This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VSV3WnBqwAyC-ikzniLkMQgJnnk.cer File: VSV3WnBqwAyC-ikzniLkMQgJnnk.cer (raw, json) Hash identifier: nuoUazvqV/ptf0kjfrCareiciamkWkGHs1zMeODBJSQ= Subject key identifier: 55:25:77:5A:70:6A:C0:0C:82:FA:29:33:9E:22:E4:31:08:09:9E:79 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C7FD95C3962B91E55BF2E36E3A5CE85 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/78/f46d4e-ac33-4fd1-9e69-7954ed38c8ba/1/VSV3WnBqwAyC-ikzniLkMQgJnnk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/78/f46d4e-ac33-4fd1-9e69-7954ed38c8ba/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:18:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 212694 IP: 109.233.40.0/21 IP: 178.17.212.0/22 IP: 2a04:c040::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:d9:5c:39:62:b9:1e:55:bf:2e:36:e3:a5:ce:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5525775a706ac00c82fa29339e22e43108099e79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:cc:5b:10:c6:ee:e7:03:24:99:cd:34:31:26: 40:4f:ef:01:ef:37:0a:b5:8e:8b:94:6b:90:84:97: 9b:31:cd:bb:3f:03:7b:aa:05:68:58:59:b1:2c:04: a3:bb:9b:a9:88:3c:7a:58:09:fa:4b:46:b2:ac:7d: 61:b2:0b:51:96:dd:ac:dc:09:ce:49:05:86:82:83: 8a:3c:c3:cc:c3:64:63:d7:2d:6c:46:94:9f:12:b3: 7b:5b:78:86:76:7b:b9:a5:75:da:7a:74:64:30:77: 26:88:67:44:27:1f:5d:09:19:d0:95:53:11:bc:2f: c9:1e:de:83:cd:6a:b7:c3:5c:25:69:f2:6f:bd:91: 29:4c:0f:be:b0:fd:6f:17:04:04:33:2c:ba:49:0d: ef:4e:d8:8d:4b:04:dc:f5:45:f3:0f:3f:b2:c7:fe: 7b:c5:a1:65:b8:76:33:99:d6:d5:14:8f:5d:50:48: 27:2f:c5:8b:96:aa:08:3c:39:41:fc:63:11:3d:7e: 6e:b7:8b:ca:24:9f:86:5f:51:26:f2:b6:ef:ff:c6: 43:5f:1e:66:6f:65:44:77:e3:0a:58:79:0c:b5:52: 3d:8f:d8:24:a8:21:15:af:3f:34:7b:d0:a4:31:d0: eb:6b:11:48:ae:90:aa:26:1e:d0:64:5f:01:91:b6: ed:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:25:77:5A:70:6A:C0:0C:82:FA:29:33:9E:22:E4:31:08:09:9E:79 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f46d4e-ac33-4fd1-9e69-7954ed38c8ba/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f46d4e-ac33-4fd1-9e69-7954ed38c8ba/1/VSV3WnBqwAyC-ikzniLkMQgJnnk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.233.40.0/21 178.17.212.0/22 IPv6: 2a04:c040::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 212694 Signature Algorithm: sha256WithRSAEncryption 8c:f7:db:c5:9d:68:4a:db:d1:a8:70:f6:1f:76:65:9f:c5:3b: 6b:4f:81:48:c9:9d:ef:b1:65:16:72:53:ce:70:ce:6d:e4:7b: 0c:1d:51:43:2b:be:6d:1a:82:6a:d8:75:62:71:6c:ee:4a:6e: 20:ff:2f:26:c8:9d:a6:79:67:f3:dc:ee:09:43:90:6f:2c:4b: db:5f:8e:ba:3e:bb:13:ad:a7:54:46:a8:ab:d5:ba:c7:10:ab: ed:5c:5a:2a:67:dd:1c:47:5b:a0:af:e7:28:11:fc:3a:cc:68: 26:b5:c1:04:f1:d4:50:fb:58:57:fb:4a:0b:65:ac:55:5b:9b: a0:ba:e6:3a:75:f4:3a:4f:02:a9:b1:12:85:c6:0e:a5:48:f4: 4e:45:db:c0:8c:05:e0:0b:d9:35:8e:30:39:78:dd:2a:4f:69: 17:4a:92:aa:f5:c1:15:32:f5:e8:1c:13:e8:80:61:54:44:ab: 3b:ff:a5:3b:8b:cc:99:c0:b2:48:c9:59:91:71:14:37:29:d1: c1:3d:60:2d:dd:85:5a:d3:b1:f4:3e:ab:a5:b7:07:5a:9f:97: 05:80:c8:76:4d:41:51:7c:71:55:d2:04:56:ae:4b:89:38:6d: 14:21:38:54:e0:3a:bc:60:f5:86:24:d8:10:78:c3:2f:48:7a: ff:ad:f5:14 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt8f9lcOWK5HlW/Ljbjpc6FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NTI1Nzc1YTcwNmFjMDBjODJmYTI5MzM5ZTIyZTQzMTA4MDk5ZTc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcxbEMbu5wMkmc00MSZAT+8B7zcK tY6LlGuQhJebMc27PwN7qgVoWFmxLASju5upiDx6WAn6S0ayrH1hsgtRlt2s3AnO SQWGgoOKPMPMw2Rj1y1sRpSfErN7W3iGdnu5pXXaenRkMHcmiGdEJx9dCRnQlVMR vC/JHt6DzWq3w1wlafJvvZEpTA++sP1vFwQEMyy6SQ3vTtiNSwTc9UXzDz+yx/57 xaFluHYzmdbVFI9dUEgnL8WLlqoIPDlB/GMRPX5ut4vKJJ+GX1Em8rbv/8ZDXx5m b2VEd+MKWHkMtVI9j9gkqCEVrz80e9CkMdDraxFIrpCqJh7QZF8Bkbbt4wIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFFUld1pwasAMgvopM54i5DEICZ55MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc4L2Y0NmQ0 ZS1hYzMzLTRmZDEtOWU2OS03OTU0ZWQzOGM4YmEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvZjQ2ZDRl LWFjMzMtNGZkMS05ZTY5LTc5NTRlZDM4YzhiYS8xL1ZTVjNXbkJxd0F5Qy1pa3pu aUxrTVFnSm5uay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQDbekoAwQCshHUMA0EAgACMAcDBQMqBMBAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwM+1jANBgkqhkiG9w0BAQsFAAOCAQEAjPfb xZ1oStvRqHD2H3Zln8U7a0+BSMmd77FlFnJTznDObeR7DB1RQyu+bRqCath1YnFs 7kpuIP8vJsidpnln89zuCUOQbyxL21+Ouj67E62nVEaoq9W6xxCr7VxaKmfdHEdb oK/nKBH8OsxoJrXBBPHUUPtYV/tKC2WsVVuboLrmOnX0Ok8CqbEShcYOpUj0TkXb wIwF4AvZNY4wOXjdKk9pF0qSqvXBFTL16BwT6IBhVESrO/+lO4vMmcCySMlZkXEU NynRwT1gLd2FWtOx9D6rpbcHWp+XBYDIdk1BUXxxVdIEVq5LiThtFCE4VOA6vGD1 hiTYEHjDL0h6/631FA== -----END CERTIFICATE-----Generated at Sun Jan 25 22:00:58 2026 by rpki-client