This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vBWSH1umvRR_9AAReqlzhjPxWH0.cer File: vBWSH1umvRR_9AAReqlzhjPxWH0.cer (raw, json) Hash identifier: wMNHcSpgaTKRKjdK/rM0iz9l3+tgs6jQqWnnRNmPs5E= Subject key identifier: BC:15:92:1F:5B:A6:BD:14:7F:F4:00:11:7A:A9:73:86:33:F1:58:7D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B791054AFF985021EED76D19DEDB6B06A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:17:52 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 1756 IP: 178.173.128.0 -- 178.173.223.255 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:54:af:f9:85:02:1e:ed:76:d1:9d:ed:b6:b0:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bc15921f5ba6bd147ff400117aa9738633f1587d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:df:95:9d:17:43:32:ca:5e:65:94:26:6e:a5: 64:d7:0f:16:b3:36:07:11:54:41:2b:36:dc:c0:c4: 8b:69:d7:08:93:dd:8e:5b:c6:57:49:87:37:26:ae: 89:f6:3d:7f:ce:57:1c:3f:27:6b:81:bd:26:e6:53: c4:f6:33:d7:09:f5:d0:aa:fc:fb:42:4e:ea:c9:8c: ec:4b:09:d5:89:06:ca:b1:de:e5:37:c4:5d:fb:69: c1:70:62:09:b9:66:2a:54:01:94:a5:1f:56:73:f7: f2:fa:3f:22:5f:d2:84:af:f4:1d:88:65:1b:83:7a: 3b:73:b1:04:eb:96:1a:cd:b3:53:1d:09:84:c0:77: 03:69:9d:51:96:e7:6b:4f:cf:06:aa:60:3a:a4:9a: 88:3c:8f:e9:86:6f:f7:4f:4f:f8:da:4d:4a:bb:d6: e4:f7:b9:79:4d:b8:de:83:5d:99:1e:fb:bb:16:6b: 75:bf:8c:08:4b:0f:e1:eb:f1:05:4a:b5:14:73:ad: dd:41:9c:db:70:bd:9d:80:93:0c:7e:5d:44:d1:bb: 6e:a4:e9:a7:e6:87:1f:04:c8:0a:10:71:bf:2c:bd: 12:e3:28:c2:d3:0c:6f:79:0a:13:8d:77:86:32:f3: 75:1a:fa:07:8f:2b:1e:bb:44:3f:19:0c:44:56:de: 04:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:15:92:1F:5B:A6:BD:14:7F:F4:00:11:7A:A9:73:86:33:F1:58:7D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.173.128.0-178.173.223.255 sbgp-autonomousSysNum: critical Autonomous System Numbers: 1756 Signature Algorithm: sha256WithRSAEncryption 88:75:66:0a:59:ab:2a:60:90:58:d9:67:7b:5c:5e:25:cd:13: 01:32:bf:05:cb:39:b8:5e:61:bb:f0:59:63:91:b2:a3:0a:06: ed:e0:64:70:8d:5a:8f:f6:33:04:2d:67:ca:f4:9b:4e:61:8b: 4e:91:43:92:be:77:e5:37:e1:84:c5:3a:ac:88:b1:43:ec:cc: 71:d3:1d:53:90:48:89:28:d7:24:1f:49:70:6d:3e:01:97:45: be:d2:76:a8:03:ee:1e:28:05:45:c3:18:51:ba:da:99:13:ec: cb:13:08:2a:65:24:44:69:d5:ea:d9:ac:ff:b2:ee:f9:3b:db: d0:0a:52:e1:3a:62:b5:01:91:92:b3:b1:85:10:ce:31:25:3f: 93:3c:64:e0:5d:1f:6d:7d:d0:e6:76:2a:db:42:5b:f9:ab:8a: 71:91:19:01:95:0e:b0:61:cc:56:df:37:32:80:d1:31:9b:69: 90:1a:5a:c7:58:59:79:90:4d:c8:75:89:48:d0:4a:d3:ed:76: a2:51:19:12:77:e3:95:61:1f:19:06:a0:23:2a:2e:57:9f:9f: 2a:9e:12:d1:f7:61:1c:e1:7b:29:32:b4:c7:b0:34:d5:0b:d7: 40:fd:67:2b:7c:5b:ea:86:9b:97:eb:b2:db:99:b5:44:19:21: 9e:bc:11:b2 -----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgISAZt5EFSv+YUCHu120Z3ttrBqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYzE1OTIxZjViYTZiZDE0N2ZmNDAwMTE3YWE5NzM4NjMzZjE1ODdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9+VnRdDMspeZZQmbqVk1w8WszYH EVRBKzbcwMSLadcIk92OW8ZXSYc3Jq6J9j1/zlccPydrgb0m5lPE9jPXCfXQqvz7 Qk7qyYzsSwnViQbKsd7lN8Rd+2nBcGIJuWYqVAGUpR9Wc/fy+j8iX9KEr/QdiGUb g3o7c7EE65YazbNTHQmEwHcDaZ1RludrT88GqmA6pJqIPI/phm/3T0/42k1Ku9bk 97l5Tbjeg12ZHvu7Fmt1v4wISw/h6/EFSrUUc63dQZzbcL2dgJMMfl1E0btupOmn 5ocfBMgKEHG/LL0S4yjC0wxveQoTjXeGMvN1GvoHjyseu0Q/GQxEVt4EZwIDAQAB o4ICpzCCAqMwHQYDVR0OBBYEFLwVkh9bpr0Uf/QAEXqpc4Yz8Vh9MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ0LzhlNzlh Yi1iYTgzLTQ0Y2ItYWVjMC0wOTkwY2U3NDgxZTcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDQvOGU3OWFi LWJhODMtNDRjYi1hZWMwLTA5OTBjZTc0ODFlNy8xL3ZCV1NIMXVtdlJSXzlBQVJl cWx6aGpQeFdIMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCcGCCsGAQUF BwEHAQH/BBgwFjAUBAIAATAOMAwDBAeyrYADBAWyrcAwGQYIKwYBBQUHAQgBAf8E CjAIoAYwBAICBtwwDQYJKoZIhvcNAQELBQADggEBAIh1ZgpZqypgkFjZZ3tcXiXN EwEyvwXLObheYbvwWWORsqMKBu3gZHCNWo/2MwQtZ8r0m05hi06RQ5K+d+U34YTF OqyIsUPszHHTHVOQSIko1yQfSXBtPgGXRb7SdqgD7h4oBUXDGFG62pkT7MsTCCpl JERp1erZrP+y7vk729AKUuE6YrUBkZKzsYUQzjElP5M8ZOBdH2190OZ2KttCW/mr inGRGQGVDrBhzFbfNzKA0TGbaZAaWsdYWXmQTch1iUjQStPtdqJRGRJ345VhHxkG oCMqLlefnyqeEtH3YRzheykytMewNNUL10D9Zyt8W+qGm5frstuZtUQZIZ68EbI= -----END CERTIFICATE-----Generated at Sun Jan 25 20:52:34 2026 by rpki-client