This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VTynsubB4X9fPtvjdeGezjlTORA.cer File: VTynsubB4X9fPtvjdeGezjlTORA.cer (raw, json) Hash identifier: D4DdWfRjlMouOWWxpTV2ZO1D6cgW1FeZJDJtcl6ZRSE= Subject key identifier: 55:3C:A7:B2:E6:C1:E1:7F:5F:3E:DB:E3:75:E1:9E:CE:39:53:39:10 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79107B4E28E24A3039A06CEDF29F5EEF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:01 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 49318 IP: 46.28.248.0/21 IP: 188.93.176.0/21 IP: 194.110.124.0/23 IP: 194.110.130.0/23 IP: 2a00:1d90::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:7b:4e:28:e2:4a:30:39:a0:6c:ed:f2:9f:5e:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=553ca7b2e6c1e17f5f3edbe375e19ece39533910 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:af:73:27:4e:26:bd:4f:de:22:01:e1:8d:e3: b7:3f:3c:2c:8b:58:d3:07:c6:c4:b3:5d:3c:53:ca: 34:b8:d0:0f:ab:94:77:50:a8:71:a7:c2:be:06:e4: 37:bc:89:56:59:c0:22:14:a6:67:10:9b:32:2c:55: fd:de:f2:64:f6:ab:35:a4:93:f0:8e:53:62:a2:ea: 6b:4f:a8:06:e0:57:52:ad:36:9e:a3:92:a5:06:fc: ec:ac:8d:f9:4d:94:cb:24:2e:00:b8:2d:a6:8a:ca: 06:e5:5f:b2:e1:b7:ea:e5:f7:08:f7:6b:60:80:d3: 5a:5c:13:69:6b:1e:d7:ca:cc:09:dd:8b:a1:4c:fb: fe:6d:99:af:53:3d:ed:72:27:e5:40:ee:b1:27:f7: 42:09:2b:b4:08:db:8e:1e:36:06:fd:9d:50:a3:9c: 88:90:be:5e:e1:33:46:8d:a8:17:16:5e:07:e8:a9: a0:a2:05:3d:07:d0:fe:02:04:12:f1:c6:1c:8b:ad: 09:fe:af:31:8e:5d:37:60:13:0a:40:10:d6:e1:84: 80:a4:e7:d7:39:c9:14:e4:b7:94:f5:cc:c9:96:ab: f5:00:d4:67:c6:e7:5f:03:78:46:70:03:da:c8:75: ba:27:25:e3:73:a8:c8:ee:dd:a0:8c:c3:31:f0:de: 47:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:3C:A7:B2:E6:C1:E1:7F:5F:3E:DB:E3:75:E1:9E:CE:39:53:39:10 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.28.248.0/21 188.93.176.0/21 194.110.124.0/23 194.110.130.0/23 IPv6: 2a00:1d90::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 49318 Signature Algorithm: sha256WithRSAEncryption 7d:9e:45:eb:df:95:5a:e0:fb:72:dd:b6:5b:9c:43:45:8a:64: 85:6e:8e:7e:45:2d:89:d1:8b:0b:65:db:58:b5:e9:79:b2:8d: 36:c8:bb:a3:9b:5a:fb:59:28:d6:dc:52:88:b4:fa:4f:a3:23: 47:7c:a1:cf:7c:8f:38:90:6b:36:04:d5:06:10:1d:43:bf:94: b1:b6:00:5c:35:f5:f3:20:2d:df:d2:7b:d2:61:76:84:51:18: 9b:b2:32:8b:03:48:7d:6b:56:e1:3c:1e:66:f5:15:5a:a5:9a: 5e:79:62:46:ec:6e:8d:e6:f9:e8:16:a4:28:05:f6:64:ac:3e: 86:aa:8e:f6:c5:94:57:61:f4:ae:51:55:b3:ce:5b:e3:36:7e: 0b:59:8a:df:98:44:48:7d:64:91:12:5e:a9:45:9f:60:e2:dd: b3:bf:15:82:fc:98:e3:db:fd:eb:f6:ec:7f:ab:d8:a2:f6:01: 82:96:d1:f6:af:f2:ad:ac:b7:c6:b8:9b:8d:ec:58:0b:de:0b: 81:ca:22:19:a0:11:9d:f7:31:2e:58:a8:65:f1:a4:76:e2:51: a1:c6:90:4b:8c:c4:ea:01:60:25:e0:7f:cb:4e:f9:e2:a2:7f: 0f:32:78:4d:ce:91:1c:2e:7a:5a:e9:7c:3b:ca:f3:5f:66:2e: b6:76:0b:b6 -----BEGIN CERTIFICATE----- MIIFtTCCBJ2gAwIBAgISAZt5EHtOKOJKMDmgbO3yn17vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NTNjYTdiMmU2YzFlMTdmNWYzZWRiZTM3NWUxOWVjZTM5NTMzOTEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqq9zJ04mvU/eIgHhjeO3Pzwsi1jT B8bEs108U8o0uNAPq5R3UKhxp8K+BuQ3vIlWWcAiFKZnEJsyLFX93vJk9qs1pJPw jlNiouprT6gG4FdSrTaeo5KlBvzsrI35TZTLJC4AuC2misoG5V+y4bfq5fcI92tg gNNaXBNpax7XyswJ3YuhTPv+bZmvUz3tciflQO6xJ/dCCSu0CNuOHjYG/Z1Qo5yI kL5e4TNGjagXFl4H6KmgogU9B9D+AgQS8cYci60J/q8xjl03YBMKQBDW4YSApOfX OckU5LeU9czJlqv1ANRnxudfA3hGcAPayHW6JyXjc6jI7t2gjMMx8N5HBwIDAQAB o4ICwTCCAr0wHQYDVR0OBBYEFFU8p7LmweF/Xz7b43Xhns45UzkQMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM0L2Q1NzJj My0zNTBmLTQ3OWItYTdiMy0xNTNlOTE4MmFmNDEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzQvZDU3MmMz LTM1MGYtNDc5Yi1hN2IzLTE1M2U5MTgyYWY0MS8xL1ZUeW5zdWJCNFg5ZlB0dmpk ZUdlempsVE9SQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF BwEHAQH/BDEwLzAeBAIAATAYAwQDLhz4AwQDvF2wAwQBwm58AwQBwm6CMA0EAgAC MAcDBQAqAB2QMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDApjANBgkqhkiG9w0B AQsFAAOCAQEAfZ5F69+VWuD7ct22W5xDRYpkhW6OfkUtidGLC2XbWLXpebKNNsi7 o5ta+1ko1txSiLT6T6MjR3yhz3yPOJBrNgTVBhAdQ7+UsbYAXDX18yAt39J70mF2 hFEYm7IyiwNIfWtW4TweZvUVWqWaXnliRuxujeb56BakKAX2ZKw+hqqO9sWUV2H0 rlFVs85b4zZ+C1mK35hESH1kkRJeqUWfYOLds78VgvyY49v96/bsf6vYovYBgpbR 9q/yray3xribjexYC94LgcoiGaARnfcxLlioZfGkduJRocaQS4zE6gFgJeB/y075 4qJ/DzJ4Tc6RHC56Wul8O8rzX2YutnYLtg== -----END CERTIFICATE-----Generated at Sun Jan 25 12:11:24 2026 by rpki-client