This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VtZBSGvcmNSn3gkopC19aOYBXzA.cer File: VtZBSGvcmNSn3gkopC19aOYBXzA.cer (raw, json) Hash identifier: 6M07cY7igpXjwtFNpf0a/JXFoFUyurGhqnIRbbBwY/E= Subject key identifier: 56:D6:41:48:6B:DC:98:D4:A7:DE:09:28:A4:2D:7D:68:E6:01:5F:30 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019AA66DBFC99856465776A6EBF155ADCE9B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 21 Nov 2025 12:40:01 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 216071 IP: 5.35.32.0/21 IP: 5.35.44.0/22 IP: 5.35.68.0/22 IP: 46.149.72.0/21 IP: 46.151.24.0/21 IP: 62.84.96.0/21 IP: 77.105.136.0/21 IP: 77.238.224.0/19 IP: 77.246.96.0/20 IP: 78.40.192.0/21 IP: 80.85.244.0/22 IP: 88.210.3.0/24 IP: 88.210.6.0/24 IP: 88.210.9.0 -- 88.210.14.255 IP: 89.110.64.0/18 IP: 89.124.64.0/18 IP: 91.84.96.0/19 IP: 91.201.112.0/22 IP: 91.246.41.0/24 IP: 93.183.88.0/22 IP: 93.183.124.0/22 IP: 94.103.80.0 -- 94.103.82.255 IP: 94.103.94.0/23 IP: 109.107.164.0/22 IP: 109.107.172.0 -- 109.107.179.255 IP: 109.107.184.0/22 IP: 109.234.33.0 -- 109.234.39.255 IP: 141.163.112.0/20 IP: 144.124.224.0/19 IP: 146.103.96.0/19 IP: 178.130.40.0/22 IP: 178.217.102.0/24 IP: 185.21.12.0/22 IP: 185.121.232.0/22 IP: 185.157.212.0/22 IP: 185.245.104.0/22 IP: 193.33.194.0/23 IP: 193.178.169.0/24 IP: 193.178.172.0/24 IP: 193.178.174.0/24 IP: 194.60.132.0/22 IP: 194.164.32.0/22 IP: 194.246.81.0 -- 194.246.83.255 IP: 195.2.86.0/24 IP: 195.2.92.0/23 IP: 195.26.224.0/22 IP: 195.200.16.0/22 IP: 195.200.26.0/24 IP: 195.200.28.0/22 IP: 195.200.64.0/24 IP: 212.34.128.0 -- 212.34.155.255 IP: 212.111.80.0 -- 212.111.82.255 IP: 212.111.88.0/23 IP: 212.118.36.0 -- 212.118.43.255 IP: 212.118.52.0/22 IP: 2a06:7740::/29 IP: 2a0d:8480::/29 IP: 2a14:1e00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a6:6d:bf:c9:98:56:46:57:76:a6:eb:f1:55:ad:ce:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Nov 21 12:40:01 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=56d641486bdc98d4a7de0928a42d7d68e6015f30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e4:8e:ef:31:32:4e:38:f0:4a:d0:cd:a7:03: fb:09:4b:d9:35:62:70:90:5b:e8:e0:c2:ce:f9:d8: 24:78:ab:4c:ec:3e:28:9a:9e:22:2c:fe:42:a2:5d: 67:92:70:55:fa:50:1c:b3:4a:3d:ec:75:2b:a5:5c: 5b:34:67:7f:74:02:a5:96:f1:fa:04:c8:fc:3d:40: f3:9c:14:d3:ce:62:e5:57:89:64:21:af:24:8f:14: e8:fb:fd:66:a2:3b:8e:bc:d5:60:46:b1:95:3f:18: 84:3d:60:b4:df:ad:b1:a5:63:d2:c1:9d:fa:fa:c3: ad:1a:10:dc:4c:46:51:87:47:da:05:19:49:4f:75: b4:5b:ef:76:8c:13:c8:4a:55:4a:68:15:1f:d4:c5: 7d:2d:d7:df:7b:82:7a:e9:c1:59:b7:89:79:93:20: 25:2e:40:b6:2c:81:5a:4b:fc:32:99:a1:fc:f2:74: 57:ad:f0:f5:76:47:3f:73:e7:b3:ba:d0:59:c2:28: c8:53:df:22:49:78:85:d1:45:e9:2d:75:f2:74:e4: 5b:b5:b5:8f:6c:cf:15:74:61:1e:74:cf:ee:fe:13: cd:04:19:f4:4f:31:b7:ae:c2:20:72:f7:d7:16:81: ca:56:54:17:72:94:bc:16:41:ec:d0:38:37:65:07: e0:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:D6:41:48:6B:DC:98:D4:A7:DE:09:28:A4:2D:7D:68:E6:01:5F:30 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.35.32.0/21 5.35.44.0/22 5.35.68.0/22 46.149.72.0/21 46.151.24.0/21 62.84.96.0/21 77.105.136.0/21 77.238.224.0/19 77.246.96.0/20 78.40.192.0/21 80.85.244.0/22 88.210.3.0/24 88.210.6.0/24 88.210.9.0-88.210.14.255 89.110.64.0/18 89.124.64.0/18 91.84.96.0/19 91.201.112.0/22 91.246.41.0/24 93.183.88.0/22 93.183.124.0/22 94.103.80.0-94.103.82.255 94.103.94.0/23 109.107.164.0/22 109.107.172.0-109.107.179.255 109.107.184.0/22 109.234.33.0-109.234.39.255 141.163.112.0/20 144.124.224.0/19 146.103.96.0/19 178.130.40.0/22 178.217.102.0/24 185.21.12.0/22 185.121.232.0/22 185.157.212.0/22 185.245.104.0/22 193.33.194.0/23 193.178.169.0/24 193.178.172.0/24 193.178.174.0/24 194.60.132.0/22 194.164.32.0/22 194.246.81.0-194.246.83.255 195.2.86.0/24 195.2.92.0/23 195.26.224.0/22 195.200.16.0/22 195.200.26.0/24 195.200.28.0/22 195.200.64.0/24 212.34.128.0-212.34.155.255 212.111.80.0-212.111.82.255 212.111.88.0/23 212.118.36.0-212.118.43.255 212.118.52.0/22 IPv6: 2a06:7740::/29 2a0d:8480::/29 2a14:1e00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 216071 Signature Algorithm: sha256WithRSAEncryption 6c:b0:1e:e3:a4:1d:60:8e:76:69:53:6e:d3:2e:6b:58:f1:fb: cb:24:c9:46:e5:a5:9d:cd:ad:0d:a4:6d:1e:83:1d:c4:b0:85: 14:3c:5f:41:37:08:39:63:57:50:20:9c:fd:23:12:6b:17:d6: 59:dc:78:5c:a1:55:9e:01:94:dd:d8:2d:00:9c:68:40:e7:bc: e3:83:64:e2:a7:14:e5:f1:49:fe:f8:ec:ab:20:64:c7:26:eb: 6b:22:0e:8f:42:ab:17:ea:d9:2b:99:e1:85:95:05:e7:5d:01: c5:e2:44:e8:24:aa:57:b1:13:17:6a:dd:47:60:7b:83:56:e2: f6:53:10:5c:e4:40:cb:47:81:f2:3c:0d:40:78:90:60:c0:51: 7c:e9:65:a6:c8:b6:77:d3:45:2b:2a:00:8e:de:1e:5d:94:a7: e0:6d:f9:b0:f8:94:17:97:ff:49:9a:70:33:2d:a4:24:23:36: b7:3e:24:af:a9:34:7c:9c:95:4f:57:7c:9b:89:60:78:c0:bb: 11:47:a7:ca:b6:5e:3b:b5:b7:08:99:e3:87:80:58:af:0a:47: a9:1a:d6:cc:28:ff:b6:4a:9d:27:69:9a:f9:62:29:75:7d:25: 5f:bc:56:a4:df:51:2e:e8:b8:1f:b5:75:c0:02:ea:33:df:3b: 84:dc:a3:30 -----BEGIN CERTIFICATE----- MIIHPzCCBiegAwIBAgISAZqmbb/JmFZGV3am6/FVrc6bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMTIxMTI0MDAxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NmQ2NDE0ODZiZGM5OGQ0YTdkZTA5MjhhNDJkN2Q2OGU2MDE1ZjMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOSO7zEyTjjwStDNpwP7CUvZNWJw kFvo4MLO+dgkeKtM7D4omp4iLP5Col1nknBV+lAcs0o97HUrpVxbNGd/dAKllvH6 BMj8PUDznBTTzmLlV4lkIa8kjxTo+/1mojuOvNVgRrGVPxiEPWC0362xpWPSwZ36 +sOtGhDcTEZRh0faBRlJT3W0W+92jBPISlVKaBUf1MV9Ldffe4J66cFZt4l5kyAl LkC2LIFaS/wymaH88nRXrfD1dkc/c+ezutBZwijIU98iSXiF0UXpLXXydORbtbWP bM8VdGEedM/u/hPNBBn0TzG3rsIgcvfXFoHKVlQXcpS8FkHs0Dg3ZQfgbQIDAQAB o4IESzCCBEcwHQYDVR0OBBYEFFbWQUhr3JjUp94JKKQtfWjmAV8wMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YzL2I2NTEy Ni0zMWNiLTRhZTYtYmVjYS1lM2UwNGJkNGYyNDIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjMvYjY1MTI2 LTMxY2ItNGFlNi1iZWNhLWUzZTA0YmQ0ZjI0Mi8xL1Z0WkJTR3ZjbU5TbjNna29w QzE5YU9ZQlh6QS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIByAYIKwYB BQUHAQcBAf8EggG3MIIBszCCAZIEAgABMIIBigMEAwUjIAMEAgUjLAMEAgUjRAME Ay6VSAMEAy6XGAMEAz5UYAMEA01piAMEBU3u4AMEBE32YAMEA04owAMEAlBV9AME AFjSAwMEAFjSBjAMAwQAWNIJAwQAWNIOAwQGWW5AAwQGWXxAAwQFW1RgAwQCW8lw AwQAW/YpAwQCXbdYAwQCXbd8MAwDBAReZ1ADBABeZ1IDBAFeZ14DBAJta6QwDAME Am1rrAMEAm1rsAMEAm1ruDAMAwQAbeohAwQDbeogAwQEjaNwAwQFkHzgAwQFkmdg AwQCsoIoAwQAstlmAwQCuRUMAwQCuXnoAwQCuZ3UAwQCufVoAwQBwSHCAwQAwbKp AwQAwbKsAwQAwbKuAwQCwjyEAwQCwqQgMAwDBADC9lEDBALC9lADBADDAlYDBAHD AlwDBALDGuADBALDyBADBADDyBoDBALDyBwDBADDyEAwDAMEB9QigAMEAtQimDAM AwQE1G9QAwQA1G9SAwQB1G9YMAwDBALUdiQDBALUdigDBALUdjQwGwQCAAIwFQMF AyoGd0ADBQMqDYSAAwUDKhQeADAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDTAcw DQYJKoZIhvcNAQELBQADggEBAGywHuOkHWCOdmlTbtMua1jx+8skyUblpZ3NrQ2k bR6DHcSwhRQ8X0E3CDljV1AgnP0jEmsX1lnceFyhVZ4BlN3YLQCcaEDnvOODZOKn FOXxSf747KsgZMcm62siDo9Cqxfq2SuZ4YWVBeddAcXiROgkqlexExdq3Udge4NW 4vZTEFzkQMtHgfI8DUB4kGDAUXzpZabItnfTRSsqAI7eHl2Up+Bt+bD4lBeX/0ma cDMtpCQjNrc+JK+pNHyclU9XfJuJYHjAuxFHp8q2Xju1twiZ44eAWK8KR6ka1swo /7ZKnSdpmvliKXV9JV+8VqTfUS7ouB+1dcAC6jPfO4TcozA= -----END CERTIFICATE-----Generated at Sat Dec 6 08:23:14 2025 by rpki-client