This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vjxU0e3KaS9Eydo4NALCT95yNQc.cer File: vjxU0e3KaS9Eydo4NALCT95yNQc.cer (raw, json) Hash identifier: l2duKVrqp/dn257gNbbNIVvPm/C9PkAGF303o517raw= Subject key identifier: BE:3C:54:D1:ED:CA:69:2F:44:C9:DA:38:34:02:C2:4F:DE:72:35:07 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA527733AC486B0998DCB82492F053C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/35/5d6745-e0d6-40d0-84ed-c34953edc7e5/1/vjxU0e3KaS9Eydo4NALCT95yNQc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/35/5d6745-e0d6-40d0-84ed-c34953edc7e5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:19:39 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.42.221.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:27:73:3a:c4:86:b0:99:8d:cb:82:49:2f:05:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:19:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=be3c54d1edca692f44c9da383402c24fde723507 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a7:2c:83:77:40:0c:47:04:c0:f3:34:f8:4d: ca:f8:6d:58:4a:c0:88:4c:0b:7c:f1:fe:81:b4:53: 14:c3:12:e0:d1:49:76:62:fe:bb:79:bb:7b:74:5f: 63:99:c3:62:fe:93:08:58:9e:8a:dc:0e:d8:4e:38: f6:14:62:db:e5:0c:83:bd:8c:6a:57:22:9d:ed:f8: 62:b6:1d:0e:d6:cf:06:d5:18:b0:39:df:dd:a1:61: c7:bd:25:9a:2f:67:d7:4d:d9:0d:47:b9:9f:04:c2: 39:a4:27:c8:10:d0:dd:d7:46:f1:b7:97:cb:68:38: 20:73:e5:2d:e0:53:81:b5:e4:f3:f6:01:25:57:01: 61:83:e2:cd:6a:72:db:87:cf:34:f1:0b:9e:fc:08: 70:ec:59:83:96:fe:cd:d1:76:9e:e0:91:b9:ff:74: 91:9d:7e:a4:ee:30:35:dc:26:df:5f:f0:b3:ea:0b: a9:20:72:fc:76:bc:2c:5b:5f:b6:f3:a9:c8:91:09: 76:e6:e2:84:2b:11:ab:6d:47:e9:d5:51:d8:e5:49: fb:fb:d8:a6:46:f4:6c:27:96:18:97:63:9e:5d:8b: 79:35:0f:a7:d0:03:02:40:00:58:38:f2:ee:32:7e: 83:7d:82:77:68:2d:4c:ef:04:78:94:64:92:df:64: 60:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:3C:54:D1:ED:CA:69:2F:44:C9:DA:38:34:02:C2:4F:DE:72:35:07 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5d6745-e0d6-40d0-84ed-c34953edc7e5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5d6745-e0d6-40d0-84ed-c34953edc7e5/1/vjxU0e3KaS9Eydo4NALCT95yNQc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.42.221.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:8d:63:b8:c8:f0:45:36:5c:21:54:de:e1:68:0d:8b:53:80: fc:c3:78:92:38:7d:61:c4:e6:da:d1:cd:8d:97:d8:d6:27:8e: 45:4f:40:db:52:76:7f:6e:52:4e:1f:6b:fc:35:11:49:7d:30: fe:0e:ea:d7:8c:23:d9:0a:29:c6:03:ce:bc:5e:82:e5:05:27: f1:3a:3c:8d:eb:0c:d6:3d:b2:e5:dd:3c:b4:e0:b9:db:04:a8: fc:07:39:90:9c:19:bd:27:24:f8:89:6b:6e:85:7b:1c:c9:a9: e6:93:e8:f7:3c:85:07:82:2a:b5:09:24:1a:b6:c6:89:a0:4e: 4b:96:d1:3d:af:3e:ed:c7:d8:38:be:2f:01:4e:a7:00:48:02: 8b:78:9c:d0:ba:a6:31:27:ab:8c:55:43:79:7f:bc:6b:66:d3: 62:d6:6c:b2:93:49:e4:0b:14:12:f5:4c:e6:b8:9b:f0:55:17: a7:7f:f4:7f:c4:f7:7c:a1:3f:d0:5e:22:8b:f4:40:07:ba:91: 71:96:8e:1a:8d:f8:bd:cd:a2:f5:a4:12:b3:25:ab:1e:16:12: f8:83:ca:69:0c:3e:6e:9a:bb:fd:49:f7:39:36:58:76:93:4c: 4d:7f:5e:6d:fe:6f:dd:d3:50:30:1e:5c:41:eb:a3:c4:4c:43: 3f:8d:d5:ec -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt7pSdzOsSGsJmNy4JJLwU8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxOTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZTNjNTRkMWVkY2E2OTJmNDRjOWRhMzgzNDAyYzI0ZmRlNzIzNTA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6csg3dADEcEwPM0+E3K+G1YSsCI TAt88f6BtFMUwxLg0Ul2Yv67ebt7dF9jmcNi/pMIWJ6K3A7YTjj2FGLb5QyDvYxq VyKd7fhith0O1s8G1RiwOd/doWHHvSWaL2fXTdkNR7mfBMI5pCfIENDd10bxt5fL aDggc+Ut4FOBteTz9gElVwFhg+LNanLbh8808Que/Ahw7FmDlv7N0Xae4JG5/3SR nX6k7jA13CbfX/Cz6gupIHL8drwsW1+286nIkQl25uKEKxGrbUfp1VHY5Un7+9im RvRsJ5YYl2OeXYt5NQ+n0AMCQABYOPLuMn6DfYJ3aC1M7wR4lGSS32RglwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFL48VNHtymkvRMnaODQCwk/ecjUHMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM1LzVkNjc0 NS1lMGQ2LTQwZDAtODRlZC1jMzQ5NTNlZGM3ZTUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzUvNWQ2NzQ1 LWUwZDYtNDBkMC04NGVkLWMzNDk1M2VkYzdlNS8xL3ZqeFUwZTNLYVM5RXlkbzRO QUxDVDk1eU5RYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwSrdMA0GCSqGSIb3DQEBCwUAA4IBAQAdjWO4 yPBFNlwhVN7haA2LU4D8w3iSOH1hxOba0c2Nl9jWJ45FT0DbUnZ/blJOH2v8NRFJ fTD+DurXjCPZCinGA868XoLlBSfxOjyN6wzWPbLl3Ty04LnbBKj8BzmQnBm9JyT4 iWtuhXscyanmk+j3PIUHgiq1CSQatsaJoE5LltE9rz7tx9g4vi8BTqcASAKLeJzQ uqYxJ6uMVUN5f7xrZtNi1myyk0nkCxQS9UzmuJvwVRenf/R/xPd8oT/QXiKL9EAH upFxlo4ajfi9zaL1pBKzJaseFhL4g8ppDD5umrv9Sfc5Nlh2k0xNf15t/m/d01Aw HlxB66PETEM/jdXs -----END CERTIFICATE-----Generated at Mon Feb 9 18:26:12 2026 by rpki-client