This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vuCpSZdnKpIKKQzL_QSRJvcHXJk.cer File: vuCpSZdnKpIKKQzL_QSRJvcHXJk.cer (raw, json) Hash identifier: zUvmw0k1ONVaqkzeeNd5gbqvF4EWpus4V46n7JigGIg= Subject key identifier: BE:E0:A9:49:97:67:2A:92:0A:29:0C:CB:FD:04:91:26:F7:07:5C:99 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C710D187FE48D76C93C406C3CF1402 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:18:13 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 51876 IP: 45.136.132.0/22 IP: 2a0e:8dc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:10:d1:87:fe:48:d7:6c:93:c4:06:c3:cf:14:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bee0a94997672a920a290ccbfd049126f7075c99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1e:da:ad:50:e4:c1:6e:7d:ee:c5:b8:a8:ce: 6f:38:e5:1c:08:14:3b:07:64:62:25:8d:5c:39:52: 62:54:6b:85:60:23:79:0c:4a:36:3b:4b:7a:99:48: 45:df:32:c7:e1:09:7e:0c:e9:a4:bc:9f:99:80:c7: 3f:44:d4:00:19:0c:a6:39:ae:21:fb:68:f7:b0:92: 1b:8d:f5:b1:f7:88:e0:b4:18:b9:d7:9a:64:f8:b7: 74:91:15:e5:73:dc:b1:28:7f:2b:99:bc:8d:00:75: 63:19:89:ca:8c:6d:78:c6:8e:30:92:46:8d:0d:8c: 5c:a4:d8:8a:23:95:a2:24:b0:18:54:60:6e:5d:e1: 39:ad:e1:6b:3f:54:70:51:b9:0a:6a:79:49:85:01: 0a:50:b0:6a:24:cc:ff:68:c0:3d:0b:b2:7f:4f:5e: 4e:de:ea:bd:2f:3c:df:9c:69:fa:02:fa:b7:3d:fe: 89:d4:98:7f:54:49:2c:19:bd:44:5c:05:8b:fc:38: c0:22:41:bf:ab:91:af:bf:1a:30:3f:5b:f0:fd:1b: c5:e6:c0:21:04:12:b2:24:15:35:11:53:eb:00:f4: 7e:ac:b2:ef:52:d6:6d:ba:b7:8e:9a:85:51:55:97: 90:cf:64:69:2a:9a:8a:26:b7:d0:77:6e:92:19:45: e2:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:E0:A9:49:97:67:2A:92:0A:29:0C:CB:FD:04:91:26:F7:07:5C:99 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.136.132.0/22 IPv6: 2a0e:8dc0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 51876 Signature Algorithm: sha256WithRSAEncryption b1:5d:0a:4c:fa:a9:86:40:1b:c0:c7:45:91:9a:16:1c:41:a0: d9:05:6d:16:1e:ca:a3:4a:bd:d4:7b:79:1e:28:ae:09:5a:76: 52:08:6d:19:42:3a:ff:67:e3:50:54:ee:84:5e:32:40:32:ce: c9:25:7e:da:d9:9b:38:d5:ee:ed:fc:e0:66:88:cc:1a:45:d7: 3b:5b:bc:2d:35:10:af:66:89:93:cf:e7:5b:25:8e:4c:14:c0: a4:56:6f:a3:10:21:16:a2:52:10:00:74:16:b5:b9:6a:aa:bd: 16:34:c3:21:96:c4:1d:5d:8c:b0:33:55:7d:67:f3:a2:b3:65: b4:82:22:4c:e2:14:67:23:79:b2:fc:62:6c:72:6b:89:8c:14: d3:de:2d:cf:55:b6:bf:8c:20:16:fa:56:89:52:93:df:75:74: 18:3a:19:1a:60:3d:33:fc:de:14:11:dc:e3:88:a8:6d:ef:2b: f5:6c:c0:92:04:5f:b5:f2:67:c0:68:77:4e:76:4a:ac:59:38: 73:2f:15:0a:fe:8f:1e:16:08:24:4f:6b:42:c8:a7:83:52:bd: 20:99:d9:c8:79:2d:45:90:78:7a:46:02:d3:50:b5:6e:97:a3: 6a:8a:95:c4:20:e2:0b:25:fe:18:21:14:7c:fa:8c:16:20:88: 31:3e:3d:21 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt3xxDRh/5I12yTxAbDzxQCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZWUwYTk0OTk3NjcyYTkyMGEyOTBjY2JmZDA0OTEyNmY3MDc1Yzk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwB7arVDkwW597sW4qM5vOOUcCBQ7 B2RiJY1cOVJiVGuFYCN5DEo2O0t6mUhF3zLH4Ql+DOmkvJ+ZgMc/RNQAGQymOa4h +2j3sJIbjfWx94jgtBi515pk+Ld0kRXlc9yxKH8rmbyNAHVjGYnKjG14xo4wkkaN DYxcpNiKI5WiJLAYVGBuXeE5reFrP1RwUbkKanlJhQEKULBqJMz/aMA9C7J/T15O 3uq9LzzfnGn6Avq3Pf6J1Jh/VEksGb1EXAWL/DjAIkG/q5GvvxowP1vw/RvF5sAh BBKyJBU1EVPrAPR+rLLvUtZtureOmoVRVZeQz2RpKpqKJrfQd26SGUXiyQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFL7gqUmXZyqSCikMy/0EkSb3B1yZMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U5L2MzZTMy OS0xNWVmLTQyM2EtYmIxMi0zYTYwNjNjZmVhOTUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTkvYzNlMzI5 LTE1ZWYtNDIzYS1iYjEyLTNhNjA2M2NmZWE5NS8xL3Z1Q3BTWmRuS3BJS0tRekxf UVNSSnZjSFhKay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCLYiEMA0EAgACMAcDBQMqDo3AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDKpDANBgkqhkiG9w0BAQsFAAOCAQEAsV0KTPqphkAb wMdFkZoWHEGg2QVtFh7Ko0q91Ht5HiiuCVp2UghtGUI6/2fjUFTuhF4yQDLOySV+ 2tmbONXu7fzgZojMGkXXO1u8LTUQr2aJk8/nWyWOTBTApFZvoxAhFqJSEAB0FrW5 aqq9FjTDIZbEHV2MsDNVfWfzorNltIIiTOIUZyN5svxibHJriYwU094tz1W2v4wg FvpWiVKT33V0GDoZGmA9M/zeFBHc44iobe8r9WzAkgRftfJnwGh3TnZKrFk4cy8V Cv6PHhYIJE9rQsing1K9IJnZyHktRZB4ekYC01C1bpejaoqVxCDiCyX+GCEUfPqM FiCIMT49IQ== -----END CERTIFICATE-----Generated at Mon Feb 9 16:53:03 2026 by rpki-client