This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.cer File: vqZJ72Aw_ICEj9_iHUMhrIAR_RA.cer (raw, json) Hash identifier: pD5kEOYilTDtgUOXzpNEh2u896ZkxLFTCfzKv7aY6fk= Subject key identifier: BE:A6:49:EF:60:30:FC:80:84:8F:DF:E2:1D:43:21:AC:80:11:FD:10 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F832C82DD8CBB852CAD50B02A2B5153 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:21:01 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 208627 IP: 45.91.124.0/22 IP: 2a0e:f40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:2c:82:dd:8c:bb:85:2c:ad:50:b0:2a:2b:51:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:21:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bea649ef6030fc80848fdfe21d4321ac8011fd10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b7:f3:e2:27:48:3b:3e:7a:07:c1:34:7b:16: 64:8d:d4:9f:cf:86:94:21:97:74:a1:df:1a:17:96: f9:3b:4d:7c:5b:5f:5a:99:58:33:6b:ca:b5:5a:39: be:b9:3b:12:f7:97:49:64:94:08:fa:f2:18:73:67: 15:b6:c5:78:96:e5:4f:34:bb:a5:b4:57:65:6b:ab: 29:7c:3e:81:b6:b6:92:12:41:82:b5:b9:29:31:87: 66:d0:aa:15:c8:a3:7e:97:aa:f4:ee:2c:3a:b0:4e: aa:b2:5f:b6:c7:3e:77:2e:8c:1d:9c:13:1d:be:15: 65:3c:8c:db:36:b6:ca:2b:d7:71:0e:84:cd:6f:55: 82:08:e4:52:f2:ca:43:81:e8:28:7f:69:dd:61:02: 89:b4:c7:82:89:08:79:8d:d3:13:b5:69:4b:a5:fd: fb:c6:a4:f4:93:4b:6b:a7:68:78:b3:6b:51:db:da: 30:e7:15:2e:40:2a:67:d4:6c:61:f4:a7:85:bd:1b: 90:0f:38:24:54:01:2f:42:c9:4a:9c:f1:7f:8d:7a: 07:4f:8f:4e:28:de:43:5d:34:99:41:28:5f:51:45: 93:51:d8:1c:43:f1:a1:34:bd:29:d4:4a:77:d5:67: 70:ed:af:48:9d:82:d6:7c:39:cf:03:ca:1d:ef:c1: b7:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:A6:49:EF:60:30:FC:80:84:8F:DF:E2:1D:43:21:AC:80:11:FD:10 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.91.124.0/22 IPv6: 2a0e:f40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 208627 Signature Algorithm: sha256WithRSAEncryption 9b:a1:d5:81:a8:f0:e8:09:b6:e6:85:00:20:39:2d:ae:0a:36: 96:5a:48:93:19:25:db:3d:5a:e0:e6:41:45:78:57:94:6f:2a: b0:58:9d:2f:60:63:9e:ff:8b:12:e8:02:ea:62:f5:c0:9c:b2: ec:44:b5:6d:8b:04:5e:0f:71:46:01:2e:f9:c2:4d:35:9a:68: 67:23:7e:0c:f0:6f:56:57:99:3f:2a:ab:34:bb:7c:cd:f2:1c: ba:b5:f3:a9:be:31:27:61:2f:37:0d:cf:44:df:f2:74:1a:e6: a6:34:47:79:aa:9e:96:b6:be:6d:95:de:56:41:83:91:ec:b3: cd:0f:2b:0f:ef:50:1f:95:88:cf:68:b6:57:c8:37:6c:8a:67: 57:03:6b:fd:41:07:37:b9:00:11:d3:1c:d2:e7:84:5c:d6:0b: d7:98:1a:7b:ea:07:3c:e6:cd:3f:ef:c1:49:c4:89:5f:0d:61: df:68:3e:78:af:cb:f9:12:11:ed:23:52:ab:2f:1c:dd:8d:8d: 46:2b:12:15:98:03:ec:e5:e0:f7:2a:a6:75:01:4f:30:a7:16: 11:48:d4:36:e8:ba:0c:1a:4e:bd:20:df:fc:61:b5:d4:85:8f: 06:5a:57:1f:28:bb:ef:6a:c7:3f:fc:0f:78:ef:68:d0:cf:6e: 4d:f4:da:4b -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt/gyyC3Yy7hSytULAqK1FTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZWE2NDllZjYwMzBmYzgwODQ4ZmRmZTIxZDQzMjFhYzgwMTFmZDEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLfz4idIOz56B8E0exZkjdSfz4aU IZd0od8aF5b5O018W19amVgza8q1Wjm+uTsS95dJZJQI+vIYc2cVtsV4luVPNLul tFdla6spfD6BtraSEkGCtbkpMYdm0KoVyKN+l6r07iw6sE6qsl+2xz53LowdnBMd vhVlPIzbNrbKK9dxDoTNb1WCCORS8spDgegof2ndYQKJtMeCiQh5jdMTtWlLpf37 xqT0k0trp2h4s2tR29ow5xUuQCpn1Gxh9KeFvRuQDzgkVAEvQslKnPF/jXoHT49O KN5DXTSZQShfUUWTUdgcQ/GhNL0p1Ep31Wdw7a9InYLWfDnPA8od78G3mwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFL6mSe9gMPyAhI/f4h1DIayAEf0QMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M1LzE5NDU1 Yi1kMmNmLTRlNWYtYmY1OC0yMWRmNTViYTllYmYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzUvMTk0NTVi LWQyY2YtNGU1Zi1iZjU4LTIxZGY1NWJhOWViZi8xL3ZxWko3MkF3X0lDRWo5X2lI VU1ocklBUl9SQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCLVt8MA0EAgACMAcDBQMqDg9AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMu8zANBgkqhkiG9w0BAQsFAAOCAQEAm6HVgajw6Am2 5oUAIDktrgo2llpIkxkl2z1a4OZBRXhXlG8qsFidL2Bjnv+LEugC6mL1wJyy7ES1 bYsEXg9xRgEu+cJNNZpoZyN+DPBvVleZPyqrNLt8zfIcurXzqb4xJ2EvNw3PRN/y dBrmpjRHeaqelra+bZXeVkGDkeyzzQ8rD+9QH5WIz2i2V8g3bIpnVwNr/UEHN7kA EdMc0ueEXNYL15gae+oHPObNP+/BScSJXw1h32g+eK/L+RIR7SNSqy8c3Y2NRisS FZgD7OXg9yqmdQFPMKcWEUjUNui6DBpOvSDf/GG11IWPBlpXHyi772rHP/wPeO9o 0M9uTfTaSw== -----END CERTIFICATE-----Generated at Wed Jan 21 08:57:35 2026 by rpki-client