This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VkNBXCLhQZcsDX52wk6IsiQnsCQ.cer File: VkNBXCLhQZcsDX52wk6IsiQnsCQ.cer (raw, json) Hash identifier: jCM+QBDieyDoK3CGQmL6dA2KnLi5/m82BBmGEoG4DCg= Subject key identifier: 56:43:41:5C:22:E1:41:97:2C:0D:7E:76:C2:4E:88:B2:24:27:B0:24 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B3642173BE4FCD0CF3C983631787823 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c74a-e3b2-4e09-867c-f9967c3ad3e4/1/VkNBXCLhQZcsDX52wk6IsiQnsCQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c74a-e3b2-4e09-867c-f9967c3ad3e4/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 8265 IP: 185.28.52.0/22 IP: 195.96.192.0/19 IP: 2a02:2888::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:42:17:3b:e4:fc:d0:cf:3c:98:36:31:78:78:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5643415c22e141972c0d7e76c24e88b22427b024 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:54:18:f2:bf:07:3a:99:55:3b:6a:5a:a1:40: 85:77:5d:55:fc:c0:aa:90:9e:ca:53:16:6b:d4:21: e7:a8:c0:25:ea:81:43:cd:c4:ce:d8:f4:6f:1a:49: 8b:a9:68:2d:fc:14:6c:5f:a0:e1:9a:23:33:62:0a: cf:59:97:7b:6b:cf:75:02:0b:09:72:ac:58:d7:0c: ab:5d:81:70:b9:c6:ae:a4:53:86:11:8f:49:77:dd: 11:eb:4a:e1:e4:d5:a7:39:eb:9b:bd:88:2a:4d:7b: b9:24:b8:c8:79:86:82:9b:33:12:3e:d5:40:b7:9e: 18:2d:73:90:7b:40:48:a3:bf:11:ad:e2:fa:1c:33: 0e:18:7a:43:2f:72:6e:e2:c0:db:00:46:3c:09:4a: 6d:79:0a:59:e4:f4:7b:a7:79:e7:18:0c:56:c8:22: 80:0a:17:16:9d:f2:02:5b:3a:45:59:f4:64:f8:ec: 53:1e:a3:04:d6:ad:ee:eb:55:b5:27:38:65:97:7b: 7d:62:b0:c5:2a:31:19:f4:75:fe:a3:04:32:8d:62: 3a:50:01:6e:7b:1a:87:06:cd:d3:9d:da:37:c1:c5: 61:15:74:d6:42:c0:d7:60:44:bd:b2:26:12:ae:9b: 2a:37:93:81:f3:50:24:b3:e0:b7:5a:14:2b:fa:00: 11:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:43:41:5C:22:E1:41:97:2C:0D:7E:76:C2:4E:88:B2:24:27:B0:24 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c74a-e3b2-4e09-867c-f9967c3ad3e4/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c74a-e3b2-4e09-867c-f9967c3ad3e4/1/VkNBXCLhQZcsDX52wk6IsiQnsCQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.28.52.0/22 195.96.192.0/19 IPv6: 2a02:2888::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 8265 Signature Algorithm: sha256WithRSAEncryption 89:c4:eb:3f:cb:62:5a:b1:60:b0:68:5c:76:1e:c7:2c:74:dd: 96:90:6f:e6:7a:2b:4b:33:ae:e2:c5:bd:5d:84:ac:7e:44:d7: e4:cb:ed:51:f4:ef:cc:e4:37:fc:d5:f4:11:b0:2d:07:96:5c: d3:34:33:2d:f5:35:0d:0b:ad:07:94:cc:0d:80:b1:48:24:d0: 5b:22:47:ab:ce:67:e6:4a:47:24:5b:62:ed:f8:f5:36:37:cc: 2f:3d:4b:5a:46:20:45:35:74:77:93:cb:ae:bc:a2:14:56:fe: 0e:50:ea:39:f4:b8:89:60:f6:22:fd:cc:26:0a:cf:08:3e:e8: 5e:04:88:43:ee:31:43:1f:b8:44:f4:9b:41:2b:95:69:2b:86: 88:14:b6:05:1a:41:49:a3:77:c1:81:c6:28:27:8f:9b:b5:47: 53:ab:cc:93:03:6b:3e:29:14:f4:46:09:ed:5b:b5:d3:0c:ee: 17:5b:f0:9c:bc:fe:71:7a:e3:1e:b9:4b:93:7e:d1:bc:b1:0d: cb:3d:00:c8:94:27:d6:08:32:41:0a:1a:aa:04:8c:b0:54:98: 04:dd:b2:72:d2:7d:65:5c:c1:48:f7:f2:9e:67:38:fc:d9:05: a0:8e:84:7c:34:58:fb:35:9d:67:4d:fa:a7:7a:92:a6:fe:70: c9:ff:c7:12 -----BEGIN CERTIFICATE----- MIIFqDCCBJCgAwIBAgISAZt7NkIXO+T80M88mDYxeHgjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NjQzNDE1YzIyZTE0MTk3MmMwZDdlNzZjMjRlODhiMjI0MjdiMDI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVQY8r8HOplVO2paoUCFd11V/MCq kJ7KUxZr1CHnqMAl6oFDzcTO2PRvGkmLqWgt/BRsX6DhmiMzYgrPWZd7a891AgsJ cqxY1wyrXYFwucaupFOGEY9Jd90R60rh5NWnOeubvYgqTXu5JLjIeYaCmzMSPtVA t54YLXOQe0BIo78RreL6HDMOGHpDL3Ju4sDbAEY8CUpteQpZ5PR7p3nnGAxWyCKA ChcWnfICWzpFWfRk+OxTHqME1q3u61W1Jzhll3t9YrDFKjEZ9HX+owQyjWI6UAFu exqHBs3Tndo3wcVhFXTWQsDXYES9siYSrpsqN5OB81Aks+C3WhQr+gAR6QIDAQAB o4ICtDCCArAwHQYDVR0OBBYEFFZDQVwi4UGXLA1+dsJOiLIkJ7AkMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzlhL2I0Yzc0 YS1lM2IyLTRlMDktODY3Yy1mOTk2N2MzYWQzZTQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWEvYjRjNzRh LWUzYjItNGUwOS04NjdjLWY5OTY3YzNhZDNlNC8xL1ZrTkJYQ0xoUVpjc0RYNTJ3 azZJc2lRbnNDUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCuRw0AwQFw2DAMA0EAgACMAcDBQAqAiiIMBkG CCsGAQUFBwEIAQH/BAowCKAGMAQCAiBJMA0GCSqGSIb3DQEBCwUAA4IBAQCJxOs/ y2JasWCwaFx2HscsdN2WkG/meitLM67ixb1dhKx+RNfky+1R9O/M5Df81fQRsC0H llzTNDMt9TUNC60HlMwNgLFIJNBbIkerzmfmSkckW2Lt+PU2N8wvPUtaRiBFNXR3 k8uuvKIUVv4OUOo59LiJYPYi/cwmCs8IPuheBIhD7jFDH7hE9JtBK5VpK4aIFLYF GkFJo3fBgcYoJ4+btUdTq8yTA2s+KRT0RgntW7XTDO4XW/CcvP5xeuMeuUuTftG8 sQ3LPQDIlCfWCDJBChqqBIywVJgE3bJy0n1lXMFI9/KeZzj82QWgjoR8NFj7NZ1n TfqnepKm/nDJ/8cS -----END CERTIFICATE-----Generated at Sun Jan 25 14:43:09 2026 by rpki-client