This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vlR-u1wFb3ApbkCGISYfPE4tQjk.cer File: vlR-u1wFb3ApbkCGISYfPE4tQjk.cer (raw, json) Hash identifier: eI6ZLxpMh48XHEJWSALFuAT2dJCsh7iSLQ1dGplRGM8= Subject key identifier: BE:54:7E:BB:5C:05:6F:70:29:6E:40:86:21:26:1F:3C:4E:2D:42:39 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7910EC3925C1D1FD844E2E14D450A7D0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9d/759288-10de-4916-b4d9-d0b9dc3aca23/1/vlR-u1wFb3ApbkCGISYfPE4tQjk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9d/759288-10de-4916-b4d9-d0b9dc3aca23/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:30 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 39538 IP: 194.15.191.0/24 IP: 194.31.221.0/24 IP: 195.244.0.0/23 IP: 2001:67c:2308::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:ec:39:25:c1:d1:fd:84:4e:2e:14:d4:50:a7:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=be547ebb5c056f70296e408621261f3c4e2d4239 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:1e:26:f0:cb:5f:7e:d8:dc:14:92:13:63:2e: 90:80:1a:f2:53:88:38:4d:d9:83:25:64:f1:35:a6: ea:39:36:0a:19:d2:af:6b:4b:fa:4d:a6:1b:ba:bc: 92:69:54:b0:2d:11:f6:ce:d4:1c:de:28:14:27:84: 17:eb:db:92:74:f1:38:46:f4:ff:57:a9:a2:f2:28: 46:ac:18:af:4b:91:0d:f3:a2:c6:2e:d3:63:9a:b3: 0c:43:aa:2b:d4:e3:94:15:e3:5f:a4:21:6b:8c:17: d5:a3:26:31:ee:ed:a3:ca:56:a7:fe:0c:fe:e8:3c: 82:7e:0f:48:b4:75:b6:ad:52:ba:9f:7d:14:ca:e8: c4:50:8d:df:29:43:d1:37:c3:34:cb:ce:3a:74:88: 60:61:21:59:d8:98:b0:de:fd:0d:2f:b0:1c:54:77: 3c:c8:7e:a3:2a:e7:38:05:7f:73:21:92:ed:25:61: 48:a4:4a:cd:9d:07:94:c2:5f:bb:62:a3:95:f2:64: 71:66:19:e0:9b:a2:62:98:aa:4e:28:04:96:a3:f6: 87:1c:8c:34:16:2f:56:36:de:d7:0e:0d:19:ba:b3: 5f:2a:19:e7:6e:20:e5:2e:ed:bb:8d:c5:01:8b:37: 1c:b6:0d:56:a9:e9:36:b1:da:4a:48:24:b6:e5:9c: ea:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:54:7E:BB:5C:05:6F:70:29:6E:40:86:21:26:1F:3C:4E:2D:42:39 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/759288-10de-4916-b4d9-d0b9dc3aca23/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/759288-10de-4916-b4d9-d0b9dc3aca23/1/vlR-u1wFb3ApbkCGISYfPE4tQjk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.15.191.0/24 194.31.221.0/24 195.244.0.0/23 IPv6: 2001:67c:2308::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 39538 Signature Algorithm: sha256WithRSAEncryption 4a:4b:9a:b1:0f:7e:77:2d:01:17:ff:ba:97:48:03:f6:20:26: b1:bd:7c:39:c0:04:d0:39:3f:b3:56:c9:d7:5b:82:33:47:cf: 26:6e:3f:d8:18:cb:05:e5:6d:11:3b:c0:e9:36:a5:9e:cd:e0: 8f:49:6d:ee:86:4e:30:03:67:6d:cb:bd:0e:89:37:71:5b:6f: 22:35:f4:b7:27:a7:a3:8d:41:9e:8e:46:0a:4b:de:4c:f2:e2: 06:d3:0f:f2:21:8b:ce:36:77:44:88:b5:74:cc:b9:0b:ca:e0: ce:6f:32:72:ec:74:8c:d5:e6:5b:65:d3:a5:3b:4b:a9:9a:39: ce:55:54:0a:b8:eb:ee:c6:a9:9e:79:f8:26:cd:dc:56:71:c6: 63:a1:d0:f1:c6:ff:39:2c:eb:67:8b:0a:c2:2b:07:a6:c9:09: 49:8b:5f:ce:7c:0a:43:02:fb:7e:f8:93:07:c7:2b:a4:06:02: 6a:cb:79:5d:09:b4:df:7e:f1:5f:a4:c1:c5:02:87:db:e4:22: e4:85:b7:3e:bb:d8:5d:82:df:dd:63:e6:24:0f:31:0b:8f:f1: c4:5f:9a:c7:b3:80:c0:8c:8e:db:7b:4d:35:ca:2b:f7:35:5f: 08:f5:2f:83:9d:c7:05:c7:31:e6:95:a4:c2:97:ba:f4:c8:95: 8d:f0:e4:14 -----BEGIN CERTIFICATE----- MIIFsTCCBJmgAwIBAgISAZt5EOw5JcHR/YROLhTUUKfQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZTU0N2ViYjVjMDU2ZjcwMjk2ZTQwODYyMTI2MWYzYzRlMmQ0MjM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5x4m8MtfftjcFJITYy6QgBryU4g4 TdmDJWTxNabqOTYKGdKva0v6TaYburySaVSwLRH2ztQc3igUJ4QX69uSdPE4RvT/ V6mi8ihGrBivS5EN86LGLtNjmrMMQ6or1OOUFeNfpCFrjBfVoyYx7u2jylan/gz+ 6DyCfg9ItHW2rVK6n30UyujEUI3fKUPRN8M0y846dIhgYSFZ2Jiw3v0NL7AcVHc8 yH6jKuc4BX9zIZLtJWFIpErNnQeUwl+7YqOV8mRxZhngm6JimKpOKASWo/aHHIw0 Fi9WNt7XDg0ZurNfKhnnbiDlLu27jcUBizcctg1Wqek2sdpKSCS25Zzq8QIDAQAB o4ICvTCCArkwHQYDVR0OBBYEFL5UfrtcBW9wKW5AhiEmHzxOLUI5MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzlkLzc1OTI4 OC0xMGRlLTQ5MTYtYjRkOS1kMGI5ZGMzYWNhMjMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWQvNzU5Mjg4 LTEwZGUtNDkxNi1iNGQ5LWQwYjlkYzNhY2EyMy8xL3ZsUi11MXdGYjNBcGJrQ0dJ U1lmUEU0dFFqay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDwGCCsGAQUF BwEHAQH/BC0wKzAYBAIAATASAwQAwg+/AwQAwh/dAwQBw/QAMA8EAgACMAkDBwAg AQZ8IwgwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAJpyMA0GCSqGSIb3DQEBCwUA A4IBAQBKS5qxD353LQEX/7qXSAP2ICaxvXw5wATQOT+zVsnXW4IzR88mbj/YGMsF 5W0RO8DpNqWezeCPSW3uhk4wA2dty70OiTdxW28iNfS3J6ejjUGejkYKS95M8uIG 0w/yIYvONndEiLV0zLkLyuDObzJy7HSM1eZbZdOlO0upmjnOVVQKuOvuxqmeefgm zdxWccZjodDxxv85LOtniwrCKwemyQlJi1/OfApDAvt++JMHxyukBgJqy3ldCbTf fvFfpMHFAofb5CLkhbc+u9hdgt/dY+YkDzELj/HEX5rHs4DAjI7be001yiv3NV8I 9S+DnccFxzHmlaTCl7r0yJWN8OQU -----END CERTIFICATE-----Generated at Mon Feb 9 19:41:17 2026 by rpki-client