This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VG3jJt6VIr0pa-1II4XJdpJY2PE.cer File: VG3jJt6VIr0pa-1II4XJdpJY2PE.cer (raw, json) Hash identifier: oSPsLTH7WjAseSKndjgJZsgxb4FWrsyGPbqQjJnMJFY= Subject key identifier: 54:6D:E3:26:DE:95:22:BD:29:6B:ED:48:23:85:C9:76:92:58:D8:F1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B35A1BEFA66814BC5866E2AEB5955F7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:17:51 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 8614 IP: 193.239.64.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:a1:be:fa:66:81:4b:c5:86:6e:2a:eb:59:55:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=546de326de9522bd296bed482385c9769258d8f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:1e:72:dd:67:93:34:bb:d3:f5:27:6c:78:0f: 15:0f:fb:85:46:9c:6c:88:dd:e7:a2:c4:b1:98:68: 17:84:42:dc:78:e9:fa:fb:8f:12:5a:87:dd:e3:8b: 39:b0:54:34:2d:90:2f:5d:70:7a:83:d7:d6:a1:c0: e1:ee:f2:46:2d:54:93:52:1e:b6:f1:3a:9d:01:59: 8f:10:a0:9e:a9:a2:c5:1d:99:cf:53:cc:45:b9:49: c9:bf:10:98:ab:f1:a9:25:92:df:ae:43:72:2b:d4: 01:b5:28:99:8c:f6:63:1e:af:06:af:fa:69:cc:ee: 38:44:06:5e:19:cb:32:9e:f4:d7:c5:c1:df:98:97: e3:91:ad:be:af:f5:4e:cd:0b:ed:f1:64:71:f4:d4: 27:33:14:64:28:7a:c0:c5:96:15:a9:d4:41:39:7d: 5c:a3:6b:2c:00:f6:4a:be:6c:11:d6:da:d4:17:90: 3c:98:ef:5a:32:1c:d6:37:3a:97:96:1c:2a:f8:fb: e4:67:e7:30:87:6b:88:17:54:71:f7:6e:1e:3b:4b: 49:6d:81:01:65:ec:00:7d:0b:2a:b0:d7:e4:58:87: 71:7a:83:3d:6b:87:0d:47:b3:d3:56:f3:d6:f9:36: 51:b8:22:1e:f4:9c:0e:41:cf:5e:f8:c4:7d:67:dc: 65:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:6D:E3:26:DE:95:22:BD:29:6B:ED:48:23:85:C9:76:92:58:D8:F1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.239.64.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 8614 Signature Algorithm: sha256WithRSAEncryption 4e:ea:86:03:81:19:40:57:90:52:cb:11:f7:55:73:f3:0d:60: 65:42:62:d6:46:f9:75:d3:ff:f4:79:25:d8:4f:da:71:17:42: e7:9e:b7:78:89:60:15:1b:b1:39:f6:4a:44:8a:8c:db:28:ca: ac:bc:68:fa:1c:f4:ea:54:3b:f7:0c:84:6b:78:f3:7f:37:d7: 70:97:e0:44:27:ac:d4:04:9d:ef:7a:3d:ef:02:6d:03:34:83: 18:75:37:2e:a5:94:cd:b1:0c:8b:e2:0b:83:66:0e:f4:7a:cb: 57:22:e7:5e:79:e4:e1:55:fd:36:ff:15:77:f0:96:1d:b8:b6: 46:36:80:f0:54:58:37:13:79:fc:74:c5:79:3b:6c:f5:14:52: 0b:5c:7b:a7:e5:0d:63:26:c7:b1:3a:69:e3:71:67:30:c8:99: c9:52:a8:b7:3d:f2:a2:f1:e4:32:47:0a:e8:17:a4:26:6f:10: 3c:5f:61:21:53:d7:3f:90:60:c1:ba:f1:8c:7b:31:a4:88:37: 31:13:84:cb:1d:d9:54:c1:bf:2b:0a:37:2d:78:ed:71:6c:e7: c9:37:d5:25:70:23:4a:2e:d4:f5:9c:48:6d:da:f0:1b:0e:b0: 83:08:76:f9:6a:e3:d7:76:b7:3b:56:fa:fe:8e:27:14:9b:5c: 8f:9d:51:36 -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISAZt7NaG++maBS8WGbirrWVX3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NDZkZTMyNmRlOTUyMmJkMjk2YmVkNDgyMzg1Yzk3NjkyNThkOGYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzx5y3WeTNLvT9SdseA8VD/uFRpxs iN3nosSxmGgXhELceOn6+48SWofd44s5sFQ0LZAvXXB6g9fWocDh7vJGLVSTUh62 8TqdAVmPEKCeqaLFHZnPU8xFuUnJvxCYq/GpJZLfrkNyK9QBtSiZjPZjHq8Gr/pp zO44RAZeGcsynvTXxcHfmJfjka2+r/VOzQvt8WRx9NQnMxRkKHrAxZYVqdRBOX1c o2ssAPZKvmwR1trUF5A8mO9aMhzWNzqXlhwq+PvkZ+cwh2uIF1Rx924eO0tJbYEB ZewAfQsqsNfkWIdxeoM9a4cNR7PTVvPW+TZRuCIe9JwOQc9e+MR9Z9xlBwIDAQAB o4ICnzCCApswHQYDVR0OBBYEFFRt4ybelSK9KWvtSCOFyXaSWNjxMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2MwLzFiYWQ3 ZS1jZjVjLTRkMWMtODY0YS00OTM3NjAxYzhmZWEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzAvMWJhZDdl LWNmNWMtNGQxYy04NjRhLTQ5Mzc2MDFjOGZlYS8xL1ZHM2pKdDZWSXIwcGEtMUlJ NFhKZHBKWTJQRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCwe9AMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQC AiGmMA0GCSqGSIb3DQEBCwUAA4IBAQBO6oYDgRlAV5BSyxH3VXPzDWBlQmLWRvl1 0//0eSXYT9pxF0Lnnrd4iWAVG7E59kpEiozbKMqsvGj6HPTqVDv3DIRrePN/N9dw l+BEJ6zUBJ3vej3vAm0DNIMYdTcupZTNsQyL4guDZg70estXIudeeeThVf02/xV3 8JYduLZGNoDwVFg3E3n8dMV5O2z1FFILXHun5Q1jJsexOmnjcWcwyJnJUqi3PfKi 8eQyRwroF6QmbxA8X2EhU9c/kGDBuvGMezGkiDcxE4TLHdlUwb8rCjcteO1xbOfJ N9UlcCNKLtT1nEht2vAbDrCDCHb5auPXdrc7Vvr+jicUm1yPnVE2 -----END CERTIFICATE-----Generated at Sun Jan 25 23:53:08 2026 by rpki-client