This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/V-HUowlen6i5N9f6pDdZNyfSOTI.cer File: V-HUowlen6i5N9f6pDdZNyfSOTI.cer (raw, json) Hash identifier: pd/Z7Q7uAPr5FsHjHYzlZmLJXvSy9Sml7k6jk8sJpjc= Subject key identifier: 57:E1:D4:A3:09:5E:9F:A8:B9:37:D7:FA:A4:37:59:37:27:D2:39:32 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA41FE62CF9A60F957A3D574184DB38 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f5/85626b-cc88-47c2-835e-4d75282ce2eb/1/V-HUowlen6i5N9f6pDdZNyfSOTI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f5/85626b-cc88-47c2-835e-4d75282ce2eb/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:18:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 95.128.155.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:1f:e6:2c:f9:a6:0f:95:7a:3d:57:41:84:db:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=57e1d4a3095e9fa8b937d7faa437593727d23932 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:fa:9c:c5:53:e2:d8:53:05:ad:f6:ca:cc:f5: 0c:df:d9:81:67:a6:5a:95:23:a4:7b:3c:26:d4:5a: c6:fd:74:19:92:85:db:66:8f:ee:6b:50:5e:2a:4d: db:a5:99:cf:e9:39:6f:4c:ce:e1:81:7d:22:83:ba: 5d:cc:34:0a:32:0b:4e:46:7b:88:87:c0:6d:ea:60: 84:cd:e0:4e:84:42:2d:0a:37:90:a3:da:3b:29:0a: d8:6c:77:27:72:34:0f:f3:16:fe:84:a5:a1:5c:8e: 06:75:dd:56:97:1d:6c:15:dd:93:55:c3:d6:30:8c: 56:31:e3:ff:b2:91:67:da:ed:a5:ac:ae:f4:04:a1: 76:89:6b:c3:21:c9:8d:f9:db:4a:1d:9b:dd:4d:bd: b4:83:bb:54:e3:ee:9e:20:8e:8c:f0:2f:ad:5c:9d: d9:b3:af:c0:7e:7a:a8:5d:f4:9d:45:91:e9:6c:f9: 96:62:b1:20:05:79:41:88:32:15:ce:0c:88:3b:96: 66:20:6a:10:c2:9d:16:ba:44:3a:75:90:4c:54:8e: ce:a2:18:45:04:d3:9d:1f:a5:cf:61:af:59:e8:b5: 00:99:10:47:5e:d9:d6:f8:e3:bd:20:fd:52:da:98: 20:9e:c4:61:7b:57:df:3e:82:40:1d:e6:ed:87:29: 35:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:E1:D4:A3:09:5E:9F:A8:B9:37:D7:FA:A4:37:59:37:27:D2:39:32 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/85626b-cc88-47c2-835e-4d75282ce2eb/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/85626b-cc88-47c2-835e-4d75282ce2eb/1/V-HUowlen6i5N9f6pDdZNyfSOTI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.128.155.0/24 Signature Algorithm: sha256WithRSAEncryption 06:73:84:a7:77:e2:16:e6:1b:a6:fe:3d:36:2e:c1:f0:75:1c: a0:d7:b3:63:f4:9b:72:76:30:d6:d0:de:bc:f2:a9:ff:c7:ed: ac:16:a7:67:f8:a6:72:b8:54:26:4d:99:22:f7:7c:e9:e5:14: bc:c6:16:e1:2a:02:e4:34:bb:00:4c:79:d1:b8:6c:d9:00:8d: 86:1b:ad:bb:a8:fb:5f:a3:cb:80:c8:df:97:dd:0d:f9:ce:a7: 4d:d6:7f:37:d7:9b:e8:8d:3a:76:21:4f:7b:54:b1:b4:e0:12: b4:a7:24:2d:e6:cc:92:86:99:c3:b8:d5:5f:96:04:87:6f:c8: ad:9f:d9:3a:11:c0:3b:3b:55:4d:a3:ed:86:a3:ac:6c:4d:91: 63:f1:e9:12:e4:fa:3d:39:11:46:b3:a4:cf:ae:07:78:98:58: 2c:00:63:79:f4:99:90:28:73:ed:d8:d0:a2:f6:28:38:00:46: 4f:5d:e2:ac:6e:a1:8c:f2:63:3a:bb:c2:0e:99:1b:6d:bc:f9: 6b:00:cf:80:6a:d3:ce:dc:cc:01:77:1c:5c:5c:24:55:59:02: 57:da:c5:53:7b:d8:e9:54:30:fd:b6:ed:8e:93:52:a0:0f:02: 09:6f:45:2f:b2:55:02:92:6c:7a:f2:cd:62:ee:35:70:29:91: 19:6c:b4:0d -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt7pB/mLPmmD5V6PVdBhNs4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1N2UxZDRhMzA5NWU5ZmE4YjkzN2Q3ZmFhNDM3NTkzNzI3ZDIzOTMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/qcxVPi2FMFrfbKzPUM39mBZ6Za lSOkezwm1FrG/XQZkoXbZo/ua1BeKk3bpZnP6TlvTM7hgX0ig7pdzDQKMgtORnuI h8Bt6mCEzeBOhEItCjeQo9o7KQrYbHcncjQP8xb+hKWhXI4Gdd1Wlx1sFd2TVcPW MIxWMeP/spFn2u2lrK70BKF2iWvDIcmN+dtKHZvdTb20g7tU4+6eII6M8C+tXJ3Z s6/AfnqoXfSdRZHpbPmWYrEgBXlBiDIVzgyIO5ZmIGoQwp0WukQ6dZBMVI7OohhF BNOdH6XPYa9Z6LUAmRBHXtnW+OO9IP1S2pggnsRhe1ffPoJAHebthyk13QIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFFfh1KMJXp+ouTfX+qQ3WTcn0jkyMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y1Lzg1NjI2 Yi1jYzg4LTQ3YzItODM1ZS00ZDc1MjgyY2UyZWIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjUvODU2MjZi LWNjODgtNDdjMi04MzVlLTRkNzUyODJjZTJlYi8xL1YtSFVvd2xlbjZpNU45ZjZw RGRaTnlmU09USS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAX4CbMA0GCSqGSIb3DQEBCwUAA4IBAQAGc4Sn d+IW5hum/j02LsHwdRyg17Nj9JtydjDW0N688qn/x+2sFqdn+KZyuFQmTZki93zp 5RS8xhbhKgLkNLsATHnRuGzZAI2GG627qPtfo8uAyN+X3Q35zqdN1n8315vojTp2 IU97VLG04BK0pyQt5syShpnDuNVflgSHb8itn9k6EcA7O1VNo+2Go6xsTZFj8ekS 5Po9ORFGs6TPrgd4mFgsAGN59JmQKHPt2NCi9ig4AEZPXeKsbqGM8mM6u8IOmRtt vPlrAM+AatPO3MwBdxxcXCRVWQJX2sVTe9jpVDD9tu2Ok1KgDwIJb0UvslUCkmx6 8s1i7jVwKZEZbLQN -----END CERTIFICATE-----Generated at Mon Jan 26 03:59:27 2026 by rpki-client