This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vWjB2tkaQQHHFTwPbQFWI4rXRrs.cer File: vWjB2tkaQQHHFTwPbQFWI4rXRrs.cer (raw, json) Hash identifier: ox69THFkiwS8WghrqM7z3dM3v86Yv1Xu1XHUgjzpWOY= Subject key identifier: BD:68:C1:DA:D9:1A:41:01:C7:15:3C:0F:6D:01:56:23:8A:D7:46:BB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A2250AB152684A40C80479E2F28ED5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2b/4f4eff-af54-4db0-91cd-1369cef7a4ca/1/vWjB2tkaQQHHFTwPbQFWI4rXRrs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2b/4f4eff-af54-4db0-91cd-1369cef7a4ca/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:17:30 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 192.109.199.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:25:0a:b1:52:68:4a:40:c8:04:79:e2:f2:8e:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bd68c1dad91a4101c7153c0f6d0156238ad746bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:8e:79:b8:d6:97:17:82:28:73:d8:60:7a:9a: a2:58:7a:c5:84:e4:02:4a:d1:5c:85:d0:5d:20:24: a5:dc:0e:0a:58:51:31:70:32:5e:44:07:11:1a:f2: 4f:2a:06:c9:64:65:da:bf:d9:b4:56:bd:57:56:aa: a9:66:ab:1e:4c:87:f3:a3:0b:23:18:57:03:03:6d: db:8d:41:35:9f:e0:14:cb:40:dc:bd:33:ae:e6:17: b6:18:1e:dc:59:38:1c:91:ae:09:fb:25:23:77:f2: 43:ba:87:7a:8f:88:9b:1a:7a:66:c5:24:ff:e6:34: 63:8f:0a:27:03:07:16:c2:97:6b:aa:1d:0f:59:2b: 6a:f2:86:dc:88:00:e1:8a:f1:31:0b:e8:3b:39:68: ba:97:a0:99:72:9e:ee:43:1c:b6:8b:92:09:1a:8c: 53:5b:d8:55:c0:b2:60:d4:4c:76:6f:41:d0:0c:d5: 57:17:65:ab:64:aa:7b:c5:9d:26:ee:24:9e:8c:bc: e6:c9:28:26:39:ea:b7:be:c4:8c:e0:09:80:e1:e5: 59:ea:75:b4:32:53:37:c1:11:ff:67:b7:3a:10:48: 30:8b:7a:cb:66:63:fa:2a:cd:54:4f:5f:a7:26:96: 7d:5c:4b:23:3f:0b:a6:83:6a:14:53:a6:84:f1:08: 2d:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:68:C1:DA:D9:1A:41:01:C7:15:3C:0F:6D:01:56:23:8A:D7:46:BB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/4f4eff-af54-4db0-91cd-1369cef7a4ca/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/4f4eff-af54-4db0-91cd-1369cef7a4ca/1/vWjB2tkaQQHHFTwPbQFWI4rXRrs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.109.199.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:93:db:7b:d9:1b:d5:3a:84:cd:be:82:3f:49:b4:bf:bb:06: bd:70:61:f7:1b:4b:0a:5c:f1:50:51:1b:aa:47:46:d2:58:04: 1f:5b:db:dd:59:78:3f:3c:ec:d2:87:ce:ac:65:d0:31:fc:09: d7:ad:e2:04:0c:67:c0:e2:c4:c2:93:f3:ea:61:b6:b9:e7:a4: 13:c1:9a:78:e1:84:1e:e0:27:34:2a:c7:cb:86:e9:3a:4a:cf: ed:61:29:fc:98:7c:e7:35:a4:b9:f5:5d:71:d9:08:71:08:b4: 50:f9:ab:a3:72:10:c1:f6:43:20:ea:cd:c8:c0:c5:6a:e6:bb: 67:8c:8d:ea:67:f9:43:33:86:98:66:96:ed:f0:6a:ec:bb:cf: c0:92:f8:d4:ec:ef:64:ee:9e:92:22:3a:1a:cb:2d:5b:be:a3: 74:08:0a:67:1c:3a:df:c2:e7:1f:01:f2:07:88:57:91:a3:8f: 50:32:e6:50:40:49:f2:69:75:bf:b5:04:ee:bc:0c:3e:fc:2b: 2b:4c:79:ba:6e:d9:90:a5:91:b5:a7:11:79:24:62:e8:9f:47: e5:12:1e:20:6b:d3:36:13:b4:71:0c:23:6c:43:b9:b5:33:fb: 16:65:3b:87:76:ee:de:11:42:ac:a9:15:20:4e:d7:a9:75:2e: b9:a5:a6:02 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt4oiUKsVJoSkDIBHni8o7VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZDY4YzFkYWQ5MWE0MTAxYzcxNTNjMGY2ZDAxNTYyMzhhZDc0NmJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnY55uNaXF4Ioc9hgepqiWHrFhOQC StFchdBdICSl3A4KWFExcDJeRAcRGvJPKgbJZGXav9m0Vr1XVqqpZqseTIfzowsj GFcDA23bjUE1n+AUy0DcvTOu5he2GB7cWTgcka4J+yUjd/JDuod6j4ibGnpmxST/ 5jRjjwonAwcWwpdrqh0PWStq8obciADhivExC+g7OWi6l6CZcp7uQxy2i5IJGoxT W9hVwLJg1Ex2b0HQDNVXF2WrZKp7xZ0m7iSejLzmySgmOeq3vsSM4AmA4eVZ6nW0 MlM3wRH/Z7c6EEgwi3rLZmP6Ks1UT1+nJpZ9XEsjPwumg2oUU6aE8QgtsQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFL1owdrZGkEBxxU8D20BViOK10a7MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJiLzRmNGVm Zi1hZjU0LTRkYjAtOTFjZC0xMzY5Y2VmN2E0Y2EvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmIvNGY0ZWZm LWFmNTQtNGRiMC05MWNkLTEzNjljZWY3YTRjYS8xL3ZXakIydGthUVFISEZUd1Bi UUZXSTRyWFJycy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwG3HMA0GCSqGSIb3DQEBCwUAA4IBAQB7k9t7 2RvVOoTNvoI/SbS/uwa9cGH3G0sKXPFQURuqR0bSWAQfW9vdWXg/POzSh86sZdAx /AnXreIEDGfA4sTCk/PqYba556QTwZp44YQe4Cc0KsfLhuk6Ss/tYSn8mHznNaS5 9V1x2QhxCLRQ+aujchDB9kMg6s3IwMVq5rtnjI3qZ/lDM4aYZpbt8Grsu8/AkvjU 7O9k7p6SIjoayy1bvqN0CApnHDrfwucfAfIHiFeRo49QMuZQQEnyaXW/tQTuvAw+ /CsrTHm6btmQpZG1pxF5JGLon0flEh4ga9M2E7RxDCNsQ7m1M/sWZTuHdu7eEUKs qRUgTtepdS65paYC -----END CERTIFICATE-----Generated at Mon Jan 26 05:09:04 2026 by rpki-client