This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vwsqDaqOVGfNM-lIJaeGMyLThT4.cer File: vwsqDaqOVGfNM-lIJaeGMyLThT4.cer (raw, json) Hash identifier: 8OWrmCLlW8hFryZgw5SITHUoAxJZkKySZRhRl98k/4M= Subject key identifier: BF:0B:2A:0D:AA:8E:54:67:CD:33:E9:48:25:A7:86:33:22:D3:85:3E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C1254AB854A93E1EDE2CED22E6E0891 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ab/f4478b-b6f3-40c2-b858-2c333a5a1646/1/vwsqDaqOVGfNM-lIJaeGMyLThT4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ab/f4478b-b6f3-40c2-b858-2c333a5a1646/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:18:54 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 203857 IP: 109.175.172.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:54:ab:85:4a:93:e1:ed:e2:ce:d2:2e:6e:08:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bf0b2a0daa8e5467cd33e94825a7863322d3853e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:37:d1:e4:c5:3b:29:96:a6:d4:ad:cc:35:9c: 06:c0:8c:ce:e7:44:fb:30:d9:ad:77:03:21:65:71: 55:7a:7d:09:e1:ff:59:9a:b7:de:78:28:89:50:19: 93:85:7e:74:25:77:f2:38:0d:86:1d:85:5c:8e:f8: da:38:98:4a:4c:63:29:e4:72:d4:0a:4f:98:e4:1a: 05:97:2b:a8:4e:4d:e5:5d:d7:bc:4b:1f:b5:d9:82: c2:09:45:3c:9a:9b:c5:71:db:08:02:70:d1:7b:6d: be:a0:46:1c:21:b1:f5:e4:ae:0c:28:b0:8d:46:77: bb:04:c3:dc:16:bc:2d:52:7e:50:25:29:6a:5a:da: 18:12:3d:95:86:72:af:df:59:6e:ce:3b:b6:21:33: 27:58:72:04:16:4b:15:f0:ee:80:0d:da:2b:ca:64: 24:01:9d:9e:e4:53:06:88:f1:78:6a:a8:ef:94:3e: bd:ed:d0:0c:9b:43:1e:e4:2f:e5:6a:33:ae:42:a9: ef:bb:f8:99:aa:63:4b:6b:ad:b4:5a:41:4a:c3:4e: eb:9a:84:96:5a:5c:81:dd:7d:d9:58:d3:75:14:54: 06:5b:81:0d:c9:77:fd:b1:b4:0e:8e:91:4c:b6:40: 06:29:5e:ad:ea:49:78:19:3f:a3:74:5f:93:ed:04: ed:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:0B:2A:0D:AA:8E:54:67:CD:33:E9:48:25:A7:86:33:22:D3:85:3E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/f4478b-b6f3-40c2-b858-2c333a5a1646/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/f4478b-b6f3-40c2-b858-2c333a5a1646/1/vwsqDaqOVGfNM-lIJaeGMyLThT4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.175.172.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 203857 Signature Algorithm: sha256WithRSAEncryption 8a:84:c6:b2:ed:4e:ab:59:0e:c9:6f:60:8c:8c:a7:69:50:94: f6:c0:5e:b9:34:81:ea:33:34:42:a3:7e:20:2e:41:e3:10:4a: 9c:31:27:59:2c:41:7b:7b:e7:e0:31:9f:b3:8f:7d:5c:66:16: 3c:47:10:05:de:47:72:07:af:46:6d:4e:57:fb:39:69:48:ca: 40:37:a7:b8:84:17:72:aa:f5:03:8f:51:0b:8d:9e:54:7c:0e: 94:8c:4c:4b:85:0d:29:d7:f9:47:01:1b:09:c9:01:75:bb:97: c8:35:df:ef:ec:c2:a9:59:e4:01:f6:bc:89:9c:09:a9:e4:dd: 99:67:6f:c5:44:54:37:eb:e8:d4:87:8c:4b:48:8b:d4:1e:7c: c9:e6:2e:87:6c:19:ac:35:33:6e:0a:ea:0f:e8:b1:c3:5b:6e: 35:f0:98:7c:1e:07:cb:e6:a0:7f:19:9c:12:73:1b:1c:a7:73: f2:1b:eb:85:57:1c:b5:f0:52:d4:df:1a:21:27:f1:5f:42:51: 5b:e9:ec:f2:b6:98:2f:00:27:1c:6f:d0:c2:b6:29:76:99:12: 9b:bd:91:e1:3b:b0:93:a8:81:06:54:4c:3d:04:d6:30:fe:e4: b8:7b:d4:3b:41:e4:bb:9a:13:a4:b2:36:08:58:34:e7:a3:f0: b7:fc:66:8f -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt8ElSrhUqT4e3iztIubgiRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZjBiMmEwZGFhOGU1NDY3Y2QzM2U5NDgyNWE3ODYzMzIyZDM4NTNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTfR5MU7KZam1K3MNZwGwIzO50T7 MNmtdwMhZXFVen0J4f9ZmrfeeCiJUBmThX50JXfyOA2GHYVcjvjaOJhKTGMp5HLU Ck+Y5BoFlyuoTk3lXde8Sx+12YLCCUU8mpvFcdsIAnDRe22+oEYcIbH15K4MKLCN Rne7BMPcFrwtUn5QJSlqWtoYEj2VhnKv31luzju2ITMnWHIEFksV8O6ADdorymQk AZ2e5FMGiPF4aqjvlD697dAMm0Me5C/lajOuQqnvu/iZqmNLa620WkFKw07rmoSW WlyB3X3ZWNN1FFQGW4ENyXf9sbQOjpFMtkAGKV6t6kl4GT+jdF+T7QTtMwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFL8LKg2qjlRnzTPpSCWnhjMi04U+MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FiL2Y0NDc4 Yi1iNmYzLTQwYzItYjg1OC0yYzMzM2E1YTE2NDYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWIvZjQ0Nzhi LWI2ZjMtNDBjMi1iODU4LTJjMzMzYTVhMTY0Ni8xL3Z3c3FEYXFPVkdmTk0tbElK YWVHTXlMVGhUNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAba+sMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMcUTANBgkqhkiG9w0BAQsFAAOCAQEAioTGsu1Oq1kOyW9gjIynaVCU9sBeuTSB 6jM0QqN+IC5B4xBKnDEnWSxBe3vn4DGfs499XGYWPEcQBd5HcgevRm1OV/s5aUjK QDenuIQXcqr1A49RC42eVHwOlIxMS4UNKdf5RwEbCckBdbuXyDXf7+zCqVnkAfa8 iZwJqeTdmWdvxURUN+vo1IeMS0iL1B58yeYuh2wZrDUzbgrqD+ixw1tuNfCYfB4H y+agfxmcEnMbHKdz8hvrhVcctfBS1N8aISfxX0JRW+ns8raYLwAnHG/QwrYpdpkS m72R4Tuwk6iBBlRMPQTWMP7kuHvUO0Hku5oTpLI2CFg056Pwt/xmjw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:47:00 2026 by rpki-client