This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/V2cFtVe4IwhralMjJL-7o2mVyxw.cer File: V2cFtVe4IwhralMjJL-7o2mVyxw.cer (raw, json) Hash identifier: LejW9BdKN4ypfpnxLNWAn5tXXZEgkmeJDbjkEhjYfEc= Subject key identifier: 57:67:05:B5:57:B8:23:08:6B:6A:53:23:24:BF:BB:A3:69:95:CB:1C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC89BAE9CA8794DAA51C10C91B5569A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cd/7d7e1d-33c0-4342-b259-a7bf3bf902d8/1/V2cFtVe4IwhralMjJL-7o2mVyxw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cd/7d7e1d-33c0-4342-b259-a7bf3bf902d8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:18:46 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 214098 IP: 185.56.161.0/24 IP: 2a07:5c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:9b:ae:9c:a8:79:4d:aa:51:c1:0c:91:b5:56:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=576705b557b823086b6a532324bfbba36995cb1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:41:81:42:99:0c:da:1f:b0:f5:31:61:ab:4a: a6:ed:69:80:d6:e1:15:0e:ea:e1:77:94:94:c8:88: 52:62:2b:b0:04:03:79:28:56:22:12:58:c2:a7:54: 1e:1c:df:ed:d1:bf:6e:f5:d6:1c:69:a4:cf:86:8a: e0:8d:63:3a:d1:b6:d1:e4:9a:c8:74:e3:c6:1b:57: a0:75:9b:83:43:dc:fe:fd:83:3e:0c:0f:f4:c0:79: d7:2a:99:ae:b9:cb:47:53:7a:29:5d:48:21:1f:76: 8b:bb:b4:77:4a:66:6c:ff:07:f7:9b:97:93:38:7e: 97:9a:c6:8f:1f:9f:f5:5b:a5:32:57:ca:76:5d:71: 00:00:49:a9:40:d1:f9:fa:34:5d:f2:00:6a:2b:a6: ea:4b:a1:40:07:ef:0a:63:43:ed:51:df:e6:44:1a: 0d:ea:bb:30:15:a1:c3:04:0f:0f:d2:ea:2d:3b:25: eb:f2:58:6e:c4:b9:a2:47:10:bb:52:d9:f1:df:18: ba:ca:a8:e1:2d:4a:ec:34:da:5b:23:0b:67:21:ce: 52:f6:00:a4:dd:92:87:f8:18:87:c9:35:e1:9b:e4: fe:a5:68:5c:8e:84:e7:8f:d2:20:c8:21:65:8c:1a: d9:0b:07:e7:ef:f3:a1:3f:49:f0:0c:71:39:ce:5a: c9:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:67:05:B5:57:B8:23:08:6B:6A:53:23:24:BF:BB:A3:69:95:CB:1C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/7d7e1d-33c0-4342-b259-a7bf3bf902d8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/7d7e1d-33c0-4342-b259-a7bf3bf902d8/1/V2cFtVe4IwhralMjJL-7o2mVyxw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.56.161.0/24 IPv6: 2a07:5c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 214098 Signature Algorithm: sha256WithRSAEncryption 31:52:bf:df:c4:f3:d3:5f:4d:38:4a:90:5b:f6:78:aa:87:f9: 95:83:ba:0f:dd:e5:0e:28:d3:cf:68:4c:be:48:f6:70:fe:59: 66:6d:f3:40:0d:af:56:29:49:73:77:48:5e:82:a4:e9:b6:e1: ca:6a:a4:b1:25:57:42:a5:ce:43:39:88:d1:4c:db:d5:b4:53: 20:69:98:8d:a7:22:0b:51:2a:6a:2b:e9:be:44:5f:bd:a8:a9: b0:63:03:45:bd:44:b1:25:0d:8e:83:81:46:02:4e:43:d6:ab: 65:c0:90:76:c6:2b:09:a2:0a:07:e9:a6:13:ef:77:2f:c2:d2: 3d:88:a7:03:f5:07:b5:b0:e3:d6:45:88:44:51:e3:2e:25:ee: 03:70:13:df:36:9e:3d:d0:f8:da:c4:66:88:55:33:fa:24:5b: ab:0d:e5:2b:e1:50:20:96:49:ed:7e:fe:40:76:ad:58:3a:e7: 31:22:a1:4c:62:60:68:bb:9c:52:da:0a:e9:9c:2e:03:68:61: 2d:eb:d6:68:97:d2:f5:4a:3d:f1:96:84:12:2e:54:3e:d5:be: d9:e1:e0:7c:97:7a:fd:1a:49:0f:e6:36:b7:cb:49:1a:e9:9b: 21:c5:2a:1d:0c:a2:27:88:ee:68:e7:5d:dd:41:76:03:16:a6: a8:c9:21:a9 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt6yJuunKh5TapRwQyRtVaaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NzY3MDViNTU3YjgyMzA4NmI2YTUzMjMyNGJmYmJhMzY5OTVjYjFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4kGBQpkM2h+w9TFhq0qm7WmA1uEV Durhd5SUyIhSYiuwBAN5KFYiEljCp1QeHN/t0b9u9dYcaaTPhorgjWM60bbR5JrI dOPGG1egdZuDQ9z+/YM+DA/0wHnXKpmuuctHU3opXUghH3aLu7R3SmZs/wf3m5eT OH6XmsaPH5/1W6UyV8p2XXEAAEmpQNH5+jRd8gBqK6bqS6FAB+8KY0PtUd/mRBoN 6rswFaHDBA8P0uotOyXr8lhuxLmiRxC7Utnx3xi6yqjhLUrsNNpbIwtnIc5S9gCk 3ZKH+BiHyTXhm+T+pWhcjoTnj9IgyCFljBrZCwfn7/OhP0nwDHE5zlrJIQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFFdnBbVXuCMIa2pTIyS/u6NplcscMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NkLzdkN2Ux ZC0zM2MwLTQzNDItYjI1OS1hN2JmM2JmOTAyZDgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2QvN2Q3ZTFk LTMzYzAtNDM0Mi1iMjU5LWE3YmYzYmY5MDJkOC8xL1YyY0Z0VmU0SXdocmFsTWpK TC03bzJtVnl4dy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAuTihMA0EAgACMAcDBQMqBwXAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNEUjANBgkqhkiG9w0BAQsFAAOCAQEAMVK/38Tz019N OEqQW/Z4qof5lYO6D93lDijTz2hMvkj2cP5ZZm3zQA2vVilJc3dIXoKk6bbhymqk sSVXQqXOQzmI0Uzb1bRTIGmYjaciC1EqaivpvkRfvaipsGMDRb1EsSUNjoOBRgJO Q9arZcCQdsYrCaIKB+mmE+93L8LSPYinA/UHtbDj1kWIRFHjLiXuA3AT3zaePdD4 2sRmiFUz+iRbqw3lK+FQIJZJ7X7+QHatWDrnMSKhTGJgaLucUtoK6ZwuA2hhLevW aJfS9Uo98ZaEEi5UPtW+2eHgfJd6/RpJD+Y2t8tJGumbIcUqHQyiJ4juaOdd3UF2 AxamqMkhqQ== -----END CERTIFICATE-----Generated at Sun Jan 25 23:35:18 2026 by rpki-client