This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer File: VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer (raw, json) Hash identifier: 5mlxtAy9Mj4GoLcu0dFMd50/SEW9ESwSpDSP6lFfJlg= Subject key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A2125E3BC30FD4730F42C70F20A2A4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:17:26 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 31.41.248.0/24 IP: 37.140.244.0/24 IP: 62.68.80.0/24 IP: 91.190.154.0/24 IP: 91.212.216.0/24 IP: 91.239.217.0/24 IP: 94.103.177.0/24 IP: 146.255.189.0/24 IP: 178.211.159.0/24 IP: 194.69.163.0/24 IP: 212.46.33.0/24 IP: 212.46.35.0/24 IP: 2001:3080::/29 IP: 2001:3180::/29 IP: 2001:3280::/29 IP: 2001:3380::/29 IP: 2a0b:3e00::/29 IP: 2a0c:8340::/29 IP: 2a0e:a780::/29 IP: 2a10:6c40::/29 IP: 2a10:9600::/29 IP: 2a11:ad80::/29 IP: 2a13:1880::/29 IP: 2a13:8000::/29 IP: 2a13:b640::/29 IP: 2a13:b840::/29 IP: 2a13:bfc0::/29 IP: 2a13:c040::/29 IP: 2a13:c0c0::/29 IP: 2a13:c140::/29 IP: 2a13:d240::/29 IP: 2a13:d2c0::/29 IP: 2a13:ddc0::/29 IP: 2a13:de40::/29 IP: 2a14:35c0::/29 IP: 2a14:5740::/29 IP: 2a14:5840::/29 IP: 2a14:58c0::/29 IP: 2a14:6ac0::/29 IP: 2a14:6b40::/29 IP: 2a14:6bc0::/29 IP: 2a14:72c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:12:5e:3b:c3:0f:d4:73:0f:42:c7:0f:20:a2:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:17:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=56b98f83ccbda7c19f004151c98b57c59d268f54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:4d:b7:f1:21:3f:de:e9:97:ce:60:4c:93:63: 88:2f:10:1f:f0:ec:2f:a5:16:b2:2f:f5:27:7e:20: f4:74:61:49:15:b2:7b:17:f6:e4:9b:3f:45:6b:81: 62:6f:64:45:6b:d4:fb:e4:fa:f9:14:e0:ab:fc:7a: 19:c5:ae:c7:13:97:9c:cd:c1:e3:54:43:5c:ba:19: 73:74:01:21:d3:e0:49:7a:07:44:6f:76:c4:b2:80: 3a:89:52:53:19:33:9a:b1:df:c9:68:b9:d4:f5:b0: 35:9e:1d:3f:21:7a:87:44:8b:66:d9:3c:34:15:eb: e8:69:d6:53:80:04:5a:8f:e8:f1:20:73:d1:bb:c9: a5:c7:29:20:4c:da:99:c6:00:24:ac:9d:24:09:3e: b7:9f:b6:01:e2:26:8c:e2:7e:e3:a9:40:39:95:0e: 8d:11:a6:06:f5:83:5e:c4:2f:3d:5d:b4:ac:44:7a: 66:28:26:00:7d:49:23:9b:02:8b:de:4b:d9:d5:d1: f7:d2:1f:52:f2:ef:d3:ec:12:de:18:8f:75:9e:71: d7:fb:ee:64:36:ff:40:ea:27:30:fc:13:1c:f0:31: 4c:9b:46:5c:99:19:f0:ad:85:a3:3f:a7:64:44:ca: 65:f3:7d:e0:51:2f:ed:26:fe:cf:bf:b2:09:b5:44: 88:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.41.248.0/24 37.140.244.0/24 62.68.80.0/24 91.190.154.0/24 91.212.216.0/24 91.239.217.0/24 94.103.177.0/24 146.255.189.0/24 178.211.159.0/24 194.69.163.0/24 212.46.33.0/24 212.46.35.0/24 IPv6: 2001:3080::/29 2001:3180::/29 2001:3280::/29 2001:3380::/29 2a0b:3e00::/29 2a0c:8340::/29 2a0e:a780::/29 2a10:6c40::/29 2a10:9600::/29 2a11:ad80::/29 2a13:1880::/29 2a13:8000::/29 2a13:b640::/29 2a13:b840::/29 2a13:bfc0::/29 2a13:c040::/29 2a13:c0c0::/29 2a13:c140::/29 2a13:d240::/29 2a13:d2c0::/29 2a13:ddc0::/29 2a13:de40::/29 2a14:35c0::/29 2a14:5740::/29 2a14:5840::/29 2a14:58c0::/29 2a14:6ac0::/29 2a14:6b40::/29 2a14:6bc0::/29 2a14:72c0::/29 Signature Algorithm: sha256WithRSAEncryption 57:3d:aa:10:ce:ef:c3:fe:65:3e:b4:b6:76:39:8e:7a:6b:f1: 71:54:c0:92:2e:4b:dc:d7:d5:c5:21:df:ec:01:0d:f7:6c:b3: e5:18:c6:d8:ab:29:25:74:e8:cf:88:1c:07:a5:11:7f:64:fc: b8:c2:76:51:82:f7:64:f3:6e:b3:c8:1a:62:1e:52:15:15:2e: 42:65:7f:c1:02:cc:76:d3:83:c9:19:50:0a:cc:75:0f:6c:e1: 3f:1e:7f:58:4e:43:53:1a:59:1c:06:87:00:c7:fe:49:6b:96: 2b:32:84:84:2f:66:4f:d2:96:29:44:f9:ff:63:db:48:fa:3f: 92:44:57:a7:2c:c1:37:96:4e:7d:f1:a5:84:eb:e7:66:80:aa: 22:96:67:ea:c0:88:db:e4:34:71:50:c9:4b:b1:f1:2b:4b:32: 4b:42:c5:06:7c:45:18:ec:89:5b:6c:6e:22:bf:38:44:ad:0a: ec:88:c1:8c:12:37:18:ca:46:0d:c1:6e:56:07:6b:c4:22:6d: 14:f1:df:05:50:40:2c:cc:f2:9c:68:ba:75:52:48:4e:92:19: aa:96:f2:aa:ec:31:1a:e5:1f:50:05:c6:a5:9f:b0:66:7e:7a: a3:02:ed:4e:b3:f8:67:10:68:06:ab:05:5f:2a:39:c9:a4:f9: 7b:98:72:3b -----BEGIN CERTIFICATE----- MIIGnDCCBYSgAwIBAgISAZt4ohJeO8MP1HMPQscPIKKkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxNzI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NmI5OGY4M2NjYmRhN2MxOWYwMDQxNTFjOThiNTdjNTlkMjY4ZjU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsU238SE/3umXzmBMk2OILxAf8Owv pRayL/UnfiD0dGFJFbJ7F/bkmz9Fa4Fib2RFa9T75Pr5FOCr/HoZxa7HE5eczcHj VENcuhlzdAEh0+BJegdEb3bEsoA6iVJTGTOasd/JaLnU9bA1nh0/IXqHRItm2Tw0 FevoadZTgARaj+jxIHPRu8mlxykgTNqZxgAkrJ0kCT63n7YB4iaM4n7jqUA5lQ6N EaYG9YNexC89XbSsRHpmKCYAfUkjmwKL3kvZ1dH30h9S8u/T7BLeGI91nnHX++5k Nv9A6icw/BMc8DFMm0ZcmRnwrYWjP6dkRMpl833gUS/tJv7Pv7IJtUSI5wIDAQAB o4IDqDCCA6QwHQYDVR0OBBYEFFa5j4PMvafBnwBBUcmLV8WdJo9UMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgzLzhjYjkz NS03MWEzLTRkYjMtOWYzZi03YWE3ZmMzNTk2NTUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODMvOGNiOTM1 LTcxYTMtNGRiMy05ZjNmLTdhYTdmYzM1OTY1NS8xL1ZybVBnOHk5cDhHZkFFRlJ5 WXRYeFowbWoxUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIBQQYIKwYB BQUHAQcBAf8EggEwMIIBLDBOBAIAATBIAwQAHyn4AwQAJYz0AwQAPkRQAwQAW76a AwQAW9TYAwQAW+/ZAwQAXmexAwQAkv+9AwQAstOfAwQAwkWjAwQA1C4hAwQA1C4j MIHZBAIAAjCB0gMFAyABMIADBQMgATGAAwUDIAEygAMFAyABM4ADBQMqCz4AAwUD KgyDQAMFAyoOp4ADBQMqEGxAAwUDKhCWAAMFAyoRrYADBQMqExiAAwUDKhOAAAMF AyoTtkADBQMqE7hAAwUDKhO/wAMFAyoTwEADBQMqE8DAAwUDKhPBQAMFAyoT0kAD BQMqE9LAAwUDKhPdwAMFAyoT3kADBQMqFDXAAwUDKhRXQAMFAyoUWEADBQMqFFjA AwUDKhRqwAMFAyoUa0ADBQMqFGvAAwUDKhRywDANBgkqhkiG9w0BAQsFAAOCAQEA Vz2qEM7vw/5lPrS2djmOemvxcVTAki5L3NfVxSHf7AEN92yz5RjG2KspJXToz4gc B6URf2T8uMJ2UYL3ZPNus8gaYh5SFRUuQmV/wQLMdtODyRlQCsx1D2zhPx5/WE5D UxpZHAaHAMf+SWuWKzKEhC9mT9KWKUT5/2PbSPo/kkRXpyzBN5ZOffGlhOvnZoCq IpZn6sCI2+Q0cVDJS7HxK0syS0LFBnxFGOyJW2xuIr84RK0K7IjBjBI3GMpGDcFu VgdrxCJtFPHfBVBALMzynGi6dVJITpIZqpbyquwxGuUfUAXGpZ+wZn56owLtTrP4 ZxBoBqsFXyo5yaT5e5hyOw== -----END CERTIFICATE-----Generated at Sun Jan 25 19:22:19 2026 by rpki-client