This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.cer File: VKbEbX2Q_rSnKK8PiuEb-g1PjLE.cer (raw, json) Hash identifier: EnxrlWBS4RcCd/taX6S+30eHNjjK8sYobvprGJwlqQk= Subject key identifier: 54:A6:C4:6D:7D:90:FE:B4:A7:28:AF:0F:8A:E1:1B:FA:0D:4F:8C:B1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB4860A11B0599521138E02CD4EAA1 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:09 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 50716 IP: 87.76.0.0/20 IP: 91.239.16.0/22 IP: 109.197.192.0/21 IP: 176.116.136.0/21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:48:60:a1:1b:05:99:52:11:38:e0:2c:d4:ea:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=54a6c46d7d90feb4a728af0f8ae11bfa0d4f8cb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:a7:2b:a0:51:66:3a:d8:02:f1:ec:fe:fc:10: 65:84:ac:4a:77:dc:2d:28:f5:16:18:8c:4b:07:3e: c1:46:0a:9a:98:d9:0f:7f:d7:60:73:e4:55:e9:bd: 2a:24:3d:e9:6b:7c:1f:4a:d2:27:cf:e7:3d:0b:5d: af:6f:20:95:66:a0:b6:fd:59:30:bb:dc:cc:92:bc: de:0f:00:67:96:e7:54:6d:76:67:7a:d5:87:ef:d3: 07:c7:72:b7:3a:54:01:9e:41:6a:03:64:eb:49:16: 3c:04:e2:3a:5c:62:8c:f2:9c:34:4a:71:49:2e:9e: f4:db:4e:30:44:ee:62:45:46:40:0b:26:70:40:13: b6:bb:50:62:34:c5:f2:d2:4e:e6:38:b3:3c:9c:ee: 80:90:0b:4e:93:62:a3:3e:f4:af:e3:10:61:1c:10: 94:ce:24:f2:85:1f:57:44:f4:ae:bc:6f:12:60:e7: c9:44:3c:81:7e:d2:6b:46:90:05:84:3b:c6:ae:1d: 53:42:f4:e9:15:b8:71:8a:78:de:c4:32:a4:94:be: 2c:16:f4:96:fb:3e:81:ef:03:91:d4:ab:9f:0d:de: 60:37:ae:24:aa:1b:a0:91:dd:57:85:03:cf:55:17: 89:05:6c:7a:e1:ec:3c:55:35:92:98:8c:7b:f8:c6: c9:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:A6:C4:6D:7D:90:FE:B4:A7:28:AF:0F:8A:E1:1B:FA:0D:4F:8C:B1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.76.0.0/20 91.239.16.0/22 109.197.192.0/21 176.116.136.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 50716 Signature Algorithm: sha256WithRSAEncryption a7:52:75:8e:62:b7:6c:64:3e:9f:af:37:c0:a9:74:8b:a8:36: 62:5a:96:ae:a1:2d:70:91:60:25:34:dc:e2:4a:94:c9:00:cc: a6:a3:2b:a0:2a:85:7c:8f:e3:bd:41:cb:42:fc:5f:79:64:3a: 99:33:31:36:66:6b:92:c2:2e:9c:9f:27:5c:54:9d:b2:48:8a: 50:b1:3f:41:53:9a:c9:9b:5a:71:31:37:67:95:a4:43:60:e8: f2:7b:8e:3d:91:71:7d:c8:9a:3f:02:5c:36:95:ec:30:5a:83: c2:61:27:5d:df:b9:a8:1a:20:fa:b0:48:59:a0:be:e4:24:ee: ac:b6:ad:6c:a2:17:ff:df:76:6b:ec:83:84:79:91:4b:73:47: b0:ae:d0:3c:6f:7f:8c:29:35:87:37:ff:4e:8b:1d:64:0c:eb: 3e:08:d5:c2:a3:01:f9:4f:99:2e:59:cc:df:86:ff:c4:3f:52: 92:20:db:01:86:51:e0:35:dc:3b:42:dd:31:6a:c3:da:e4:33: d5:78:99:8c:64:8e:ec:7f:7f:df:52:98:2e:dd:1e:07:fd:ba: 11:ef:95:16:c2:8c:b6:af:71:38:9b:f6:c4:27:be:4f:d3:28: 02:aa:29:b5:95:dd:6c:f5:b9:07:66:6f:e0:5d:14:6a:07:47: e6:c3:bb:fc -----BEGIN CERTIFICATE----- MIIFpjCCBI6gAwIBAgISAZt260hgoRsFmVIROOAs1OqhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NGE2YzQ2ZDdkOTBmZWI0YTcyOGFmMGY4YWUxMWJmYTBkNGY4Y2IxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA66croFFmOtgC8ez+/BBlhKxKd9wt KPUWGIxLBz7BRgqamNkPf9dgc+RV6b0qJD3pa3wfStInz+c9C12vbyCVZqC2/Vkw u9zMkrzeDwBnludUbXZnetWH79MHx3K3OlQBnkFqA2TrSRY8BOI6XGKM8pw0SnFJ Lp70204wRO5iRUZACyZwQBO2u1BiNMXy0k7mOLM8nO6AkAtOk2KjPvSv4xBhHBCU ziTyhR9XRPSuvG8SYOfJRDyBftJrRpAFhDvGrh1TQvTpFbhxinjexDKklL4sFvSW +z6B7wOR1KufDd5gN64kqhugkd1XhQPPVReJBWx64ew8VTWSmIx7+MbJVQIDAQAB o4ICsjCCAq4wHQYDVR0OBBYEFFSmxG19kP60pyivD4rhG/oNT4yxMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZmLzA4OTQ5 Zi1jNzlhLTQ2Y2EtYjUwYi0wZmM5YmZjZDc0YTYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmYvMDg5NDlm LWM3OWEtNDZjYS1iNTBiLTBmYzliZmNkNzRhNi8xL1ZLYkViWDJRX3JTbktLOFBp dUViLWcxUGpMRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDEGCCsGAQUF BwEHAQH/BCIwIDAeBAIAATAYAwQEV0wAAwQCW+8QAwQDbcXAAwQDsHSIMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwDGHDANBgkqhkiG9w0BAQsFAAOCAQEAp1J1jmK3 bGQ+n683wKl0i6g2YlqWrqEtcJFgJTTc4kqUyQDMpqMroCqFfI/jvUHLQvxfeWQ6 mTMxNmZrksIunJ8nXFSdskiKULE/QVOayZtacTE3Z5WkQ2Do8nuOPZFxfciaPwJc NpXsMFqDwmEnXd+5qBog+rBIWaC+5CTurLatbKIX/992a+yDhHmRS3NHsK7QPG9/ jCk1hzf/TosdZAzrPgjVwqMB+U+ZLlnM34b/xD9SkiDbAYZR4DXcO0LdMWrD2uQz 1XiZjGSO7H9/31KYLt0eB/26Ee+VFsKMtq9xOJv2xCe+T9MoAqoptZXdbPW5B2Zv 4F0UagdH5sO7/A== -----END CERTIFICATE-----Generated at Mon Jan 26 03:09:42 2026 by rpki-client