This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vqe2d3e5poMpM1dkl7RqmxYwTNk.cer File: vqe2d3e5poMpM1dkl7RqmxYwTNk.cer (raw, json) Hash identifier: tQe/oIhAYnmxFpMtarVwPK8wTJxNa4ZY4BRzs74/KRY= Subject key identifier: BE:A7:B6:77:77:B9:A6:83:29:33:57:64:97:B4:6A:9B:16:30:4C:D9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F1440550C5FEDAA47A1F0C113FFF23A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f3/41c111-6505-41a4-9e67-3b91ff9a1acd/1/vqe2d3e5poMpM1dkl7RqmxYwTNk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f3/41c111-6505-41a4-9e67-3b91ff9a1acd/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:19:52 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 197008 IP: 178.251.112.0/21 IP: 185.207.16.0/22 IP: 2a00:ee40::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:40:55:0c:5f:ed:aa:47:a1:f0:c1:13:ff:f2:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:19:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bea7b67777b9a6832933576497b46a9b16304cd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:90:06:18:ab:17:8b:c1:88:89:98:e1:45:f3: 5e:4a:12:1a:03:db:cb:24:a4:21:4d:a1:81:28:5a: 7a:1d:83:e5:db:7e:4a:0a:b9:c5:f4:4f:2e:b5:d1: ec:81:3e:27:26:04:42:5a:f7:a1:42:0e:c6:ab:06: 2a:46:d3:b9:d1:dc:f3:ba:fe:e2:86:53:f5:bf:d6: 0e:f3:83:27:79:4d:4d:8e:5c:c2:d5:56:29:45:9c: fb:70:54:8b:36:e5:8d:e5:cf:09:f6:e2:09:3c:6d: 01:b9:77:b5:c3:c0:ba:da:a3:81:7d:59:f0:19:cd: 18:77:ea:05:3c:56:c2:33:7a:2b:1d:22:b2:4a:0a: 15:05:e1:da:c5:05:d2:ee:ae:75:9c:85:e8:da:68: c5:a8:10:dd:6e:60:d0:d2:db:a8:36:2d:9e:05:c1: ef:17:52:6c:d5:6c:b1:9f:50:62:19:8e:2a:93:3c: 57:8b:f6:1f:7d:99:92:15:4f:5f:c5:e7:3c:af:3f: f6:3c:74:b5:19:fd:57:61:9e:50:06:6f:90:42:1b: 59:c5:f3:11:b6:41:5a:f4:0d:60:32:0a:36:9f:46: 74:6f:6c:06:28:05:29:57:53:bd:80:8d:fa:46:03: e8:31:d5:b1:0d:eb:03:1a:3e:ec:fe:10:c9:55:8a: a1:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:A7:B6:77:77:B9:A6:83:29:33:57:64:97:B4:6A:9B:16:30:4C:D9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/41c111-6505-41a4-9e67-3b91ff9a1acd/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/41c111-6505-41a4-9e67-3b91ff9a1acd/1/vqe2d3e5poMpM1dkl7RqmxYwTNk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.251.112.0/21 185.207.16.0/22 IPv6: 2a00:ee40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 197008 Signature Algorithm: sha256WithRSAEncryption 61:13:12:76:bb:e8:b1:01:9a:65:0d:e7:3e:ce:5a:e1:9a:dc: 7b:56:38:ff:df:58:d2:5e:46:b2:bd:a7:a9:54:7f:f2:3c:9f: be:c8:33:1b:22:f0:7b:7e:2e:ae:83:7d:0d:49:50:cd:97:bd: fc:a6:00:59:6f:6b:44:ad:cf:28:4c:0e:1c:c0:11:2e:32:86: 8d:10:16:ae:30:ab:a7:ea:f1:d1:31:86:42:91:90:1f:76:4c: 7d:23:8b:66:aa:9c:7d:79:c2:b0:6c:92:5e:fa:db:3f:aa:b8: 33:89:21:b5:21:07:45:8f:a0:d1:37:b5:59:77:d7:40:e0:62: b4:e7:69:13:35:02:3d:30:48:55:f7:8e:a4:92:6e:8f:41:aa: f0:ac:ef:a1:36:0e:2b:02:9c:68:90:11:37:4c:30:51:61:22: ee:f9:f6:86:63:f0:e8:a9:b7:14:2b:bf:d7:9d:72:c5:9e:44: 3c:9c:af:ad:50:40:0e:bc:de:9c:c0:8c:66:bc:06:72:64:f3: 61:c2:52:e3:d8:45:60:4c:43:20:65:5c:85:d8:c5:53:33:4b: 1d:8b:6a:af:a7:18:53:a3:2d:8f:6a:b1:dd:88:ab:d5:32:a2: dd:04:6b:56:44:18:e7:dc:98:1a:e6:50:e1:55:f8:83:00:9f: 02:57:f3:39 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt/FEBVDF/tqkeh8MET//I6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQxOTUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZWE3YjY3Nzc3YjlhNjgzMjkzMzU3NjQ5N2I0NmE5YjE2MzA0Y2Q5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5AGGKsXi8GIiZjhRfNeShIaA9vL JKQhTaGBKFp6HYPl235KCrnF9E8utdHsgT4nJgRCWvehQg7GqwYqRtO50dzzuv7i hlP1v9YO84MneU1NjlzC1VYpRZz7cFSLNuWN5c8J9uIJPG0BuXe1w8C62qOBfVnw Gc0Yd+oFPFbCM3orHSKySgoVBeHaxQXS7q51nIXo2mjFqBDdbmDQ0tuoNi2eBcHv F1Js1Wyxn1BiGY4qkzxXi/YffZmSFU9fxec8rz/2PHS1Gf1XYZ5QBm+QQhtZxfMR tkFa9A1gMgo2n0Z0b2wGKAUpV1O9gI36RgPoMdWxDesDGj7s/hDJVYqhaQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFL6ntnd3uaaDKTNXZJe0apsWMEzZMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YzLzQxYzEx MS02NTA1LTQxYTQtOWU2Ny0zYjkxZmY5YTFhY2QvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjMvNDFjMTEx LTY1MDUtNDFhNC05ZTY3LTNiOTFmZjlhMWFjZC8xL3ZxZTJkM2U1cG9NcE0xZGts N1JxbXhZd1ROay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQDsvtwAwQCuc8QMA0EAgACMAcDBQAqAO5AMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMBkDANBgkqhkiG9w0BAQsFAAOCAQEAYRMS drvosQGaZQ3nPs5a4Zrce1Y4/99Y0l5Gsr2nqVR/8jyfvsgzGyLwe34uroN9DUlQ zZe9/KYAWW9rRK3PKEwOHMARLjKGjRAWrjCrp+rx0TGGQpGQH3ZMfSOLZqqcfXnC sGySXvrbP6q4M4khtSEHRY+g0Te1WXfXQOBitOdpEzUCPTBIVfeOpJJuj0Gq8Kzv oTYOKwKcaJARN0wwUWEi7vn2hmPw6Km3FCu/151yxZ5EPJyvrVBADrzenMCMZrwG cmTzYcJS49hFYExDIGVchdjFUzNLHYtqr6cYU6Mtj2qx3Yir1TKi3QRrVkQY59yY GuZQ4VX4gwCfAlfzOQ== -----END CERTIFICATE-----Generated at Mon Feb 9 19:50:48 2026 by rpki-client