This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vW-jeiSDz1efqGJQEZrAEzR1qtg.cer File: vW-jeiSDz1efqGJQEZrAEzR1qtg.cer (raw, json) Hash identifier: JWsHK7kO26W3wW6dSzDXcT6LGjo6DRnzyCGhubAsG5c= Subject key identifier: BD:6F:A3:7A:24:83:CF:57:9F:A8:62:50:11:9A:C0:13:34:75:AA:D8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B367ABA7C14840CB2105E72454D1AF4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/91/e3ada2-c9df-44e2-8b0f-8ff1611e8bb4/1/vW-jeiSDz1efqGJQEZrAEzR1qtg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/91/e3ada2-c9df-44e2-8b0f-8ff1611e8bb4/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:46 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 45.86.140.0/22 IP: 45.133.228.0/22 IP: 45.138.80.0/22 IP: 45.147.24.0/22 IP: 45.158.228.0/22 IP: 185.239.224.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:7a:ba:7c:14:84:0c:b2:10:5e:72:45:4d:1a:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bd6fa37a2483cf579fa86250119ac0133475aad8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a2:01:6f:6b:dc:26:14:60:a3:54:cc:c4:30: db:3b:15:40:5f:2f:bd:be:a2:87:40:68:d6:ae:c6: c2:02:1c:10:cc:db:9d:8f:f9:7f:93:03:a3:fa:9b: a8:63:8d:b9:4b:af:c7:55:59:33:92:c4:55:47:2a: 23:6f:dd:3c:2a:1e:3e:37:90:02:d8:e2:13:fe:9c: 37:05:61:ea:00:ab:a0:83:bb:98:53:81:a3:81:20: c3:61:66:d6:b4:7d:b3:37:3c:01:c4:2c:90:22:b1: 7d:85:18:56:d7:e1:c8:a0:73:fa:31:22:0e:67:9f: 88:4b:3d:2b:30:8e:97:41:d7:f4:11:15:60:58:5b: a6:98:92:51:5a:8e:04:5d:c5:bb:11:4f:87:03:73: 40:30:5a:ad:5f:bb:39:78:fc:56:e5:f5:43:6f:4e: 48:82:f4:c8:6d:1a:3c:ea:06:58:aa:36:00:b1:ba: 33:38:12:bf:13:f7:e5:88:8b:7c:aa:22:8e:43:9b: 9a:c5:03:30:58:de:0b:47:e9:c2:ba:5b:fd:c7:0b: 7d:39:f7:fb:ee:e1:0d:5c:a6:08:3e:b5:41:4a:14: fe:e6:b3:51:b3:f3:1c:c7:83:55:e9:c4:b2:95:18: e4:d2:34:31:01:94:c9:94:a6:a4:36:89:07:a7:99: 1e:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:6F:A3:7A:24:83:CF:57:9F:A8:62:50:11:9A:C0:13:34:75:AA:D8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/e3ada2-c9df-44e2-8b0f-8ff1611e8bb4/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/e3ada2-c9df-44e2-8b0f-8ff1611e8bb4/1/vW-jeiSDz1efqGJQEZrAEzR1qtg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.86.140.0/22 45.133.228.0/22 45.138.80.0/22 45.147.24.0/22 45.158.228.0/22 185.239.224.0/22 Signature Algorithm: sha256WithRSAEncryption 7c:89:fe:b5:9c:1d:23:b8:d6:da:35:2c:24:1e:fa:8e:c8:0a: e4:4e:79:24:9e:1d:0d:b7:70:5b:c5:13:9f:cd:d6:ea:f0:1e: a0:b5:c9:18:2b:8d:ee:41:d6:2d:81:1a:0d:42:22:29:a6:57: af:c3:0d:01:dd:f3:8d:be:37:a4:92:ce:f1:c0:50:5c:cf:02: 8c:ce:48:ac:88:6e:ee:2b:e5:f7:e9:44:7a:3b:3a:7c:67:3e: 7e:cd:38:39:a6:97:b2:b2:77:64:d2:c7:5f:53:87:ad:40:06: e7:f0:00:ec:0c:ab:f3:c1:73:ca:1d:c9:09:03:d5:16:64:ea: 68:a9:0d:07:c5:62:24:4b:8b:c1:a4:c6:30:e6:a4:aa:98:73: 49:46:f9:9e:2a:9b:0c:02:8a:eb:a8:de:b5:12:84:7a:2a:72: e6:59:e7:de:85:a8:02:f3:1c:8f:01:ee:d0:f9:71:da:a9:fb: 21:a7:c0:d0:92:3b:17:41:0a:5a:21:7a:1e:a7:6f:30:87:54: 72:76:3b:f0:1a:ab:4d:4e:20:62:de:71:d5:5b:75:be:a4:55: a3:13:60:7f:65:44:7f:27:75:16:97:a7:34:79:6f:54:26:88: a2:0e:40:b2:65:e5:04:14:2c:0d:b0:06:c9:55:82:a6:b3:46: f1:36:45:c4 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgISAZt7Nnq6fBSEDLIQXnJFTRr0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZDZmYTM3YTI0ODNjZjU3OWZhODYyNTAxMTlhYzAxMzM0NzVhYWQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxaIBb2vcJhRgo1TMxDDbOxVAXy+9 vqKHQGjWrsbCAhwQzNudj/l/kwOj+puoY425S6/HVVkzksRVRyojb908Kh4+N5AC 2OIT/pw3BWHqAKugg7uYU4GjgSDDYWbWtH2zNzwBxCyQIrF9hRhW1+HIoHP6MSIO Z5+ISz0rMI6XQdf0ERVgWFummJJRWo4EXcW7EU+HA3NAMFqtX7s5ePxW5fVDb05I gvTIbRo86gZYqjYAsbozOBK/E/fliIt8qiKOQ5uaxQMwWN4LR+nCulv9xwt9Off7 7uENXKYIPrVBShT+5rNRs/Mcx4NV6cSylRjk0jQxAZTJlKakNokHp5keyQIDAQAB o4ICojCCAp4wHQYDVR0OBBYEFL1vo3okg89Xn6hiUBGawBM0darYMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkxL2UzYWRh Mi1jOWRmLTQ0ZTItOGIwZi04ZmYxNjExZThiYjQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTEvZTNhZGEy LWM5ZGYtNDRlMi04YjBmLThmZjE2MTFlOGJiNC8xL3ZXLWplaVNEejFlZnFHSlFF WnJBRXpSMXF0Zy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMD0GCCsGAQUF BwEHAQH/BC4wLDAqBAIAATAkAwQCLVaMAwQCLYXkAwQCLYpQAwQCLZMYAwQCLZ7k AwQCue/gMA0GCSqGSIb3DQEBCwUAA4IBAQB8if61nB0juNbaNSwkHvqOyArkTnkk nh0Nt3BbxROfzdbq8B6gtckYK43uQdYtgRoNQiIpplevww0B3fONvjekks7xwFBc zwKMzkisiG7uK+X36UR6Ozp8Zz5+zTg5ppeysndk0sdfU4etQAbn8ADsDKvzwXPK HckJA9UWZOpoqQ0HxWIkS4vBpMYw5qSqmHNJRvmeKpsMAorrqN61EoR6KnLmWefe hagC8xyPAe7Q+XHaqfshp8DQkjsXQQpaIXoep28wh1RydjvwGqtNTiBi3nHVW3W+ pFWjE2B/ZUR/J3UWl6c0eW9UJoiiDkCyZeUEFCwNsAbJVYKms0bxNkXE -----END CERTIFICATE-----Generated at Sun Jan 25 17:17:32 2026 by rpki-client