This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VUK3Zu9X1pz0-95Ly28K8Go7IgY.cer File: VUK3Zu9X1pz0-95Ly28K8Go7IgY.cer (raw, json) Hash identifier: u77p4MZ8UHKZrTTxcYFpuVJIHuRTH5HrM0pyX8GdyH8= Subject key identifier: 55:42:B7:66:EF:57:D6:9C:F4:FB:DE:4B:CB:6F:0A:F0:6A:3B:22:06 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C7F8616442CEA6A5849A60DEF256B66 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:18:10 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.60.176.0/22 IP: 2a02:73e0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:86:16:44:2c:ea:6a:58:49:a6:0d:ef:25:6b:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5542b766ef57d69cf4fbde4bcb6f0af06a3b2206 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:1c:c6:3c:ac:cb:d3:2c:28:9b:f0:1d:ed:fe: 61:36:94:8b:42:be:74:13:1d:95:34:1f:fb:fe:cf: a5:67:dd:fe:4e:01:69:8f:17:74:b3:b1:a3:70:73: fe:8b:a8:37:ea:19:a6:4c:71:cf:8c:3a:bd:cb:91: 7f:a8:f7:75:25:89:0a:cd:ef:ff:80:a1:65:c8:2e: fe:de:45:57:74:3b:d5:87:e9:d5:4d:5d:80:9e:c8: d8:2e:a2:19:7f:2a:cb:09:3c:d9:e7:9f:ca:61:2f: 1e:3e:41:0d:3f:05:2c:0e:e8:74:c9:e3:8b:1d:9e: 02:4b:f6:8c:0c:4a:fa:9e:28:9f:d5:1c:e2:ba:70: bc:61:fa:a6:e2:96:5a:fd:9d:b8:02:1a:51:d4:7c: 19:4f:23:d4:76:04:45:9e:0a:41:c6:dc:1e:25:93: fa:6c:06:8a:23:27:27:f8:ca:e8:28:8a:6d:0e:59: 3d:90:a9:ed:5d:5f:8a:22:66:4b:2d:d6:7a:99:b6: 5b:2e:75:a8:ac:cc:fa:16:31:c0:33:84:76:f5:af: 66:ef:dd:21:d1:5d:c6:a0:e9:4b:1a:4d:a8:f9:84: 88:60:56:9a:71:a3:d5:84:ba:2f:80:79:38:5a:b7: ca:df:51:db:82:90:b9:78:a3:f7:e2:7e:1d:4e:6b: f6:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:42:B7:66:EF:57:D6:9C:F4:FB:DE:4B:CB:6F:0A:F0:6A:3B:22:06 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.60.176.0/22 IPv6: 2a02:73e0::/32 Signature Algorithm: sha256WithRSAEncryption a4:02:64:68:c4:1a:8f:fc:70:d6:64:e8:c1:5b:81:41:b0:6f: 49:cd:3e:67:e9:24:ea:10:ee:c8:7d:e8:66:50:b2:62:d5:25: 25:f0:cd:77:7c:e9:fe:94:cb:d2:ea:a2:7a:28:09:86:2b:4a: 33:9b:55:f8:3a:3d:b5:07:02:14:91:37:6e:4f:e8:49:ee:1f: df:c5:b3:fb:53:a0:09:c7:14:4e:e7:e3:b1:4e:8d:d5:c9:52: be:14:0b:d2:80:b7:ec:60:14:4b:97:0a:6c:eb:66:90:f4:f4: 7a:47:86:8f:62:be:af:36:b8:6f:89:a0:88:0f:3b:e4:b0:97: 60:dd:bd:05:c0:dc:f1:92:4d:da:ee:5d:f7:8c:d0:41:29:8d: 65:58:96:6e:45:4a:d2:0b:67:66:94:4d:c2:db:81:3d:e2:35: 33:af:f9:79:a0:da:40:e9:d8:46:44:d2:21:89:7e:b8:17:70: 7c:f5:ba:b6:99:cb:b3:14:f5:4b:ee:5a:aa:6d:98:68:5c:93: 0b:d3:d6:77:22:8d:24:b1:d2:6f:db:76:9f:a8:46:18:e3:ca: 68:87:dc:48:3d:d5:a7:61:c8:32:a6:81:68:94:6d:91:64:5a: 39:c8:73:27:e4:86:65:45:9f:d0:1b:4f:3c:2c:39:4a:52:95: 71:3a:3c:28 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt8f4YWRCzqalhJpg3vJWtmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NTQyYjc2NmVmNTdkNjljZjRmYmRlNGJjYjZmMGFmMDZhM2IyMjA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBzGPKzL0ywom/Ad7f5hNpSLQr50 Ex2VNB/7/s+lZ93+TgFpjxd0s7GjcHP+i6g36hmmTHHPjDq9y5F/qPd1JYkKze// gKFlyC7+3kVXdDvVh+nVTV2AnsjYLqIZfyrLCTzZ55/KYS8ePkENPwUsDuh0yeOL HZ4CS/aMDEr6niif1RziunC8Yfqm4pZa/Z24AhpR1HwZTyPUdgRFngpBxtweJZP6 bAaKIycn+MroKIptDlk9kKntXV+KImZLLdZ6mbZbLnWorMz6FjHAM4R29a9m790h 0V3GoOlLGk2o+YSIYFaacaPVhLovgHk4WrfK31HbgpC5eKP34n4dTmv2VwIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFFVCt2bvV9ac9PveS8tvCvBqOyIGMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU1LzQ0NmVi YS05YzBkLTQ3NjUtYjNkYy03ODMwOGIyZjUyMzQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTUvNDQ2ZWJh LTljMGQtNDc2NS1iM2RjLTc4MzA4YjJmNTIzNC8xL1ZVSzNadTlYMXB6MC05NUx5 MjhLOEdvN0lnWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuTywMA0EAgACMAcDBQAqAnPgMA0GCSqGSIb3 DQEBCwUAA4IBAQCkAmRoxBqP/HDWZOjBW4FBsG9JzT5n6STqEO7IfehmULJi1SUl 8M13fOn+lMvS6qJ6KAmGK0ozm1X4Oj21BwIUkTduT+hJ7h/fxbP7U6AJxxRO5+Ox To3VyVK+FAvSgLfsYBRLlwps62aQ9PR6R4aPYr6vNrhviaCIDzvksJdg3b0FwNzx kk3a7l33jNBBKY1lWJZuRUrSC2dmlE3C24E94jUzr/l5oNpA6dhGRNIhiX64F3B8 9bq2mcuzFPVL7lqqbZhoXJML09Z3Io0ksdJv23afqEYY48poh9xIPdWnYcgypoFo lG2RZFo5yHMn5IZlRZ/QG088LDlKUpVxOjwo -----END CERTIFICATE-----Generated at Sun Jan 25 18:14:50 2026 by rpki-client