This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VzzskGOoh0GEGQiwxSl_zbtDlTA.cer File: VzzskGOoh0GEGQiwxSl_zbtDlTA.cer (raw, json) Hash identifier: HkSuIOIaNYUY1CZmZtMDbLIazmrLpNP0CJMc1LgOtbc= Subject key identifier: 57:3C:EC:90:63:A8:87:41:84:19:08:B0:C5:29:7F:CD:BB:43:95:30 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB0D7DEF2BF9FC284F17E46532738F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c8/07dd58-2d2e-426e-9e1a-5454e5a16f42/1/VzzskGOoh0GEGQiwxSl_zbtDlTA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c8/07dd58-2d2e-426e-9e1a-5454e5a16f42/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:17:54 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 206507 IP: 194.117.64.0/24 IP: 2a14:3740::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:0d:7d:ef:2b:f9:fc:28:4f:17:e4:65:32:73:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=573cec9063a88741841908b0c5297fcdbb439530 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:bc:da:66:11:e4:df:4f:1a:55:05:f7:da:ec: 65:1a:47:f5:39:57:ca:6f:f6:de:ba:97:41:23:ac: f8:19:43:0e:9f:82:36:fa:6f:c0:86:61:5b:b1:b9: e4:9e:5c:10:5b:c5:6b:0f:6e:ad:79:e7:93:82:58: 45:f7:06:aa:56:51:23:50:f5:0b:4c:aa:55:64:06: b4:6e:29:d0:64:48:82:cf:4d:d9:11:93:0c:cc:4d: 47:9d:db:af:7d:97:9d:94:86:28:90:c9:85:13:c7: e8:25:f9:02:3a:6d:b6:17:bd:04:53:8d:dd:61:ca: 3c:1e:ef:b9:19:da:f9:e3:65:59:87:66:d5:56:4c: ad:b6:61:fe:d5:3c:1f:d3:5f:43:da:c3:07:33:a0: 3f:0b:0c:86:42:9e:4f:2f:4f:a1:09:c9:fc:99:14: 7c:f1:d7:7d:51:6b:ca:82:c6:48:42:82:79:db:97: ae:57:74:a4:cd:d7:bb:f3:c2:3f:ef:9e:54:85:39: 07:d2:84:c7:d8:a2:c5:b8:92:3c:1d:70:ed:12:e2: 68:97:ed:b0:4c:79:ac:b3:c4:06:0b:b1:cb:38:d4: d7:63:c5:d4:33:81:08:a5:dd:fe:15:18:13:95:7d: ba:19:f9:e8:4f:48:60:3e:0b:03:44:fa:cd:11:e2: 35:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:3C:EC:90:63:A8:87:41:84:19:08:B0:C5:29:7F:CD:BB:43:95:30 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/07dd58-2d2e-426e-9e1a-5454e5a16f42/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/07dd58-2d2e-426e-9e1a-5454e5a16f42/1/VzzskGOoh0GEGQiwxSl_zbtDlTA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.117.64.0/24 IPv6: 2a14:3740::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 206507 Signature Algorithm: sha256WithRSAEncryption ab:ed:f3:52:32:08:90:16:7d:57:b9:d8:50:b5:31:95:04:24: 29:fa:91:14:d6:77:d3:09:7b:ef:ee:31:f6:fe:f2:d8:77:b8: 9c:c1:11:b9:a7:70:82:fc:d1:3b:bb:d2:84:03:ca:8b:78:51: 96:1c:a9:c3:06:17:eb:9f:42:d6:dc:13:9b:c4:ac:3c:87:eb: 2e:a0:55:70:24:39:1a:5e:ad:f8:8f:74:bf:a2:5b:94:f9:b5: 11:61:cd:c2:53:c7:fc:ad:12:21:8e:d1:f5:29:40:b1:54:72: f0:92:b0:da:c9:68:36:c1:79:13:22:3d:12:16:bb:b9:5c:9c: b5:32:a4:73:c5:f5:d2:de:0e:a0:cf:a6:b6:dd:df:29:c8:6b: 9e:92:2b:59:2e:82:ba:95:a5:ee:b0:0f:d1:20:81:dd:ae:ac: 93:a3:57:5c:21:27:a8:94:ea:f5:a5:e6:31:ab:02:85:74:50: 8b:b2:bb:d0:4c:7e:b6:15:19:b0:e0:95:28:40:5e:07:5a:40: 41:6e:0d:c6:ef:35:7d:af:81:38:6d:04:98:45:10:af:5e:30: 6d:b8:17:f9:39:a6:e7:14:72:b0:0f:d2:6b:4e:e7:f2:fc:73: e2:3a:bb:79:40:54:1f:3a:59:d2:7f:47:1d:46:45:f0:d0:2d: e6:04:a2:9e -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt26w197yv5/ChPF+RlMnOPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NzNjZWM5MDYzYTg4NzQxODQxOTA4YjBjNTI5N2ZjZGJiNDM5NTMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLzaZhHk308aVQX32uxlGkf1OVfK b/beupdBI6z4GUMOn4I2+m/AhmFbsbnknlwQW8VrD26teeeTglhF9waqVlEjUPUL TKpVZAa0binQZEiCz03ZEZMMzE1HnduvfZedlIYokMmFE8foJfkCOm22F70EU43d Yco8Hu+5Gdr542VZh2bVVkyttmH+1Twf019D2sMHM6A/CwyGQp5PL0+hCcn8mRR8 8dd9UWvKgsZIQoJ525euV3Skzde788I/755UhTkH0oTH2KLFuJI8HXDtEuJol+2w THmss8QGC7HLONTXY8XUM4EIpd3+FRgTlX26GfnoT0hgPgsDRPrNEeI10QIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFFc87JBjqIdBhBkIsMUpf827Q5UwMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M4LzA3ZGQ1 OC0yZDJlLTQyNmUtOWUxYS01NDU0ZTVhMTZmNDIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzgvMDdkZDU4 LTJkMmUtNDI2ZS05ZTFhLTU0NTRlNWExNmY0Mi8xL1Z6enNrR09vaDBHRUdRaXd4 U2xfemJ0RGxUQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAwnVAMA0EAgACMAcDBQMqFDdAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMmqzANBgkqhkiG9w0BAQsFAAOCAQEAq+3zUjIIkBZ9 V7nYULUxlQQkKfqRFNZ30wl77+4x9v7y2He4nMERuadwgvzRO7vShAPKi3hRlhyp wwYX659C1twTm8SsPIfrLqBVcCQ5Gl6t+I90v6JblPm1EWHNwlPH/K0SIY7R9SlA sVRy8JKw2sloNsF5EyI9Eha7uVyctTKkc8X10t4OoM+mtt3fKchrnpIrWS6CupWl 7rAP0SCB3a6sk6NXXCEnqJTq9aXmMasChXRQi7K70Ex+thUZsOCVKEBeB1pAQW4N xu81fa+BOG0EmEUQr14wbbgX+Tmm5xRysA/Sa07n8vxz4jq7eUBUHzpZ0n9HHUZF 8NAt5gSing== -----END CERTIFICATE-----Generated at Sun Jan 25 11:46:52 2026 by rpki-client