This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vM1Spqf5VxcbFfe-XiCRZCg2lAE.cer File: vM1Spqf5VxcbFfe-XiCRZCg2lAE.cer (raw, json) Hash identifier: Gg2GajoMuIUq2vanBjmHuYzrCAXZ6wOCIal/iHd76/E= Subject key identifier: BC:CD:52:A6:A7:F9:57:17:1B:15:F7:BE:5E:20:91:64:28:36:94:01 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7758B3F123350D69677E5F7EC8E3184F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/vM1Spqf5VxcbFfe-XiCRZCg2lAE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:17:40 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 5.252.124.0/22 IP: 45.87.16.0/22 IP: 62.68.0.0/19 IP: 185.218.168.0/22 IP: 193.35.216.0/24 IP: 193.36.3.0/24 IP: 193.36.42.0/24 IP: 193.36.74.0/24 IP: 195.245.0.0/18 IP: 217.140.64.0/19 IP: 2a09:48c0::/29 IP: 2a0e:ed80::/29 IP: 2a0f:8040::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:b3:f1:23:35:0d:69:67:7e:5f:7e:c8:e3:18:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bccd52a6a7f957171b15f7be5e20916428369401 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:19:2f:95:7c:43:23:43:03:b2:df:5c:9d:14: 72:31:51:70:f0:18:90:5a:71:53:dc:9a:86:19:0f: b4:9a:de:0f:b1:09:76:8e:fc:f8:7c:02:db:d1:4c: bc:eb:a6:fe:a9:ec:b3:28:93:6c:57:34:05:69:cf: 19:53:e1:4a:1d:c6:97:96:49:cc:e5:70:17:75:f7: 2b:30:a2:ce:50:92:86:a9:55:fc:03:7a:c1:df:16: af:8b:f6:26:07:77:e9:66:49:4a:25:11:f7:84:37: 9d:50:55:b3:7b:c0:9a:2d:7b:6b:40:6b:51:35:88: 78:22:2d:9b:b1:e2:d9:8a:04:d6:87:5e:af:db:85: 3a:84:79:d1:c4:9d:76:eb:1c:ee:f6:76:02:cd:cc: 41:cf:2a:4b:9b:8e:4f:98:20:b8:a4:0f:e2:e1:e4: 9e:bd:11:c5:b4:a7:cc:19:a0:a7:47:24:34:54:9f: 57:c1:15:a5:31:f4:17:73:9c:44:c6:25:18:af:7c: 7d:75:fa:e9:2e:12:e1:f3:b0:44:20:af:93:a1:2d: 3b:e5:ed:af:66:9a:b5:92:af:cc:a4:fc:64:18:b2: 2f:8f:c9:9b:7e:b3:d3:55:8a:68:46:b5:3b:99:e6: ce:79:4c:b1:31:3c:ea:d8:50:3c:f2:c4:52:8d:44: 53:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:CD:52:A6:A7:F9:57:17:1B:15:F7:BE:5E:20:91:64:28:36:94:01 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/vM1Spqf5VxcbFfe-XiCRZCg2lAE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.252.124.0/22 45.87.16.0/22 62.68.0.0/19 185.218.168.0/22 193.35.216.0/24 193.36.3.0/24 193.36.42.0/24 193.36.74.0/24 195.245.0.0/18 217.140.64.0/19 IPv6: 2a09:48c0::/29 2a0e:ed80::/29 2a0f:8040::/29 Signature Algorithm: sha256WithRSAEncryption 5d:61:0e:7f:1f:d8:a7:8b:e1:6b:7d:fc:6d:ad:c6:7e:ac:99: 10:ca:98:13:43:6d:35:c7:f0:5e:93:a9:6f:4a:07:6f:98:e7: fa:85:17:d1:c0:52:e2:c8:6e:92:0f:cf:c1:0e:5b:bb:10:b8: 1b:cb:1a:80:4d:c2:8b:26:cd:8b:72:b7:ef:26:ba:12:fd:30: 56:25:02:c6:b4:ff:c4:63:b3:45:64:f7:16:7e:b2:dd:bf:10: a4:5f:d2:d1:00:53:03:50:2b:06:04:88:32:56:49:93:d6:f4: 6e:95:7d:a2:d4:a4:aa:54:f7:72:c4:2f:11:1f:48:0b:25:cc: bd:d4:63:1e:41:33:bf:04:9f:ad:a4:24:9a:36:45:57:a9:2c: 4d:aa:38:e3:d2:8f:ef:f6:29:8d:ee:55:d4:cd:4d:8c:ed:b3: d8:fe:92:38:46:42:da:2e:6b:95:52:a5:8c:d6:82:77:83:93: 3a:3e:67:38:83:86:67:70:b1:9c:fc:76:eb:89:08:8f:42:47: 62:a9:8c:3a:94:ed:a9:f1:31:60:9e:35:fc:6d:45:c2:17:49: 80:86:c6:be:4c:a2:fb:be:37:b4:47:ba:39:6c:8d:16:98:9b: 03:1b:e7:7a:06:9b:7b:17:40:06:4f:40:d0:b1:fa:df:7e:04: 04:25:28:b0 -----BEGIN CERTIFICATE----- MIIFyzCCBLOgAwIBAgISAZt3WLPxIzUNaWd+X37I4xhPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiY2NkNTJhNmE3Zjk1NzE3MWIxNWY3YmU1ZTIwOTE2NDI4MzY5NDAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBkvlXxDI0MDst9cnRRyMVFw8BiQ WnFT3JqGGQ+0mt4PsQl2jvz4fALb0Uy866b+qeyzKJNsVzQFac8ZU+FKHcaXlknM 5XAXdfcrMKLOUJKGqVX8A3rB3xavi/YmB3fpZklKJRH3hDedUFWze8CaLXtrQGtR NYh4Ii2bseLZigTWh16v24U6hHnRxJ126xzu9nYCzcxBzypLm45PmCC4pA/i4eSe vRHFtKfMGaCnRyQ0VJ9XwRWlMfQXc5xExiUYr3x9dfrpLhLh87BEIK+ToS075e2v Zpq1kq/MpPxkGLIvj8mbfrPTVYpoRrU7mebOeUyxMTzq2FA88sRSjURTyQIDAQAB o4IC1zCCAtMwHQYDVR0OBBYEFLzNUqan+VcXGxX3vl4gkWQoNpQBMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNhL2VlYWI5 YS1kMjA3LTRiMmUtYTUyNS1lODIzZTE3YmI1Y2MvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2EvZWVhYjlh LWQyMDctNGIyZS1hNTI1LWU4MjNlMTdiYjVjYy8xL3ZNMVNwcWY1VnhjYkZmZS1Y aUNSWkNnMmxBRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMHIGCCsGAQUF BwEHAQH/BGMwYTBCBAIAATA8AwQCBfx8AwQCLVcQAwQFPkQAAwQCudqoAwQAwSPY AwQAwSQDAwQAwSQqAwQAwSRKAwQGw/UAAwQF2YxAMBsEAgACMBUDBQMqCUjAAwUD Kg7tgAMFAyoPgEAwDQYJKoZIhvcNAQELBQADggEBAF1hDn8f2KeL4Wt9/G2txn6s mRDKmBNDbTXH8F6TqW9KB2+Y5/qFF9HAUuLIbpIPz8EOW7sQuBvLGoBNwosmzYty t+8muhL9MFYlAsa0/8Rjs0Vk9xZ+st2/EKRf0tEAUwNQKwYEiDJWSZPW9G6VfaLU pKpU93LELxEfSAslzL3UYx5BM78En62kJJo2RVepLE2qOOPSj+/2KY3uVdTNTYzt s9j+kjhGQtoua5VSpYzWgneDkzo+ZziDhmdwsZz8duuJCI9CR2KpjDqU7anxMWCe NfxtRcIXSYCGxr5Movu+N7RHujlsjRaYmwMb53oGm3sXQAZPQNCx+t9+BAQlKLA= -----END CERTIFICATE-----Generated at Sun Jan 25 19:22:32 2026 by rpki-client