This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vXQQ9OYsd3LHjVdQsh_CFDOelKI.cer File: vXQQ9OYsd3LHjVdQsh_CFDOelKI.cer (raw, json) Hash identifier: TlGVkwrYz1GW82kfYJi1SjJIls/+vhqYpRgxAfItxtI= Subject key identifier: BD:74:10:F4:E6:2C:77:72:C7:8D:57:50:B2:1F:C2:14:33:9E:94:A2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EAB1856C6CE48750CC63EE943F3576 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:17:31 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 42310 IP: 77.72.72.0/21 IP: 2a01:4b0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:b1:85:6c:6c:e4:87:50:cc:63:ee:94:3f:35:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bd7410f4e62c7772c78d5750b21fc214339e94a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:41:82:e6:d2:42:68:79:00:03:4b:9b:71:e6: 81:9f:af:a8:bd:b0:d0:a3:2a:bd:59:01:e6:fd:f4: f1:01:f0:29:0b:e9:9a:8a:34:2b:bb:6e:ab:b0:7b: 8f:9d:c4:bf:e3:20:8c:d7:ca:39:c3:59:d8:67:8a: 16:7d:f3:86:bb:82:63:5e:5d:29:a0:af:f2:ea:9b: fb:07:d9:9a:7d:34:75:af:36:f1:16:57:f2:1a:7c: 68:3d:6b:7d:b7:ca:e3:66:b6:35:45:03:b5:1e:a2: a0:76:01:6f:40:6e:3a:07:4c:2b:34:38:d8:28:a0: 5b:5f:e4:66:5f:4c:a8:ff:65:af:85:fd:c6:56:6f: 4d:ed:21:83:4c:da:c8:16:89:6b:09:a3:b0:25:30: 63:63:5c:07:76:60:78:bf:98:fa:82:92:b5:f5:35: 39:05:19:8e:a4:d1:8a:a9:fc:87:3e:a5:ce:e5:41: 62:a7:bc:8d:d2:6c:d8:98:43:d3:58:92:71:d8:70: 8f:98:d6:ee:9d:6f:df:2c:4d:5f:72:83:15:d7:4c: de:ba:9b:5f:51:bf:37:c9:76:31:55:00:d3:9e:20: 35:28:c3:c5:5a:e6:f0:04:b6:95:74:60:fb:f2:8d: 9f:d4:a7:a5:66:a7:83:e2:f8:3e:b6:75:05:d5:24: bd:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:74:10:F4:E6:2C:77:72:C7:8D:57:50:B2:1F:C2:14:33:9E:94:A2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.72.72.0/21 IPv6: 2a01:4b0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 42310 Signature Algorithm: sha256WithRSAEncryption a9:a6:29:b0:95:5e:6d:41:d1:b6:7a:1a:b0:8f:4e:6b:c1:3b: ac:d1:5a:0e:c6:d8:9c:ae:81:aa:cd:0a:91:7a:cd:ac:f9:32: f7:9e:c9:fc:7b:51:af:a3:87:6b:e1:03:95:ae:a7:bc:44:4e: dd:f4:ce:de:7a:e2:d9:31:05:9a:80:bf:65:8d:d7:a9:9a:c6: d5:a1:9c:dc:cc:78:23:f9:5d:3b:bc:df:45:62:6c:3e:10:fc: 46:32:92:4f:d0:ed:a9:d7:e3:14:aa:ee:1f:20:42:d6:3f:39: f1:82:56:6b:a1:ac:dc:6d:11:16:6c:11:19:4a:5c:48:c8:f2: bb:3d:c3:b7:c7:5c:81:c9:0b:41:44:36:8f:df:1b:a3:3b:ed: 6f:8d:d0:cf:0a:bf:81:c6:9d:9d:ec:6a:92:4d:74:ea:da:b0: e2:02:22:b8:e8:b4:05:da:e0:cc:41:26:14:3f:61:7d:e2:8b: 2c:d7:47:5d:fc:9f:63:fa:c9:1b:13:b4:86:61:26:a8:e0:e1: ac:98:ed:67:c3:a3:0b:87:13:64:cb:f8:e9:a6:83:3b:58:38: 35:39:d3:77:20:03:40:04:83:69:db:e3:66:d7:1c:19:ab:7c: bc:2e:2a:af:cc:86:f6:4f:24:e2:d9:33:8f:3b:7a:a5:81:97: 42:44:cd:d4 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt26rGFbGzkh1DMY+6UPzV2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZDc0MTBmNGU2MmM3NzcyYzc4ZDU3NTBiMjFmYzIxNDMzOWU5NGEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkGC5tJCaHkAA0ubceaBn6+ovbDQ oyq9WQHm/fTxAfApC+maijQru26rsHuPncS/4yCM18o5w1nYZ4oWffOGu4JjXl0p oK/y6pv7B9mafTR1rzbxFlfyGnxoPWt9t8rjZrY1RQO1HqKgdgFvQG46B0wrNDjY KKBbX+RmX0yo/2Wvhf3GVm9N7SGDTNrIFolrCaOwJTBjY1wHdmB4v5j6gpK19TU5 BRmOpNGKqfyHPqXO5UFip7yN0mzYmEPTWJJx2HCPmNbunW/fLE1fcoMV10zeuptf Ub83yXYxVQDTniA1KMPFWubwBLaVdGD78o2f1KelZqeD4vg+tnUF1SS9TQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFL10EPTmLHdyx41XULIfwhQznpSiMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM3LzIyYzYw ZS03MmZkLTQ3YWYtOTlmMy0yNjg0OGZmZWU3NjUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzcvMjJjNjBl LTcyZmQtNDdhZi05OWYzLTI2ODQ4ZmZlZTc2NS8xL3ZYUVE5T1lzZDNMSGpWZFFz aF9DRkRPZWxLSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQDTUhIMA0EAgACMAcDBQAqAQSwMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwClRjANBgkqhkiG9w0BAQsFAAOCAQEAqaYpsJVebUHR tnoasI9Oa8E7rNFaDsbYnK6Bqs0KkXrNrPky957J/HtRr6OHa+EDla6nvERO3fTO 3nri2TEFmoC/ZY3XqZrG1aGc3Mx4I/ldO7zfRWJsPhD8RjKST9DtqdfjFKruHyBC 1j858YJWa6Gs3G0RFmwRGUpcSMjyuz3Dt8dcgckLQUQ2j98bozvtb43Qzwq/gcad nexqkk106tqw4gIiuOi0BdrgzEEmFD9hfeKLLNdHXfyfY/rJGxO0hmEmqODhrJjt Z8OjC4cTZMv46aaDO1g4NTnTdyADQASDadvjZtccGat8vC4qr8yG9k8k4tkzjzt6 pYGXQkTN1A== -----END CERTIFICATE-----Generated at Mon Jan 26 09:00:35 2026 by rpki-client