This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vmBP81opyRFWvkvSKbO693yDl70.cer File: vmBP81opyRFWvkvSKbO693yDl70.cer (raw, json) Hash identifier: 4NynjwrGR578UtuDt6XIOmT4ZHGnakq+VwGOIcr95bo= Subject key identifier: BE:60:4F:F3:5A:29:C9:11:56:BE:4B:D2:29:B3:BA:F7:7C:83:97:BD Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B365C65F9FBF455B7EFB5439886A81A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/22/e849bb-1304-44ea-838f-1a39c3d34f08/1/vmBP81opyRFWvkvSKbO693yDl70.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/22/e849bb-1304-44ea-838f-1a39c3d34f08/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:38 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 208795 IP: 5.35.104.0/21 IP: 94.131.80.0/20 IP: 94.131.176.0/20 IP: 194.116.140.0/24 IP: 2a07:aa40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:5c:65:f9:fb:f4:55:b7:ef:b5:43:98:86:a8:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=be604ff35a29c91156be4bd229b3baf77c8397bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:04:84:c0:a3:7d:86:fc:8d:68:8a:2b:30:9c: 80:4c:d8:ea:0a:e0:12:23:23:ee:b8:36:a9:37:dd: 0d:04:1e:ea:9a:5f:43:10:98:80:f9:a0:d6:bc:35: bb:7d:da:22:9d:3a:9e:d2:10:c3:25:58:7b:b3:b2: 81:95:ac:be:cc:14:54:f3:e1:b5:93:65:65:af:6d: e1:17:c4:d5:b6:a6:11:22:f5:f0:71:53:c8:3b:b1: b4:cd:16:8c:10:1a:6f:d7:1a:61:d2:d4:14:12:bf: da:0d:ca:d1:a8:a9:f7:9f:80:fb:21:6b:f7:3a:4a: 14:fe:f8:6d:e3:05:a2:04:bc:ce:0e:15:20:7f:18: 04:25:b4:d1:f4:e2:a8:97:27:3c:7b:c7:f4:e5:0a: 8e:a3:60:ac:6b:55:8f:65:07:07:86:c8:ca:d4:42: d7:74:5f:43:b8:6f:6c:9a:3d:ab:85:ce:c1:9f:1f: fd:7d:b1:65:ae:5c:1c:89:1b:12:cf:1d:14:50:7b: 06:e1:0f:ee:a8:68:5f:7f:8e:4c:d8:8c:c8:52:dd: 9f:58:0f:1c:72:e4:67:e2:ac:ce:d4:ee:33:00:96: 8e:dd:12:0b:f2:c2:d4:59:f6:74:93:8b:e0:d7:43: 4c:fa:48:33:75:cb:11:54:c9:cb:49:57:1f:af:08: eb:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:60:4F:F3:5A:29:C9:11:56:BE:4B:D2:29:B3:BA:F7:7C:83:97:BD X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e849bb-1304-44ea-838f-1a39c3d34f08/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e849bb-1304-44ea-838f-1a39c3d34f08/1/vmBP81opyRFWvkvSKbO693yDl70.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.35.104.0/21 94.131.80.0/20 94.131.176.0/20 194.116.140.0/24 IPv6: 2a07:aa40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 208795 Signature Algorithm: sha256WithRSAEncryption 52:04:8b:23:a9:49:f6:3d:31:66:39:fe:a1:52:6c:10:c0:1c: 98:c2:60:48:7e:c2:aa:ff:4c:bf:46:8c:40:e4:3e:cb:b7:b8: 0a:31:43:b3:94:57:32:29:86:4e:35:8b:ae:ae:26:ab:10:93: 5b:a2:a7:f6:87:0b:3c:86:77:16:85:9a:35:4b:1d:25:7f:1d: 75:80:c9:8e:81:ea:4c:40:6d:3c:70:60:2e:04:7b:ad:1c:bb: 05:73:dc:74:15:58:36:b6:6d:f1:46:29:25:e7:f7:51:3c:2b: e7:47:1a:0b:dd:1c:e8:01:23:4c:08:e8:a4:f0:d1:54:04:2d: 85:dc:9e:a4:e6:90:1c:08:be:74:9b:81:61:92:fe:b9:40:98: 62:b4:98:9d:23:e4:5e:48:52:22:bb:57:b1:c9:b3:d8:20:3b: ff:35:6d:fc:ec:1e:60:8e:ca:db:5e:33:c1:04:03:be:5e:f1: 7a:ed:78:d0:b3:d5:64:d7:d3:31:52:20:7b:c3:60:7a:be:4b: 1a:a8:e8:b1:e3:8e:ca:3a:b6:cc:d9:83:84:f5:65:37:7b:a8: 33:59:ec:e2:20:59:a8:47:77:bf:75:84:c7:d4:6e:69:6d:5b: 13:1e:da:34:42:ff:b9:63:4a:0f:26:63:43:9c:64:29:d7:99: 1a:e5:11:e6 -----BEGIN CERTIFICATE----- MIIFtTCCBJ2gAwIBAgISAZt7Nlxl+fv0VbfvtUOYhqgaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZTYwNGZmMzVhMjljOTExNTZiZTRiZDIyOWIzYmFmNzdjODM5N2JkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxASEwKN9hvyNaIorMJyATNjqCuAS IyPuuDapN90NBB7qml9DEJiA+aDWvDW7fdoinTqe0hDDJVh7s7KBlay+zBRU8+G1 k2Vlr23hF8TVtqYRIvXwcVPIO7G0zRaMEBpv1xph0tQUEr/aDcrRqKn3n4D7IWv3 OkoU/vht4wWiBLzODhUgfxgEJbTR9OKolyc8e8f05QqOo2Csa1WPZQcHhsjK1ELX dF9DuG9smj2rhc7Bnx/9fbFlrlwciRsSzx0UUHsG4Q/uqGhff45M2IzIUt2fWA8c cuRn4qzO1O4zAJaO3RIL8sLUWfZ0k4vg10NM+kgzdcsRVMnLSVcfrwjr7QIDAQAB o4ICwTCCAr0wHQYDVR0OBBYEFL5gT/NaKckRVr5L0imzuvd8g5e9MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzIyL2U4NDli Yi0xMzA0LTQ0ZWEtODM4Zi0xYTM5YzNkMzRmMDgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjIvZTg0OWJi LTEzMDQtNDRlYS04MzhmLTFhMzljM2QzNGYwOC8xL3ZtQlA4MW9weVJGV3ZrdlNL Yk82OTN5RGw3MC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF BwEHAQH/BDEwLzAeBAIAATAYAwQDBSNoAwQEXoNQAwQEXoOwAwQAwnSMMA0EAgAC MAcDBQMqB6pAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMvmzANBgkqhkiG9w0B AQsFAAOCAQEAUgSLI6lJ9j0xZjn+oVJsEMAcmMJgSH7Cqv9Mv0aMQOQ+y7e4CjFD s5RXMimGTjWLrq4mqxCTW6Kn9ocLPIZ3FoWaNUsdJX8ddYDJjoHqTEBtPHBgLgR7 rRy7BXPcdBVYNrZt8UYpJef3UTwr50caC90c6AEjTAjopPDRVAQthdyepOaQHAi+ dJuBYZL+uUCYYrSYnSPkXkhSIrtXscmz2CA7/zVt/OweYI7K214zwQQDvl7xeu14 0LPVZNfTMVIge8Nger5LGqjoseOOyjq2zNmDhPVlN3uoM1ns4iBZqEd3v3WEx9Ru aW1bEx7aNEL/uWNKDyZjQ5xkKdeZGuUR5g== -----END CERTIFICATE-----Generated at Mon Feb 9 15:07:24 2026 by rpki-client