This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vSUqdclhrTOP2RFH1GHdiz0gz1E.cer File: vSUqdclhrTOP2RFH1GHdiz0gz1E.cer (raw, json) Hash identifier: GBJePi0Xu92yF0qujOsVJ/6ZchvQdM2ka4YbSr3hiaQ= Subject key identifier: BD:25:2A:75:C9:61:AD:33:8F:D9:11:47:D4:61:DD:8B:3D:20:CF:51 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA50B9740151BE6C3145B49942DDDD4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/81/d1c70e-226a-4781-b662-741ab92997d0/1/vSUqdclhrTOP2RFH1GHdiz0gz1E.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/81/d1c70e-226a-4781-b662-741ab92997d0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:19:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 5.182.152.0/22 IP: 2a0e:900::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:0b:97:40:15:1b:e6:c3:14:5b:49:94:2d:dd:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:19:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bd252a75c961ad338fd91147d461dd8b3d20cf51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:fa:be:b6:01:f3:e0:05:ce:57:f5:71:0b:f5: 1a:31:6a:cc:8f:f3:5f:cd:ae:08:0e:8c:f4:ba:cb: c6:93:3d:a1:76:92:cd:cd:85:29:5c:bf:8e:09:2b: 3d:aa:c5:e2:37:95:b3:6b:db:03:5a:c0:56:95:e6: df:88:8c:06:f3:75:34:f8:78:71:67:6c:a6:b7:fa: 7e:74:aa:5f:85:53:1c:38:ac:02:a2:0a:33:ac:1e: 15:b7:ea:e8:7a:a0:85:28:07:6f:4d:87:cd:78:b1: 81:0a:a0:e1:91:3c:41:51:cb:eb:fe:f7:68:b4:11: aa:e5:dd:29:b5:bf:12:bd:97:9d:66:84:be:e5:56: 77:83:2a:96:a9:85:ef:6c:ec:1c:7b:be:6d:86:10: 8c:a1:3d:2e:83:28:1b:40:4b:b3:5d:b8:ee:fe:72: 8f:23:21:85:5f:eb:12:e4:2c:33:eb:7d:99:59:a7: 4d:5f:0e:f3:ca:c5:36:6a:15:c0:72:d9:80:9d:94: 68:07:3d:76:c0:05:53:7b:6b:fc:ff:5c:a9:6e:25: 23:c8:cd:ec:78:6b:ab:dd:de:c7:7e:c5:24:b4:75: 4d:3c:c9:5d:9a:05:66:c3:2d:4e:10:9e:48:27:40: 64:ec:1e:77:3e:0d:fb:f6:08:26:70:94:7a:a1:c2: c9:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:25:2A:75:C9:61:AD:33:8F:D9:11:47:D4:61:DD:8B:3D:20:CF:51 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d1c70e-226a-4781-b662-741ab92997d0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d1c70e-226a-4781-b662-741ab92997d0/1/vSUqdclhrTOP2RFH1GHdiz0gz1E.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.182.152.0/22 IPv6: 2a0e:900::/29 Signature Algorithm: sha256WithRSAEncryption ae:9d:68:fa:a0:1f:77:55:4e:5f:61:73:6e:9e:e2:5d:78:8d: 35:14:5c:f0:50:7a:85:fe:b6:3c:35:dc:cd:89:f1:eb:05:58: a5:93:fb:cd:45:7f:61:0f:60:f8:92:ce:8e:45:6f:2b:d8:6a: 82:be:95:b3:45:b6:92:e2:c1:55:74:0b:7f:1f:75:aa:43:12: c6:44:67:50:e8:aa:fc:54:36:1e:14:e8:b2:10:7e:99:63:15: 95:60:0b:13:ee:ec:2c:0b:2f:c3:4f:a2:b8:9d:9d:25:d1:b8: c3:f8:f2:15:8a:d0:4d:79:12:04:66:6e:c5:c3:0e:2e:91:51: 42:58:fd:b6:9f:b8:0d:b1:fa:11:87:9e:c3:5f:57:99:7e:5e: 29:f8:43:4f:f9:dd:c0:07:2e:97:35:2e:eb:c7:3f:e2:ef:5e: 56:22:19:f3:b1:45:e5:b2:a0:1d:7b:13:40:aa:f5:d6:41:af: 01:af:09:49:02:90:7a:a4:d2:35:da:4e:1d:d6:80:f4:de:30: 28:f6:46:46:8c:04:7f:02:a7:59:d5:a7:37:3f:75:e3:23:80: ee:1a:0e:60:d0:6d:5b:ef:1e:90:e8:6c:f1:b0:50:96:f2:58: ae:69:48:86:35:1f:58:2e:e4:f2:e5:1a:23:75:7f:56:7e:49: 66:97:ed:f2 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt7pQuXQBUb5sMUW0mULd3UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxOTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZDI1MmE3NWM5NjFhZDMzOGZkOTExNDdkNDYxZGQ4YjNkMjBjZjUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPq+tgHz4AXOV/VxC/UaMWrMj/Nf za4IDoz0usvGkz2hdpLNzYUpXL+OCSs9qsXiN5Wza9sDWsBWlebfiIwG83U0+Hhx Z2ymt/p+dKpfhVMcOKwCogozrB4Vt+roeqCFKAdvTYfNeLGBCqDhkTxBUcvr/vdo tBGq5d0ptb8SvZedZoS+5VZ3gyqWqYXvbOwce75thhCMoT0ugygbQEuzXbju/nKP IyGFX+sS5Cwz632ZWadNXw7zysU2ahXActmAnZRoBz12wAVTe2v8/1ypbiUjyM3s eGur3d7HfsUktHVNPMldmgVmwy1OEJ5IJ0Bk7B53Pg379ggmcJR6ocLJbQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFL0lKnXJYa0zj9kRR9Rh3Ys9IM9RMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgxL2QxYzcw ZS0yMjZhLTQ3ODEtYjY2Mi03NDFhYjkyOTk3ZDAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODEvZDFjNzBl LTIyNmEtNDc4MS1iNjYyLTc0MWFiOTI5OTdkMC8xL3ZTVXFkY2xoclRPUDJSRkgx R0hkaXowZ3oxRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCBbaYMA0EAgACMAcDBQMqDgkAMA0GCSqGSIb3 DQEBCwUAA4IBAQCunWj6oB93VU5fYXNunuJdeI01FFzwUHqF/rY8NdzNifHrBVil k/vNRX9hD2D4ks6ORW8r2GqCvpWzRbaS4sFVdAt/H3WqQxLGRGdQ6Kr8VDYeFOiy EH6ZYxWVYAsT7uwsCy/DT6K4nZ0l0bjD+PIVitBNeRIEZm7Fww4ukVFCWP22n7gN sfoRh57DX1eZfl4p+ENP+d3ABy6XNS7rxz/i715WIhnzsUXlsqAdexNAqvXWQa8B rwlJApB6pNI12k4d1oD03jAo9kZGjAR/AqdZ1ac3P3XjI4DuGg5g0G1b7x6Q6Gzx sFCW8liuaUiGNR9YLuTy5RojdX9Wfklml+3y -----END CERTIFICATE-----Generated at Mon Jan 26 01:45:46 2026 by rpki-client