This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VAavgE71pjb0ZOcajUHo1AGn9pc.cer File: VAavgE71pjb0ZOcajUHo1AGn9pc.cer (raw, json) Hash identifier: eJZAm22gKi00I91El9m8FJjH47Q4pNW3jDtmtmsk024= Subject key identifier: 54:06:AF:80:4E:F5:A6:36:F4:64:E7:1A:8D:41:E8:D4:01:A7:F6:97 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C67C55B61AB33361365BFB3CC5E54C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:17:35 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 2.58.104.0/22 IP: 2a09:e7c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:7c:55:b6:1a:b3:33:61:36:5b:fb:3c:c5:e5:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5406af804ef5a636f464e71a8d41e8d401a7f697 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a0:e4:c7:12:5e:6b:27:18:d4:c0:b0:1a:ed: 81:44:dd:79:35:83:b4:a5:b5:93:75:7f:9b:3f:d7: 19:f3:cb:49:7e:19:a1:1f:4a:f3:3c:2d:fa:48:f8: b1:08:19:14:3b:d8:2b:a4:af:79:a1:5b:0a:73:b5: 1f:1e:ba:02:93:52:f7:7a:3a:62:ac:0c:ce:aa:eb: 42:22:aa:7c:a1:30:e8:63:87:c1:60:2d:7f:7f:67: 3c:a3:43:a1:df:cd:c6:f2:23:3e:52:5c:61:ac:28: 9f:b6:9f:1c:39:47:22:2b:e0:21:60:06:c0:7d:d4: 53:fb:ba:20:a4:b3:ad:60:c1:e0:e2:94:11:bf:1f: 94:9d:0e:f9:2f:09:28:15:41:ae:87:b2:40:42:58: 54:53:3e:ca:2c:45:5e:a1:02:31:32:fe:80:ec:a2: eb:fc:27:2f:6c:32:f2:f9:0b:6b:f5:40:bd:1b:6b: b6:b3:f2:d3:83:64:fe:7a:31:af:e6:cc:cd:f0:74: 23:a7:00:ac:3c:2e:71:5e:3e:c0:f9:90:9a:ef:8d: 63:8e:d3:c3:e6:51:d9:2c:37:29:7f:f0:68:44:4e: 04:f6:43:26:14:16:17:e7:ce:4c:de:c2:27:3e:03: 54:f2:94:c7:ef:5d:9d:8f:00:e8:1f:5b:ec:2d:a3: 22:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:06:AF:80:4E:F5:A6:36:F4:64:E7:1A:8D:41:E8:D4:01:A7:F6:97 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.58.104.0/22 IPv6: 2a09:e7c0::/29 Signature Algorithm: sha256WithRSAEncryption 08:b2:2f:b6:51:b3:b3:c6:ff:2d:c0:d0:e1:27:b2:f1:cf:d5: 65:2b:71:76:b1:a7:b1:ee:b9:79:6c:c1:da:2e:dc:21:eb:b7: b8:80:f0:52:5e:fa:b1:9e:18:0b:33:e6:56:ba:7e:81:5a:0f: bf:d9:73:ca:82:d6:a8:3d:4e:02:35:c8:00:64:6d:d5:04:04: 7c:66:51:ae:bf:39:f9:e6:2b:d3:18:67:da:d7:f3:fa:61:ce: 7a:f6:57:2b:c1:65:5d:35:a9:b1:e3:18:2f:21:8c:c9:1c:e4: 29:07:4d:41:65:b5:e3:18:ef:07:01:b0:d0:bf:5d:b8:d9:90: 10:d6:21:21:ea:ac:2b:31:06:f1:84:de:43:4f:c1:82:47:ca: bd:3d:a1:7f:a8:f6:e4:49:90:25:77:48:a0:8c:04:0c:31:17: d8:e5:1f:25:8a:92:7d:50:e8:9e:1a:31:bc:e4:08:c3:1b:fc: 2c:31:2f:bf:6d:09:c7:b0:4e:a0:d1:68:65:bf:6e:a5:00:83: 1b:b0:24:a6:7a:4b:81:af:62:1c:da:9c:f0:bc:3d:89:c7:db: 2b:62:42:05:3d:0e:95:42:b9:5b:e1:e4:db:ff:85:e7:0e:68: 9c:c2:d8:66:a9:6c:9c:99:1a:68:4d:21:6e:b5:46:e8:3e:10: be:5e:80:84 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt3xnxVthqzM2E2W/s8xeVMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NDA2YWY4MDRlZjVhNjM2ZjQ2NGU3MWE4ZDQxZThkNDAxYTdmNjk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKDkxxJeaycY1MCwGu2BRN15NYO0 pbWTdX+bP9cZ88tJfhmhH0rzPC36SPixCBkUO9grpK95oVsKc7UfHroCk1L3ejpi rAzOqutCIqp8oTDoY4fBYC1/f2c8o0Oh383G8iM+UlxhrCiftp8cOUciK+AhYAbA fdRT+7ogpLOtYMHg4pQRvx+UnQ75LwkoFUGuh7JAQlhUUz7KLEVeoQIxMv6A7KLr /CcvbDLy+Qtr9UC9G2u2s/LTg2T+ejGv5szN8HQjpwCsPC5xXj7A+ZCa741jjtPD 5lHZLDcpf/BoRE4E9kMmFBYX585M3sInPgNU8pTH712djwDoH1vsLaMiXQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFFQGr4BO9aY29GTnGo1B6NQBp/aXMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZiLzM1Y2I1 Yy05M2E1LTRiZjEtYmExZC0xY2E5ZDI1OWUyYWQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmIvMzVjYjVj LTkzYTUtNGJmMS1iYTFkLTFjYTlkMjU5ZTJhZC8xL1ZBYXZnRTcxcGpiMFpPY2Fq VUhvMUFHbjlwYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCAjpoMA0EAgACMAcDBQMqCefAMA0GCSqGSIb3 DQEBCwUAA4IBAQAIsi+2UbOzxv8twNDhJ7Lxz9VlK3F2saex7rl5bMHaLtwh67e4 gPBSXvqxnhgLM+ZWun6BWg+/2XPKgtaoPU4CNcgAZG3VBAR8ZlGuvzn55ivTGGfa 1/P6Yc569lcrwWVdNamx4xgvIYzJHOQpB01BZbXjGO8HAbDQv1242ZAQ1iEh6qwr MQbxhN5DT8GCR8q9PaF/qPbkSZAld0igjAQMMRfY5R8lipJ9UOieGjG85AjDG/ws MS+/bQnHsE6g0Whlv26lAIMbsCSmekuBr2Ic2pzwvD2Jx9srYkIFPQ6VQrlb4eTb /4XnDmicwthmqWycmRpoTSFutUboPhC+XoCE -----END CERTIFICATE-----Generated at Sun Jan 25 21:38:57 2026 by rpki-client