This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VtZBSGvcmNSn3gkopC19aOYBXzA.cer File: VtZBSGvcmNSn3gkopC19aOYBXzA.cer (raw, json) Hash identifier: mG8AVHXNnRAukJWmIS5RLZ7ZRfck+mCWOdrfQOQqBpc= Subject key identifier: 56:D6:41:48:6B:DC:98:D4:A7:DE:09:28:A4:2D:7D:68:E6:01:5F:30 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B225DCA2276A27BE23D40BD090DBFBEB5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Mon 15 Dec 2025 14:15:30 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 216071 IP: 5.35.32.0/21 IP: 5.35.44.0/22 IP: 5.35.68.0/22 IP: 46.149.72.0/21 IP: 46.151.24.0/21 IP: 62.84.96.0/21 IP: 77.105.136.0/21 IP: 77.238.224.0/19 IP: 77.246.96.0/20 IP: 78.40.192.0/21 IP: 80.85.244.0/22 IP: 88.210.3.0/24 IP: 88.210.6.0/24 IP: 88.210.9.0 -- 88.210.14.255 IP: 89.110.64.0/18 IP: 89.124.64.0/18 IP: 91.84.96.0/19 IP: 91.201.112.0/22 IP: 91.246.41.0/24 IP: 93.183.88.0/22 IP: 93.183.124.0/22 IP: 94.103.80.0 -- 94.103.82.255 IP: 94.103.94.0/23 IP: 109.107.164.0/22 IP: 109.107.172.0 -- 109.107.179.255 IP: 109.107.184.0/22 IP: 109.234.33.0 -- 109.234.39.255 IP: 141.163.112.0/20 IP: 144.124.224.0/19 IP: 146.103.96.0/19 IP: 178.130.40.0/22 IP: 178.217.102.0/24 IP: 185.21.12.0/22 IP: 185.121.232.0/22 IP: 185.157.212.0/22 IP: 185.245.104.0/22 IP: 193.33.194.0/23 IP: 193.178.169.0/24 IP: 193.178.172.0/24 IP: 193.178.174.0/24 IP: 194.60.132.0/22 IP: 194.164.32.0/22 IP: 194.246.81.0 -- 194.246.83.255 IP: 195.2.86.0/24 IP: 195.2.92.0/23 IP: 195.26.224.0/22 IP: 195.63.128.0/18 IP: 195.200.16.0/22 IP: 195.200.26.0/24 IP: 195.200.28.0/22 IP: 195.200.64.0/24 IP: 212.34.128.0 -- 212.34.155.255 IP: 212.111.80.0 -- 212.111.82.255 IP: 212.111.88.0/23 IP: 212.118.36.0 -- 212.118.43.255 IP: 212.118.52.0/22 IP: 2a06:7740::/29 IP: 2a0d:8480::/29 IP: 2a14:1e00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:5d:ca:22:76:a2:7b:e2:3d:40:bd:09:0d:bf:be:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 15 14:15:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=56d641486bdc98d4a7de0928a42d7d68e6015f30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e4:8e:ef:31:32:4e:38:f0:4a:d0:cd:a7:03: fb:09:4b:d9:35:62:70:90:5b:e8:e0:c2:ce:f9:d8: 24:78:ab:4c:ec:3e:28:9a:9e:22:2c:fe:42:a2:5d: 67:92:70:55:fa:50:1c:b3:4a:3d:ec:75:2b:a5:5c: 5b:34:67:7f:74:02:a5:96:f1:fa:04:c8:fc:3d:40: f3:9c:14:d3:ce:62:e5:57:89:64:21:af:24:8f:14: e8:fb:fd:66:a2:3b:8e:bc:d5:60:46:b1:95:3f:18: 84:3d:60:b4:df:ad:b1:a5:63:d2:c1:9d:fa:fa:c3: ad:1a:10:dc:4c:46:51:87:47:da:05:19:49:4f:75: b4:5b:ef:76:8c:13:c8:4a:55:4a:68:15:1f:d4:c5: 7d:2d:d7:df:7b:82:7a:e9:c1:59:b7:89:79:93:20: 25:2e:40:b6:2c:81:5a:4b:fc:32:99:a1:fc:f2:74: 57:ad:f0:f5:76:47:3f:73:e7:b3:ba:d0:59:c2:28: c8:53:df:22:49:78:85:d1:45:e9:2d:75:f2:74:e4: 5b:b5:b5:8f:6c:cf:15:74:61:1e:74:cf:ee:fe:13: cd:04:19:f4:4f:31:b7:ae:c2:20:72:f7:d7:16:81: ca:56:54:17:72:94:bc:16:41:ec:d0:38:37:65:07: e0:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:D6:41:48:6B:DC:98:D4:A7:DE:09:28:A4:2D:7D:68:E6:01:5F:30 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.35.32.0/21 5.35.44.0/22 5.35.68.0/22 46.149.72.0/21 46.151.24.0/21 62.84.96.0/21 77.105.136.0/21 77.238.224.0/19 77.246.96.0/20 78.40.192.0/21 80.85.244.0/22 88.210.3.0/24 88.210.6.0/24 88.210.9.0-88.210.14.255 89.110.64.0/18 89.124.64.0/18 91.84.96.0/19 91.201.112.0/22 91.246.41.0/24 93.183.88.0/22 93.183.124.0/22 94.103.80.0-94.103.82.255 94.103.94.0/23 109.107.164.0/22 109.107.172.0-109.107.179.255 109.107.184.0/22 109.234.33.0-109.234.39.255 141.163.112.0/20 144.124.224.0/19 146.103.96.0/19 178.130.40.0/22 178.217.102.0/24 185.21.12.0/22 185.121.232.0/22 185.157.212.0/22 185.245.104.0/22 193.33.194.0/23 193.178.169.0/24 193.178.172.0/24 193.178.174.0/24 194.60.132.0/22 194.164.32.0/22 194.246.81.0-194.246.83.255 195.2.86.0/24 195.2.92.0/23 195.26.224.0/22 195.63.128.0/18 195.200.16.0/22 195.200.26.0/24 195.200.28.0/22 195.200.64.0/24 212.34.128.0-212.34.155.255 212.111.80.0-212.111.82.255 212.111.88.0/23 212.118.36.0-212.118.43.255 212.118.52.0/22 IPv6: 2a06:7740::/29 2a0d:8480::/29 2a14:1e00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 216071 Signature Algorithm: sha256WithRSAEncryption 4f:50:f9:95:f0:a2:71:8f:5c:35:fd:8c:21:12:b2:a2:6c:0f: fd:c1:97:a2:df:ee:f3:8c:25:d9:b7:27:c3:e9:83:e3:bd:62: 64:40:a5:21:a0:01:ca:35:96:aa:ef:c3:3b:e4:2b:4c:3f:5c: 6a:3b:a5:65:38:2b:df:d8:9e:a6:92:18:32:33:6e:78:a4:fc: 24:c8:db:f3:90:e1:8a:01:b9:35:ff:6d:f2:e2:ee:c4:4a:44: ed:0c:6f:59:79:e2:f5:c5:99:62:91:94:ce:50:4d:88:2c:be: 4b:02:45:28:fd:c6:d8:fd:71:b5:3c:74:9e:2d:d7:d4:fe:b9: c7:ad:ca:7d:87:0f:2b:af:d8:39:20:c5:16:7c:21:28:a0:75: d5:32:5e:5f:a9:7e:69:25:9d:87:8c:85:98:a8:1d:1a:be:cc: f1:c3:fd:75:10:94:d0:1d:04:48:c0:ee:cc:d6:fb:a2:c9:34: 39:ba:cd:51:73:af:cf:16:bc:b9:b4:39:56:47:8b:73:1f:d3: bb:fd:9e:87:70:73:61:1e:1c:aa:7c:a1:56:fd:19:bd:a7:4b: 30:08:c1:67:d0:3b:89:ac:e7:41:10:01:31:27:05:af:72:0b: 7c:13:18:5d:a2:22:b5:1b:15:b5:11:a3:dc:63:3a:9b:08:fd: 90:8b:84:9e -----BEGIN CERTIFICATE----- MIIHRTCCBi2gAwIBAgISAZsiXcoidqJ74j1AvQkNv761MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjE1MTQxNTMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NmQ2NDE0ODZiZGM5OGQ0YTdkZTA5MjhhNDJkN2Q2OGU2MDE1ZjMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOSO7zEyTjjwStDNpwP7CUvZNWJw kFvo4MLO+dgkeKtM7D4omp4iLP5Col1nknBV+lAcs0o97HUrpVxbNGd/dAKllvH6 BMj8PUDznBTTzmLlV4lkIa8kjxTo+/1mojuOvNVgRrGVPxiEPWC0362xpWPSwZ36 +sOtGhDcTEZRh0faBRlJT3W0W+92jBPISlVKaBUf1MV9Ldffe4J66cFZt4l5kyAl LkC2LIFaS/wymaH88nRXrfD1dkc/c+ezutBZwijIU98iSXiF0UXpLXXydORbtbWP bM8VdGEedM/u/hPNBBn0TzG3rsIgcvfXFoHKVlQXcpS8FkHs0Dg3ZQfgbQIDAQAB o4IEUTCCBE0wHQYDVR0OBBYEFFbWQUhr3JjUp94JKKQtfWjmAV8wMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YzL2I2NTEy Ni0zMWNiLTRhZTYtYmVjYS1lM2UwNGJkNGYyNDIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjMvYjY1MTI2 LTMxY2ItNGFlNi1iZWNhLWUzZTA0YmQ0ZjI0Mi8xL1Z0WkJTR3ZjbU5TbjNna29w QzE5YU9ZQlh6QS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIBzgYIKwYB BQUHAQcBAf8EggG9MIIBuTCCAZgEAgABMIIBkAMEAwUjIAMEAgUjLAMEAgUjRAME Ay6VSAMEAy6XGAMEAz5UYAMEA01piAMEBU3u4AMEBE32YAMEA04owAMEAlBV9AME AFjSAwMEAFjSBjAMAwQAWNIJAwQAWNIOAwQGWW5AAwQGWXxAAwQFW1RgAwQCW8lw AwQAW/YpAwQCXbdYAwQCXbd8MAwDBAReZ1ADBABeZ1IDBAFeZ14DBAJta6QwDAME Am1rrAMEAm1rsAMEAm1ruDAMAwQAbeohAwQDbeogAwQEjaNwAwQFkHzgAwQFkmdg AwQCsoIoAwQAstlmAwQCuRUMAwQCuXnoAwQCuZ3UAwQCufVoAwQBwSHCAwQAwbKp AwQAwbKsAwQAwbKuAwQCwjyEAwQCwqQgMAwDBADC9lEDBALC9lADBADDAlYDBAHD AlwDBALDGuADBAbDP4ADBALDyBADBADDyBoDBALDyBwDBADDyEAwDAMEB9QigAME AtQimDAMAwQE1G9QAwQA1G9SAwQB1G9YMAwDBALUdiQDBALUdigDBALUdjQwGwQC AAIwFQMFAyoGd0ADBQMqDYSAAwUDKhQeADAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMDTAcwDQYJKoZIhvcNAQELBQADggEBAE9Q+ZXwonGPXDX9jCESsqJsD/3Bl6Lf 7vOMJdm3J8Ppg+O9YmRApSGgAco1lqrvwzvkK0w/XGo7pWU4K9/YnqaSGDIzbnik /CTI2/OQ4YoBuTX/bfLi7sRKRO0Mb1l54vXFmWKRlM5QTYgsvksCRSj9xtj9cbU8 dJ4t19T+ucetyn2HDyuv2DkgxRZ8ISigddUyXl+pfmklnYeMhZioHRq+zPHD/XUQ lNAdBEjA7szW+6LJNDm6zVFzr88WvLm0OVZHi3Mf07v9nodwc2EeHKp8oVb9Gb2n SzAIwWfQO4ms50EQATEnBa9yC3wTGF2iIrUbFbURo9xjOpsI/ZCLhJ4= -----END CERTIFICATE-----Generated at Sun Dec 21 21:45:45 2025 by rpki-client