This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VtTyDkiCB7AltwAA0I5lOmQ895A.cer File: VtTyDkiCB7AltwAA0I5lOmQ895A.cer (raw, json) Hash identifier: +vK9hgT0KPggjHr+TBK3Fc3dcMsJ0kEoZuWGUCv21G0= Subject key identifier: 56:D4:F2:0E:48:82:07:B0:25:B7:00:00:D0:8E:65:3A:64:3C:F7:90 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC8DFA691B0A15471E9CA682D457A4A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:19:03 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 214171 IP: 2001:39c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:df:a6:91:b0:a1:54:71:e9:ca:68:2d:45:7a:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=56d4f20e488207b025b70000d08e653a643cf790 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e7:c3:10:97:00:f7:6d:6d:7c:72:5b:5d:38: 85:9f:8c:5a:c7:9e:55:c2:93:4f:49:25:ba:9d:66: 06:25:76:e8:ac:c5:74:8d:19:2c:78:ca:bf:25:14: ee:dc:a0:ff:57:52:f0:ef:76:8b:cd:78:eb:80:12: a5:2a:23:4e:0e:84:95:cf:19:71:2b:38:54:e1:07: 09:86:25:45:45:fd:4e:98:c3:18:e3:3c:79:b8:46: 64:b0:e3:44:cb:62:d4:af:f5:26:a7:9f:ab:02:c2: 26:59:c9:cb:3d:62:6b:50:7a:20:67:30:17:40:82: e2:76:30:04:40:d2:48:19:08:e3:b7:8d:a1:79:b5: ec:d5:74:7a:3d:87:13:80:f4:d1:82:a1:59:72:1d: 06:ee:26:8f:66:45:37:3e:80:93:8e:8d:a8:30:c7: d2:f1:9a:7a:da:3c:88:99:61:d4:bd:00:15:8b:8e: 7c:cd:3e:d7:32:94:a5:be:46:6f:50:7e:56:c8:d7: 9c:a8:4b:59:b5:68:62:34:a7:52:38:a2:ff:98:b6: 04:c4:95:b5:40:35:ed:84:f7:17:5f:b5:05:59:84: 38:ba:6a:0b:9e:12:dc:02:55:52:a2:6e:f4:9e:fd: e0:32:59:68:9d:c9:99:6f:36:b2:a7:83:9d:a2:9f: 36:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:D4:F2:0E:48:82:07:B0:25:B7:00:00:D0:8E:65:3A:64:3C:F7:90 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:39c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 214171 Signature Algorithm: sha256WithRSAEncryption 69:ec:14:f5:41:09:5f:35:4e:de:99:5e:ce:76:b5:86:5a:41: cd:1c:4f:0b:23:15:a7:29:d4:33:58:a2:06:19:e8:3a:da:69: 89:df:c8:5a:34:ee:1f:aa:0b:80:6a:9c:60:ed:f2:e9:5e:43: 2b:c1:00:ec:65:28:2c:d6:69:fd:cf:8f:88:1d:44:af:72:56: 00:bf:48:82:95:7b:6d:26:94:8a:99:1a:55:ef:66:17:fb:ec: 63:5d:e6:2a:3d:54:ff:0f:9c:a4:84:de:a6:9b:62:69:20:3d: f8:66:ad:39:3a:d0:98:4f:d4:2f:68:2b:fd:c2:d9:dc:53:14: 9c:0b:a5:c5:2f:1b:e9:14:dc:ed:93:b7:16:7a:06:07:c2:c1: 8a:99:80:07:59:a3:92:22:f4:4e:62:88:1e:79:f3:ba:a8:d7: cc:37:13:c4:1e:26:ae:c4:81:b0:d2:1a:b9:86:4c:fa:9a:41: e5:e8:b1:39:b6:95:10:07:d8:df:4b:2e:8f:10:72:b4:e2:45: 43:87:f0:99:fd:05:ab:51:89:c6:7a:e6:1b:bc:b4:67:d7:85: a5:e0:62:c3:1f:2f:eb:50:7f:21:8b:e3:70:f8:43:ea:47:11: 97:85:ac:1f:26:9e:4b:8c:51:c8:ce:b3:df:53:03:d5:10:71: e7:a8:36:08 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgISAZt6yN+mkbChVHHpymgtRXpKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NmQ0ZjIwZTQ4ODIwN2IwMjViNzAwMDBkMDhlNjUzYTY0M2NmNzkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOfDEJcA921tfHJbXTiFn4xax55V wpNPSSW6nWYGJXborMV0jRkseMq/JRTu3KD/V1Lw73aLzXjrgBKlKiNODoSVzxlx KzhU4QcJhiVFRf1OmMMY4zx5uEZksONEy2LUr/Ump5+rAsImWcnLPWJrUHogZzAX QILidjAEQNJIGQjjt42hebXs1XR6PYcTgPTRgqFZch0G7iaPZkU3PoCTjo2oMMfS 8Zp62jyImWHUvQAVi458zT7XMpSlvkZvUH5WyNecqEtZtWhiNKdSOKL/mLYExJW1 QDXthPcXX7UFWYQ4umoLnhLcAlVSom70nv3gMlloncmZbzayp4Odop82qQIDAQAB o4ICoTCCAp0wHQYDVR0OBBYEFFbU8g5IggewJbcAANCOZTpkPPeQMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ2LzZlYjg5 OS0xOWJjLTQ1ZmMtODZkZi05MDhlNjkyY2YzYzIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDYvNmViODk5 LTE5YmMtNDVmYy04NmRmLTkwOGU2OTJjZjNjMi8xL1Z0VHlEa2lDQjdBbHR3QUEw STVsT21RODk1QS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF BwEHAQH/BBEwDzANBAIAAjAHAwUDIAE5wDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMDRJswDQYJKoZIhvcNAQELBQADggEBAGnsFPVBCV81Tt6ZXs52tYZaQc0cTwsj Facp1DNYogYZ6DraaYnfyFo07h+qC4BqnGDt8uleQyvBAOxlKCzWaf3Pj4gdRK9y VgC/SIKVe20mlIqZGlXvZhf77GNd5io9VP8PnKSE3qabYmkgPfhmrTk60JhP1C9o K/3C2dxTFJwLpcUvG+kU3O2TtxZ6BgfCwYqZgAdZo5Ii9E5iiB5587qo18w3E8Qe Jq7EgbDSGrmGTPqaQeXosTm2lRAH2N9LLo8QcrTiRUOH8Jn9BatRicZ65hu8tGfX haXgYsMfL+tQfyGL43D4Q+pHEZeFrB8mnkuMUcjOs99TA9UQceeoNgg= -----END CERTIFICATE-----Generated at Mon Jan 26 13:40:42 2026 by rpki-client