This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.cer File: VnP6aEKXPt9i1Xm07-wvpk_b-Mg.cer (raw, json) Hash identifier: XYSqCEpaVr05VrM73Rn2DTHPhmAGPB25Fjtp7CTZ0m8= Subject key identifier: 56:73:FA:68:42:97:3E:DF:62:D5:79:B4:EF:EC:2F:A6:4F:DB:F8:C8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79EC34C493EEFEEDE4DDB81807851F58 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c7/78e5eb-c2af-4462-b859-898996c861df/1/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c7/78e5eb-c2af-4462-b859-898996c861df/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:01 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 42494 IP: 31.210.62.0/23 IP: 78.135.112.0/24 IP: 78.135.117.0 -- 78.135.127.255 IP: 95.214.72.0/22 IP: 212.68.47.0/24 IP: 2a09:da80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:34:c4:93:ee:fe:ed:e4:dd:b8:18:07:85:1f:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5673fa6842973edf62d579b4efec2fa64fdbf8c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:48:95:5f:f6:df:7c:99:d9:20:13:8e:3f:a3: 9e:67:e2:cd:5c:85:66:5c:1c:18:0e:c7:d6:08:bd: d2:90:bf:a7:19:23:79:7d:98:de:da:70:0f:38:6f: 6d:a0:cd:93:4d:1f:86:60:11:cb:c7:a1:aa:70:33: f7:c0:8e:e1:0b:e2:40:ff:19:2b:84:66:8b:d5:ec: 30:76:26:bd:65:bd:9d:4a:20:31:c7:a8:f4:77:b0: 02:ff:4d:bb:c7:bb:a5:98:d7:49:d2:35:da:c4:9a: 21:32:61:9d:9e:ce:4d:66:5c:2d:5f:05:70:07:4e: 51:54:43:a0:7f:6e:89:2a:91:30:ff:5d:cc:3f:fe: f2:d9:b2:77:b4:bc:c8:e1:fe:70:8c:94:c7:97:c7: 6c:29:6b:ac:47:07:52:6d:bc:bc:dd:9b:8c:09:c0: 2f:6e:2f:2d:ca:fc:e0:b7:ab:a6:15:6c:da:15:0d: c1:ac:1d:fb:41:2c:12:c4:d6:8f:cc:c8:2f:a1:6a: 6a:e0:54:d3:fa:c3:07:76:1e:ca:34:a9:69:7b:af: 4f:f1:5b:0c:31:10:5c:90:ab:64:ad:c9:1b:b6:1f: f4:3f:31:78:91:7a:23:4b:b2:f7:fe:bb:b1:a2:a5: b0:96:12:4a:03:3f:f9:b2:28:e7:76:cc:ca:40:ad: f3:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:73:FA:68:42:97:3E:DF:62:D5:79:B4:EF:EC:2F:A6:4F:DB:F8:C8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/78e5eb-c2af-4462-b859-898996c861df/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/78e5eb-c2af-4462-b859-898996c861df/1/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.210.62.0/23 78.135.112.0/24 78.135.117.0-78.135.127.255 95.214.72.0/22 212.68.47.0/24 IPv6: 2a09:da80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 42494 Signature Algorithm: sha256WithRSAEncryption 5d:c9:42:f6:0d:5f:27:cd:ce:0b:fa:31:82:91:c3:37:0b:a2: 6f:09:c7:8c:02:82:2c:0a:91:37:dc:e9:e9:4e:b7:3a:fb:22: 9b:71:2c:2e:b5:0e:fd:60:74:7f:91:82:75:d1:e5:89:39:7d: c5:e4:89:4d:89:d1:fd:3d:a4:e2:43:ce:43:c4:3a:84:df:9a: 71:b7:c0:8f:3d:55:4e:6c:a0:1b:fc:f6:87:2a:90:2c:13:08: 0a:c1:da:b2:39:e4:68:3a:15:d1:8e:c8:57:7a:38:3f:9d:ce: 7d:65:32:57:b4:f3:94:a7:92:26:8a:d2:d3:58:12:80:8f:0d: 4a:96:50:80:88:42:a5:78:87:7b:d2:0f:4e:4c:d6:89:91:ce: 3c:61:ad:f3:9a:b4:be:06:78:2c:ed:4b:59:27:cd:e4:97:31: a8:6c:c5:49:ee:2e:0d:3c:05:7c:e0:80:04:38:13:57:39:6a: 92:d9:13:80:e7:2b:07:6e:94:0a:19:76:8d:3d:49:f6:f8:f5: 04:00:93:07:30:b8:31:51:24:10:59:57:c3:0a:c6:35:aa:53: 67:10:5b:f3:05:c6:b2:16:dd:68:c8:cb:95:55:db:56:7d:b2: 79:14:ae:cd:e7:cf:e5:9a:a6:3c:bb:1d:77:0b:4e:11:a6:68: 5c:8d:9a:33 -----BEGIN CERTIFICATE----- MIIFwzCCBKugAwIBAgISAZt57DTEk+7+7eTduBgHhR9YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NjczZmE2ODQyOTczZWRmNjJkNTc5YjRlZmVjMmZhNjRmZGJmOGM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEiVX/bffJnZIBOOP6OeZ+LNXIVm XBwYDsfWCL3SkL+nGSN5fZje2nAPOG9toM2TTR+GYBHLx6GqcDP3wI7hC+JA/xkr hGaL1ewwdia9Zb2dSiAxx6j0d7AC/027x7ulmNdJ0jXaxJohMmGdns5NZlwtXwVw B05RVEOgf26JKpEw/13MP/7y2bJ3tLzI4f5wjJTHl8dsKWusRwdSbby83ZuMCcAv bi8tyvzgt6umFWzaFQ3BrB37QSwSxNaPzMgvoWpq4FTT+sMHdh7KNKlpe69P8VsM MRBckKtkrckbth/0PzF4kXojS7L3/ruxoqWwlhJKAz/5sijndszKQK3zYwIDAQAB o4ICzzCCAsswHQYDVR0OBBYEFFZz+mhClz7fYtV5tO/sL6ZP2/jIMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M3Lzc4ZTVl Yi1jMmFmLTQ0NjItYjg1OS04OTg5OTZjODYxZGYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzcvNzhlNWVi LWMyYWYtNDQ2Mi1iODU5LTg5ODk5NmM4NjFkZi8xL1ZuUDZhRUtYUHQ5aTFYbTA3 LXd2cGtfYi1NZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CME4GCCsGAQUF BwEHAQH/BD8wPTAsBAIAATAmAwQBH9I+AwQATodwMAwDBABOh3UDBAdOhwADBAJf 1kgDBADURC8wDQQCAAIwBwMFAyoJ2oAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID AKX+MA0GCSqGSIb3DQEBCwUAA4IBAQBdyUL2DV8nzc4L+jGCkcM3C6JvCceMAoIs CpE33OnpTrc6+yKbcSwutQ79YHR/kYJ10eWJOX3F5IlNidH9PaTiQ85DxDqE35px t8CPPVVObKAb/PaHKpAsEwgKwdqyOeRoOhXRjshXejg/nc59ZTJXtPOUp5ImitLT WBKAjw1KllCAiEKleId70g9OTNaJkc48Ya3zmrS+Bngs7UtZJ83klzGobMVJ7i4N PAV84IAEOBNXOWqS2ROA5ysHbpQKGXaNPUn2+PUEAJMHMLgxUSQQWVfDCsY1qlNn EFvzBcayFt1oyMuVVdtWfbJ5FK7N58/lmqY8ux13C04RpmhcjZoz -----END CERTIFICATE-----Generated at Sun Jan 25 18:25:38 2026 by rpki-client