This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VytO2SaC1xio_ESIFAAnQGlgeV8.cer File: VytO2SaC1xio_ESIFAAnQGlgeV8.cer (raw, json) Hash identifier: JDFa1CHnGYfvk2H9UvhmVgIKUODTQ+xFNzogelBhcK4= Subject key identifier: 57:2B:4E:D9:26:82:D7:18:A8:FC:44:88:14:00:27:40:69:60:79:5F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797EF1B9818F21D4114F1E97629FB31B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:41 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 205624 IP: 37.156.188.0/22 IP: 94.176.176.0/22 IP: 152.89.32.0/22 IP: 185.44.16.0/22 IP: 185.154.204.0/22 IP: 185.156.100.0/22 IP: 185.196.64.0/22 IP: 185.211.68.0/22 IP: 185.252.224.0/22 IP: 193.46.192.0/22 IP: 2a01:72e0::/32 IP: 2a0d:4f40::/32 IP: 2a0d:8800::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:f1:b9:81:8f:21:d4:11:4f:1e:97:62:9f:b3:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=572b4ed92682d718a8fc4488140027406960795f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:63:70:12:ce:9e:1c:82:ba:94:02:27:a2:da: ed:78:b5:18:95:cc:aa:9f:18:4e:82:87:bf:fd:de: f9:9e:82:0a:1f:1d:4f:c0:e6:62:b6:c1:6a:07:e0: 3a:10:82:f3:75:b3:e7:d8:6f:a6:cf:07:b5:99:48: b3:9b:92:1c:22:87:b9:ca:f8:40:44:7b:29:8e:bd: d9:7f:23:25:08:a2:22:6a:f3:21:90:c6:1e:2f:a8: d4:0a:58:19:7a:f5:a8:2f:ec:67:5f:aa:ad:42:d7: a9:9b:5c:56:28:85:c9:da:23:7f:e2:32:a3:e8:83: 9c:50:1b:10:60:a9:5d:f0:be:8d:60:c5:fb:92:1c: 8a:d8:7b:fb:b6:80:d6:98:c1:56:7c:c6:41:9c:fa: 46:69:04:2a:5d:2c:94:db:44:e7:b8:b8:1e:8b:a0: 20:f1:87:1d:5a:0f:e5:4d:2d:60:c7:be:63:7e:ac: e3:8a:3e:dc:dd:fb:ef:55:d3:c5:8a:fc:55:a0:00: cc:0a:54:18:62:a4:5e:6d:34:0c:e9:b6:dc:af:98: e3:40:ab:de:a1:da:1f:d8:96:57:5a:4e:2b:dd:d7: 4c:c1:2c:f1:c2:76:94:41:a3:44:76:23:4a:16:94: d3:d9:99:ac:68:e8:13:ac:51:87:0c:f1:77:cb:eb: 6b:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:2B:4E:D9:26:82:D7:18:A8:FC:44:88:14:00:27:40:69:60:79:5F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.156.188.0/22 94.176.176.0/22 152.89.32.0/22 185.44.16.0/22 185.154.204.0/22 185.156.100.0/22 185.196.64.0/22 185.211.68.0/22 185.252.224.0/22 193.46.192.0/22 IPv6: 2a01:72e0::/32 2a0d:4f40::/32 2a0d:8800::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 205624 Signature Algorithm: sha256WithRSAEncryption 69:8e:49:83:99:e7:f6:67:d4:5a:94:44:20:b6:7c:f4:af:5e: 3b:18:9e:37:d2:d5:39:8b:f8:8b:60:ca:b7:33:cc:c6:de:04: c1:2c:41:c7:c8:fb:3c:1b:ea:d2:c8:dd:c8:7c:ce:f2:f5:ef: c3:b4:b3:2b:d6:94:20:6a:9a:58:28:0f:07:2a:2a:44:e0:41: 7c:fb:e9:2f:04:38:13:b0:a5:9e:0e:48:67:c5:6a:3a:e1:62: 04:27:11:0e:7c:61:c9:b0:c0:01:b9:18:8e:d3:f4:9c:97:41: f7:b8:53:d3:c0:34:25:ca:83:7e:4d:65:ba:19:e1:8f:1f:6d: b0:3c:93:15:bd:e0:94:c4:3b:c7:84:94:05:c6:64:b0:28:39: 45:78:52:fa:e3:62:4f:9c:f4:de:ad:01:b3:77:36:b0:66:c4: a6:eb:67:f4:53:cd:f0:e9:ab:5f:36:29:d1:f1:5f:0a:4f:62: a4:dd:51:9a:ec:64:18:2a:35:bb:7b:dd:98:6a:01:86:54:13: 69:12:c7:6c:b6:8c:8c:29:e2:08:52:55:17:89:8b:7f:eb:57: 25:8d:61:69:71:1b:34:67:df:79:d4:9f:ce:5e:c0:bf:00:2e: f9:54:80:d9:2b:68:ca:9b:95:e9:15:31:6e:1a:42:2c:42:4c: 46:41:0c:9b -----BEGIN CERTIFICATE----- MIIF5zCCBM+gAwIBAgISAZt5fvG5gY8h1BFPHpdin7MbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NzJiNGVkOTI2ODJkNzE4YThmYzQ0ODgxNDAwMjc0MDY5NjA3OTVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2NwEs6eHIK6lAInotrteLUYlcyq nxhOgoe//d75noIKHx1PwOZitsFqB+A6EILzdbPn2G+mzwe1mUizm5IcIoe5yvhA RHspjr3ZfyMlCKIiavMhkMYeL6jUClgZevWoL+xnX6qtQtepm1xWKIXJ2iN/4jKj 6IOcUBsQYKld8L6NYMX7khyK2Hv7toDWmMFWfMZBnPpGaQQqXSyU20TnuLgei6Ag 8YcdWg/lTS1gx75jfqzjij7c3fvvVdPFivxVoADMClQYYqRebTQM6bbcr5jjQKve odof2JZXWk4r3ddMwSzxwnaUQaNEdiNKFpTT2ZmsaOgTrFGHDPF3y+trVwIDAQAB o4IC8zCCAu8wHQYDVR0OBBYEFFcrTtkmgtcYqPxEiBQAJ0BpYHlfMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FiLzg4NGMz MS1lNTA5LTQyMmItYjBhMS1hZjlmYzAxMmJkNTQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWIvODg0YzMx LWU1MDktNDIyYi1iMGExLWFmOWZjMDEyYmQ1NC8xL1Z5dE8yU2FDMXhpb19FU0lG QUFuUUdsZ2VWOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMHIGCCsGAQUF BwEHAQH/BGMwYTBCBAIAATA8AwQCJZy8AwQCXrCwAwQCmFkgAwQCuSwQAwQCuZrM AwQCuZxkAwQCucRAAwQCudNEAwQCufzgAwQCwS7AMBsEAgACMBUDBQAqAXLgAwUA Kg1PQAMFAyoNiAAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAyM4MA0GCSqGSIb3 DQEBCwUAA4IBAQBpjkmDmef2Z9RalEQgtnz0r147GJ430tU5i/iLYMq3M8zG3gTB LEHHyPs8G+rSyN3IfM7y9e/DtLMr1pQgappYKA8HKipE4EF8++kvBDgTsKWeDkhn xWo64WIEJxEOfGHJsMABuRiO0/Scl0H3uFPTwDQlyoN+TWW6GeGPH22wPJMVveCU xDvHhJQFxmSwKDlFeFL642JPnPTerQGzdzawZsSm62f0U83w6atfNinR8V8KT2Kk 3VGa7GQYKjW7e92YagGGVBNpEsdstoyMKeIIUlUXiYt/61cljWFpcRs0Z9951J/O XsC/AC75VIDZK2jKm5XpFTFuGkIsQkxGQQyb -----END CERTIFICATE-----Generated at Mon Jan 26 09:00:35 2026 by rpki-client