This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.cer File: vXN0f3i9Mo0K4ciRcbOBqhkBGs4.cer (raw, json) Hash identifier: nuOTsEKw7vnsOOdfSrO7CiPzceC0PuRLxcq5D5gdYpI= Subject key identifier: BD:73:74:7F:78:BD:32:8D:0A:E1:C8:91:71:B3:81:AA:19:01:1A:CE Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA33AC3D6B2A374B11AD0F2487820C8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:17:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 198386 AS: 207328 IP: 147.78.60.0/22 IP: 185.204.76.0/22 IP: 192.40.80.0/24 IP: 2a0a:f440::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:3a:c3:d6:b2:a3:74:b1:1a:d0:f2:48:78:20:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bd73747f78bd328d0ae1c89171b381aa19011ace Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:11:41:6e:b0:a6:32:a2:0c:41:7c:95:33:d4: 30:45:d1:3a:c9:4d:ad:75:8d:ca:d9:4d:04:30:5c: b7:7d:6e:6c:14:fa:f0:f3:22:3c:39:8d:14:a1:ab: b5:fd:78:64:6f:10:62:3e:ab:9a:78:6a:f3:f3:aa: ca:b1:da:61:da:00:51:b8:3f:7b:c9:d0:4e:4b:bc: 1e:6a:4b:b9:6f:03:84:0d:10:e1:10:d7:c0:6d:20: 79:96:d1:ee:92:40:e7:70:7c:c3:64:5b:25:20:61: c5:4b:a0:9e:d5:08:64:99:4e:de:60:1c:45:4d:cb: 40:ef:58:c5:f3:e1:13:41:e1:9f:08:fa:60:12:fa: da:8a:47:d8:2c:70:90:c8:d6:9e:72:23:d5:b6:24: 11:a5:44:22:cf:b9:b3:f0:14:7f:6c:11:ad:56:ff: b2:b6:94:cc:02:c2:4a:d4:7d:46:54:cd:93:56:c4: c6:27:a0:01:ed:69:89:3a:de:52:36:ba:f2:5a:7c: 5c:7a:c4:a4:ae:04:78:9a:f4:ac:93:6c:f0:54:e5: 2e:25:de:f9:4f:d4:3d:3c:81:56:e9:ef:d1:cb:94: 8f:ae:d1:0b:95:ad:c0:57:43:2d:fe:8a:fa:bc:41: fc:11:46:08:24:b4:86:67:3a:c7:a2:7b:e7:3b:e1: 3d:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:73:74:7F:78:BD:32:8D:0A:E1:C8:91:71:B3:81:AA:19:01:1A:CE X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.78.60.0/22 185.204.76.0/22 192.40.80.0/24 IPv6: 2a0a:f440::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 198386 207328 Signature Algorithm: sha256WithRSAEncryption 2d:a3:f0:4e:00:3c:e5:33:e9:0d:ba:9d:37:d7:35:25:d0:ea: 87:e5:0d:24:60:61:48:8f:f7:63:57:3d:7d:15:4f:79:a4:da: b4:cb:7e:30:86:0b:b9:ce:55:aa:fa:16:9b:cb:1c:4c:86:41: 3a:6b:44:77:fb:66:7c:39:39:e0:cc:b2:b7:af:28:ad:03:62: d0:75:ec:1b:f4:8e:9d:ec:7e:b4:68:6c:21:54:c4:54:72:08: 66:95:4f:07:25:e4:e2:15:c8:0d:2e:69:72:c8:09:ee:7a:a4: 9a:18:5c:d6:fe:d3:7e:02:55:31:e0:01:af:fc:0d:87:a2:23: f8:4e:66:66:4f:84:80:21:37:f1:9d:96:0a:7d:5f:bd:b6:b9: 1e:f9:2a:38:a7:f0:15:e1:0c:bb:b0:12:ba:c1:0d:ac:69:ae: 78:e4:63:12:42:f3:ba:cb:14:a5:85:08:06:b3:d2:72:38:92: 41:4f:85:9e:02:67:24:cc:87:72:09:2e:66:ff:1b:95:ab:a1: b3:19:04:04:a4:16:de:56:1a:76:13:9d:9a:b6:5a:c6:95:19: a5:fd:c6:bd:5e:03:04:6f:9c:ff:5f:53:f3:08:93:5d:5c:66: 75:25:4f:da:9c:0e:c4:ec:c8:d1:16:98:e5:a5:b3:5f:1a:5b: 5e:74:03:69 -----BEGIN CERTIFICATE----- MIIFtDCCBJygAwIBAgISAZt7ozrD1rKjdLEa0PJIeCDIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZDczNzQ3Zjc4YmQzMjhkMGFlMWM4OTE3MWIzODFhYTE5MDExYWNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1hFBbrCmMqIMQXyVM9QwRdE6yU2t dY3K2U0EMFy3fW5sFPrw8yI8OY0Uoau1/XhkbxBiPquaeGrz86rKsdph2gBRuD97 ydBOS7weaku5bwOEDRDhENfAbSB5ltHukkDncHzDZFslIGHFS6Ce1QhkmU7eYBxF TctA71jF8+ETQeGfCPpgEvraikfYLHCQyNaeciPVtiQRpUQiz7mz8BR/bBGtVv+y tpTMAsJK1H1GVM2TVsTGJ6AB7WmJOt5SNrryWnxcesSkrgR4mvSsk2zwVOUuJd75 T9Q9PIFW6e/Ry5SPrtELla3AV0Mt/or6vEH8EUYIJLSGZzrHonvnO+E9bQIDAQAB o4ICwDCCArwwHQYDVR0OBBYEFL1zdH94vTKNCuHIkXGzgaoZARrOMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdkL2E1NTU1 My0yOTc1LTQyNDQtYjI2MC01YmRiZjZmODQ3ZjkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2QvYTU1NTUz LTI5NzUtNDI0NC1iMjYwLTViZGJmNmY4NDdmOS8xL3ZYTjBmM2k5TW8wSzRjaVJj Yk9CcWhrQkdzNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQCk048AwQCucxMAwQAwChQMA0EAgACMAcDBQMq CvRAMB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwMG8gIDAyngMA0GCSqGSIb3DQEB CwUAA4IBAQAto/BOADzlM+kNup031zUl0OqH5Q0kYGFIj/djVz19FU95pNq0y34w hgu5zlWq+habyxxMhkE6a0R3+2Z8OTngzLK3ryitA2LQdewb9I6d7H60aGwhVMRU cghmlU8HJeTiFcgNLmlyyAnueqSaGFzW/tN+AlUx4AGv/A2HoiP4TmZmT4SAITfx nZYKfV+9trke+So4p/AV4Qy7sBK6wQ2saa545GMSQvO6yxSlhQgGs9JyOJJBT4We AmckzIdyCS5m/xuVq6GzGQQEpBbeVhp2E52atlrGlRml/ca9XgMEb5z/X1PzCJNd XGZ1JU/anA7E7MjRFpjlpbNfGltedANp -----END CERTIFICATE-----Generated at Mon Jan 26 00:42:53 2026 by rpki-client