This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.cer File: vqd2k0PGkfZ1uzaSU8s_b8MEsB8.cer (raw, json) Hash identifier: qJ0oTSkD1tzVpVAEQz7zE25WdDuddK5mTH/RUmBHvCc= Subject key identifier: BE:A7:76:93:43:C6:91:F6:75:BB:36:92:53:CB:3F:6F:C3:04:B0:1F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ED3B0D85C2152B41738D791C449E00 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:19:08 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 200221 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:3b:0d:85:c2:15:2b:41:73:8d:79:1c:44:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bea7769343c691f675bb369253cb3f6fc304b01f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:16:5b:1e:ea:f5:04:27:ed:28:56:78:c1:c6: 7f:63:3b:c9:82:90:88:54:0a:42:09:da:ad:6a:7f: e2:74:5c:3e:c3:f2:45:f4:f5:a0:e4:00:ba:51:06: 4b:92:f9:ec:98:d5:1e:da:89:97:d4:81:28:35:d8: e2:36:58:1b:f2:6b:7e:b6:07:08:09:89:a4:b9:47: 95:c7:44:a1:f9:a5:7a:94:f4:71:0d:fd:92:f7:ba: 19:27:66:41:06:ce:05:bb:0f:4c:b6:8b:3d:a1:4e: 10:cf:0f:64:2e:e0:de:88:74:d7:6f:73:f1:e8:e5: ba:0b:14:7b:34:b3:d8:72:17:02:30:73:36:88:82: 90:53:8b:a8:f8:af:c7:92:9a:46:f0:b2:f9:ba:86: 5c:b1:29:b1:0f:5d:14:62:70:21:90:71:c3:9e:7b: 1d:77:65:cc:d8:3e:6f:0e:84:6e:d2:d6:de:be:7c: 81:e6:a7:b0:ae:7b:f5:e8:f2:d3:a2:a7:d4:9e:ed: 8b:7f:e6:2c:08:19:33:d5:a2:2e:d3:1a:03:b6:32: 62:fe:c5:9c:83:8f:7f:e0:24:6c:ff:ec:06:75:17: d4:0f:1b:6b:54:bf:9a:a1:ff:94:ba:6c:eb:26:16: 66:16:6f:cf:13:b8:42:60:52:82:ea:54:50:d0:08: d1:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:A7:76:93:43:C6:91:F6:75:BB:36:92:53:CB:3F:6F:C3:04:B0:1F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 200221 Signature Algorithm: sha256WithRSAEncryption 0d:e6:c3:44:d9:28:d6:57:81:1e:51:e9:94:be:a3:47:b1:44: c1:24:8b:50:e0:15:d7:83:87:9e:75:57:a9:04:5c:14:ac:80: a7:43:4a:a3:18:43:77:0f:20:66:1a:41:cb:e5:d3:20:e2:26: a1:d2:f4:ef:8c:af:3c:ac:39:36:e3:5c:b5:a5:40:e8:0d:98: 1d:75:d1:b4:11:02:4a:30:72:94:c8:2a:81:fe:ff:5e:8a:d7: 4b:05:b4:f3:ef:60:d8:d5:ee:92:9a:97:f3:50:08:5d:95:fa: 74:2a:1b:57:49:41:2f:21:f0:d3:11:68:1d:c7:6b:10:4e:86: 5b:4b:ca:64:3f:fd:e9:24:fc:ca:ea:55:00:5a:2b:79:cb:8c: f4:0b:c8:1c:83:b9:6a:e9:63:37:1b:4d:8a:28:16:96:15:83: 24:e8:de:b6:b8:20:c8:9b:8b:c5:2a:96:f0:53:9e:5d:23:ac: 3f:7a:07:c7:3e:d7:0e:bf:a7:35:96:b6:ad:89:be:19:3b:94: 16:33:6a:38:f8:1b:42:b4:80:6e:47:53:c2:d4:1e:65:13:ff: 1b:6f:23:14:71:2d:6a:08:db:a6:c4:4a:c3:69:19:86:e9:da: 61:61:fd:d4:48:06:8a:26:c4:2a:32:42:f8:34:57:90:2a:55: bb:3d:7a:56 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt57TsNhcIVK0FzjXkcRJ4AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZWE3NzY5MzQzYzY5MWY2NzViYjM2OTI1M2NiM2Y2ZmMzMDRiMDFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxZbHur1BCftKFZ4wcZ/YzvJgpCI VApCCdqtan/idFw+w/JF9PWg5AC6UQZLkvnsmNUe2omX1IEoNdjiNlgb8mt+tgcI CYmkuUeVx0Sh+aV6lPRxDf2S97oZJ2ZBBs4Fuw9Mtos9oU4Qzw9kLuDeiHTXb3Px 6OW6CxR7NLPYchcCMHM2iIKQU4uo+K/HkppG8LL5uoZcsSmxD10UYnAhkHHDnnsd d2XM2D5vDoRu0tbevnyB5qewrnv16PLToqfUnu2Lf+YsCBkz1aIu0xoDtjJi/sWc g49/4CRs/+wGdRfUDxtrVL+aof+UumzrJhZmFm/PE7hCYFKC6lRQ0AjR8wIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFL6ndpNDxpH2dbs2klPLP2/DBLAfMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY2LzdkOWVh YS1lYzc1LTQyNGUtOWM1ZS1lMjRkNTg4YmIwM2YvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjYvN2Q5ZWFh LWVjNzUtNDI0ZS05YzVlLWUyNGQ1ODhiYjAzZi8xL3ZxZDJrMFBHa2ZaMXV6YVNV OHNfYjhNRXNCOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMOHTANBgkqhkiG9w0BAQsFAAOCAQEADebDRNko1leB HlHplL6jR7FEwSSLUOAV14OHnnVXqQRcFKyAp0NKoxhDdw8gZhpBy+XTIOImodL0 74yvPKw5NuNctaVA6A2YHXXRtBECSjBylMgqgf7/XorXSwW08+9g2NXukpqX81AI XZX6dCobV0lBLyHw0xFoHcdrEE6GW0vKZD/96ST8yupVAForecuM9AvIHIO5aulj NxtNiigWlhWDJOjetrggyJuLxSqW8FOeXSOsP3oHxz7XDr+nNZa2rYm+GTuUFjNq OPgbQrSAbkdTwtQeZRP/G28jFHEtagjbpsRKw2kZhunaYWH91EgGiibEKjJC+DRX kCpVuz16Vg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:51:11 2026 by rpki-client