This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vx1ZdLTlmcpy3MTawGbXcUIC78k.cer File: vx1ZdLTlmcpy3MTawGbXcUIC78k.cer (raw, json) Hash identifier: h4Ryq9YslHvxQkzJrjIHu+qU6ct9tlwKO9lfhC70pCw= Subject key identifier: BF:1D:59:74:B4:E5:99:CA:72:DC:C4:DA:C0:66:D7:71:42:02:EF:C9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7834E1ABFF2BF9679F45634C37D27FA4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/vx1ZdLTlmcpy3MTawGbXcUIC78k.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:10 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 194.180.204.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:e1:ab:ff:2b:f9:67:9f:45:63:4c:37:d2:7f:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bf1d5974b4e599ca72dcc4dac066d7714202efc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:e5:49:12:54:81:7f:55:88:cb:9a:6a:85:b4: 9e:74:b8:a8:a9:20:fd:9a:10:17:9b:e1:1f:2f:00: 7a:1e:67:da:36:30:d8:55:e8:8b:4e:2f:7c:2f:a5: 69:c0:58:1a:32:87:77:76:61:a4:eb:af:45:87:77: f3:7b:0d:c6:97:c2:c1:4d:32:66:f9:53:8b:a4:50: 86:63:a1:15:fc:93:e5:9f:0f:b1:60:40:5b:85:6f: 35:11:33:9a:58:8e:18:5d:83:57:88:83:c9:cf:37: 26:aa:27:9a:4e:91:02:f1:1d:8e:09:2b:8a:2a:d9: f3:05:f3:9e:df:a7:c0:08:a5:28:a1:56:2b:0b:c7: 1c:55:29:b2:f6:ae:29:51:4b:a6:f5:9f:f4:8b:17: c6:ce:dd:fb:1d:e0:69:d3:7c:84:11:b2:91:2e:cf: ba:bb:09:3e:d6:3c:87:14:dd:f3:0c:22:d9:95:c8: ca:c9:42:a9:0e:3d:1d:11:3c:3b:d4:47:9b:f2:d9: 53:8b:65:a0:97:16:5d:9f:8a:e5:92:68:64:79:7f: 79:c1:42:d0:b7:f6:7c:d3:c7:72:54:b4:d7:3a:51: 96:fa:91:de:f1:5c:aa:3e:37:58:4b:43:9b:d3:d9: d2:c0:5d:38:61:03:85:ca:b1:07:f7:77:7b:99:a0: 90:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:1D:59:74:B4:E5:99:CA:72:DC:C4:DA:C0:66:D7:71:42:02:EF:C9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/vx1ZdLTlmcpy3MTawGbXcUIC78k.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.180.204.0/24 Signature Algorithm: sha256WithRSAEncryption 02:26:4a:8a:3f:40:ce:48:c6:60:bb:60:a8:32:27:07:46:07: 93:05:6f:98:c4:14:1f:3f:ca:eb:7f:8d:bf:ec:11:e0:e5:51: 68:18:c8:0a:0c:2a:e8:59:2c:73:92:16:51:4c:54:6b:70:5d: b2:f0:31:8c:cd:3c:5a:30:a3:3f:5b:53:6e:f3:fb:78:4e:b8: f6:95:2a:87:9f:f6:36:d3:0e:ce:55:14:9a:a5:ad:f3:ee:43: 07:67:a8:ac:8a:ae:c6:51:9b:65:a6:46:24:80:57:2e:fd:e3: 22:3a:a4:e6:d8:a1:4c:67:fd:9d:d5:fe:4c:01:3f:8b:36:fc: a7:69:a4:0c:b2:ae:df:ab:1b:36:84:b6:8f:ac:0c:fa:4a:22: c3:52:1e:14:e2:38:1f:53:ca:9b:bd:98:25:12:f2:85:87:44: 47:b5:74:10:00:a2:2f:a9:db:d1:7d:78:1c:25:66:bb:d2:b6: 55:5d:bb:f6:b9:fe:74:ec:ad:97:d2:1f:77:f7:de:fd:02:10: 09:6f:b0:03:1f:81:70:71:42:ae:20:2e:21:ae:10:a5:88:8e: a3:80:6c:8b:02:ad:99:65:0d:4f:e5:18:ba:f6:4b:60:bc:39: 1e:f4:da:35:98:12:4d:06:df:39:1e:9f:a4:7d:f8:96:61:8f: 1c:4d:89:fc -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt4NOGr/yv5Z59FY0w30n+kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZjFkNTk3NGI0ZTU5OWNhNzJkY2M0ZGFjMDY2ZDc3MTQyMDJlZmM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/OVJElSBf1WIy5pqhbSedLioqSD9 mhAXm+EfLwB6HmfaNjDYVeiLTi98L6VpwFgaMod3dmGk669Fh3fzew3Gl8LBTTJm +VOLpFCGY6EV/JPlnw+xYEBbhW81ETOaWI4YXYNXiIPJzzcmqieaTpEC8R2OCSuK KtnzBfOe36fACKUooVYrC8ccVSmy9q4pUUum9Z/0ixfGzt37HeBp03yEEbKRLs+6 uwk+1jyHFN3zDCLZlcjKyUKpDj0dETw71Eeb8tlTi2WglxZdn4rlkmhkeX95wULQ t/Z808dyVLTXOlGW+pHe8VyqPjdYS0Ob09nSwF04YQOFyrEH93d7maCQSQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFL8dWXS05ZnKctzE2sBm13FCAu/JMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NiLzk0YTA2 Mi04NTEwLTQ0ZDUtOWU0Yi1jMzJhOWEwODVhZTAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2IvOTRhMDYy LTg1MTAtNDRkNS05ZTRiLWMzMmE5YTA4NWFlMC8xL3Z4MVpkTFRsbWNweTNNVGF3 R2JYY1VJQzc4ay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwrTMMA0GCSqGSIb3DQEBCwUAA4IBAQACJkqK P0DOSMZgu2CoMicHRgeTBW+YxBQfP8rrf42/7BHg5VFoGMgKDCroWSxzkhZRTFRr cF2y8DGMzTxaMKM/W1Nu8/t4Trj2lSqHn/Y20w7OVRSapa3z7kMHZ6isiq7GUZtl pkYkgFcu/eMiOqTm2KFMZ/2d1f5MAT+LNvynaaQMsq7fqxs2hLaPrAz6SiLDUh4U 4jgfU8qbvZglEvKFh0RHtXQQAKIvqdvRfXgcJWa70rZVXbv2uf507K2X0h939979 AhAJb7ADH4FwcUKuIC4hrhCliI6jgGyLAq2ZZQ1P5Ri69ktgvDke9No1mBJNBt85 Hp+kffiWYY8cTYn8 -----END CERTIFICATE-----Generated at Mon Jan 26 21:07:21 2026 by rpki-client