This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vpxSiWGxCzIPR-i3BlTurtLyRNM.cer File: vpxSiWGxCzIPR-i3BlTurtLyRNM.cer (raw, json) Hash identifier: RjaeEwv0tTcJ+1Ip8VRySe44ZNolan7bRQcbV9bGlUg= Subject key identifier: BE:9C:52:89:61:B1:0B:32:0F:47:E8:B7:06:54:EE:AE:D2:F2:44:D3 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797E49EF64561F39138A77F99ED449B6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0a/98571d-398f-41db-85b0-8c3b3f30d215/1/vpxSiWGxCzIPR-i3BlTurtLyRNM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0a/98571d-398f-41db-85b0-8c3b3f30d215/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:17:58 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 208899 IP: 45.15.228.0/22 IP: 2a0e:3280::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:49:ef:64:56:1f:39:13:8a:77:f9:9e:d4:49:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=be9c528961b10b320f47e8b70654eeaed2f244d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:06:54:70:33:84:a3:88:49:e7:23:ee:bb:a7: 75:45:61:08:00:47:fd:d8:4e:9a:8a:07:a1:47:eb: 30:e3:72:d6:63:af:4a:1c:46:59:c3:96:62:cc:b1: 40:66:17:bc:c6:ee:fd:82:00:74:c6:fe:26:cb:53: 32:11:73:e1:b5:70:a9:a6:c3:55:a1:3b:f1:bc:9e: f0:4f:1e:2d:3b:e2:14:a3:4b:68:33:79:f8:b5:52: fa:e9:d4:01:29:19:47:9f:fe:4e:11:fe:a8:48:47: 61:a9:b7:3c:25:0b:7e:2c:cc:91:f2:fd:ae:c4:ef: da:7f:a6:dd:d5:dc:ea:96:13:23:6f:37:56:e0:63: 2d:81:b5:39:41:7f:2b:94:a6:40:cf:4d:57:6e:37: 90:0c:67:9b:34:7c:f0:5e:b0:60:05:95:75:8d:dd: 84:72:4e:da:6e:fc:80:63:95:56:fe:64:83:f9:66: 9e:a4:03:03:05:f9:69:a3:ea:7a:f6:59:ef:6a:f6: 5f:e8:ec:6e:6e:c5:c6:76:bc:0e:7a:bc:cc:a1:b7: a7:64:b2:44:9d:7d:e6:bf:df:43:ea:28:8d:ff:4f: ff:4d:33:dd:e5:83:77:ad:4d:5e:1d:1f:92:86:68: f1:6b:1d:df:f4:f2:df:f9:c6:b1:81:2f:d1:85:77: 19:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:9C:52:89:61:B1:0B:32:0F:47:E8:B7:06:54:EE:AE:D2:F2:44:D3 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/98571d-398f-41db-85b0-8c3b3f30d215/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/98571d-398f-41db-85b0-8c3b3f30d215/1/vpxSiWGxCzIPR-i3BlTurtLyRNM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.15.228.0/22 IPv6: 2a0e:3280::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 208899 Signature Algorithm: sha256WithRSAEncryption 63:34:94:4b:56:9c:5e:ec:79:c2:17:d8:97:59:c2:69:9a:6b: f9:52:12:f5:5f:c8:40:51:45:03:2d:41:19:71:f1:98:b0:f8: c0:24:09:bd:7b:67:80:08:f4:81:8c:91:68:b3:61:02:2e:d5: e1:a8:dd:2b:e7:e2:47:95:15:07:8b:4c:99:62:92:41:d4:c5: e4:e6:88:81:22:b2:3c:65:6c:8b:7d:72:c1:b8:f9:20:f9:d8: de:20:b4:4e:52:06:1c:e1:a2:a1:ce:ff:6d:87:a1:4b:2d:28: d4:ab:64:26:42:58:eb:20:47:72:d0:d2:c0:96:63:82:a4:8e: e8:7c:5b:d3:21:8a:92:c6:b6:93:b4:51:19:13:db:b7:28:a0: a6:36:c6:13:07:f5:7e:fd:60:8c:ed:13:bd:be:c0:71:b6:c9: 1b:cb:d8:d6:cd:c7:5c:ba:e8:f2:4c:22:1f:81:41:77:ff:e1: a5:ac:af:11:4e:ee:bf:34:99:a9:b8:95:ef:6b:8c:70:d9:b7: 17:d2:43:8f:b4:a3:23:fa:af:2b:3c:51:b0:50:70:ee:3f:e2: 71:24:67:ed:08:3b:af:d7:d0:24:23:a4:7b:ba:17:c7:7c:34: 29:12:af:a7:eb:bc:dc:07:a7:1f:54:fc:39:3b:70:ed:3c:de: 90:e6:9b:d3 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt5fknvZFYfOROKd/me1Em2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZTljNTI4OTYxYjEwYjMyMGY0N2U4YjcwNjU0ZWVhZWQyZjI0NGQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQZUcDOEo4hJ5yPuu6d1RWEIAEf9 2E6aigehR+sw43LWY69KHEZZw5ZizLFAZhe8xu79ggB0xv4my1MyEXPhtXCppsNV oTvxvJ7wTx4tO+IUo0toM3n4tVL66dQBKRlHn/5OEf6oSEdhqbc8JQt+LMyR8v2u xO/af6bd1dzqlhMjbzdW4GMtgbU5QX8rlKZAz01XbjeQDGebNHzwXrBgBZV1jd2E ck7abvyAY5VW/mSD+WaepAMDBflpo+p69lnvavZf6OxubsXGdrwOerzMobenZLJE nX3mv99D6iiN/0//TTPd5YN3rU1eHR+Shmjxax3f9PLf+caxgS/RhXcZEwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFL6cUolhsQsyD0fotwZU7q7S8kTTMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBhLzk4NTcx ZC0zOThmLTQxZGItODViMC04YzNiM2YzMGQyMTUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGEvOTg1NzFk LTM5OGYtNDFkYi04NWIwLThjM2IzZjMwZDIxNS8xL3ZweFNpV0d4Q3pJUFItaTNC bFR1cnRMeVJOTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCLQ/kMA0EAgACMAcDBQMqDjKAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMwAzANBgkqhkiG9w0BAQsFAAOCAQEAYzSUS1acXux5 whfYl1nCaZpr+VIS9V/IQFFFAy1BGXHxmLD4wCQJvXtngAj0gYyRaLNhAi7V4ajd K+fiR5UVB4tMmWKSQdTF5OaIgSKyPGVsi31ywbj5IPnY3iC0TlIGHOGioc7/bYeh Sy0o1KtkJkJY6yBHctDSwJZjgqSO6Hxb0yGKksa2k7RRGRPbtyigpjbGEwf1fv1g jO0Tvb7AcbbJG8vY1s3HXLro8kwiH4FBd//hpayvEU7uvzSZqbiV72uMcNm3F9JD j7SjI/qvKzxRsFBw7j/icSRn7Qg7r9fQJCOke7oXx3w0KRKvp+u83AenH1T8OTtw 7TzekOab0w== -----END CERTIFICATE-----Generated at Mon Feb 9 15:08:36 2026 by rpki-client