//0mbI4kHuf/kwDgOJs 8nVAUcxVBbQlxSlR0p//n8f/VmHIP5VRUayhkZb3FRBNLiziX7cXROYaBNxCMGz1 KZ62FPGtp3Qk44ZLXQ== -----END CERTIFICATE-----Generated at Mon Feb 9 15:11:19 2026 by rpki-client