This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vqGJDDBbDy2kILAWl-O_I9SFq2Q.cer File: vqGJDDBbDy2kILAWl-O_I9SFq2Q.cer (raw, json) Hash identifier: SJgMN0odf9YY7zL2SFEdajDNLPkTniWLQStqmfkvMJ8= Subject key identifier: BE:A1:89:0C:30:5B:0F:2D:A4:20:B0:16:97:E3:BF:23:D4:85:AB:64 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7834611BAC62447A57BE230678E1A5B6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/vqGJDDBbDy2kILAWl-O_I9SFq2Q.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:17:37 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 210477 AS: 214885 IP: 146.19.17.0/24 IP: 185.18.151.0/24 IP: 185.216.191.0/24 IP: 2a12:b500::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:61:1b:ac:62:44:7a:57:be:23:06:78:e1:a5:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bea1890c305b0f2da420b01697e3bf23d485ab64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:f8:13:fd:53:1f:70:ab:d5:c8:ae:af:5e:16: 83:39:e8:87:7c:2e:36:18:f2:e5:38:37:5c:68:21: d5:b0:c1:1a:40:bc:c3:8e:99:bc:f1:ee:f1:7a:be: 71:d7:8e:7d:29:61:b8:2a:f4:95:06:0f:85:a1:c7: 26:00:ff:8c:1f:65:15:92:54:67:f5:6d:72:7a:61: cf:2c:f6:97:af:61:ee:fd:f5:f1:ba:ad:7f:6d:4d: 18:1a:28:37:b0:ca:d9:69:5e:08:1f:4b:eb:db:2b: 8e:e3:d7:49:2d:85:3f:39:d5:fd:e5:72:21:dd:22: ff:3f:63:a2:63:7c:6b:dd:8b:54:d5:6f:3e:7d:1b: 3d:6f:ca:19:85:ad:89:6b:90:dc:dc:73:ae:c4:1b: e9:98:b4:69:d1:65:56:ee:c0:23:16:f4:1a:69:e9: 1d:83:45:f5:1e:43:79:b3:ae:14:c0:80:f8:9d:cc: 28:00:ea:c5:bc:d8:fb:f1:aa:de:29:21:70:f6:6c: 33:9a:3c:1c:4b:75:2c:d5:66:8d:14:4d:12:20:b7: 31:a6:ba:2a:f3:b2:98:6b:7e:41:fa:85:9a:6e:3d: c8:55:2b:24:69:c7:2d:26:16:f5:0e:69:31:53:c0: 77:13:55:34:dc:10:91:02:3c:23:ff:74:52:1b:34: 2f:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:A1:89:0C:30:5B:0F:2D:A4:20:B0:16:97:E3:BF:23:D4:85:AB:64 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/vqGJDDBbDy2kILAWl-O_I9SFq2Q.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.19.17.0/24 185.18.151.0/24 185.216.191.0/24 IPv6: 2a12:b500::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 210477 214885 Signature Algorithm: sha256WithRSAEncryption 69:0b:ed:b4:f6:67:a8:20:5e:c7:f6:1a:40:b9:de:6b:bf:bc: 56:81:c4:56:da:b5:1b:ca:84:7f:db:08:17:b6:ba:05:6b:af: 16:f8:5c:eb:08:39:9a:9e:22:ab:e3:34:59:94:52:c6:94:49: e9:59:6f:c5:85:33:c2:35:34:ca:2d:6f:6d:cc:2c:98:e7:40: bd:56:37:ca:0c:63:bc:c7:87:f8:fd:77:96:1a:47:8a:ab:b9: de:d8:01:7b:ea:ee:69:cc:74:87:76:e7:53:99:59:75:6a:80: 67:29:7b:56:a7:7e:ff:cd:07:b9:ca:36:ea:47:d0:02:9a:24: e0:38:0a:4a:44:23:cc:be:51:50:74:ab:05:77:6c:b6:c8:e0: ec:19:a9:77:9a:a6:29:14:aa:22:d0:15:02:d4:01:3f:75:89: 94:a2:3d:fe:2a:c7:ec:c6:50:53:2e:15:90:fc:4a:78:13:8e: b0:37:7c:e6:f4:18:49:f0:6e:ea:d4:b4:c3:f8:e0:f7:1c:82: d2:84:83:fa:bb:b3:3a:42:f4:28:10:c1:2e:e6:79:a4:1a:f5: d2:d6:2a:56:cc:c1:5c:34:c3:57:4a:da:bc:00:b8:c5:ee:39: 5d:48:f6:5e:4c:2b:12:08:0b:7e:b3:29:79:03:60:e1:ce:78: fd:b3:ec:1b -----BEGIN CERTIFICATE----- MIIFtDCCBJygAwIBAgISAZt4NGEbrGJEele+IwZ44aW2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZWExODkwYzMwNWIwZjJkYTQyMGIwMTY5N2UzYmYyM2Q0ODVhYjY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/gT/VMfcKvVyK6vXhaDOeiHfC42 GPLlODdcaCHVsMEaQLzDjpm88e7xer5x1459KWG4KvSVBg+FoccmAP+MH2UVklRn 9W1yemHPLPaXr2Hu/fXxuq1/bU0YGig3sMrZaV4IH0vr2yuO49dJLYU/OdX95XIh 3SL/P2OiY3xr3YtU1W8+fRs9b8oZha2Ja5Dc3HOuxBvpmLRp0WVW7sAjFvQaaekd g0X1HkN5s64UwID4ncwoAOrFvNj78areKSFw9mwzmjwcS3Us1WaNFE0SILcxproq 87KYa35B+oWabj3IVSskacctJhb1DmkxU8B3E1U03BCRAjwj/3RSGzQvPwIDAQAB o4ICwDCCArwwHQYDVR0OBBYEFL6hiQwwWw8tpCCwFpfjvyPUhatkMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU0L2FhYTc3 Yi05YTA5LTRmMGEtYTg4NS0zMTc2ZjA5OTlkZGEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTQvYWFhNzdi LTlhMDktNGYwYS1hODg1LTMxNzZmMDk5OWRkYS8xL3ZxR0pEREJiRHkya0lMQVds LU9fSTlTRnEyUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQAkhMRAwQAuRKXAwQAudi/MA0EAgACMAcDBQMq ErUAMB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwM2LQIDA0dlMA0GCSqGSIb3DQEB CwUAA4IBAQBpC+209meoIF7H9hpAud5rv7xWgcRW2rUbyoR/2wgXtroFa68W+Fzr CDmaniKr4zRZlFLGlEnpWW/FhTPCNTTKLW9tzCyY50C9VjfKDGO8x4f4/XeWGkeK q7ne2AF76u5pzHSHdudTmVl1aoBnKXtWp37/zQe5yjbqR9ACmiTgOApKRCPMvlFQ dKsFd2y2yODsGal3mqYpFKoi0BUC1AE/dYmUoj3+KsfsxlBTLhWQ/Ep4E46wN3zm 9BhJ8G7q1LTD+OD3HILShIP6u7M6QvQoEMEu5nmkGvXS1ipWzMFcNMNXStq8ALjF 7jldSPZeTCsSCAt+syl5A2Dhznj9s+wb -----END CERTIFICATE-----Generated at Mon Feb 9 15:05:02 2026 by rpki-client