This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.cer File: VC9-qQ0qK0IC5XiyW6E5s8jmKSg.cer (raw, json) Hash identifier: tZsrtgSc+/d491zBonOUTWsJJ4CGTqRDdIu+f9CewjE= Subject key identifier: 54:2F:7E:A9:0D:2A:2B:42:02:E5:78:B2:5B:A1:39:B3:C8:E6:29:28 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA53BE2D70A7028CA685BABF4A23584 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/15/c5e51e-fb41-42e3-be69-ee1e1ded2f9f/1/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/15/c5e51e-fb41-42e3-be69-ee1e1ded2f9f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:18:36 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 35007 IP: 81.30.138.0/23 IP: 91.201.120.0/22 IP: 93.157.112.0/21 IP: 185.6.112.0/22 IP: 185.221.80.0/22 IP: 195.160.184.0/23 IP: 195.225.36.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:3b:e2:d7:0a:70:28:ca:68:5b:ab:f4:a2:35:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=542f7ea90d2a2b4202e578b25ba139b3c8e62928 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:78:30:ba:03:fe:4e:d6:3c:1f:45:c6:ed:0c: cb:7a:b4:67:9c:13:31:7a:47:6f:b6:20:79:b5:29: 67:a9:7f:6c:9c:7b:0c:cf:7e:63:72:01:3a:44:11: 7d:cb:91:5f:36:22:e4:17:0c:da:97:4c:65:8c:7d: 38:e7:37:e3:71:42:f9:e3:13:72:7c:7a:26:01:0f: 3f:25:ac:d4:ce:23:31:f5:78:da:71:ff:5e:df:db: 5d:ee:0f:04:f5:fc:a6:9b:f6:af:91:31:b8:b4:5d: 5d:85:ca:8e:fc:9a:87:6a:20:6d:8d:8c:fa:3d:76: 4e:a9:72:25:1f:be:ed:b9:61:13:0f:4c:0c:0e:e2: 82:dd:64:59:6c:84:09:a7:60:e2:94:69:65:65:26: 0a:d3:04:82:78:ed:51:d2:3b:1b:f3:24:76:7e:7b: c5:06:54:93:a3:bc:f7:e5:4d:81:9c:7d:44:ba:d5: 8b:6a:b0:ae:12:a5:84:6f:1c:96:8d:1c:4d:2b:d0: d0:f3:d7:c9:a8:ac:93:ee:e8:ed:2a:46:ad:11:12: 94:0e:90:53:a5:de:ac:27:fc:44:a8:41:70:25:aa: 94:21:8b:d3:fd:3c:1f:24:0c:d7:81:af:78:11:49: eb:34:51:bc:9c:1e:dd:04:39:4a:d1:33:20:f6:05: 92:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:2F:7E:A9:0D:2A:2B:42:02:E5:78:B2:5B:A1:39:B3:C8:E6:29:28 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c5e51e-fb41-42e3-be69-ee1e1ded2f9f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c5e51e-fb41-42e3-be69-ee1e1ded2f9f/1/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.30.138.0/23 91.201.120.0/22 93.157.112.0/21 185.6.112.0/22 185.221.80.0/22 195.160.184.0/23 195.225.36.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 35007 Signature Algorithm: sha256WithRSAEncryption 30:13:21:27:ae:5a:4c:74:b5:ac:f7:43:a3:e3:ea:e9:3d:c7: bb:3d:5a:65:87:c5:e2:f7:ed:ae:84:e8:c4:88:fe:be:8a:be: e7:dc:b1:5d:16:f7:0a:20:fa:b0:12:56:4a:46:8f:db:3c:8f: 64:87:05:41:3d:1f:53:56:df:bb:ae:18:1b:a8:1a:a4:ac:11: bc:da:72:bd:8b:1c:bd:4c:17:c1:b0:a2:c2:7f:bd:fc:e6:ea: cd:f7:9a:48:61:63:a6:68:76:6d:1c:94:10:0a:2d:5f:dd:e8: 00:2a:bb:48:a6:46:29:20:42:e5:95:e0:67:1a:9f:8e:d5:45: fe:d5:25:91:4c:4d:ab:4c:33:6c:c5:c3:79:3b:e0:42:ce:28: 9a:8f:39:70:51:0a:4a:4f:e9:86:62:a0:66:00:66:27:9f:00: f2:9c:7e:1f:50:f0:41:e2:30:3a:b9:46:ff:c7:44:ff:fa:9c: a4:7a:17:64:04:ca:e3:f7:cf:13:c2:fa:f2:ac:f9:36:4f:5e: e0:7f:24:d1:ed:00:39:55:cc:26:d2:91:b1:eb:4b:d8:47:a7: 48:61:54:7a:44:31:e4:ab:79:1d:22:44:ad:4a:f5:46:49:d8: c1:aa:8e:fe:b9:c3:50:ad:c0:ac:99:31:63:ed:17:e0:b6:b2: 5b:7e:b7:5c -----BEGIN CERTIFICATE----- MIIFuDCCBKCgAwIBAgISAZt+pTvi1wpwKMpoW6v0ojWEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NDJmN2VhOTBkMmEyYjQyMDJlNTc4YjI1YmExMzliM2M4ZTYyOTI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ngwugP+TtY8H0XG7QzLerRnnBMx ekdvtiB5tSlnqX9snHsMz35jcgE6RBF9y5FfNiLkFwzal0xljH045zfjcUL54xNy fHomAQ8/JazUziMx9Xjacf9e39td7g8E9fymm/avkTG4tF1dhcqO/JqHaiBtjYz6 PXZOqXIlH77tuWETD0wMDuKC3WRZbIQJp2DilGllZSYK0wSCeO1R0jsb8yR2fnvF BlSTo7z35U2BnH1EutWLarCuEqWEbxyWjRxNK9DQ89fJqKyT7ujtKkatERKUDpBT pd6sJ/xEqEFwJaqUIYvT/TwfJAzXga94EUnrNFG8nB7dBDlK0TMg9gWSsQIDAQAB o4ICxDCCAsAwHQYDVR0OBBYEFFQvfqkNKitCAuV4sluhObPI5ikoMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE1L2M1ZTUx ZS1mYjQxLTQyZTMtYmU2OS1lZTFlMWRlZDJmOWYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTUvYzVlNTFl LWZiNDEtNDJlMy1iZTY5LWVlMWUxZGVkMmY5Zi8xL1ZDOS1xUTBxSzBJQzVYaXlX NkU1czhqbUtTZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEMGCCsGAQUF BwEHAQH/BDQwMjAwBAIAATAqAwQBUR6KAwQCW8l4AwQDXZ1wAwQCuQZwAwQCud1Q AwQBw6C4AwQBw+EkMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCIvzANBgkqhkiG 9w0BAQsFAAOCAQEAMBMhJ65aTHS1rPdDo+Pq6T3Huz1aZYfF4vftroToxIj+voq+ 59yxXRb3CiD6sBJWSkaP2zyPZIcFQT0fU1bfu64YG6gapKwRvNpyvYscvUwXwbCi wn+9/ObqzfeaSGFjpmh2bRyUEAotX93oACq7SKZGKSBC5ZXgZxqfjtVF/tUlkUxN q0wzbMXDeTvgQs4omo85cFEKSk/phmKgZgBmJ58A8px+H1DwQeIwOrlG/8dE//qc pHoXZATK4/fPE8L68qz5Nk9e4H8k0e0AOVXMJtKRsetL2EenSGFUekQx5Kt5HSJE rUr1RknYwaqO/rnDUK3ArJkxY+0X4LayW363XA== -----END CERTIFICATE-----Generated at Mon Jan 26 11:46:08 2026 by rpki-client