This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VwhmHGruys2bcRdqct6WybRQlDk.cer File: VwhmHGruys2bcRdqct6WybRQlDk.cer (raw, json) Hash identifier: IwwJDknOrWKEtuatpOONG+Z1zx0pDEwFo3nKRR7WtNk= Subject key identifier: 57:08:66:1C:6A:EE:CA:CD:9B:71:17:6A:72:DE:96:C9:B4:50:94:39 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DC9F12194C86730283EAB0B03BF5E5F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/VwhmHGruys2bcRdqct6WybRQlDk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:19:05 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 25182 IP: 2a02:458::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:f1:21:94:c8:67:30:28:3e:ab:0b:03:bf:5e:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5708661c6aeecacd9b71176a72de96c9b4509439 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:db:c6:1a:76:35:6a:79:7f:4d:eb:fa:0d:9a: 9b:22:f6:6f:fe:f4:c3:7f:66:d6:1f:91:a3:82:7e: 9d:74:f3:d7:d3:a9:ab:4e:8f:24:75:db:10:52:f9: 2c:74:1f:98:06:1c:66:37:50:54:2d:99:ed:d3:5a: 7d:2e:76:97:32:58:93:2f:cf:30:ba:8b:2c:1f:55: 94:5f:0f:6e:93:d7:fa:1f:94:50:64:83:20:8d:d4: 53:1c:a2:5e:38:7d:71:24:78:db:26:43:be:72:9a: c0:23:13:23:c4:02:7c:c2:5e:c0:5b:92:89:3a:29: 93:68:ae:bd:76:c4:64:9b:85:3e:51:a1:8e:9b:96: 47:b8:b3:14:0f:84:d0:81:06:e2:85:4d:cf:73:d6: ed:ba:85:6f:b8:12:a2:9f:0f:eb:e8:d1:2f:8a:2f: d1:e5:7a:12:e6:6f:a7:88:1c:01:7d:1c:0e:0f:aa: 46:c1:7e:84:3d:be:6c:5d:58:71:b1:82:bc:69:84: e0:0c:83:d6:7d:02:11:6e:c9:fc:05:70:41:50:2f: 02:04:5a:c0:34:2c:97:c1:50:2b:db:44:d4:4e:04: 27:ab:d6:fe:30:1b:5b:79:1b:e4:c3:89:21:89:7a: 94:74:14:9d:65:eb:11:e0:f2:36:6f:47:d8:8b:d3: 5a:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:08:66:1C:6A:EE:CA:CD:9B:71:17:6A:72:DE:96:C9:B4:50:94:39 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/VwhmHGruys2bcRdqct6WybRQlDk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a02:458::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 25182 Signature Algorithm: sha256WithRSAEncryption 0c:55:df:78:b6:2a:2b:25:8e:3b:08:4d:a7:7d:cc:9c:56:02: 78:81:b3:62:d1:87:48:b3:fd:dd:25:54:f3:d6:c1:b6:68:15: 96:e8:ed:00:f2:3d:ca:e3:09:31:64:ac:31:fd:36:6c:ba:0b: f4:74:87:61:5c:4b:a8:1d:0d:6b:89:04:56:c2:f8:d6:87:ed: 15:fa:56:98:2b:5f:a7:98:56:40:bc:6a:5c:53:33:dd:dc:a0: 1a:e1:0a:24:e7:15:16:bb:7a:81:ab:ab:4f:19:74:eb:84:c4: 51:38:a4:36:fa:43:97:6e:93:14:96:a3:ed:d0:67:7d:f9:c5: 2d:b6:27:21:02:87:cb:5d:82:68:af:c2:eb:40:5e:28:b4:6b: 52:3f:5c:54:e1:f2:4c:98:94:23:58:ec:29:af:72:bc:dc:00: 1b:9b:2a:a9:e8:33:0d:cf:e8:35:7a:0e:e0:60:7a:d1:3c:2f: 9e:10:bb:9a:bd:70:09:c6:22:52:76:2e:45:9d:ed:e8:1f:ad: 64:74:68:18:5c:c5:4d:db:e8:29:69:99:29:6d:22:38:7e:18: d6:58:c9:84:71:09:57:97:a7:6f:52:32:98:1b:f0:65:8e:3e: 33:64:32:9e:86:5d:25:8d:1f:d7:76:08:05:15:ad:5d:b7:06: 7b:b8:dc:0e -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt9yfEhlMhnMCg+qwsDv15fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NzA4NjYxYzZhZWVjYWNkOWI3MTE3NmE3MmRlOTZjOWI0NTA5NDM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtvGGnY1anl/Tev6DZqbIvZv/vTD f2bWH5Gjgn6ddPPX06mrTo8kddsQUvksdB+YBhxmN1BULZnt01p9LnaXMliTL88w uossH1WUXw9uk9f6H5RQZIMgjdRTHKJeOH1xJHjbJkO+cprAIxMjxAJ8wl7AW5KJ OimTaK69dsRkm4U+UaGOm5ZHuLMUD4TQgQbihU3Pc9btuoVvuBKinw/r6NEvii/R 5XoS5m+niBwBfRwOD6pGwX6EPb5sXVhxsYK8aYTgDIPWfQIRbsn8BXBBUC8CBFrA NCyXwVAr20TUTgQnq9b+MBtbeRvkw4khiXqUdBSdZesR4PI2b0fYi9NaywIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFFcIZhxq7srNm3EXanLelsm0UJQ5MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ1LzY0N2E0 YS1kMmZkLTQzZTAtOGYzYi00NDEwODE2MmU0OTIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDUvNjQ3YTRh LWQyZmQtNDNlMC04ZjNiLTQ0MTA4MTYyZTQ5Mi8xL1Z3aG1IR3J1eXMyYmNSZHFj dDZXeWJSUWxEay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF BwEHAQH/BBEwDzANBAIAAjAHAwUAKgIEWDAZBggrBgEFBQcBCAEB/wQKMAigBjAE AgJiXjANBgkqhkiG9w0BAQsFAAOCAQEADFXfeLYqKyWOOwhNp33MnFYCeIGzYtGH SLP93SVU89bBtmgVlujtAPI9yuMJMWSsMf02bLoL9HSHYVxLqB0Na4kEVsL41oft FfpWmCtfp5hWQLxqXFMz3dygGuEKJOcVFrt6gaurTxl064TEUTikNvpDl26TFJaj 7dBnffnFLbYnIQKHy12CaK/C60BeKLRrUj9cVOHyTJiUI1jsKa9yvNwAG5sqqegz Dc/oNXoO4GB60TwvnhC7mr1wCcYiUnYuRZ3t6B+tZHRoGFzFTdvoKWmZKW0iOH4Y 1ljJhHEJV5enb1IymBvwZY4+M2QynoZdJY0f13YIBRWtXbcGe7jcDg== -----END CERTIFICATE-----Generated at Sun Jan 25 20:05:32 2026 by rpki-client