This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vK-LpZ96PF0A_grUVk2AUk33-pA.cer File: vK-LpZ96PF0A_grUVk2AUk33-pA.cer (raw, json) Hash identifier: 3HDw9vvvRJXMsykh0IE3RDQ31tC4qeQO4ODw6CssGxo= Subject key identifier: BC:AF:8B:A5:9F:7A:3C:5D:00:FE:0A:D4:56:4D:80:52:4D:F7:FA:90 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA4B6664388D2D4AEA7FF10FC2487C1 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cd/d07e9e-132a-48e2-9538-902aec440464/1/vK-LpZ96PF0A_grUVk2AUk33-pA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cd/d07e9e-132a-48e2-9538-902aec440464/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:19:10 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.52.212.0/22 IP: 2a01:baa0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:b6:66:43:88:d2:d4:ae:a7:ff:10:fc:24:87:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bcaf8ba59f7a3c5d00fe0ad4564d80524df7fa90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c4:62:41:3f:0b:8f:6f:e7:59:65:b2:d3:5b: 1a:54:bb:e6:32:fd:32:a7:a6:55:b8:25:9d:a6:d9: 13:d4:83:33:dd:b4:70:8c:d9:04:d4:66:c6:58:66: ae:e2:58:0c:93:fc:fc:c3:aa:ff:51:44:2f:58:50: 9d:ff:97:54:fd:4e:ca:af:59:1b:cb:57:48:8b:43: 58:6f:e8:0b:6a:87:2d:54:61:8a:b5:b0:7f:e6:70: 07:34:68:e1:75:97:83:39:51:85:c8:56:70:0a:c7: 9a:ac:85:80:ca:36:3e:6a:4a:92:5c:d0:0c:a6:96: 0e:0f:f5:01:89:20:8f:04:c0:e9:52:e0:92:61:0d: e3:bf:c1:cc:51:4c:60:a9:0d:23:85:7e:b1:6d:13: ff:53:9a:23:34:43:d5:39:30:d5:c6:d8:1c:cf:18: 83:6a:22:42:d3:26:14:3b:24:26:97:84:8f:2c:3e: 4e:5d:57:66:13:42:15:6d:51:0b:42:b0:ba:e6:9b: fc:16:f6:19:29:6d:0a:4a:e0:04:cf:ed:a3:16:6e: b8:6c:42:6d:b4:ac:10:f4:b1:1a:9f:f0:c4:00:55: f7:51:b7:06:27:eb:38:be:b1:fe:30:b7:bf:a7:b1: bc:1f:65:39:ee:ec:1f:5c:5c:4a:5b:fa:8a:07:f8: bb:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:AF:8B:A5:9F:7A:3C:5D:00:FE:0A:D4:56:4D:80:52:4D:F7:FA:90 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d07e9e-132a-48e2-9538-902aec440464/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d07e9e-132a-48e2-9538-902aec440464/1/vK-LpZ96PF0A_grUVk2AUk33-pA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.52.212.0/22 IPv6: 2a01:baa0::/32 Signature Algorithm: sha256WithRSAEncryption 25:2c:b8:32:4d:83:09:6a:e9:01:33:bc:49:47:cd:2c:f9:0e: 0d:2f:9b:53:70:4b:a9:eb:7f:15:8a:c2:6e:ae:0a:b1:a2:10: b9:e5:eb:4b:60:c3:49:0a:85:76:55:58:28:0d:11:c2:b7:14: 1f:93:a5:fb:28:95:19:6f:df:91:0f:ed:fa:fb:b3:eb:12:13: 12:2d:f5:b1:42:c9:29:7c:8f:82:03:95:51:b4:0f:4a:fc:9a: 05:db:61:7e:5c:d5:7d:35:e6:04:4f:5a:d5:66:d1:9a:1f:55: bc:0d:a7:b4:0d:64:59:13:06:fc:e1:7f:ae:52:c9:8b:df:e7: e5:3a:b3:b1:a5:d7:06:69:25:e4:e7:bf:33:0f:83:21:af:73: 15:40:c2:23:d2:4e:5b:e1:66:f8:04:42:7f:ad:4a:2f:09:96: 48:64:f7:3d:16:4c:c6:3c:c9:42:c5:4d:f2:2c:80:62:aa:0c: 8d:46:82:90:34:3d:a7:c9:b8:4b:2e:75:dc:74:42:34:a4:32: 37:31:f1:96:e1:16:bb:9e:39:30:33:36:ee:c7:3c:b5:4a:1a: e0:35:a1:b1:67:90:72:d1:54:0e:67:dc:dc:8c:0d:ed:a1:73: 8c:4c:04:56:19:26:0c:da:a1:5d:b5:86:d2:c6:b9:ff:be:11: f4:12:e5:c9 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt7pLZmQ4jS1K6n/xD8JIfBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiY2FmOGJhNTlmN2EzYzVkMDBmZTBhZDQ1NjRkODA1MjRkZjdmYTkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzsRiQT8Lj2/nWWWy01saVLvmMv0y p6ZVuCWdptkT1IMz3bRwjNkE1GbGWGau4lgMk/z8w6r/UUQvWFCd/5dU/U7Kr1kb y1dIi0NYb+gLaoctVGGKtbB/5nAHNGjhdZeDOVGFyFZwCsearIWAyjY+akqSXNAM ppYOD/UBiSCPBMDpUuCSYQ3jv8HMUUxgqQ0jhX6xbRP/U5ojNEPVOTDVxtgczxiD aiJC0yYUOyQml4SPLD5OXVdmE0IVbVELQrC65pv8FvYZKW0KSuAEz+2jFm64bEJt tKwQ9LEan/DEAFX3UbcGJ+s4vrH+MLe/p7G8H2U57uwfXFxKW/qKB/i7DQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFLyvi6WfejxdAP4K1FZNgFJN9/qQMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NkL2QwN2U5 ZS0xMzJhLTQ4ZTItOTUzOC05MDJhZWM0NDA0NjQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2QvZDA3ZTll LTEzMmEtNDhlMi05NTM4LTkwMmFlYzQ0MDQ2NC8xL3ZLLUxwWjk2UEYwQV9nclVW azJBVWszMy1wQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuTTUMA0EAgACMAcDBQAqAbqgMA0GCSqGSIb3 DQEBCwUAA4IBAQAlLLgyTYMJaukBM7xJR80s+Q4NL5tTcEup638VisJurgqxohC5 5etLYMNJCoV2VVgoDRHCtxQfk6X7KJUZb9+RD+36+7PrEhMSLfWxQskpfI+CA5VR tA9K/JoF22F+XNV9NeYET1rVZtGaH1W8Dae0DWRZEwb84X+uUsmL3+flOrOxpdcG aSXk578zD4Mhr3MVQMIj0k5b4Wb4BEJ/rUovCZZIZPc9FkzGPMlCxU3yLIBiqgyN RoKQND2nybhLLnXcdEI0pDI3MfGW4Ra7njkwMzbuxzy1ShrgNaGxZ5By0VQOZ9zc jA3toXOMTARWGSYM2qFdtYbSxrn/vhH0EuXJ -----END CERTIFICATE-----Generated at Mon Jan 26 09:28:04 2026 by rpki-client