This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vFbbeW3vDb20x48kRavswVcKb9k.cer File: vFbbeW3vDb20x48kRavswVcKb9k.cer (raw, json) Hash identifier: tkH3+s5xsfg2nk2nDk0LDSyXqLk3O3hG7d79pVPHX8c= Subject key identifier: BC:56:DB:79:6D:EF:0D:BD:B4:C7:8F:24:45:AB:EC:C1:57:0A:6F:D9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F8226E68B0172BC58FAF4EDE19A022D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:19:54 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.199.16.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:26:e6:8b:01:72:bc:58:fa:f4:ed:e1:9a:02:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:19:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bc56db796def0dbdb4c78f2445abecc1570a6fd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:f0:9b:3e:c5:ab:85:fd:c3:7b:90:24:f0:dd: 9d:2f:ce:c0:32:cd:1d:2c:87:e8:f0:29:30:08:43: f1:7c:8f:5d:16:2f:8a:56:91:3f:0d:53:de:8b:26: 5c:99:6b:f6:2f:54:b5:80:84:c1:9e:a3:f0:81:8b: 57:51:36:94:74:d0:25:8c:d8:16:bd:a5:55:d7:96: e5:85:18:df:6e:f0:0e:e6:3f:54:39:93:8d:cc:7e: 5e:cf:38:04:12:8c:b3:60:36:9a:ca:62:93:dc:93: c0:5e:1c:84:c1:7e:72:a6:34:a9:06:e0:fa:31:52: 10:37:30:14:43:7d:2e:56:76:fb:4f:97:ed:30:08: 50:c0:6e:86:e2:bc:77:53:31:9a:65:f5:59:14:82: 86:f4:ef:2e:e9:a8:a7:3f:d9:bb:41:5c:e1:52:d9: 4e:c2:38:93:4d:72:ae:19:97:3c:2e:d2:37:c3:48: 7b:a1:10:11:ca:26:4a:44:8d:6a:bb:71:40:b5:31: 73:9b:0d:5d:4f:ac:84:d8:2e:1d:15:f7:e8:cf:11: 1e:10:58:38:53:2f:45:19:d4:2b:1c:8b:55:e2:cf: 16:a2:bc:88:2e:d8:12:cb:c1:e8:ba:72:91:63:f0: 13:e1:21:f5:dc:05:45:a6:47:7a:6f:0d:20:d1:2b: e9:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:56:DB:79:6D:EF:0D:BD:B4:C7:8F:24:45:AB:EC:C1:57:0A:6F:D9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.199.16.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:96:42:41:8e:eb:6f:44:5f:bd:a7:46:f5:4b:00:db:51:d0: ce:42:1c:b5:04:16:b6:1b:42:b5:f4:33:60:65:ec:58:44:9e: 76:2b:d8:0f:fc:89:2a:79:f2:03:9c:97:38:d1:c3:a8:43:40: da:50:78:f0:9e:b7:6f:38:f2:a6:5e:eb:80:51:98:34:55:94: d5:df:a6:bb:f3:d2:14:6a:ba:24:5b:38:76:a3:16:41:ea:f7: 84:15:17:5c:b7:70:f8:ef:7c:ca:72:99:76:2a:f4:6c:d9:9d: 2a:5d:4d:3b:ee:6f:aa:f0:50:1e:c8:53:43:09:ad:3e:5e:5e: b3:12:2f:fd:cc:ce:66:08:13:81:d6:29:86:cc:5a:76:18:a7: 03:42:c7:3c:f6:ab:c9:b0:e3:5d:3d:1d:fa:fd:e0:b3:a6:45: fe:f3:d0:85:b3:81:40:09:18:07:7d:0c:14:cd:8d:eb:ee:58: 93:50:12:55:a2:ad:78:09:82:6f:45:da:ee:66:b4:50:50:3b: 25:34:b9:6b:9a:fb:15:9b:59:89:e1:c0:92:4c:2d:65:12:8f: a1:fc:57:93:09:29:68:1e:dc:7f:3a:da:c8:a8:dc:0b:18:57: b5:1c:ca:36:e4:8d:e9:e8:59:65:d7:f2:af:20:96:02:ee:ef: 60:28:a0:d6 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt/gibmiwFyvFj69O3hmgItMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYxOTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYzU2ZGI3OTZkZWYwZGJkYjRjNzhmMjQ0NWFiZWNjMTU3MGE2ZmQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofCbPsWrhf3De5Ak8N2dL87AMs0d LIfo8CkwCEPxfI9dFi+KVpE/DVPeiyZcmWv2L1S1gITBnqPwgYtXUTaUdNAljNgW vaVV15blhRjfbvAO5j9UOZONzH5ezzgEEoyzYDaaymKT3JPAXhyEwX5ypjSpBuD6 MVIQNzAUQ30uVnb7T5ftMAhQwG6G4rx3UzGaZfVZFIKG9O8u6ainP9m7QVzhUtlO wjiTTXKuGZc8LtI3w0h7oRARyiZKRI1qu3FAtTFzmw1dT6yE2C4dFffozxEeEFg4 Uy9FGdQrHItV4s8WoryILtgSy8HounKRY/AT4SH13AVFpkd6bw0g0SvpGwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFLxW23lt7w29tMePJEWr7MFXCm/ZMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZkLzhiOWJk OS0zZjYyLTRlMzAtODA4NS0xZWM3MjFmYTJhMzAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmQvOGI5YmQ5 LTNmNjItNGUzMC04MDg1LTFlYzcyMWZhMmEzMC8xL3ZGYmJlVzN2RGIyMHg0OGtS YXZzd1ZjS2I5ay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW8cQMA0GCSqGSIb3DQEBCwUAA4IBAQBvlkJB jutvRF+9p0b1SwDbUdDOQhy1BBa2G0K19DNgZexYRJ52K9gP/IkqefIDnJc40cOo Q0DaUHjwnrdvOPKmXuuAUZg0VZTV36a789IUarokWzh2oxZB6veEFRdct3D473zK cpl2KvRs2Z0qXU077m+q8FAeyFNDCa0+Xl6zEi/9zM5mCBOB1imGzFp2GKcDQsc8 9qvJsONdPR36/eCzpkX+89CFs4FACRgHfQwUzY3r7liTUBJVoq14CYJvRdruZrRQ UDslNLlrmvsVm1mJ4cCSTC1lEo+h/FeTCSloHtx/OtrIqNwLGFe1HMo25I3p6Fll 1/KvIJYC7u9gKKDW -----END CERTIFICATE-----Generated at Sun Jan 25 18:51:48 2026 by rpki-client