This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vJ18QukXhEy8LeSpHGwXAd5ZcbU.cer File: vJ18QukXhEy8LeSpHGwXAd5ZcbU.cer (raw, json) Hash identifier: UY2FCq6K2rgxpxNvMG28gJUZ5b8jpj8KxPSkekf7o9g= Subject key identifier: BC:9D:7C:42:E9:17:84:4C:BC:2D:E4:A9:1C:6C:17:01:DE:59:71:B5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCB2EE945F62377F5014AA8B5F3F1B8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2d/29aea2-b6c8-4af9-ad84-03fb54187ee2/1/vJ18QukXhEy8LeSpHGwXAd5ZcbU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2d/29aea2-b6c8-4af9-ad84-03fb54187ee2/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:20:26 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 34119 IP: 31.22.0.0/21 IP: 77.95.32.0/21 IP: 185.2.168.0/22 IP: 185.103.228.0/22 IP: 185.211.176.0/22 IP: 2a02:5300::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:2e:e9:45:f6:23:77:f5:01:4a:a8:b5:f3:f1:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:20:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bc9d7c42e917844cbc2de4a91c6c1701de5971b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:4b:52:7e:15:1e:4b:c7:ab:a0:5a:34:bf:e7: b5:aa:d5:fd:a8:07:6a:eb:e5:81:89:39:21:ab:3b: 2a:d2:b0:c9:9e:74:f9:39:0f:7d:df:53:47:58:4a: 41:91:8a:39:51:fd:dc:ef:01:9e:38:b0:85:6e:dd: a9:6c:b3:16:d0:db:26:65:49:dc:6b:f5:a6:0d:13: 5f:3c:09:94:48:af:6c:46:27:97:5e:06:12:fc:49: 6a:9c:8f:80:66:f4:d5:55:d9:ce:f6:8e:32:c6:a8: 0a:1d:c3:74:37:2c:fd:44:a7:8d:7c:09:d6:12:49: 2d:c3:f7:d6:c4:b2:1e:8b:b9:55:05:0c:0f:8d:79: 99:e6:2f:d5:84:ba:f8:3f:75:e3:9d:73:9d:43:9f: ed:a6:e2:be:f0:6b:46:d0:93:04:07:6b:27:6f:32: f3:7e:81:02:b9:3a:33:df:55:32:17:9a:85:12:f6: 87:3f:8b:7f:e6:3c:0e:83:9f:5a:54:a3:ae:cb:94: 4a:e8:4e:c8:fa:d2:0c:7a:c6:c6:f8:fc:a5:dc:21: 67:c2:fe:7b:eb:04:92:ab:22:c3:41:86:dd:cc:1a: af:b0:6e:23:f2:d1:ec:da:da:ef:0b:65:fe:7e:25: ab:72:e4:9e:da:fb:05:11:36:d2:c1:d3:ad:9b:73: ac:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:9D:7C:42:E9:17:84:4C:BC:2D:E4:A9:1C:6C:17:01:DE:59:71:B5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/29aea2-b6c8-4af9-ad84-03fb54187ee2/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/29aea2-b6c8-4af9-ad84-03fb54187ee2/1/vJ18QukXhEy8LeSpHGwXAd5ZcbU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.22.0.0/21 77.95.32.0/21 185.2.168.0/22 185.103.228.0/22 185.211.176.0/22 IPv6: 2a02:5300::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 34119 Signature Algorithm: sha256WithRSAEncryption 3b:3b:bc:2d:49:8d:ac:02:6d:dc:7c:8d:96:64:c7:44:40:a7: 92:48:14:7f:6d:b3:81:f9:79:b1:f2:d2:18:ac:c5:01:c6:e7: 90:37:f8:49:ea:1a:48:75:09:6a:48:1e:6e:5f:31:65:e3:3b: 53:9c:8f:95:89:d9:14:d4:ea:80:35:7c:b4:a9:47:c5:72:60: 89:f7:52:1e:f3:23:47:80:79:75:15:d6:17:49:19:70:6f:05: cc:78:09:f3:d2:bd:3d:ad:80:51:3f:b7:d6:35:32:e6:5f:ea: b0:38:d6:76:e0:46:6c:c8:9b:ab:2a:fd:ec:1f:25:5a:c4:e1: 70:c3:2c:00:25:57:fb:9c:67:d3:01:5f:31:85:5e:c1:06:9e: 74:39:40:92:5e:22:d4:1e:70:40:a6:c6:e4:89:aa:1b:12:86: 7e:3d:d0:71:04:3a:2b:2b:bb:84:c6:af:64:de:cd:02:d9:c6: b1:3e:c3:f2:4c:06:36:ca:fb:a7:f0:30:b8:54:70:5d:3b:8b: 03:ec:3d:e5:2b:58:9c:bd:6a:c9:52:f6:5b:95:7f:9a:f4:52: 2b:4b:c4:70:d1:6d:11:ea:70:84:92:91:f0:fa:ce:e2:29:3f: 0a:5c:d3:9b:bf:19:6d:f8:dc:d2:b3:5c:c8:4e:f8:c8:9d:43: 88:cb:3d:67 -----BEGIN CERTIFICATE----- MIIFuzCCBKOgAwIBAgISAZt9yy7pRfYjd/UBSqi18/G4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgyMDI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYzlkN2M0MmU5MTc4NDRjYmMyZGU0YTkxYzZjMTcwMWRlNTk3MWI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3EtSfhUeS8eroFo0v+e1qtX9qAdq 6+WBiTkhqzsq0rDJnnT5OQ9931NHWEpBkYo5Uf3c7wGeOLCFbt2pbLMW0NsmZUnc a/WmDRNfPAmUSK9sRieXXgYS/ElqnI+AZvTVVdnO9o4yxqgKHcN0Nyz9RKeNfAnW Ekktw/fWxLIei7lVBQwPjXmZ5i/VhLr4P3XjnXOdQ5/tpuK+8GtG0JMEB2snbzLz foECuToz31UyF5qFEvaHP4t/5jwOg59aVKOuy5RK6E7I+tIMesbG+Pyl3CFnwv57 6wSSqyLDQYbdzBqvsG4j8tHs2trvC2X+fiWrcuSe2vsFETbSwdOtm3Os2QIDAQAB o4ICxzCCAsMwHQYDVR0OBBYEFLydfELpF4RMvC3kqRxsFwHeWXG1MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJkLzI5YWVh Mi1iNmM4LTRhZjktYWQ4NC0wM2ZiNTQxODdlZTIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmQvMjlhZWEy LWI2YzgtNGFmOS1hZDg0LTAzZmI1NDE4N2VlMi8xL3ZKMThRdWtYaEV5OExlU3BI R3dYQWQ1WmNiVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUF BwEHAQH/BDcwNTAkBAIAATAeAwQDHxYAAwQDTV8gAwQCuQKoAwQCuWfkAwQCudOw MA0EAgACMAcDBQAqAlMAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCFRzANBgkq hkiG9w0BAQsFAAOCAQEAOzu8LUmNrAJt3HyNlmTHRECnkkgUf22zgfl5sfLSGKzF AcbnkDf4SeoaSHUJakgebl8xZeM7U5yPlYnZFNTqgDV8tKlHxXJgifdSHvMjR4B5 dRXWF0kZcG8FzHgJ89K9Pa2AUT+31jUy5l/qsDjWduBGbMibqyr97B8lWsThcMMs ACVX+5xn0wFfMYVewQaedDlAkl4i1B5wQKbG5ImqGxKGfj3QcQQ6Kyu7hMavZN7N AtnGsT7D8kwGNsr7p/AwuFRwXTuLA+w95StYnL1qyVL2W5V/mvRSK0vEcNFtEepw hJKR8PrO4ik/ClzTm78Zbfjc0rNcyE74yJ1DiMs9Zw== -----END CERTIFICATE-----Generated at Mon Jan 26 01:54:55 2026 by rpki-client