This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VYB6PcvAJaz2l774HkA7SpbPu1E.cer File: VYB6PcvAJaz2l774HkA7SpbPu1E.cer (raw, json) Hash identifier: a/y+HMZfx31g4V5XR2UkW+lqnxo32Ze/edALahQcMXw= Subject key identifier: 55:80:7A:3D:CB:C0:25:AC:F6:97:BE:F8:1E:40:3B:4A:96:CF:BB:51 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E38EF25A6D4550478EB89F57CC2722E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0f/66838b-1b33-4746-af97-7e217bef2d9e/1/VYB6PcvAJaz2l774HkA7SpbPu1E.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0f/66838b-1b33-4746-af97-7e217bef2d9e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:20:19 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 34407 IP: 185.162.100.0/22 IP: 195.8.96.0/24 IP: 2a07:c400::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:ef:25:a6:d4:55:04:78:eb:89:f5:7c:c2:72:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:20:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=55807a3dcbc025acf697bef81e403b4a96cfbb51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:03:e7:09:43:aa:4c:bc:ca:24:7d:57:9a:c2: 4c:2f:a5:2a:66:d9:52:94:3e:92:d1:e0:8f:43:7c: af:8c:2e:b0:65:3a:0d:76:39:84:bf:3c:50:90:bd: 2e:c6:d9:c4:39:d4:39:77:a7:eb:bb:95:ec:97:a3: 3e:64:cf:4a:1d:d5:7f:4c:c0:a6:91:ca:a2:af:ef: 58:14:04:62:ae:e2:a1:78:8c:cb:87:06:14:af:b4: ff:0d:54:73:47:ab:66:09:3f:03:63:09:09:5c:3e: d1:88:9f:9c:2c:61:af:46:5c:37:e8:42:4c:0e:fb: 05:de:42:26:a5:22:1e:01:e9:2d:ea:e0:02:cc:55: da:5a:e6:ed:a7:09:48:99:83:a4:be:ba:4b:3a:9a: 8c:1a:38:b2:7a:2c:a6:70:87:cf:e6:29:32:08:e4: a4:c4:2d:09:62:eb:97:09:c4:74:14:75:9c:fc:12: 26:12:89:c9:90:24:aa:23:e5:e6:82:16:b8:13:0f: 29:6d:a6:e2:13:65:f8:50:03:1b:d9:98:69:51:5a: 99:d2:60:1f:01:42:bd:ad:e4:0e:1b:85:f9:07:44: 4a:cd:91:32:0f:d8:aa:ae:55:f2:6e:a0:18:f1:6f: ec:71:c5:0d:fe:e7:10:74:c7:96:43:05:eb:db:18: 6c:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:80:7A:3D:CB:C0:25:AC:F6:97:BE:F8:1E:40:3B:4A:96:CF:BB:51 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/66838b-1b33-4746-af97-7e217bef2d9e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/66838b-1b33-4746-af97-7e217bef2d9e/1/VYB6PcvAJaz2l774HkA7SpbPu1E.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.162.100.0/22 195.8.96.0/24 IPv6: 2a07:c400::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 34407 Signature Algorithm: sha256WithRSAEncryption 45:09:e5:b5:8c:a2:7d:80:9a:67:47:e5:90:34:87:7b:68:92: 4c:56:9b:4b:43:11:31:07:94:8c:30:a5:60:b5:c9:df:97:f6: b1:31:63:56:55:a9:d6:d1:48:2c:fc:55:5b:84:c8:e4:28:73: c8:f9:d8:dc:0f:e0:48:a1:95:29:88:0f:ec:21:eb:6a:62:25: 7d:8a:a5:38:b1:3d:b8:e6:73:43:cc:8e:c1:c5:d4:f6:c4:ca: 54:4e:f3:cc:b9:6e:7f:b7:09:9e:87:4b:72:f8:5f:d5:0a:3a: f5:6e:59:a8:f4:7e:25:9e:95:87:61:2c:53:69:ea:bc:33:d1: 70:7c:65:26:8f:ea:45:76:52:87:4d:a9:6e:f6:ad:44:0c:e7: cd:75:6c:4d:bd:b4:bd:9f:f1:e3:5a:5e:f3:47:5f:08:3d:9c: d8:9c:a9:e5:7b:43:e5:9e:8b:d6:48:cb:3b:09:72:fc:ed:92: 4c:31:62:24:fd:0a:d9:77:18:cc:7f:bf:54:fc:aa:e3:41:c1: e8:e5:d0:40:3f:f0:d8:4c:9a:fb:49:a9:b8:a2:af:c0:93:94: a0:be:95:7c:19:05:e7:a8:da:7b:56:45:30:3b:ef:9f:b9:58: 1b:d4:8b:a6:f4:bd:fb:c3:f4:44:be:1b:b1:a9:4c:88:b0:41: 00:3c:ed:e1 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt+OO8lptRVBHjrifV8wnIuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAyMDE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NTgwN2EzZGNiYzAyNWFjZjY5N2JlZjgxZTQwM2I0YTk2Y2ZiYjUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwPnCUOqTLzKJH1XmsJML6UqZtlS lD6S0eCPQ3yvjC6wZToNdjmEvzxQkL0uxtnEOdQ5d6fru5Xsl6M+ZM9KHdV/TMCm kcqir+9YFARiruKheIzLhwYUr7T/DVRzR6tmCT8DYwkJXD7RiJ+cLGGvRlw36EJM DvsF3kImpSIeAekt6uACzFXaWubtpwlImYOkvrpLOpqMGjiyeiymcIfP5ikyCOSk xC0JYuuXCcR0FHWc/BImEonJkCSqI+Xmgha4Ew8pbabiE2X4UAMb2ZhpUVqZ0mAf AUK9reQOG4X5B0RKzZEyD9iqrlXybqAY8W/sccUN/ucQdMeWQwXr2xhsswIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFFWAej3LwCWs9pe++B5AO0qWz7tRMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBmLzY2ODM4 Yi0xYjMzLTQ3NDYtYWY5Ny03ZTIxN2JlZjJkOWUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGYvNjY4Mzhi LTFiMzMtNDc0Ni1hZjk3LTdlMjE3YmVmMmQ5ZS8xL1ZZQjZQY3ZBSmF6Mmw3NzRI a0E3U3BiUHUxRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCuaJkAwQAwwhgMA0EAgACMAcDBQMqB8QAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwCGZzANBgkqhkiG9w0BAQsFAAOCAQEARQnl tYyifYCaZ0flkDSHe2iSTFabS0MRMQeUjDClYLXJ35f2sTFjVlWp1tFILPxVW4TI 5ChzyPnY3A/gSKGVKYgP7CHramIlfYqlOLE9uOZzQ8yOwcXU9sTKVE7zzLluf7cJ nodLcvhf1Qo69W5ZqPR+JZ6Vh2EsU2nqvDPRcHxlJo/qRXZSh02pbvatRAznzXVs Tb20vZ/x41pe80dfCD2c2Jyp5XtD5Z6L1kjLOwly/O2STDFiJP0K2XcYzH+/VPyq 40HB6OXQQD/w2Eya+0mpuKKvwJOUoL6VfBkF56jae1ZFMDvvn7lYG9SLpvS9+8P0 RL4bsalMiLBBADzt4Q== -----END CERTIFICATE-----Generated at Sun Jan 25 16:43:14 2026 by rpki-client