This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VQt8DIuuYQ9-UZwEhaR3O860jas.cer File: VQt8DIuuYQ9-UZwEhaR3O860jas.cer (raw, json) Hash identifier: MmTXAbRo3d+7wBB/YIdRmfYiaHxavXVfiNQgy+SpPnM= Subject key identifier: 55:0B:7C:0C:8B:AE:61:0F:7E:51:9C:04:85:A4:77:3B:CE:B4:8D:AB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C7FEC509D428D34912A99768958A1E9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6a/aedb03-b04c-4212-813b-ff25ba599031/1/VQt8DIuuYQ9-UZwEhaR3O860jas.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6a/aedb03-b04c-4212-813b-ff25ba599031/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:18:36 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 34619 AS: 42807 IP: 5.253.140.0/22 IP: 31.207.80.0/21 IP: 37.148.208.0/21 IP: 37.230.104.0/21 IP: 80.253.240.0/22 IP: 85.159.64.0/21 IP: 88.218.128.0/22 IP: 89.19.0.0/19 IP: 92.119.76.0/22 IP: 94.73.128.0/18 IP: 94.199.200.0/21 IP: 109.232.216.0/21 IP: 141.98.204.0/22 IP: 152.89.36.0/22 IP: 171.22.184.0/22 IP: 178.157.8.0/21 IP: 185.15.40.0/22 IP: 185.22.184.0/22 IP: 185.99.196.0/22 IP: 213.159.0.0/21 IP: 213.159.28.0/22 IP: 2a03:adc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:ec:50:9d:42:8d:34:91:2a:99:76:89:58:a1:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=550b7c0c8bae610f7e519c0485a4773bceb48dab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:3c:bf:1c:d2:dd:d0:a3:59:ba:77:ae:0c:62: 93:af:9d:3a:99:d9:9a:b6:0f:f7:f1:cd:fb:4b:5f: e7:77:ee:0f:4c:89:06:b8:4c:7d:e6:3b:2d:69:9a: dc:e8:56:c2:52:1e:4c:ec:9f:75:46:94:00:ec:08: da:09:07:72:bd:82:d4:29:5f:e8:39:2e:5b:38:e6: 3b:bc:da:2a:59:8e:d0:26:f1:38:f4:59:92:45:73: 5c:2d:0f:54:f1:05:ad:5a:ad:8c:d5:cf:bb:2d:a7: dd:fd:4e:98:b4:4e:41:bf:7d:3e:62:8e:dd:96:fa: e1:ea:ea:1f:52:3a:ed:8a:e5:60:a6:f5:c9:07:5b: be:91:93:dc:08:df:d9:50:40:72:ed:27:8a:bf:0c: bf:74:dc:ec:1f:a8:23:e6:07:2c:2f:97:ba:2d:a8: f2:9f:40:61:b2:32:50:12:7d:8f:1d:ab:de:4f:f9: 9a:b0:73:4c:1b:3e:e2:fc:27:c5:5e:91:d5:b1:c1: c6:d7:83:07:f1:6d:a3:08:29:ff:50:78:01:73:50: 3c:3c:28:94:72:ff:92:c7:f3:00:af:2d:ff:2a:22: 87:73:f3:b9:0f:4c:42:15:09:30:ff:89:b6:4d:1a: 55:a5:0f:82:3e:08:9d:0a:2e:87:83:f7:f0:87:7b: 48:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:0B:7C:0C:8B:AE:61:0F:7E:51:9C:04:85:A4:77:3B:CE:B4:8D:AB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/aedb03-b04c-4212-813b-ff25ba599031/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/aedb03-b04c-4212-813b-ff25ba599031/1/VQt8DIuuYQ9-UZwEhaR3O860jas.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.253.140.0/22 31.207.80.0/21 37.148.208.0/21 37.230.104.0/21 80.253.240.0/22 85.159.64.0/21 88.218.128.0/22 89.19.0.0/19 92.119.76.0/22 94.73.128.0/18 94.199.200.0/21 109.232.216.0/21 141.98.204.0/22 152.89.36.0/22 171.22.184.0/22 178.157.8.0/21 185.15.40.0/22 185.22.184.0/22 185.99.196.0/22 213.159.0.0/21 213.159.28.0/22 IPv6: 2a03:adc0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 34619 42807 Signature Algorithm: sha256WithRSAEncryption 79:f2:79:a1:b2:10:81:af:ff:e8:57:08:b5:64:5b:ab:af:c9: a9:26:9c:41:47:cb:90:c3:a9:76:47:5e:e5:30:71:bd:1d:cf: a3:3b:bd:df:70:35:7f:5c:eb:a0:1d:ad:64:f0:25:54:e2:c5: 49:82:17:f1:3f:9d:97:3d:54:98:42:6f:79:8c:49:53:98:e4: cb:61:f3:07:e9:4e:d9:0f:41:6e:e0:63:47:ef:40:1b:94:ba: 35:28:0d:dd:2a:12:03:33:06:a5:57:f9:d5:d3:8c:22:a2:93: ee:cd:2d:92:70:96:a9:8a:65:4f:97:3e:30:43:c3:76:0d:12: 6f:07:c8:50:a2:50:74:62:ec:0c:60:2f:7b:70:48:98:51:66: 8f:38:90:b7:53:26:24:41:e9:f4:c5:57:95:48:70:8f:c6:e8: 4e:b0:07:ff:7e:6b:b9:db:09:e0:23:17:f7:e2:44:cf:ba:c6: 3c:e0:51:3c:d4:0f:03:aa:fa:d5:93:52:61:38:53:56:d8:57: 55:a7:c8:32:fc:c9:f4:4f:44:bd:84:83:40:a4:b0:ea:f2:8f: b4:e3:22:e0:fd:8e:e8:aa:8e:53:50:bb:45:bf:ac:02:ed:fa: 1a:ab:68:58:ee:8e:fd:c4:31:3e:8e:7d:50:3a:1a:60:14:29: 0e:22:51:2b -----BEGIN CERTIFICATE----- MIIGJDCCBQygAwIBAgISAZt8f+xQnUKNNJEqmXaJWKHpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NTBiN2MwYzhiYWU2MTBmN2U1MTljMDQ4NWE0NzczYmNlYjQ4ZGFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTy/HNLd0KNZuneuDGKTr506mdma tg/38c37S1/nd+4PTIkGuEx95jstaZrc6FbCUh5M7J91RpQA7AjaCQdyvYLUKV/o OS5bOOY7vNoqWY7QJvE49FmSRXNcLQ9U8QWtWq2M1c+7Lafd/U6YtE5Bv30+Yo7d lvrh6uofUjrtiuVgpvXJB1u+kZPcCN/ZUEBy7SeKvwy/dNzsH6gj5gcsL5e6Lajy n0BhsjJQEn2PHaveT/masHNMGz7i/CfFXpHVscHG14MH8W2jCCn/UHgBc1A8PCiU cv+Sx/MAry3/KiKHc/O5D0xCFQkw/4m2TRpVpQ+CPgidCi6Hg/fwh3tIjwIDAQAB o4IDMDCCAywwHQYDVR0OBBYEFFULfAyLrmEPflGcBIWkdzvOtI2rMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZhL2FlZGIw My1iMDRjLTQyMTItODEzYi1mZjI1YmE1OTkwMzEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmEvYWVkYjAz LWIwNGMtNDIxMi04MTNiLWZmMjViYTU5OTAzMS8xL1ZRdDhESXV1WVE5LVVad0Vo YVIzTzg2MGphcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGpBggrBgEF BQcBBwEB/wSBmTCBljCBhAQCAAEwfgMEAgX9jAMEAx/PUAMEAyWU0AMEAyXmaAME AlD98AMEA1WfQAMEAljagAMEBVkTAAMEAlx3TAMEBl5JgAMEA17HyAMEA23o2AME Ao1izAMEAphZJAMEAqsWuAMEA7KdCAMEArkPKAMEArkWuAMEArljxAMEA9WfAAME AtWfHDANBAIAAjAHAwUDKgOtwDAfBggrBgEFBQcBCAEB/wQQMA6gDDAKAgMAhzsC AwCnNzANBgkqhkiG9w0BAQsFAAOCAQEAefJ5obIQga//6FcItWRbq6/JqSacQUfL kMOpdkde5TBxvR3Pozu933A1f1zroB2tZPAlVOLFSYIX8T+dlz1UmEJveYxJU5jk y2HzB+lO2Q9BbuBjR+9AG5S6NSgN3SoSAzMGpVf51dOMIqKT7s0tknCWqYplT5c+ MEPDdg0SbwfIUKJQdGLsDGAve3BImFFmjziQt1MmJEHp9MVXlUhwj8boTrAH/35r udsJ4CMX9+JEz7rGPOBRPNQPA6r61ZNSYThTVthXVafIMvzJ9E9EvYSDQKSw6vKP tOMi4P2O6KqOU1C7Rb+sAu36GqtoWO6O/cQxPo59UDoaYBQpDiJRKw== -----END CERTIFICATE-----Generated at Mon Jan 26 09:56:14 2026 by rpki-client