This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vjcHM7jbYU2qdgoALCQEgCgwDi0.cer File: vjcHM7jbYU2qdgoALCQEgCgwDi0.cer (raw, json) Hash identifier: nGeNuuk8mwfDVsUb8VbeRzF8KN6wlnnmx6pI28GP8xM= Subject key identifier: BE:37:07:33:B8:DB:61:4D:AA:76:0A:00:2C:24:04:80:28:30:0E:2D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA6B163BD770F42CF0621B371A270CF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a7/896ab3-c479-470a-8bb9-24222d87f88d/1/vjcHM7jbYU2qdgoALCQEgCgwDi0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a7/896ab3-c479-470a-8bb9-24222d87f88d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:20:12 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 30836 IP: 37.17.160.0/20 IP: 46.35.192.0/19 IP: 94.199.48.0/21 IP: 185.3.244.0/22 IP: 217.112.128.0/20 IP: 2a02:c640::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:b1:63:bd:77:0f:42:cf:06:21:b3:71:a2:70:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:20:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=be370733b8db614daa760a002c24048028300e2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:00:ad:2a:5b:e0:a7:b3:e6:0f:75:d0:52:2d: fa:ab:74:a9:b2:11:b2:82:f8:8c:62:51:ad:2d:bb: 32:70:2b:fb:94:5a:01:63:73:da:e8:b8:44:de:96: 61:cf:66:86:34:74:15:a0:54:04:66:22:04:48:cf: f1:6f:b6:04:63:39:01:c9:50:f9:5e:9c:49:63:a7: a0:0c:92:03:af:ea:57:07:57:04:4f:de:8a:0a:7e: f5:99:e8:6a:5d:f3:27:bb:66:23:95:6f:e0:bf:2b: 92:47:71:73:6b:5e:29:5c:d8:78:51:7f:3c:8b:6f: 39:24:d3:ea:22:4b:ce:2a:0d:40:6e:c6:1d:70:dd: 1e:7f:3e:95:53:6c:10:89:a4:53:21:e3:87:64:c1: 29:bd:93:ba:a2:17:07:35:b3:96:12:4a:c1:f9:e4: b7:a8:84:d9:3f:43:9b:3d:9c:75:e7:47:32:1f:ce: 72:55:18:4d:30:0d:01:fc:af:42:5b:0c:28:34:b2: 20:05:56:05:0e:92:f2:ea:15:93:86:8f:a8:1e:6e: a3:07:dd:86:eb:14:13:f7:dd:08:2d:80:80:ba:5c: 0e:76:f9:e3:7f:24:5e:50:a5:03:8d:f2:f7:10:b2: 6a:97:9e:6e:18:e6:9c:62:3a:e7:a8:aa:08:a5:ae: c8:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:37:07:33:B8:DB:61:4D:AA:76:0A:00:2C:24:04:80:28:30:0E:2D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/896ab3-c479-470a-8bb9-24222d87f88d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/896ab3-c479-470a-8bb9-24222d87f88d/1/vjcHM7jbYU2qdgoALCQEgCgwDi0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.17.160.0/20 46.35.192.0/19 94.199.48.0/21 185.3.244.0/22 217.112.128.0/20 IPv6: 2a02:c640::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 30836 Signature Algorithm: sha256WithRSAEncryption 01:f5:b8:ec:ad:43:f5:06:a1:a3:73:a2:70:9b:97:10:5e:85: d3:a9:f5:e0:3f:5b:96:ef:a3:bd:36:b9:8e:e6:0e:02:de:7a: f8:07:62:97:4b:74:40:08:35:fb:d1:52:92:4d:a6:8c:0a:b6: a4:7a:ae:3d:82:63:43:77:14:5d:89:d4:3a:ca:35:2c:fc:af: d4:4e:b9:5d:84:7d:bc:96:3a:5a:20:f4:61:26:d7:75:f8:8c: c2:54:e9:c6:f4:53:cf:69:f4:0c:72:ef:a4:f1:4f:d5:35:06: f4:fb:e4:e6:d5:e0:0c:07:14:fd:d5:27:13:73:4b:fe:b3:41: f9:aa:e2:1c:97:c1:40:9d:c4:54:09:d4:45:22:9a:dd:07:e6: d8:17:c3:0e:ee:38:a7:e4:ea:e5:96:bc:23:2c:dc:37:9d:8b: e7:10:46:26:08:be:c3:e9:75:dc:2c:4b:97:c8:1d:cb:02:be: f0:8d:92:c8:2d:67:3f:9a:79:50:32:20:3d:04:52:87:a8:77: 19:b7:65:f5:aa:24:a8:11:23:7a:73:a7:90:87:ce:f5:76:ca: 6a:1a:8e:dd:9a:db:bc:27:71:03:80:c1:0d:c3:ff:b3:e7:0d: 0e:e1:5e:0f:c3:bb:30:53:cd:df:8a:51:de:bc:ba:5c:cc:2c: 11:9b:6d:de -----BEGIN CERTIFICATE----- MIIFujCCBKKgAwIBAgISAZt+prFjvXcPQs8GIbNxonDPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIyMDEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZTM3MDczM2I4ZGI2MTRkYWE3NjBhMDAyYzI0MDQ4MDI4MzAwZTJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwCtKlvgp7PmD3XQUi36q3SpshGy gviMYlGtLbsycCv7lFoBY3Pa6LhE3pZhz2aGNHQVoFQEZiIESM/xb7YEYzkByVD5 XpxJY6egDJIDr+pXB1cET96KCn71mehqXfMnu2YjlW/gvyuSR3Fza14pXNh4UX88 i285JNPqIkvOKg1AbsYdcN0efz6VU2wQiaRTIeOHZMEpvZO6ohcHNbOWEkrB+eS3 qITZP0ObPZx150cyH85yVRhNMA0B/K9CWwwoNLIgBVYFDpLy6hWTho+oHm6jB92G 6xQT990ILYCAulwOdvnjfyReUKUDjfL3ELJql55uGOacYjrnqKoIpa7IuwIDAQAB o4ICxjCCAsIwHQYDVR0OBBYEFL43BzO422FNqnYKACwkBIAoMA4tMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E3Lzg5NmFi My1jNDc5LTQ3MGEtOGJiOS0yNDIyMmQ4N2Y4OGQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTcvODk2YWIz LWM0NzktNDcwYS04YmI5LTI0MjIyZDg3Zjg4ZC8xL3ZqY0hNN2piWVUycWRnb0FM Q1FFZ0Nnd0RpMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUF BwEHAQH/BDcwNTAkBAIAATAeAwQEJRGgAwQFLiPAAwQDXscwAwQCuQP0AwQE2XCA MA0EAgACMAcDBQMqAsZAMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAnh0MA0GCSqG SIb3DQEBCwUAA4IBAQAB9bjsrUP1BqGjc6Jwm5cQXoXTqfXgP1uW76O9NrmO5g4C 3nr4B2KXS3RACDX70VKSTaaMCrakeq49gmNDdxRdidQ6yjUs/K/UTrldhH28ljpa IPRhJtd1+IzCVOnG9FPPafQMcu+k8U/VNQb0++Tm1eAMBxT91ScTc0v+s0H5quIc l8FAncRUCdRFIprdB+bYF8MO7jin5OrllrwjLNw3nYvnEEYmCL7D6XXcLEuXyB3L Ar7wjZLILWc/mnlQMiA9BFKHqHcZt2X1qiSoESN6c6eQh871dspqGo7dmtu8J3ED gMENw/+z5w0O4V4Pw7swU83filHevLpczCwRm23e -----END CERTIFICATE-----Generated at Mon Feb 9 19:48:07 2026 by rpki-client