This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.cer File: VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.cer (raw, json) Hash identifier: K/NdErPxiy+j8sQ0iNQJaN31dHEXUbV8/3h1ScX01m4= Subject key identifier: 57:13:0F:79:9F:8A:89:85:50:2A:2E:A3:35:60:37:67:40:85:CF:CA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C1207C490A2776C7E823C2AA4F32C8A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:18:35 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 209527 IP: 5.179.192.0/21 IP: 45.149.36.0/22 IP: 91.223.253.0/24 IP: 185.18.80.0/22 IP: 185.166.100.0/22 IP: 2a03:f4c0::/29 IP: 2a0c:d040::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:07:c4:90:a2:77:6c:7e:82:3c:2a:a4:f3:2c:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=57130f799f8a8985502a2ea3356037674085cfca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:9f:1f:82:31:5d:96:20:e9:ea:4d:3c:89:41: d1:1f:c0:de:35:ee:47:72:ae:6c:be:42:5f:49:95: cc:f4:3a:fc:ab:8d:5b:78:36:04:bc:f2:07:f6:14: 71:68:95:fa:20:12:af:c0:93:a2:60:96:06:14:be: a8:cb:26:a0:42:71:69:dc:20:24:bb:10:06:a8:20: 3f:68:5f:1a:ac:1b:8a:39:15:15:d0:d4:e8:e7:f9: 5e:ae:a1:73:6a:2d:da:e7:a1:90:59:c8:92:6f:9d: 27:db:ea:66:0a:80:4c:84:8e:a0:e8:7e:f6:5c:02: 0a:67:be:fa:3e:a9:f3:40:fe:0f:3e:63:ff:0b:89: d2:af:d0:4c:25:d3:b9:c6:15:51:9c:88:6a:bc:7b: b3:4f:b4:9e:9c:a8:91:c6:cf:37:48:1a:b7:65:f3: b6:36:7e:99:1f:3f:16:61:09:87:4a:55:92:43:65: b4:67:53:35:51:15:40:29:43:24:b1:5e:c0:ac:65: c4:3d:09:7b:c9:46:d1:eb:9b:d7:25:ba:ad:ce:07: 41:3b:68:b2:05:b3:a4:34:03:ad:78:fb:31:38:b5: 93:6e:06:7d:bb:52:73:e4:99:07:7e:9c:e9:81:b4: 2d:0f:a9:bb:db:2a:3f:b2:8a:7c:d1:85:6f:be:8c: 83:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:13:0F:79:9F:8A:89:85:50:2A:2E:A3:35:60:37:67:40:85:CF:CA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.179.192.0/21 45.149.36.0/22 91.223.253.0/24 185.18.80.0/22 185.166.100.0/22 IPv6: 2a03:f4c0::/29 2a0c:d040::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 209527 Signature Algorithm: sha256WithRSAEncryption 90:f6:4f:78:e9:79:64:b7:37:47:4a:5b:0a:74:c2:39:ec:06: 7c:8f:45:d1:43:2a:49:cf:7a:3a:bb:64:c5:11:4c:e9:ab:01: f4:57:29:a6:73:d0:94:8c:01:1a:69:c1:27:db:ad:90:62:03: 9c:7f:f0:2d:7f:16:5d:a3:f0:02:67:38:85:5d:ff:15:8c:5d: 8a:7e:8b:79:28:0c:01:77:f8:03:e0:b1:ea:0a:52:0d:0d:b7: a5:cc:96:51:53:a5:83:c8:c8:a9:90:1d:1b:5f:3b:c0:95:82: 15:f7:d2:6b:a6:3a:37:24:f7:04:25:37:87:90:8d:f2:0f:49: f6:2e:c4:37:12:72:66:45:e1:48:c7:3d:e9:d1:93:5b:11:29: ce:09:fc:d9:0a:82:09:0d:bd:c1:f2:01:e9:04:f3:77:d0:09: 53:66:52:33:54:90:3a:7c:3f:11:4e:c8:f8:c5:aa:4f:37:d8: 8f:4c:3f:fe:f8:75:4a:98:e4:a0:81:fb:06:d1:b9:77:3d:30: b7:13:f1:24:0d:e2:8a:db:54:48:56:40:01:e3:88:fb:8b:75: 69:24:fb:99:80:69:5f:ff:d1:d2:1b:57:b7:49:b4:54:b0:44: 23:3d:f1:9c:ed:cd:d0:42:a3:2c:81:2b:1d:10:d7:1c:41:a2: 51:11:56:b1 -----BEGIN CERTIFICATE----- MIIFwjCCBKqgAwIBAgISAZt8EgfEkKJ3bH6CPCqk8yyKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NzEzMGY3OTlmOGE4OTg1NTAyYTJlYTMzNTYwMzc2NzQwODVjZmNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZ8fgjFdliDp6k08iUHRH8DeNe5H cq5svkJfSZXM9Dr8q41beDYEvPIH9hRxaJX6IBKvwJOiYJYGFL6oyyagQnFp3CAk uxAGqCA/aF8arBuKORUV0NTo5/lerqFzai3a56GQWciSb50n2+pmCoBMhI6g6H72 XAIKZ776PqnzQP4PPmP/C4nSr9BMJdO5xhVRnIhqvHuzT7SenKiRxs83SBq3ZfO2 Nn6ZHz8WYQmHSlWSQ2W0Z1M1URVAKUMksV7ArGXEPQl7yUbR65vXJbqtzgdBO2iy BbOkNAOtePsxOLWTbgZ9u1Jz5JkHfpzpgbQtD6m72yo/sop80YVvvoyDhQIDAQAB o4ICzjCCAsowHQYDVR0OBBYEFFcTD3mfiomFUCouozVgN2dAhc/KMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhmLzUxODFk ZS00NGNkLTQ2NTQtOTZmYy1kM2I5MGE5YjliNDEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGYvNTE4MWRl LTQ0Y2QtNDY1NC05NmZjLWQzYjkwYTliOWI0MS8xL1Z4TVBlWi1LaVlWUUtpNmpO V0EzWjBDRno4by5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CME0GCCsGAQUF BwEHAQH/BD4wPDAkBAIAATAeAwQDBbPAAwQCLZUkAwQAW9/9AwQCuRJQAwQCuaZk MBQEAgACMA4DBQMqA/TAAwUDKgzQQDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMD MncwDQYJKoZIhvcNAQELBQADggEBAJD2T3jpeWS3N0dKWwp0wjnsBnyPRdFDKknP ejq7ZMURTOmrAfRXKaZz0JSMARppwSfbrZBiA5x/8C1/Fl2j8AJnOIVd/xWMXYp+ i3koDAF3+APgseoKUg0Nt6XMllFTpYPIyKmQHRtfO8CVghX30mumOjck9wQlN4eQ jfIPSfYuxDcScmZF4UjHPenRk1sRKc4J/NkKggkNvcHyAekE83fQCVNmUjNUkDp8 PxFOyPjFqk832I9MP/74dUqY5KCB+wbRuXc9MLcT8SQN4orbVEhWQAHjiPuLdWkk +5mAaV//0dIbV7dJtFSwRCM98ZztzdBCoyyBKx0Q1xxBolERVrE= -----END CERTIFICATE-----Generated at Sun Jan 25 14:42:31 2026 by rpki-client