This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VvAaHpnqXU85lNMzCdCUMS3IVCc.cer File: VvAaHpnqXU85lNMzCdCUMS3IVCc.cer (raw, json) Hash identifier: TAH1FPHWnsA1YsOjFYb01ew20gdddCzlwj8B4CX36jU= Subject key identifier: 56:F0:1A:1E:99:EA:5D:4F:39:94:D3:33:09:D0:94:31:2D:C8:54:27 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA3AFB449A9D1A63EE9BCF314E09EF1 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/63/9b50bf-4fbf-4680-8328-130f7f38f537/1/VvAaHpnqXU85lNMzCdCUMS3IVCc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/63/9b50bf-4fbf-4680-8328-130f7f38f537/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:18:03 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 203128 IP: 185.246.48.0/22 IP: 2a0d:7a80::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:af:b4:49:a9:d1:a6:3e:e9:bc:f3:14:e0:9e:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=56f01a1e99ea5d4f3994d33309d094312dc85427 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d7:94:63:c3:6f:4e:17:53:c5:6a:10:45:05: ba:2b:23:58:26:e9:fa:7d:56:e4:a0:f4:9d:06:3b: 81:b2:ec:5b:09:d7:59:56:a0:d9:3d:c6:97:da:3c: e5:19:15:81:f6:3c:6b:06:6a:51:ad:9d:56:cb:7a: 68:22:2b:03:6c:f7:9c:5c:f7:f5:b3:79:b5:a0:4a: 41:bc:be:34:21:39:95:32:0d:d9:f5:6a:b1:7b:1c: 48:52:07:36:88:d7:58:6e:8b:70:e5:2e:68:76:79: f7:3d:c9:c2:fc:26:41:52:06:33:bf:d0:10:94:1f: 2f:25:02:02:94:37:c9:79:b2:da:5e:8a:a1:c3:c1: 11:00:60:0b:ea:ce:e4:74:25:56:d2:3c:8c:be:9a: bc:eb:51:01:7e:d5:5d:99:49:c8:cb:43:4e:7d:bb: d0:41:e9:14:09:93:b7:f8:6a:e0:85:94:11:c7:2f: 44:1a:bc:7c:fc:88:39:07:6b:45:58:63:20:c1:a5: cf:ab:24:9c:39:27:7c:d7:e0:94:75:61:9a:2e:8a: 21:28:6e:31:f1:ba:c5:b0:51:f9:cd:f4:bf:fb:46: c9:4d:62:66:1a:19:07:6d:06:50:13:aa:44:cd:74: 61:2a:f3:23:cc:8f:a4:b0:a0:49:8e:24:45:70:94: a7:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:F0:1A:1E:99:EA:5D:4F:39:94:D3:33:09:D0:94:31:2D:C8:54:27 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/9b50bf-4fbf-4680-8328-130f7f38f537/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/9b50bf-4fbf-4680-8328-130f7f38f537/1/VvAaHpnqXU85lNMzCdCUMS3IVCc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.246.48.0/22 IPv6: 2a0d:7a80::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 203128 Signature Algorithm: sha256WithRSAEncryption 9b:83:af:f0:6c:f5:b2:c1:3a:43:46:93:39:94:12:a2:2c:bc: 67:5c:ed:f1:7f:99:0f:33:1d:63:c6:f5:2f:0b:ff:02:17:eb: 5d:f9:43:6b:6d:9a:6f:4b:ae:5e:d0:07:91:b4:fe:06:a5:65: 4e:75:97:c8:6c:c9:5f:36:31:97:56:64:f8:b5:6f:19:30:d2: f5:a7:15:e8:99:e5:8b:85:8d:5c:d9:a9:30:c4:2a:56:ba:f2: 00:11:31:56:b1:06:15:d4:f2:ca:ba:7a:9e:4a:3f:97:75:14: 8e:ff:55:07:0a:03:9d:cc:55:19:10:c0:71:2f:3a:a9:0f:15: ec:a6:86:1f:ef:3a:63:73:d2:ba:41:d5:80:b7:12:52:a7:d7: d1:1a:16:4b:f5:47:57:e4:b6:da:06:97:12:fc:38:8d:24:00: 98:a9:22:3b:6d:ef:a5:2a:2e:06:5f:55:2d:b2:58:e3:a5:19: 84:09:3f:90:25:cb:d1:67:35:40:68:cd:05:1b:cf:00:76:a0: b4:47:97:97:2b:dc:78:46:28:bb:c3:7d:22:29:f0:1d:17:0f: 81:33:65:0e:c6:50:22:2f:8b:2d:ca:ad:b3:aa:e8:09:69:f5: 3e:c6:00:51:9a:4c:a3:bb:6b:9f:ae:d2:e4:c5:f3:5e:08:c3: 20:09:d7:41 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt7o6+0SanRpj7pvPMU4J7xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NmYwMWExZTk5ZWE1ZDRmMzk5NGQzMzMwOWQwOTQzMTJkYzg1NDI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzdeUY8NvThdTxWoQRQW6KyNYJun6 fVbkoPSdBjuBsuxbCddZVqDZPcaX2jzlGRWB9jxrBmpRrZ1Wy3poIisDbPecXPf1 s3m1oEpBvL40ITmVMg3Z9WqxexxIUgc2iNdYbotw5S5odnn3PcnC/CZBUgYzv9AQ lB8vJQIClDfJebLaXoqhw8ERAGAL6s7kdCVW0jyMvpq861EBftVdmUnIy0NOfbvQ QekUCZO3+GrghZQRxy9EGrx8/Ig5B2tFWGMgwaXPqyScOSd81+CUdWGaLoohKG4x 8brFsFH5zfS/+0bJTWJmGhkHbQZQE6pEzXRhKvMjzI+ksKBJjiRFcJSnqwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFFbwGh6Z6l1POZTTMwnQlDEtyFQnMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYzLzliNTBi Zi00ZmJmLTQ2ODAtODMyOC0xMzBmN2YzOGY1MzcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjMvOWI1MGJm LTRmYmYtNDY4MC04MzI4LTEzMGY3ZjM4ZjUzNy8xL1Z2QWFIcG5xWFU4NWxOTXpD ZENVTVMzSVZDYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCufYwMA0EAgACMAcDBQAqDXqAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMZeDANBgkqhkiG9w0BAQsFAAOCAQEAm4Ov8Gz1ssE6 Q0aTOZQSoiy8Z1zt8X+ZDzMdY8b1Lwv/AhfrXflDa22ab0uuXtAHkbT+BqVlTnWX yGzJXzYxl1Zk+LVvGTDS9acV6Jnli4WNXNmpMMQqVrryABExVrEGFdTyyrp6nko/ l3UUjv9VBwoDncxVGRDAcS86qQ8V7KaGH+86Y3PSukHVgLcSUqfX0RoWS/VHV+S2 2gaXEvw4jSQAmKkiO23vpSouBl9VLbJY46UZhAk/kCXL0Wc1QGjNBRvPAHagtEeX lyvceEYou8N9IinwHRcPgTNlDsZQIi+LLcqts6roCWn1PsYAUZpMo7trn67S5MXz XgjDIAnXQQ== -----END CERTIFICATE-----Generated at Mon Jan 26 08:40:38 2026 by rpki-client