This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/V_ZNsaQq2-ncMibryAr7t11Kfxg.cer File: V_ZNsaQq2-ncMibryAr7t11Kfxg.cer (raw, json) Hash identifier: vEzubJssVF203A/T9v39348SS8FIxoGOfqxjYfZZ+7c= Subject key identifier: 57:F6:4D:B1:A4:2A:DB:E9:DC:32:26:EB:C8:0A:FB:B7:5D:4A:7F:18 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77588A256E0B2D5A8743759EDDCD8ADE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d9/ee96f0-a091-4b85-aff9-1e82877c1462/1/V_ZNsaQq2-ncMibryAr7t11Kfxg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d9/ee96f0-a091-4b85-aff9-1e82877c1462/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:17:29 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 44194 IP: 77.87.48.0/21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:8a:25:6e:0b:2d:5a:87:43:75:9e:dd:cd:8a:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=57f64db1a42adbe9dc3226ebc80afbb75d4a7f18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:bd:11:da:66:0e:58:c1:d9:89:53:97:d8:f6: d4:3c:12:66:5a:56:bd:d2:1b:14:f6:da:7b:47:cf: 51:19:3f:bd:dc:e2:05:2f:b3:5b:16:e5:08:12:b9: 31:20:62:c0:be:41:d2:cf:f1:f6:91:8e:32:80:a8: 30:bb:a3:2b:ba:86:c2:b8:a8:ff:a9:20:e0:fb:96: 68:96:ac:8c:e0:a1:27:86:31:b2:4c:ed:42:ae:a7: 19:91:c0:85:b8:53:14:8a:91:48:01:8d:a2:0b:2e: 2d:6c:77:0c:aa:c2:48:88:13:e6:52:1d:18:2f:fb: 04:4e:a0:3d:f2:ce:ee:22:eb:36:6a:b5:13:75:7a: 83:f3:e1:4f:b9:43:24:73:8d:eb:e6:9e:93:9d:e5: 19:4a:d7:49:f0:14:f5:e5:6e:c5:d1:c4:ad:00:39: 3a:a5:2a:4a:09:11:ac:0a:ab:21:ec:3d:7b:e1:3f: ec:d4:fd:79:2b:2a:ae:2a:4c:a5:2b:b2:1c:ea:d1: 77:f6:df:39:2a:e1:f4:eb:19:ab:76:88:8f:c1:11: 00:35:90:98:20:e2:a3:71:ba:5c:43:74:3d:ed:d3: 87:d6:bb:6d:94:7b:61:7a:5b:07:ca:44:26:8f:aa: f1:ed:52:65:e0:d2:ee:f0:13:d2:50:ef:28:74:ba: ba:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:F6:4D:B1:A4:2A:DB:E9:DC:32:26:EB:C8:0A:FB:B7:5D:4A:7F:18 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ee96f0-a091-4b85-aff9-1e82877c1462/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ee96f0-a091-4b85-aff9-1e82877c1462/1/V_ZNsaQq2-ncMibryAr7t11Kfxg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.87.48.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 44194 Signature Algorithm: sha256WithRSAEncryption 8a:88:28:55:1d:eb:31:00:bf:73:1e:88:54:9f:b8:bb:6c:52: bc:18:9d:11:5a:ec:c3:6b:fc:2d:9f:d7:e7:92:11:29:d1:23: 60:0c:b6:b4:9c:e7:24:76:c0:6f:a8:83:70:e1:96:ed:80:13: 50:35:6a:46:58:4b:f8:08:a3:be:78:f4:c4:b4:c8:ce:8a:fe: ad:1d:ad:2b:8e:91:ed:7a:89:a1:16:4b:b9:2e:ab:d4:8e:be: 3a:dc:d0:69:37:c3:e3:2e:1d:2e:08:37:c0:fa:b4:f8:99:c1: 52:e9:df:db:df:c4:a7:c0:4c:ee:0d:f4:ef:2b:90:9e:db:31: 09:06:92:c9:da:ca:ce:a5:31:a9:35:97:11:11:75:87:f7:1c: 09:7d:b6:c6:d5:27:28:5e:02:ac:60:77:cc:af:71:85:10:c7: 0d:e2:4e:cb:8e:51:06:31:f7:d6:17:6d:aa:f2:60:b3:78:f4: 38:64:11:09:61:d1:5c:96:d7:c1:f0:55:d7:a5:0a:87:e3:7d: 8a:1f:5a:c5:cd:5a:e8:60:23:1f:8b:20:e8:83:23:6f:fa:52: 14:74:8e:3c:07:9b:26:93:c4:fc:9f:c8:0b:79:ec:94:51:2d: df:95:eb:1f:a8:65:a7:b3:23:d3:73:38:c1:6e:1f:ff:ed:79: f2:ff:15:86 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt3WIolbgstWodDdZ7dzYreMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1N2Y2NGRiMWE0MmFkYmU5ZGMzMjI2ZWJjODBhZmJiNzVkNGE3ZjE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu70R2mYOWMHZiVOX2PbUPBJmWla9 0hsU9tp7R89RGT+93OIFL7NbFuUIErkxIGLAvkHSz/H2kY4ygKgwu6MruobCuKj/ qSDg+5ZolqyM4KEnhjGyTO1CrqcZkcCFuFMUipFIAY2iCy4tbHcMqsJIiBPmUh0Y L/sETqA98s7uIus2arUTdXqD8+FPuUMkc43r5p6TneUZStdJ8BT15W7F0cStADk6 pSpKCRGsCqsh7D174T/s1P15KyquKkylK7Ic6tF39t85KuH06xmrdoiPwREANZCY IOKjcbpcQ3Q97dOH1rttlHthelsHykQmj6rx7VJl4NLu8BPSUO8odLq6IwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFFf2TbGkKtvp3DIm68gK+7ddSn8YMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q5L2VlOTZm MC1hMDkxLTRiODUtYWZmOS0xZTgyODc3YzE0NjIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDkvZWU5NmYw LWEwOTEtNGI4NS1hZmY5LTFlODI4NzdjMTQ2Mi8xL1ZfWk5zYVFxMi1uY01pYnJ5 QXI3dDExS2Z4Zy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQDTVcwMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwCsojANBgkqhkiG9w0BAQsFAAOCAQEAiogoVR3rMQC/cx6IVJ+4u2xSvBidEVrs w2v8LZ/X55IRKdEjYAy2tJznJHbAb6iDcOGW7YATUDVqRlhL+Aijvnj0xLTIzor+ rR2tK46R7XqJoRZLuS6r1I6+OtzQaTfD4y4dLgg3wPq0+JnBUunf29/Ep8BM7g30 7yuQntsxCQaSydrKzqUxqTWXERF1h/ccCX22xtUnKF4CrGB3zK9xhRDHDeJOy45R BjH31hdtqvJgs3j0OGQRCWHRXJbXwfBV16UKh+N9ih9axc1a6GAjH4sg6IMjb/pS FHSOPAebJpPE/J/IC3nslFEt35XrH6hlp7Mj03M4wW4f/+158v8Vhg== -----END CERTIFICATE-----Generated at Mon Jan 26 12:59:14 2026 by rpki-client