This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vp8Vm6uDZh_ZPq1DDDvbHqp-rwg.cer File: vp8Vm6uDZh_ZPq1DDDvbHqp-rwg.cer (raw, json) Hash identifier: S/6wlPQrBirdJ6PjRUHVhyBaFwDCj1TQTpKkwexqHR0= Subject key identifier: BE:9F:15:9B:AB:83:66:1F:D9:3E:AD:43:0C:3B:DB:1E:AA:7E:AF:08 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78347F6ED07F66CBC02E4AAF8F530D69 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e9/a481fa-2d0d-4e8e-b2d3-28d8248b5b61/1/vp8Vm6uDZh_ZPq1DDDvbHqp-rwg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e9/a481fa-2d0d-4e8e-b2d3-28d8248b5b61/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:17:45 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 39571 IP: 89.235.64.0/22 IP: 185.135.28.0/22 IP: 2a06:f100::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:7f:6e:d0:7f:66:cb:c0:2e:4a:af:8f:53:0d:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=be9f159bab83661fd93ead430c3bdb1eaa7eaf08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:1d:fa:b3:e9:7a:43:c4:e6:df:77:4a:e3:9d: a3:14:ab:2d:05:cc:09:bb:69:bf:bd:e3:ab:d5:50: 8d:bd:15:aa:7b:dc:3a:4c:0b:8d:fb:3b:9d:f6:08: e3:4c:bc:cc:29:a9:0e:a5:76:58:f7:a4:4c:84:a8: c7:4a:09:a8:f4:19:ba:16:14:d9:fb:db:a2:68:d8: 70:5a:e5:f7:6e:b0:78:66:67:5f:bf:13:70:8b:ee: 05:07:77:af:2e:53:e2:0f:06:b4:82:db:ca:9a:9f: a4:ab:d0:77:a9:f2:b9:13:02:8d:8e:8c:24:da:9c: f1:d4:8b:6f:63:59:63:73:1e:05:9c:25:d6:ce:6f: 23:15:d9:0a:f2:55:f4:5d:df:0e:07:1e:b5:7d:84: aa:45:6f:e6:81:86:95:05:e9:d5:07:64:8e:48:02: 88:f0:a0:3c:2d:2a:3c:7e:01:ec:d7:95:e3:41:cd: db:dc:95:c7:b2:ee:65:7b:16:22:f7:c0:07:17:f2: f2:26:72:47:db:28:5e:11:f5:94:9f:38:4b:a7:99: 68:85:fb:f5:23:3a:dd:1d:7f:da:41:44:33:78:7f: 39:e7:fd:e4:a1:ce:43:03:d8:46:9f:66:ba:16:d7: b1:6e:39:7a:06:81:68:e3:72:c4:ff:00:a1:0d:ed: 52:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:9F:15:9B:AB:83:66:1F:D9:3E:AD:43:0C:3B:DB:1E:AA:7E:AF:08 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a481fa-2d0d-4e8e-b2d3-28d8248b5b61/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a481fa-2d0d-4e8e-b2d3-28d8248b5b61/1/vp8Vm6uDZh_ZPq1DDDvbHqp-rwg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.235.64.0/22 185.135.28.0/22 IPv6: 2a06:f100::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 39571 Signature Algorithm: sha256WithRSAEncryption a8:86:86:92:54:6f:e9:a9:3a:22:48:bb:5e:54:a1:81:90:bc: f9:b0:e8:8a:56:4b:46:b9:db:6c:fb:09:c5:cc:c8:3f:43:d6: 4b:57:82:c5:02:eb:bd:d7:64:f5:5b:3c:66:a0:ea:fb:dc:88: 0f:5c:a2:1f:a5:6b:47:03:9a:28:8d:73:31:01:d7:0f:8e:7d: 90:ef:c4:0e:a0:c8:34:77:75:64:df:da:70:74:99:7d:f4:95: 50:1d:11:1c:fe:4b:63:8e:b0:06:29:e3:c7:44:cd:58:77:ba: b7:29:c7:41:a2:38:c0:73:28:24:a9:82:df:93:e1:c5:5a:d5: 70:09:01:83:83:a3:94:38:dd:4f:c9:7e:57:2c:61:a1:3d:13: 8e:04:f8:2e:65:9f:80:89:10:5b:48:bf:26:65:db:d2:81:2b: 2a:69:90:8d:1b:bc:e6:d7:97:1b:bb:4a:79:51:4e:99:d0:e0: c8:b7:03:56:27:b4:ee:b8:89:fa:68:21:9d:98:68:89:f0:32: e4:63:4f:12:3b:2a:71:d3:ac:42:5d:05:f8:b4:89:56:4e:00: 04:0a:6b:3d:da:a5:b2:8d:3a:d1:de:94:ca:af:c2:7e:2f:37: 0c:7b:e0:15:10:01:eb:5b:ff:29:6c:d1:f9:3d:de:0c:f7:70: 44:24:07:e5 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt4NH9u0H9my8AuSq+PUw1pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZTlmMTU5YmFiODM2NjFmZDkzZWFkNDMwYzNiZGIxZWFhN2VhZjA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqR36s+l6Q8Tm33dK452jFKstBcwJ u2m/veOr1VCNvRWqe9w6TAuN+zud9gjjTLzMKakOpXZY96RMhKjHSgmo9Bm6FhTZ +9uiaNhwWuX3brB4ZmdfvxNwi+4FB3evLlPiDwa0gtvKmp+kq9B3qfK5EwKNjowk 2pzx1ItvY1ljcx4FnCXWzm8jFdkK8lX0Xd8OBx61fYSqRW/mgYaVBenVB2SOSAKI 8KA8LSo8fgHs15XjQc3b3JXHsu5lexYi98AHF/LyJnJH2yheEfWUnzhLp5lohfv1 IzrdHX/aQUQzeH855/3koc5DA9hGn2a6Ftexbjl6BoFo43LE/wChDe1SrQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFL6fFZurg2Yf2T6tQww72x6qfq8IMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U5L2E0ODFm YS0yZDBkLTRlOGUtYjJkMy0yOGQ4MjQ4YjViNjEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTkvYTQ4MWZh LTJkMGQtNGU4ZS1iMmQzLTI4ZDgyNDhiNWI2MS8xL3ZwOFZtNnVEWmhfWlBxMURE RHZiSHFwLXJ3Zy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCWetAAwQCuYccMA0EAgACMAcDBQMqBvEAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwCakzANBgkqhkiG9w0BAQsFAAOCAQEAqIaG klRv6ak6Iki7XlShgZC8+bDoilZLRrnbbPsJxczIP0PWS1eCxQLrvddk9Vs8ZqDq +9yID1yiH6VrRwOaKI1zMQHXD459kO/EDqDINHd1ZN/acHSZffSVUB0RHP5LY46w Binjx0TNWHe6tynHQaI4wHMoJKmC35PhxVrVcAkBg4OjlDjdT8l+VyxhoT0TjgT4 LmWfgIkQW0i/JmXb0oErKmmQjRu85teXG7tKeVFOmdDgyLcDVie07riJ+mghnZho ifAy5GNPEjsqcdOsQl0F+LSJVk4ABAprPdqlso060d6Uyq/Cfi83DHvgFRAB61v/ KWzR+T3eDPdwRCQH5Q== -----END CERTIFICATE-----Generated at Mon Feb 9 22:35:08 2026 by rpki-client