This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VNb_E0vWVvDOFNQQsCvsVR62miw.cer File: VNb_E0vWVvDOFNQQsCvsVR62miw.cer (raw, json) Hash identifier: +2ZjNe730PAtopRNHQEB+RZYhuTqcMx9dqe4wFYZwDs= Subject key identifier: 54:D6:FF:13:4B:D6:56:F0:CE:14:D4:10:B0:2B:EC:55:1E:B6:9A:2C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BB1F837EFF4A8A26B794765BBDDBD3165 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/VNb_E0vWVvDOFNQQsCvsVR62miw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Mon 12 Jan 2026 11:29:53 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 35394 AS: 44293 AS: 204557 IP: 45.85.136.0/22 IP: 80.67.44.0/22 IP: 130.185.88.0/21 IP: 185.72.44.0/22 IP: 185.79.36.0/22 IP: 185.87.96.0/22 IP: 185.93.44.0/22 IP: 185.93.152.0/22 IP: 185.143.96.0/22 IP: 185.172.168.0/22 IP: 185.186.28.0/22 IP: 185.196.56.0/22 IP: 185.217.204.0/22 IP: 185.220.44.0/22 IP: 185.236.168.0/22 IP: 185.240.232.0/22 IP: 185.245.176.0/22 IP: 193.27.246.0 -- 193.27.249.255 IP: 193.161.220.0/22 IP: 194.61.16.0/22 IP: 213.217.24.0/22 IP: 2a03:3d60::/29 IP: 2a03:5c20::/32 IP: 2a09:5000::/29 IP: 2a0c:8f80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b1:f8:37:ef:f4:a8:a2:6b:79:47:65:bb:dd:bd:31:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 12 11:29:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=54d6ff134bd656f0ce14d410b02bec551eb69a2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:65:6b:23:fe:50:5e:2c:81:a3:e7:92:f7:56: e8:21:92:8e:5e:61:ab:e9:a0:78:c1:6d:42:ae:a5: ec:a9:4e:38:99:c7:0b:e3:bb:df:fd:d6:12:26:91: 54:7a:04:a2:52:01:9a:0f:f9:e6:c1:e0:2f:45:3c: 9d:11:ba:43:a2:39:e8:7a:83:d5:42:82:11:9b:75: 06:c3:4f:b9:7f:08:86:01:a5:6c:4d:1a:c2:4c:5d: 3a:33:ff:d9:4f:37:d0:e8:dd:7d:62:2e:07:38:94: 90:1b:d5:8c:d4:9e:35:52:0b:00:9f:17:74:08:cc: a1:ef:b7:88:bd:6f:07:be:35:10:29:f6:e2:09:d9: 6a:4a:33:c6:34:f3:3c:72:e2:96:c9:6b:af:9e:50: da:27:08:90:13:11:47:05:d5:04:f0:7b:2d:b2:4b: 69:aa:51:a7:8c:bb:02:67:46:88:35:c6:37:f3:75: a4:4f:2a:0a:4d:5d:eb:13:5b:a3:3d:dc:19:70:56: 66:dc:a0:5a:0f:77:1f:b0:9d:ee:13:21:35:75:cb: 3b:fc:c1:1b:84:5f:52:9e:12:42:41:0f:99:9e:b7: 81:6f:c5:04:da:53:ae:ba:2f:cd:ce:8c:1e:ca:81: 5b:8c:61:7e:2e:50:36:f9:9a:b5:36:3b:ce:c9:1b: 4f:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:D6:FF:13:4B:D6:56:F0:CE:14:D4:10:B0:2B:EC:55:1E:B6:9A:2C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/VNb_E0vWVvDOFNQQsCvsVR62miw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.85.136.0/22 80.67.44.0/22 130.185.88.0/21 185.72.44.0/22 185.79.36.0/22 185.87.96.0/22 185.93.44.0/22 185.93.152.0/22 185.143.96.0/22 185.172.168.0/22 185.186.28.0/22 185.196.56.0/22 185.217.204.0/22 185.220.44.0/22 185.236.168.0/22 185.240.232.0/22 185.245.176.0/22 193.27.246.0-193.27.249.255 193.161.220.0/22 194.61.16.0/22 213.217.24.0/22 IPv6: 2a03:3d60::/29 2a03:5c20::/32 2a09:5000::/29 2a0c:8f80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 35394 44293 204557 Signature Algorithm: sha256WithRSAEncryption 1f:3d:43:ac:ae:1f:f7:dd:32:72:a2:c8:58:85:0d:49:8f:cb: 89:ce:0d:4c:d7:04:d9:32:66:97:09:45:6d:f1:31:ba:30:59: c1:a1:92:65:24:37:54:a7:f8:27:52:63:f1:eb:bf:e6:8e:f5: 9a:80:13:8c:94:40:8e:71:4a:26:6b:da:62:98:3d:c1:4f:c9: af:36:43:68:38:fb:c1:c1:d6:d4:9c:81:a2:b0:13:86:a5:b2: 78:ff:a5:88:33:6b:9d:68:70:0c:c6:92:6e:d2:40:e3:eb:92: 3e:22:09:ae:f0:43:a4:35:51:6d:76:c4:6e:6d:e3:7c:7d:db: a7:a6:fe:4c:77:cb:17:39:ac:a7:d4:c4:40:6b:4e:21:e6:fa: a3:59:1d:41:1e:cf:44:80:15:9e:aa:0b:ab:27:91:36:78:a7: 13:13:f1:12:0b:80:36:50:93:4b:d4:9e:f4:d4:1f:1d:42:f1: ab:79:9a:0f:22:d0:55:e5:4d:66:7a:f5:76:a1:66:8b:67:60: 08:7d:77:55:17:bc:f8:df:df:02:12:3a:18:38:f2:17:74:fe: e9:54:6b:e8:8a:21:68:c8:ee:a6:68:4a:08:96:dc:59:eb:d0: 96:2c:9e:3c:f4:88:f9:ce:30:37:de:80:f8:9d:61:b5:53:8f: 46:e3:f6:31 -----BEGIN CERTIFICATE----- MIIGRzCCBS+gAwIBAgISAZux+Dfv9Kiia3lHZbvdvTFlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTEyMTEyOTUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NGQ2ZmYxMzRiZDY1NmYwY2UxNGQ0MTBiMDJiZWM1NTFlYjY5YTJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2VrI/5QXiyBo+eS91boIZKOXmGr 6aB4wW1CrqXsqU44mccL47vf/dYSJpFUegSiUgGaD/nmweAvRTydEbpDojnoeoPV QoIRm3UGw0+5fwiGAaVsTRrCTF06M//ZTzfQ6N19Yi4HOJSQG9WM1J41UgsAnxd0 CMyh77eIvW8HvjUQKfbiCdlqSjPGNPM8cuKWyWuvnlDaJwiQExFHBdUE8Hstsktp qlGnjLsCZ0aINcY383WkTyoKTV3rE1ujPdwZcFZm3KBaD3cfsJ3uEyE1dcs7/MEb hF9SnhJCQQ+ZnreBb8UE2lOuui/NzoweyoFbjGF+LlA2+Zq1NjvOyRtPjwIDAQAB o4IDUzCCA08wHQYDVR0OBBYEFFTW/xNL1lbwzhTUELAr7FUetposMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YzL2YyMWVl Ny00OTI1LTRkZDYtYjIwMi02NDI3OGMwZDhlYmYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjMvZjIxZWU3 LTQ5MjUtNGRkNi1iMjAyLTY0Mjc4YzBkOGViZi8xL1ZOYl9FMHZXVnZET0ZOUVFz Q3ZzVlI2Mm1pdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIHHBggrBgEF BQcBBwEB/wSBtzCBtDCBjQQCAAEwgYYDBAItVYgDBAJQQywDBAOCuVgDBAK5SCwD BAK5TyQDBAK5V2ADBAK5XSwDBAK5XZgDBAK5j2ADBAK5rKgDBAK5uhwDBAK5xDgD BAK52cwDBAK53CwDBAK57KgDBAK58OgDBAK59bAwDAMEAcEb9gMEAcEb+AMEAsGh 3AMEAsI9EAMEAtXZGDAiBAIAAjAcAwUDKgM9YAMFACoDXCADBQMqCVAAAwUDKgyP gDAkBggrBgEFBQcBCAEB/wQVMBOgETAPAgMAikICAwCtBQIDAx8NMA0GCSqGSIb3 DQEBCwUAA4IBAQAfPUOsrh/33TJyoshYhQ1Jj8uJzg1M1wTZMmaXCUVt8TG6MFnB oZJlJDdUp/gnUmPx67/mjvWagBOMlECOcUoma9pimD3BT8mvNkNoOPvBwdbUnIGi sBOGpbJ4/6WIM2udaHAMxpJu0kDj65I+Igmu8EOkNVFtdsRubeN8fdunpv5Md8sX Oayn1MRAa04h5vqjWR1BHs9EgBWeqgurJ5E2eKcTE/ESC4A2UJNL1J701B8dQvGr eZoPItBV5U1mevV2oWaLZ2AIfXdVF7z4398CEjoYOPIXdP7pVGvoiiFoyO6maEoI ltxZ69CWLJ489Ij5zjA33oD4nWG1U49G4/Yx -----END CERTIFICATE-----Generated at Mon Jan 26 04:45:07 2026 by rpki-client