This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vM5ZBxGuf8sBbutzdrCn_HZhyxM.cer File: vM5ZBxGuf8sBbutzdrCn_HZhyxM.cer (raw, json) Hash identifier: SKlkztTc3Q9U6AWclRZpjLHa0rVlyH0X/ImNCTifHEY= Subject key identifier: BC:CE:59:07:11:AE:7F:CB:01:6E:EB:73:76:B0:A7:FC:76:61:CB:13 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F15A8BF15B36816D272F5D091BBF042 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/vM5ZBxGuf8sBbutzdrCn_HZhyxM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:24 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 31223 AS: 47791 AS: 50108 AS: 50985 AS: 56723 AS: 60220 AS: 197872 AS: 199764 AS: 199875 AS: 206071 AS: 206457 AS: 206800 AS: 207601 -- 207602 AS: 210208 AS: 211303 IP: 185.34.56.0/22 IP: 2a00:ad40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:a8:bf:15:b3:68:16:d2:72:f5:d0:91:bb:f0:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bcce590711ae7fcb016eeb7376b0a7fc7661cb13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:7b:02:78:77:d3:64:65:92:0e:0f:2e:24:f8: 17:e3:c6:f8:ba:35:79:47:55:cd:0c:09:2a:b1:7a: 95:90:2c:7d:1d:52:a3:79:94:00:2f:a7:69:3e:df: 3b:cf:a4:51:71:d0:e9:9d:03:0d:09:c0:af:a0:39: 57:75:9a:27:b0:7d:6b:16:4a:9e:84:0e:f5:c7:f0: 2d:07:ad:e1:53:1e:4d:d0:65:f4:51:e0:1d:bb:5d: 4a:4e:e6:b3:fb:2d:39:1c:74:a4:94:00:1b:5b:f6: 99:0c:66:5b:5c:47:1f:99:f8:d1:7b:c2:27:63:b3: 23:d7:da:34:93:5c:c2:fa:53:3a:40:83:ed:91:26: 78:26:23:5e:d4:f9:68:8c:52:ac:e9:3d:1f:d7:9f: 5f:0b:84:e6:8d:08:11:12:70:db:c4:22:89:09:b6: 3f:da:7d:33:50:d5:3a:2c:43:32:e9:6e:0d:39:c8: 87:c0:0b:92:d3:28:82:01:02:80:6b:fb:2b:d4:50: 94:f1:a8:b6:77:96:33:36:01:cd:ef:c4:4c:f2:3a: aa:86:b3:eb:fb:ab:ff:b1:e2:33:12:b0:8e:e2:d0: 8f:fe:ef:fb:d4:ef:6a:7f:32:1c:05:54:1a:4c:a1: 52:ea:79:7a:20:e9:6d:dc:cd:99:38:e7:82:77:90: 5c:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:CE:59:07:11:AE:7F:CB:01:6E:EB:73:76:B0:A7:FC:76:61:CB:13 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/vM5ZBxGuf8sBbutzdrCn_HZhyxM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.34.56.0/22 IPv6: 2a00:ad40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 31223 47791 50108 50985 56723 60220 197872 199764 199875 206071 206457 206800 207601-207602 210208 211303 Signature Algorithm: sha256WithRSAEncryption 45:94:6d:57:82:39:5f:2b:b0:73:c0:7a:58:29:33:7b:de:fa: 05:dd:a8:97:b0:35:e1:e7:98:40:ce:bc:80:f2:9a:a8:1d:e7: 63:45:08:d0:dd:5d:c5:b0:50:73:2f:c7:ef:dc:0d:51:b4:53: 56:a1:bf:00:fe:68:01:d4:1a:a0:59:d8:6d:a0:e5:ce:75:9d: 29:54:a4:3c:a0:94:74:ce:0e:bc:b5:db:12:ec:4a:9e:47:00: a2:90:92:38:5a:17:5d:77:d9:c1:ed:61:81:0a:e0:7c:64:d7: ab:9d:9f:c3:35:91:e7:36:5e:b3:2f:c9:de:34:49:0e:98:60: 5d:90:51:65:95:56:b3:0f:b6:2e:72:a1:8c:1c:14:4c:5f:7b: 38:b5:5b:89:30:f9:4b:64:f9:5a:65:4d:50:01:3c:d5:39:73: a5:23:62:a5:ba:43:56:41:0f:aa:f8:f1:31:1b:ae:d5:fe:b5: 9e:e6:38:fa:1c:19:01:ae:43:82:80:b8:f6:0b:33:8f:18:f9: f9:0c:eb:32:fe:dd:1c:4b:c5:8f:f4:30:2f:0b:6d:1f:8d:e9: e7:ce:c1:d9:b9:96:c1:00:ed:60:9d:d0:be:03:7b:ab:2b:b4: e0:25:2a:4d:fc:01:d5:6c:82:54:bc:08:8a:96:83:2e:67:02: 34:31:e0:40 -----BEGIN CERTIFICATE----- MIIF7zCCBNegAwIBAgISAZt/Fai/FbNoFtJy9dCRu/BCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiY2NlNTkwNzExYWU3ZmNiMDE2ZWViNzM3NmIwYTdmYzc2NjFjYjEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXsCeHfTZGWSDg8uJPgX48b4ujV5 R1XNDAkqsXqVkCx9HVKjeZQAL6dpPt87z6RRcdDpnQMNCcCvoDlXdZonsH1rFkqe hA71x/AtB63hUx5N0GX0UeAdu11KTuaz+y05HHSklAAbW/aZDGZbXEcfmfjRe8In Y7Mj19o0k1zC+lM6QIPtkSZ4JiNe1PlojFKs6T0f159fC4TmjQgREnDbxCKJCbY/ 2n0zUNU6LEMy6W4NOciHwAuS0yiCAQKAa/sr1FCU8ai2d5YzNgHN78RM8jqqhrPr +6v/seIzErCO4tCP/u/71O9qfzIcBVQaTKFS6nl6IOlt3M2ZOOeCd5BcDQIDAQAB o4IC+zCCAvcwHQYDVR0OBBYEFLzOWQcRrn/LAW7rc3awp/x2YcsTMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2IxL2FjNmI5 MS1lZGFmLTQ0ODYtOTM0ZS0wNWRiNDk3YWM0NTUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjEvYWM2Yjkx LWVkYWYtNDQ4Ni05MzRlLTA1ZGI0OTdhYzQ1NS8xL3ZNNVpCeEd1ZjhzQmJ1dHpk ckNuX0haaHl4TS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuSI4MA0EAgACMAcDBQMqAK1AMGYGCCsGAQUF BwEIAQH/BFcwVaBTMFECAnn3AgMAuq8CAwDDvAIDAMcpAgMA3ZMCAwDrPAIDAwTw AgMDDFQCAwMMwwIDAyT3AgMDJnkCAwMn0DAKAgMDKvECAwMq8gIDAzUgAgMDOWcw DQYJKoZIhvcNAQELBQADggEBAEWUbVeCOV8rsHPAelgpM3ve+gXdqJewNeHnmEDO vIDymqgd52NFCNDdXcWwUHMvx+/cDVG0U1ahvwD+aAHUGqBZ2G2g5c51nSlUpDyg lHTODry12xLsSp5HAKKQkjhaF1132cHtYYEK4Hxk16udn8M1kec2XrMvyd40SQ6Y YF2QUWWVVrMPti5yoYwcFExfezi1W4kw+Utk+VplTVABPNU5c6UjYqW6Q1ZBD6r4 8TEbrtX+tZ7mOPocGQGuQ4KAuPYLM48Y+fkM6zL+3RxLxY/0MC8LbR+N6efOwdm5 lsEA7WCd0L4De6srtOAlKk38AdVsglS8CIqWgy5nAjQx4EA= -----END CERTIFICATE-----Generated at Sun Jan 25 11:46:53 2026 by rpki-client