This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vX2BeM7FzTdlSKkEkRf0acCnQxw.cer File: vX2BeM7FzTdlSKkEkRf0acCnQxw.cer (raw, json) Hash identifier: hknp72WWxszCkOvIrdrUaO+s4brFp8Ux0h+OjY6pkLU= Subject key identifier: BD:7D:81:78:CE:C5:CD:37:65:48:A9:04:91:17:F4:69:C0:A7:43:1C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCA01E0675587EF4900C7C7B083D852 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/vX2BeM7FzTdlSKkEkRf0acCnQxw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:19:09 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 43937 IP: 78.24.48.0/21 IP: 82.116.128.0/19 IP: 94.190.144.0/20 IP: 103.220.220.0/22 IP: 103.245.116.0/22 IP: 178.255.8.0/21 IP: 185.6.176.0/22 IP: 185.249.222.0/23 IP: 213.187.224.0/20 IP: 213.187.248.0/21 IP: 2a02:7980::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:01:e0:67:55:87:ef:49:00:c7:c7:b0:83:d8:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:19:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bd7d8178cec5cd376548a9049117f469c0a7431c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:ec:98:fd:11:9d:89:37:7e:47:2b:3d:6c:3e: 0c:11:e3:32:e0:8d:66:fd:bf:c1:ac:df:68:3f:6b: 24:51:e3:f4:3c:0e:4a:77:ae:fd:89:58:ac:1c:a3: e9:2f:d0:34:e4:c6:7d:51:96:23:4e:04:2f:47:cb: 43:61:ff:55:ee:62:71:3e:45:9a:a3:5b:c5:0b:c4: 2c:1c:22:b1:e9:f3:3d:32:ed:0a:15:5b:8c:5f:40: c3:5f:59:23:52:bc:bc:23:14:1b:77:ad:61:21:bc: 54:4a:67:09:0f:67:72:c0:dd:72:8f:2a:5f:c4:20: 95:08:ef:06:59:27:be:af:e8:89:44:0c:5d:5d:e5: 68:bc:50:cf:9c:36:51:9f:0f:0c:a9:90:92:0a:5c: c2:f1:9d:c1:04:91:51:ff:74:e9:1c:c6:25:b5:d0: b1:73:f9:43:dd:0d:d4:d0:b8:e2:f5:83:7d:66:db: 83:a6:8e:f9:71:6c:a6:99:9d:6d:9e:7d:99:7c:ec: 5b:3d:39:4d:78:02:36:75:53:94:07:9d:f5:ae:1d: 7c:a0:3b:73:14:d6:12:92:8d:50:ee:e8:23:3a:dc: fb:89:47:6e:c6:51:c0:ba:ed:c3:73:0e:d7:0d:69: 3c:4f:89:2a:ea:82:c7:65:6b:b5:db:c8:19:c5:28: 77:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:7D:81:78:CE:C5:CD:37:65:48:A9:04:91:17:F4:69:C0:A7:43:1C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/vX2BeM7FzTdlSKkEkRf0acCnQxw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.24.48.0/21 82.116.128.0/19 94.190.144.0/20 103.220.220.0/22 103.245.116.0/22 178.255.8.0/21 185.6.176.0/22 185.249.222.0/23 213.187.224.0/20 213.187.248.0/21 IPv6: 2a02:7980::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 43937 Signature Algorithm: sha256WithRSAEncryption 24:e2:f2:8a:de:84:c2:be:87:36:f6:f4:15:3a:1d:48:26:28: d8:c3:a6:87:8e:5e:63:fe:bb:7f:a2:30:67:96:04:71:e0:c3: b9:2a:ae:4d:5a:fb:0f:1c:02:71:cf:d1:0a:14:a7:e4:88:8f: de:fd:9d:bc:e7:1f:a9:a9:8c:a4:24:b2:85:dc:4f:8d:87:cb: fb:01:9a:df:15:3f:2b:76:5f:39:f1:86:82:2a:07:ba:0a:d1: 08:bd:e7:7c:7b:f5:29:28:85:35:20:02:9c:62:d4:59:eb:fa: 47:94:da:24:06:a3:58:10:c1:8e:a0:d1:22:5f:b2:c3:5e:00: 33:36:5f:86:c2:09:c6:4f:04:76:26:2a:74:3c:2e:be:f5:3e: 05:34:f4:10:d1:8f:81:0c:1d:26:1e:bb:0c:15:88:81:c6:c3: b1:ff:67:62:37:e7:bc:1a:d3:ae:f7:3c:b3:67:22:e1:9e:a1: cc:be:1f:b7:98:2f:f1:f7:d7:04:c1:92:33:16:42:b3:a6:1d: 3e:a9:86:72:04:de:28:2f:c5:ca:f6:b1:31:4f:76:f0:3e:5f: 87:45:dc:02:ef:40:35:01:66:3d:cb:b5:1e:77:66:37:8b:ae: bf:0d:dd:e7:c0:56:73:d4:57:6a:00:a3:c1:ec:53:30:dc:85: 3c:0c:8e:24 -----BEGIN CERTIFICATE----- MIIF2TCCBMGgAwIBAgISAZt9ygHgZ1WH70kAx8ewg9hSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZDdkODE3OGNlYzVjZDM3NjU0OGE5MDQ5MTE3ZjQ2OWMwYTc0MzFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjOyY/RGdiTd+Rys9bD4MEeMy4I1m /b/BrN9oP2skUeP0PA5Kd679iVisHKPpL9A05MZ9UZYjTgQvR8tDYf9V7mJxPkWa o1vFC8QsHCKx6fM9Mu0KFVuMX0DDX1kjUry8IxQbd61hIbxUSmcJD2dywN1yjypf xCCVCO8GWSe+r+iJRAxdXeVovFDPnDZRnw8MqZCSClzC8Z3BBJFR/3TpHMYltdCx c/lD3Q3U0Lji9YN9ZtuDpo75cWymmZ1tnn2ZfOxbPTlNeAI2dVOUB531rh18oDtz FNYSko1Q7ugjOtz7iUduxlHAuu3Dcw7XDWk8T4kq6oLHZWu128gZxSh3BwIDAQAB o4IC5TCCAuEwHQYDVR0OBBYEFL19gXjOxc03ZUipBJEX9GnAp0McMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRhL2YzMTdi My0wNjY4LTRlMDQtOWI2ZC02MTVhY2E1MWUyZjYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGEvZjMxN2Iz LTA2NjgtNGUwNC05YjZkLTYxNWFjYTUxZTJmNi8xL3ZYMkJlTTdGelRkbFNLa0Vr UmYwYWNDblF4dy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGQGCCsGAQUF BwEHAQH/BFUwUzBCBAIAATA8AwQDThgwAwQFUnSAAwQEXr6QAwQCZ9zcAwQCZ/V0 AwQDsv8IAwQCuQawAwQBufneAwQE1bvgAwQD1bv4MA0EAgACMAcDBQAqAnmAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwCroTANBgkqhkiG9w0BAQsFAAOCAQEAJOLy it6Ewr6HNvb0FTodSCYo2MOmh45eY/67f6IwZ5YEceDDuSquTVr7DxwCcc/RChSn 5IiP3v2dvOcfqamMpCSyhdxPjYfL+wGa3xU/K3ZfOfGGgioHugrRCL3nfHv1KSiF NSACnGLUWev6R5TaJAajWBDBjqDRIl+yw14AMzZfhsIJxk8EdiYqdDwuvvU+BTT0 ENGPgQwdJh67DBWIgcbDsf9nYjfnvBrTrvc8s2ci4Z6hzL4ft5gv8ffXBMGSMxZC s6YdPqmGcgTeKC/FyvaxMU928D5fh0XcAu9ANQFmPcu1HndmN4uuvw3d58BWc9RX agCjwexTMNyFPAyOJA== -----END CERTIFICATE-----Generated at Sun Jan 25 19:43:45 2026 by rpki-client