This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Vi6OBQ04RQLreX9elEkxpm_dVVo.cer File: Vi6OBQ04RQLreX9elEkxpm_dVVo.cer (raw, json) Hash identifier: Rwyb9GvQUx6CjecSM9EPBsjEsj6C5Pi3JJnwKIhhdF4= Subject key identifier: 56:2E:8E:05:0D:38:45:02:EB:79:7F:5E:94:49:31:A6:6F:DD:55:5A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B36741C210750037B2322D633EF3895 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/17/c2f182-bb67-43d8-8ea5-95c5001bfc70/1/Vi6OBQ04RQLreX9elEkxpm_dVVo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/17/c2f182-bb67-43d8-8ea5-95c5001bfc70/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:44 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.199.45.0/24 IP: 91.235.128.0/23 IP: 185.174.172.0/22 IP: 185.237.204.0/22 IP: 195.54.162.0/23 IP: 2a06:c6c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:74:1c:21:07:50:03:7b:23:22:d6:33:ef:38:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=562e8e050d384502eb797f5e944931a66fdd555a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:53:48:8b:aa:bf:36:7d:44:84:33:31:73:3f: 6f:1f:e6:2d:17:8d:26:f0:32:7d:4c:7d:74:00:6c: 07:90:ef:3b:e0:3a:0b:21:5b:6e:da:a3:8c:a0:04: 7c:8a:9c:99:31:55:12:60:3d:2c:c2:70:92:03:86: 4c:ad:d1:90:08:31:30:60:a4:55:3c:e8:c6:ea:92: b2:c5:c7:0a:fa:ed:9a:4f:89:30:d1:65:1c:b8:52: 91:e2:eb:e0:c9:e8:44:d1:84:82:5d:46:c9:4d:6a: c1:c3:b6:07:9e:34:5b:1c:b3:35:09:56:1f:46:2a: d0:ef:4e:60:3e:ba:fc:fd:72:ef:db:87:e0:0c:ce: 52:58:2e:3b:fc:19:26:61:66:d3:73:73:5f:e7:ec: 65:ea:53:9e:cb:23:a3:f9:1d:19:c1:b3:b2:8f:1b: bf:bd:2e:f4:43:0c:44:97:21:75:b2:8f:ef:90:9f: b3:81:2f:58:c3:67:e9:23:99:8b:b5:26:b8:ac:1b: 64:f0:50:83:f0:73:f3:e5:d6:5e:2f:e7:34:d1:88: e8:f7:e0:62:e4:74:d0:29:0e:24:fd:39:8b:77:4d: bc:ff:e9:f0:99:51:9a:50:da:89:ea:90:4b:b9:92: 74:60:72:bf:75:2b:83:c3:5a:ee:9e:a3:0d:f5:94: cb:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:2E:8E:05:0D:38:45:02:EB:79:7F:5E:94:49:31:A6:6F:DD:55:5A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/c2f182-bb67-43d8-8ea5-95c5001bfc70/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/c2f182-bb67-43d8-8ea5-95c5001bfc70/1/Vi6OBQ04RQLreX9elEkxpm_dVVo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.199.45.0/24 91.235.128.0/23 185.174.172.0/22 185.237.204.0/22 195.54.162.0/23 IPv6: 2a06:c6c0::/29 Signature Algorithm: sha256WithRSAEncryption 3e:6d:c9:1c:79:c4:54:0d:d4:fc:95:08:49:44:3f:9d:7d:9a: f2:5d:c4:9a:1c:6c:ec:ab:c0:17:8a:72:26:45:38:c6:be:84: 37:5f:f1:a6:9c:ed:b6:1f:4e:1b:11:78:0d:d1:10:45:3c:0f: 20:7c:9b:a7:ef:d4:92:d3:cd:40:f0:5a:c1:e4:fb:df:99:56: d2:6d:8e:42:5c:c7:62:c9:73:31:cc:34:12:74:b8:6e:76:f2: 45:39:c8:ac:a9:f9:94:9b:1e:12:8e:e9:5c:34:59:dc:39:da: 07:9c:ca:f1:6f:53:df:58:c5:a4:5c:ae:d4:3a:37:d4:3a:08: 4f:f7:80:10:df:b6:f9:75:38:05:c4:ff:9e:00:0b:a5:8c:c2: 0e:a5:c7:3e:40:e2:a2:d3:8a:34:2a:6e:2d:25:5d:9f:99:af: 60:14:09:81:81:44:02:b2:b1:11:a9:3d:21:3b:df:f8:cc:a7: 95:d8:f0:d8:07:ab:b3:86:02:49:0d:d1:5d:4e:77:bd:a1:41: fb:e6:df:f2:7f:fa:e4:53:42:20:66:c7:a8:87:9f:06:86:f9: 73:ff:30:01:33:3f:dd:5a:01:d6:c4:46:aa:2b:41:5a:1f:3e: d8:d6:d1:f9:87:99:cd:96:0c:30:44:88:6e:64:6f:dc:84:dc: 56:71:2c:1b -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgISAZt7NnQcIQdQA3sjItYz7ziVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NjJlOGUwNTBkMzg0NTAyZWI3OTdmNWU5NDQ5MzFhNjZmZGQ1NTVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlNIi6q/Nn1EhDMxcz9vH+YtF40m 8DJ9TH10AGwHkO874DoLIVtu2qOMoAR8ipyZMVUSYD0swnCSA4ZMrdGQCDEwYKRV POjG6pKyxccK+u2aT4kw0WUcuFKR4uvgyehE0YSCXUbJTWrBw7YHnjRbHLM1CVYf RirQ705gPrr8/XLv24fgDM5SWC47/BkmYWbTc3Nf5+xl6lOeyyOj+R0ZwbOyjxu/ vS70QwxElyF1so/vkJ+zgS9Yw2fpI5mLtSa4rBtk8FCD8HPz5dZeL+c00Yjo9+Bi 5HTQKQ4k/TmLd028/+nwmVGaUNqJ6pBLuZJ0YHK/dSuDw1runqMN9ZTLpwIDAQAB o4ICqzCCAqcwHQYDVR0OBBYEFFYujgUNOEUC63l/XpRJMaZv3VVaMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE3L2MyZjE4 Mi1iYjY3LTQzZDgtOGVhNS05NWM1MDAxYmZjNzAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTcvYzJmMTgy LWJiNjctNDNkOC04ZWE1LTk1YzUwMDFiZmM3MC8xL1ZpNk9CUTA0UlFMcmVYOWVs RWt4cG1fZFZWby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUF BwEHAQH/BDcwNTAkBAIAATAeAwQAW8ctAwQBW+uAAwQCua6sAwQCue3MAwQBwzai MA0EAgACMAcDBQMqBsbAMA0GCSqGSIb3DQEBCwUAA4IBAQA+bckcecRUDdT8lQhJ RD+dfZryXcSaHGzsq8AXinImRTjGvoQ3X/GmnO22H04bEXgN0RBFPA8gfJun79SS 081A8FrB5PvfmVbSbY5CXMdiyXMxzDQSdLhudvJFOcisqfmUmx4SjulcNFncOdoH nMrxb1PfWMWkXK7UOjfUOghP94AQ37b5dTgFxP+eAAuljMIOpcc+QOKi04o0Km4t JV2fma9gFAmBgUQCsrERqT0hO9/4zKeV2PDYB6uzhgJJDdFdTne9oUH75t/yf/rk U0IgZseoh58Ghvlz/zABMz/dWgHWxEaqK0FaHz7Y1tH5h5nNlgwwRIhuZG/chNxW cSwb -----END CERTIFICATE-----Generated at Mon Jan 26 04:45:04 2026 by rpki-client