This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VAPl-EBdYIW430v84d2bs-eMIZk.cer File: VAPl-EBdYIW430v84d2bs-eMIZk.cer (raw, json) Hash identifier: sFQP24/iscFEM9n9XLqLWrfpTAM/Z9kupbjD1eZ6s40= Subject key identifier: 54:03:E5:F8:40:5D:60:85:B8:DF:4B:FC:E1:DD:9B:B3:E7:8C:21:99 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCAACA211A728EBFEEF99E01C3CB30B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/VAPl-EBdYIW430v84d2bs-eMIZk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:19:53 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 213023 IP: 185.189.180.0/23 IP: 2a0b:f380::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:ac:a2:11:a7:28:eb:fe:ef:99:e0:1c:3c:b3:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:19:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5403e5f8405d6085b8df4bfce1dd9bb3e78c2199 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:ac:c0:f8:1a:58:da:f8:99:72:e4:ea:7a:09: e7:22:ee:68:74:92:35:74:40:34:c2:ed:46:03:35: c1:2c:c8:2d:0a:09:92:43:cd:4c:ac:49:c9:5f:d4: 62:c2:46:32:b6:07:35:ad:c5:e2:65:87:8c:ff:c4: 31:d8:81:13:22:e1:a9:27:68:be:fb:96:b1:47:0c: 64:b3:b3:04:61:ab:00:14:54:31:4e:0e:3b:af:08: 23:3b:22:6c:ef:21:01:be:cb:d9:77:de:5d:7c:f6: d5:ee:dd:56:c8:d7:f8:f0:a4:a1:38:86:37:8e:02: 71:44:59:19:9d:31:1e:86:72:9f:58:a1:1e:aa:6a: 29:17:8e:81:a5:9a:3f:e7:7a:4c:8a:31:60:51:76: 92:d4:bb:24:e8:f1:44:b7:8b:e6:ee:67:6b:87:19: ff:6c:8a:67:76:c5:f6:3c:0c:49:03:dc:50:ce:50: e5:55:d4:a2:77:cd:2f:e8:03:64:d8:e4:a8:40:9b: 9a:38:3d:16:17:c1:30:54:37:9f:db:d1:b5:ec:ee: ff:8d:ce:d1:ee:e0:87:3a:a7:67:e0:ef:81:75:43: 52:38:12:34:7c:47:2d:c8:b7:75:33:f3:37:83:d8: ff:2d:fe:61:76:e6:2c:3a:e4:00:cb:f6:44:57:56: 45:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:03:E5:F8:40:5D:60:85:B8:DF:4B:FC:E1:DD:9B:B3:E7:8C:21:99 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/VAPl-EBdYIW430v84d2bs-eMIZk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.189.180.0/23 IPv6: 2a0b:f380::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 213023 Signature Algorithm: sha256WithRSAEncryption b0:f7:eb:ce:1c:83:1a:37:c4:f9:c0:69:3e:51:bf:96:1b:4b: 4c:51:7f:c2:27:ef:56:21:59:d8:e1:3a:04:39:ca:53:e3:e0: 69:26:23:f9:31:91:81:62:05:97:3b:ad:a1:61:8e:71:63:b9: 07:fd:32:df:44:60:3e:8a:9c:a8:e1:1a:f9:62:28:f2:5d:e5: 7d:35:c4:44:95:30:62:63:51:20:21:1e:7b:bd:0a:8b:18:db: 5b:83:c0:42:0d:e7:0f:64:3b:bf:e6:d4:c5:77:6d:27:72:f7: 31:c7:26:3e:d2:b1:46:62:00:dc:01:96:d1:35:ee:3f:b2:15: b7:5a:1b:88:d1:7a:22:ef:0e:d4:ac:e6:d2:a0:46:43:36:b9: d2:ee:8e:35:97:07:f8:63:54:a1:a4:1e:0e:6f:12:05:ec:f0: d7:fb:5c:98:b6:ce:ea:99:99:81:fe:0d:47:09:58:ad:cc:76: 07:92:ef:72:00:87:f7:5b:ef:e0:30:04:7b:6c:bc:ac:75:af: 97:e5:82:b6:79:f4:52:c9:dc:ce:fe:db:6f:1f:83:a0:c1:87: 16:18:7a:29:bf:86:bb:35:2b:ea:1d:37:45:28:70:e7:63:c3: 66:79:57:be:2e:5b:61:d5:40:be:96:6e:10:41:dd:7b:87:db: a8:c0:56:30 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt9yqyiEaco6/7vmeAcPLMLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxOTUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NDAzZTVmODQwNWQ2MDg1YjhkZjRiZmNlMWRkOWJiM2U3OGMyMTk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5KzA+BpY2viZcuTqegnnIu5odJI1 dEA0wu1GAzXBLMgtCgmSQ81MrEnJX9RiwkYytgc1rcXiZYeM/8Qx2IETIuGpJ2i+ +5axRwxks7MEYasAFFQxTg47rwgjOyJs7yEBvsvZd95dfPbV7t1WyNf48KShOIY3 jgJxRFkZnTEehnKfWKEeqmopF46BpZo/53pMijFgUXaS1Lsk6PFEt4vm7mdrhxn/ bIpndsX2PAxJA9xQzlDlVdSid80v6ANk2OSoQJuaOD0WF8EwVDef29G17O7/jc7R 7uCHOqdn4O+BdUNSOBI0fEctyLd1M/M3g9j/Lf5hduYsOuQAy/ZEV1ZFeQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFFQD5fhAXWCFuN9L/OHdm7PnjCGZMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY3L2FlZThk OS0yMWVkLTRkYjctYmQ3MC0xNWE0MmFjOWVmYTgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjcvYWVlOGQ5 LTIxZWQtNGRiNy1iZDcwLTE1YTQyYWM5ZWZhOC8xL1ZBUGwtRUJkWUlXNDMwdjg0 ZDJicy1lTUlaay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQBub20MA0EAgACMAcDBQMqC/OAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNAHzANBgkqhkiG9w0BAQsFAAOCAQEAsPfrzhyDGjfE +cBpPlG/lhtLTFF/wifvViFZ2OE6BDnKU+PgaSYj+TGRgWIFlzutoWGOcWO5B/0y 30RgPoqcqOEa+WIo8l3lfTXERJUwYmNRICEee70KixjbW4PAQg3nD2Q7v+bUxXdt J3L3MccmPtKxRmIA3AGW0TXuP7IVt1obiNF6Iu8O1Kzm0qBGQza50u6ONZcH+GNU oaQeDm8SBezw1/tcmLbO6pmZgf4NRwlYrcx2B5LvcgCH91vv4DAEe2y8rHWvl+WC tnn0Usnczv7bbx+DoMGHFhh6Kb+GuzUr6h03RShw52PDZnlXvi5bYdVAvpZuEEHd e4fbqMBWMA== -----END CERTIFICATE-----Generated at Sun Jan 25 22:32:54 2026 by rpki-client