This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VmHZZN9KhtuP-5mqiVgtpoowkIw.cer File: VmHZZN9KhtuP-5mqiVgtpoowkIw.cer (raw, json) Hash identifier: NQbOeBn33Qy7jVNADvgvn6MjAECWvvtLscnSUHvcLW4= Subject key identifier: 56:61:D9:64:DF:4A:86:DB:8F:FB:99:AA:89:58:2D:A6:8A:30:90:8C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC8A8223B055B4E7CCF86492F549460 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:18:49 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 45.134.99.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:a8:22:3b:05:5b:4e:7c:cf:86:49:2f:54:94:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5661d964df4a86db8ffb99aa89582da68a30908c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0b:83:75:b9:8e:bb:83:6b:32:e2:33:e8:20: a6:d5:0c:68:d3:a1:ec:d2:6a:12:d4:f8:95:eb:a9: a7:0c:a3:c5:9f:d1:ae:77:fb:b8:1c:1a:e1:4e:a6: be:df:5c:2c:d1:1b:0a:23:ed:62:81:b1:c2:d1:f1: a0:dd:b3:c9:6f:15:5b:7f:8e:d1:6a:40:32:16:9d: f0:6c:f9:54:7b:ce:8b:78:e0:e9:86:e4:84:8b:83: 4b:36:07:04:23:53:39:78:86:6a:2b:86:64:7b:db: 4c:26:40:49:a9:34:0b:82:51:5b:03:b0:3b:a8:9a: b1:27:d6:c2:70:a6:79:7f:9d:76:10:bd:3b:64:f7: 72:90:7c:cf:7f:6f:d0:80:f5:6e:a5:a8:f7:29:b0: e4:3d:99:99:96:37:a5:55:a9:a8:b3:a3:59:31:ca: 45:27:12:5f:99:33:2b:b2:04:b6:ad:10:14:1b:06: fa:d1:0e:b5:7f:66:ba:f6:4a:44:25:d4:b3:07:4b: 79:1d:4c:30:39:32:fe:e2:ba:27:3a:c7:92:0c:68: b9:b8:27:b6:81:b9:e7:e3:be:0d:3f:e6:50:cf:cc: af:2e:9f:8a:dd:e4:b6:24:62:40:0d:74:92:94:b0: a1:5d:78:e1:1d:9d:9b:cb:4a:86:b3:fd:9f:07:1f: 36:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:61:D9:64:DF:4A:86:DB:8F:FB:99:AA:89:58:2D:A6:8A:30:90:8C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.134.99.0/24 Signature Algorithm: sha256WithRSAEncryption 18:3a:ca:13:1f:a7:e2:cb:70:08:6f:bc:a1:a4:55:71:ad:fb: 81:0f:c3:e7:05:54:f2:43:64:a0:3d:2f:86:96:c5:58:82:f1: d8:64:07:69:73:e2:fa:95:ec:7a:0b:ba:32:61:d1:1a:23:e8: 6b:a9:d7:45:85:e8:9a:8a:4c:a7:d3:ca:f2:72:40:e6:2d:e3: ac:4d:96:32:c4:a9:5a:5a:ce:1a:36:a4:5d:ed:07:d6:95:f2: be:18:de:51:d3:fe:53:fc:09:eb:2e:f0:d7:ef:f0:6e:5b:12: 13:34:69:a1:28:de:c9:68:0d:0d:93:93:a5:34:b2:ee:da:c4: 41:7b:11:53:b5:2c:bc:5a:6e:23:b8:13:c8:dc:5a:0e:1b:6f: 26:90:cd:28:cf:3e:c0:f9:6c:80:4c:4a:65:77:3e:1c:a6:45: fe:3f:c3:29:71:2f:f6:8e:ca:bd:f3:9b:8e:cd:e2:4a:2f:92: cd:40:14:af:e2:d7:03:6d:ea:66:38:d9:67:ff:60:a7:27:e7: b9:b4:f6:a9:12:39:2b:66:77:bd:a6:8f:4f:84:9f:fe:2c:78: 2e:75:bf:8c:cb:72:22:4e:35:04:17:eb:7c:51:29:0d:6b:26: 9c:0d:25:06:1c:6a:f3:62:6e:af:fc:61:70:1f:4f:42:d3:bc: 44:12:b2:bf -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt6yKgiOwVbTnzPhkkvVJRgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NjYxZDk2NGRmNGE4NmRiOGZmYjk5YWE4OTU4MmRhNjhhMzA5MDhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQuDdbmOu4NrMuIz6CCm1Qxo06Hs 0moS1PiV66mnDKPFn9Gud/u4HBrhTqa+31ws0RsKI+1igbHC0fGg3bPJbxVbf47R akAyFp3wbPlUe86LeODphuSEi4NLNgcEI1M5eIZqK4Zke9tMJkBJqTQLglFbA7A7 qJqxJ9bCcKZ5f512EL07ZPdykHzPf2/QgPVupaj3KbDkPZmZljelVamos6NZMcpF JxJfmTMrsgS2rRAUGwb60Q61f2a69kpEJdSzB0t5HUwwOTL+4ronOseSDGi5uCe2 gbnn474NP+ZQz8yvLp+K3eS2JGJADXSSlLChXXjhHZ2by0qGs/2fBx82JQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFFZh2WTfSobbj/uZqolYLaaKMJCMMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRjL2IwM2Ez Ni0wODA3LTQxZWYtYWY4Ni0zZDQzOWI3Y2RlNzIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGMvYjAzYTM2 LTA4MDctNDFlZi1hZjg2LTNkNDM5YjdjZGU3Mi8xL1ZtSFpaTjlLaHR1UC01bXFp Vmd0cG9vd2tJdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQALYZjMA0GCSqGSIb3DQEBCwUAA4IBAQAYOsoT H6fiy3AIb7yhpFVxrfuBD8PnBVTyQ2SgPS+GlsVYgvHYZAdpc+L6lex6C7oyYdEa I+hrqddFheiaikyn08ryckDmLeOsTZYyxKlaWs4aNqRd7QfWlfK+GN5R0/5T/Anr LvDX7/BuWxITNGmhKN7JaA0Nk5OlNLLu2sRBexFTtSy8Wm4juBPI3FoOG28mkM0o zz7A+WyATEpldz4cpkX+P8MpcS/2jsq985uOzeJKL5LNQBSv4tcDbepmONln/2Cn J+e5tPapEjkrZne9po9PhJ/+LHgudb+My3IiTjUEF+t8USkNayacDSUGHGrzYm6v /GFwH09C07xEErK/ -----END CERTIFICATE-----Generated at Mon Jan 26 05:56:40 2026 by rpki-client