This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vvUlLMrD9twUJrVT8sHHIzrMiUs.cer File: vvUlLMrD9twUJrVT8sHHIzrMiUs.cer (raw, json) Hash identifier: yavyJl0in96OkXy0dK8xH4dlD77SIL59SLDO03+tquY= Subject key identifier: BE:F5:25:2C:CA:C3:F6:DC:14:26:B5:53:F2:C1:C7:23:3A:CC:89:4B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA46D9F7DEE61104497F102E32E7CD5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/vvUlLMrD9twUJrVT8sHHIzrMiUs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:18:52 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 25248 IP: 82.99.128.0/18 IP: 84.244.64.0/18 IP: 85.207.0.0/16 IP: 212.158.128.0/19 IP: 2a02:a40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:6d:9f:7d:ee:61:10:44:97:f1:02:e3:2e:7c:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bef5252ccac3f6dc1426b553f2c1c7233acc894b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:36:25:b1:b7:b7:54:c8:9d:ce:02:f2:a7:19: 75:37:41:2e:9e:69:f9:3a:d1:87:5c:6d:fa:8c:d9: 28:72:55:5c:b5:a5:b5:7a:17:57:20:91:d6:54:be: 0c:fd:a8:c8:aa:9c:56:36:60:1c:93:7f:71:c4:f9: bf:4f:01:dd:ef:dc:ab:c4:0d:1d:6f:bb:98:84:f1: e8:a0:32:68:13:e7:6a:39:d3:0c:69:50:e1:38:f0: 30:da:69:bb:c0:e3:6a:ff:ec:42:5c:a0:d9:2e:1b: 11:6e:5c:9d:f7:6d:c0:86:0a:08:bd:ae:75:91:4a: 9c:ea:cb:6c:1b:57:aa:71:0c:f8:95:79:38:7c:fd: b9:3b:72:2c:7a:fc:fa:48:30:c1:3b:e5:a8:7b:ce: 02:be:fe:ad:f6:e7:db:e4:58:4e:2b:68:e1:53:85: dc:0a:d0:3b:74:fb:8d:ea:05:f1:8e:7e:1a:6a:fa: 18:29:69:2c:0b:c8:76:c3:5d:3f:57:b2:50:ee:8a: ab:35:6e:36:9c:22:56:72:54:72:62:ee:91:61:ff: f2:c0:d1:b5:c2:ee:39:23:b1:a2:02:3d:e0:1d:4a: d3:e5:cb:c4:c7:cc:48:ab:9b:64:ec:9b:f9:5d:43: ed:80:66:f4:d5:f6:43:7b:af:6f:9e:d9:c2:78:83: 3d:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:F5:25:2C:CA:C3:F6:DC:14:26:B5:53:F2:C1:C7:23:3A:CC:89:4B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/vvUlLMrD9twUJrVT8sHHIzrMiUs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.99.128.0/18 84.244.64.0/18 85.207.0.0/16 212.158.128.0/19 IPv6: 2a02:a40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 25248 Signature Algorithm: sha256WithRSAEncryption 51:68:c9:4b:4b:10:85:85:a9:a9:ff:08:fe:6a:ab:16:35:65: 9f:4e:05:f5:86:ad:a4:ad:47:c2:bd:28:a7:f6:24:89:e1:5f: ed:b6:97:9d:15:3d:c2:8a:37:6e:46:07:d6:05:42:e0:12:ae: a2:a8:f7:85:1f:23:7c:8a:c1:c3:86:84:25:e2:d3:65:36:71: f9:ac:77:f8:c3:8c:b1:aa:60:b3:0b:24:5f:ee:dd:81:6c:0d: 70:d5:21:3e:51:73:bc:12:e2:e8:99:7f:68:72:5f:5e:a2:31: 8f:ea:45:05:ec:5f:12:15:89:99:52:1a:7a:1c:15:43:13:e3: 57:96:bc:21:5e:3d:f3:c4:d7:95:49:1a:9d:22:9a:d6:e9:27: dc:28:71:6f:99:82:12:05:2a:0f:73:45:fa:a6:5d:7c:76:ce: 0f:21:3c:45:0c:54:18:9d:c1:ef:84:1a:2e:39:fa:98:ab:61: 1f:79:b2:b4:b6:35:85:b7:f8:4a:4c:05:8e:21:e5:a4:83:30: 21:65:ca:5a:fb:10:43:d1:9b:82:da:86:c4:af:d3:c5:c4:85: 65:78:47:e3:27:65:57:e8:f1:f1:9d:c8:6d:26:ef:12:37:15: 3e:34:23:19:fb:c3:96:3e:37:20:94:6b:9b:d7:3d:12:64:83: fb:7a:23:df -----BEGIN CERTIFICATE----- MIIFszCCBJugAwIBAgISAZt7pG2ffe5hEESX8QLjLnzVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZWY1MjUyY2NhYzNmNmRjMTQyNmI1NTNmMmMxYzcyMzNhY2M4OTRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4DYlsbe3VMidzgLypxl1N0Eunmn5 OtGHXG36jNkoclVctaW1ehdXIJHWVL4M/ajIqpxWNmAck39xxPm/TwHd79yrxA0d b7uYhPHooDJoE+dqOdMMaVDhOPAw2mm7wONq/+xCXKDZLhsRblyd923AhgoIva51 kUqc6stsG1eqcQz4lXk4fP25O3Isevz6SDDBO+Woe84Cvv6t9ufb5FhOK2jhU4Xc CtA7dPuN6gXxjn4aavoYKWksC8h2w10/V7JQ7oqrNW42nCJWclRyYu6RYf/ywNG1 wu45I7GiAj3gHUrT5cvEx8xIq5tk7Jv5XUPtgGb01fZDe69vntnCeIM9OQIDAQAB o4ICvzCCArswHQYDVR0OBBYEFL71JSzKw/bcFCa1U/LBxyM6zIlLMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFlL2U3ZmM5 OC0xMjhhLTQ1M2QtYmRmYi0xMWU1ZjZkMTJlZjEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWUvZTdmYzk4 LTEyOGEtNDUzZC1iZGZiLTExZTVmNmQxMmVmMS8xL3Z2VWxMTXJEOXR3VUpyVlQ4 c0hISXpyTWlVcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMD8GCCsGAQUF BwEHAQH/BDAwLjAdBAIAATAXAwQGUmOAAwQGVPRAAwMAVc8DBAXUnoAwDQQCAAIw BwMFAyoCCkAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICYqAwDQYJKoZIhvcNAQEL BQADggEBAFFoyUtLEIWFqan/CP5qqxY1ZZ9OBfWGraStR8K9KKf2JInhX+22l50V PcKKN25GB9YFQuASrqKo94UfI3yKwcOGhCXi02U2cfmsd/jDjLGqYLMLJF/u3YFs DXDVIT5Rc7wS4uiZf2hyX16iMY/qRQXsXxIViZlSGnocFUMT41eWvCFePfPE15VJ Gp0imtbpJ9wocW+ZghIFKg9zRfqmXXx2zg8hPEUMVBidwe+EGi45+pirYR95srS2 NYW3+EpMBY4h5aSDMCFlylr7EEPRm4LahsSv08XEhWV4R+MnZVfo8fGdyG0m7xI3 FT40Ixn7w5Y+NyCUa5vXPRJkg/t6I98= -----END CERTIFICATE-----Generated at Wed Jan 21 08:57:36 2026 by rpki-client