This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.cer File: vBWgJ7XuSw6FN6j3GYz6nqCUWuc.cer (raw, json) Hash identifier: BRU/FKwJpmRD+LeWPhc2Xg1z0ETmwkYBQdrOE9bVb+8= Subject key identifier: BC:15:A0:27:B5:EE:4B:0E:85:37:A8:F7:19:8C:FA:9E:A0:94:5A:E7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C803BD9CE6F50FECCA20FFA3FE4BF04 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:18:57 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 176.119.200.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:3b:d9:ce:6f:50:fe:cc:a2:0f:fa:3f:e4:bf:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bc15a027b5ee4b0e8537a8f7198cfa9ea0945ae7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1f:e0:43:4a:b9:3c:8c:5c:03:3b:ba:e1:f0: 86:be:7d:e6:37:dc:ea:bf:9a:1e:95:e3:35:32:f6: c6:dd:63:f9:d9:18:1f:ee:0b:6f:c9:4c:bc:28:17: 9e:bd:b8:ab:05:01:33:e8:37:59:7d:a4:af:d2:09: 2a:c2:fc:11:a0:94:6c:11:13:9f:74:c5:80:50:9c: be:7d:ce:d5:24:fc:2f:69:b0:3c:7c:85:06:c9:2a: 20:af:f0:25:b3:c0:87:6f:1f:05:40:2f:17:d6:f2: 69:f9:26:cc:73:f0:bc:97:0f:1c:02:81:4e:ca:2b: 38:7b:83:72:b5:d5:f1:f4:7c:64:6a:af:15:ce:69: 7a:e8:f4:6b:51:c1:e1:2c:c3:66:2a:19:af:03:88: 52:25:95:25:92:ca:e5:9b:4f:72:c1:b0:de:62:49: 1d:24:48:a6:66:0f:94:50:0a:8c:9f:18:10:cc:f4: ad:f5:52:92:9a:44:51:87:34:d1:fe:77:d5:b0:9d: ec:f0:a7:18:97:fc:d4:d1:59:e2:81:0d:4f:25:62: 44:d5:e2:68:10:b8:34:49:d4:69:c8:14:fa:37:4d: 1b:15:af:58:f7:45:7f:26:61:1f:8d:6b:5d:88:3d: 0f:95:d7:c4:cd:f8:c5:6a:bd:37:5b:a9:f0:83:05: f8:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:15:A0:27:B5:EE:4B:0E:85:37:A8:F7:19:8C:FA:9E:A0:94:5A:E7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.119.200.0/24 Signature Algorithm: sha256WithRSAEncryption 0a:a5:a1:4f:45:df:90:e0:3e:45:e4:99:6c:c8:33:c2:aa:c1: 3c:b4:69:24:1d:e3:1d:58:e2:2e:0e:4d:67:a5:93:36:f4:bb: 68:a3:04:1c:e5:93:8c:57:fd:c7:37:b0:d4:c6:fa:b0:88:61: 82:88:d0:a0:cf:41:98:7f:51:4a:3f:79:13:54:3a:53:17:c6: 8d:a6:f4:be:1b:dc:ea:8b:55:35:f7:ef:eb:4c:c4:1f:51:97: 93:28:03:ef:66:7a:e7:4f:d1:17:1b:e9:0e:99:98:36:01:bc: d0:10:70:9e:82:45:7e:91:3d:70:f9:22:d3:65:47:1b:f0:d4: 7e:2d:d0:52:b9:7c:8a:1d:cb:b1:3c:fa:b5:6a:fd:d3:ec:b4: 90:25:e0:3a:7a:f2:ad:44:5b:a2:94:5c:58:4f:87:b7:f6:2a: c2:cc:40:2c:25:8d:50:d3:93:6d:04:e7:6e:a4:0a:3e:87:16: ea:87:6f:da:36:2c:28:8d:a7:1a:98:29:50:2b:6b:f7:c9:d6: d0:96:13:52:51:96:70:9f:71:b6:6c:c7:e3:6a:09:23:49:ae: b0:45:a7:54:9a:03:7c:6d:96:e8:d3:04:ef:eb:f8:76:db:1c: 41:fc:4e:35:4f:3b:f2:c0:1e:30:95:3c:b3:ac:75:9b:e9:7b: 7a:b0:42:d9 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt8gDvZzm9Q/syiD/o/5L8EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYzE1YTAyN2I1ZWU0YjBlODUzN2E4ZjcxOThjZmE5ZWEwOTQ1YWU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwB/gQ0q5PIxcAzu64fCGvn3mN9zq v5oeleM1MvbG3WP52Rgf7gtvyUy8KBeevbirBQEz6DdZfaSv0gkqwvwRoJRsEROf dMWAUJy+fc7VJPwvabA8fIUGySogr/Als8CHbx8FQC8X1vJp+SbMc/C8lw8cAoFO yis4e4NytdXx9Hxkaq8Vzml66PRrUcHhLMNmKhmvA4hSJZUlksrlm09ywbDeYkkd JEimZg+UUAqMnxgQzPSt9VKSmkRRhzTR/nfVsJ3s8KcYl/zU0VnigQ1PJWJE1eJo ELg0SdRpyBT6N00bFa9Y90V/JmEfjWtdiD0PldfEzfjFar03W6nwgwX4OwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFLwVoCe17ksOhTeo9xmM+p6glFrnMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ2LzI3Y2Q3 MS05ZGY1LTRmNWEtYTcwMS02ZGZlMjM5YWU1NDEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDYvMjdjZDcx LTlkZjUtNGY1YS1hNzAxLTZkZmUyMzlhZTU0MS8xL3ZCV2dKN1h1U3c2Rk42ajNH WXo2bnFDVVd1Yy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAsHfIMA0GCSqGSIb3DQEBCwUAA4IBAQAKpaFP Rd+Q4D5F5JlsyDPCqsE8tGkkHeMdWOIuDk1npZM29LtoowQc5ZOMV/3HN7DUxvqw iGGCiNCgz0GYf1FKP3kTVDpTF8aNpvS+G9zqi1U19+/rTMQfUZeTKAPvZnrnT9EX G+kOmZg2AbzQEHCegkV+kT1w+SLTZUcb8NR+LdBSuXyKHcuxPPq1av3T7LSQJeA6 evKtRFuilFxYT4e39irCzEAsJY1Q05NtBOdupAo+hxbqh2/aNiwojacamClQK2v3 ydbQlhNSUZZwn3G2bMfjagkjSa6wRadUmgN8bZbo0wTv6/h22xxB/E41TzvywB4w lTyzrHWb6Xt6sELZ -----END CERTIFICATE-----Generated at Mon Jan 26 10:17:08 2026 by rpki-client