This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VOYQwqvTZkwRIEWA90iZZVXCIiU.cer File: VOYQwqvTZkwRIEWA90iZZVXCIiU.cer (raw, json) Hash identifier: 7GenieF7aEb9vocCnmIojEkZdWGv3ZKzCDeRu6HMPoU= Subject key identifier: 54:E6:10:C2:AB:D3:66:4C:11:20:45:80:F7:48:99:65:55:C2:22:25 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C803ACC531B004BDCD3C9ACB33B718F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/39/f2033a-20e7-461e-a56b-489ee0f1ee63/1/VOYQwqvTZkwRIEWA90iZZVXCIiU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/39/f2033a-20e7-461e-a56b-489ee0f1ee63/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:18:57 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.0.233.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:3a:cc:53:1b:00:4b:dc:d3:c9:ac:b3:3b:71:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=54e610c2abd3664c11204580f748996555c22225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:40:e0:1d:85:ec:4d:50:8f:4c:13:d7:55:4a: 74:db:89:ee:c9:dc:a4:d7:0e:ad:96:85:33:14:19: f0:64:4f:43:cd:35:49:5c:3d:dc:9f:93:fa:2e:02: 20:fd:89:30:98:b6:3e:e2:39:e4:26:3b:50:36:91: 0f:2b:d3:0b:29:66:6d:15:e5:3d:00:db:88:30:87: 65:36:43:16:41:15:af:ef:ee:ca:3c:01:9d:67:60: 30:5f:ba:1f:0b:ae:80:8b:64:de:e8:76:4a:48:d0: 7b:29:5e:c6:36:0b:84:cb:f5:bb:4e:5b:c2:e6:f0: 8d:1b:c6:5e:24:f5:48:fa:90:3c:d2:71:34:e6:a9: af:04:37:9c:1e:1f:43:a6:ea:0c:9d:75:3d:0f:ee: 94:ae:04:e5:fe:23:e6:7d:1f:53:9b:4d:44:76:3c: 6d:f0:8b:4e:fc:09:d9:c5:4b:8a:08:2c:c5:1a:16: 3e:c9:17:04:a1:d2:dc:e3:0d:5f:85:bd:a8:b0:68: 1a:35:e8:c6:71:60:c3:f6:1a:f1:a8:b0:b1:da:e0: 6c:f3:8e:8b:69:93:3f:d7:ee:3b:f8:6d:36:2d:08: c9:44:a3:11:98:aa:bd:f6:c7:dd:97:c1:e1:97:d2: e2:e1:cf:8f:ea:76:61:ff:44:49:9f:69:fa:6b:c7: 58:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:E6:10:C2:AB:D3:66:4C:11:20:45:80:F7:48:99:65:55:C2:22:25 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f2033a-20e7-461e-a56b-489ee0f1ee63/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f2033a-20e7-461e-a56b-489ee0f1ee63/1/VOYQwqvTZkwRIEWA90iZZVXCIiU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.233.0/24 Signature Algorithm: sha256WithRSAEncryption 30:c1:e9:9b:c2:2f:36:21:10:cb:84:c3:88:53:6b:b1:97:4a: 9b:24:2b:cd:5b:d9:3e:98:f9:b6:37:d7:e6:f9:3e:09:d5:fa: f3:5e:14:5a:e8:e2:49:27:3f:a5:52:1c:ef:eb:f1:bc:cd:c9: a4:41:3d:e0:2e:3b:df:7d:75:62:b0:2b:6a:d8:9b:a4:b8:f6: bf:91:4c:a2:ec:13:5a:1f:eb:10:3f:27:37:ec:ec:63:36:da: eb:29:de:5e:19:45:1a:bc:0f:6c:c8:93:da:d3:e6:ee:7d:04: 17:57:25:d1:11:27:a6:38:93:96:b9:c8:9e:84:f4:1f:2e:c2: 81:ad:45:6f:bb:f5:d9:01:01:a8:ea:62:98:94:f6:ac:a6:9d: a6:13:1d:bf:72:bb:b7:b1:ce:fd:f5:a1:b9:16:97:77:e3:96: 92:11:a9:ee:c2:f7:6b:f9:86:11:37:1b:3a:4e:f6:89:78:96: 82:a1:9d:c5:c0:ca:be:ec:8b:1a:e9:65:b4:dd:b7:60:c3:d5: 02:e5:68:c8:2c:b8:4c:c1:2c:f0:d8:92:fd:f5:1c:99:4c:62: a0:ef:ba:85:4a:26:23:8e:07:ad:72:e0:80:65:70:11:f7:d6: 06:ff:b3:b5:bc:69:7f:95:5a:73:53:31:97:1b:67:f9:09:81: db:3d:97:a1 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt8gDrMUxsAS9zTyayzO3GPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NGU2MTBjMmFiZDM2NjRjMTEyMDQ1ODBmNzQ4OTk2NTU1YzIyMjI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjEDgHYXsTVCPTBPXVUp024nuydyk 1w6tloUzFBnwZE9DzTVJXD3cn5P6LgIg/YkwmLY+4jnkJjtQNpEPK9MLKWZtFeU9 ANuIMIdlNkMWQRWv7+7KPAGdZ2AwX7ofC66Ai2Te6HZKSNB7KV7GNguEy/W7TlvC 5vCNG8ZeJPVI+pA80nE05qmvBDecHh9DpuoMnXU9D+6UrgTl/iPmfR9Tm01Edjxt 8ItO/AnZxUuKCCzFGhY+yRcEodLc4w1fhb2osGgaNejGcWDD9hrxqLCx2uBs846L aZM/1+47+G02LQjJRKMRmKq99sfdl8Hhl9Li4c+P6nZh/0RJn2n6a8dYhwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFFTmEMKr02ZMESBFgPdImWVVwiIlMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM5L2YyMDMz YS0yMGU3LTQ2MWUtYTU2Yi00ODllZTBmMWVlNjMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzkvZjIwMzNh LTIwZTctNDYxZS1hNTZiLTQ4OWVlMGYxZWU2My8xL1ZPWVF3cXZUWmt3UklFV0E5 MGlaWlZYQ0lpVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwQDpMA0GCSqGSIb3DQEBCwUAA4IBAQAwwemb wi82IRDLhMOIU2uxl0qbJCvNW9k+mPm2N9fm+T4J1frzXhRa6OJJJz+lUhzv6/G8 zcmkQT3gLjvffXVisCtq2JukuPa/kUyi7BNaH+sQPyc37OxjNtrrKd5eGUUavA9s yJPa0+bufQQXVyXRESemOJOWuciehPQfLsKBrUVvu/XZAQGo6mKYlPaspp2mEx2/ cru3sc799aG5Fpd345aSEanuwvdr+YYRNxs6TvaJeJaCoZ3FwMq+7Isa6WW03bdg w9UC5WjILLhMwSzw2JL99RyZTGKg77qFSiYjjgetcuCAZXAR99YG/7O1vGl/lVpz UzGXG2f5CYHbPZeh -----END CERTIFICATE-----Generated at Mon Jan 26 11:09:34 2026 by rpki-client