This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vYUnKkCAkE914jWkevC0EmbipgM.cer File: vYUnKkCAkE914jWkevC0EmbipgM.cer (raw, json) Hash identifier: eIZmiwMfdV2Z5WJTd7GxBXZHBfmuuv/LNmW9fBo+JTU= Subject key identifier: BD:85:27:2A:40:80:90:4F:75:E2:35:A4:7A:F0:B4:12:66:E2:A6:03 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B363D646A95513704308E920B00965E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a4/282cb0-91be-422a-95d3-24f20f9675ec/1/vYUnKkCAkE914jWkevC0EmbipgM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a4/282cb0-91be-422a-95d3-24f20f9675ec/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:30 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 194.247.34.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:3d:64:6a:95:51:37:04:30:8e:92:0b:00:96:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bd85272a4080904f75e235a47af0b41266e2a603 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:fe:88:d3:9e:e5:12:82:31:bc:12:28:79:e6: b7:af:b2:77:bc:03:80:59:a9:46:64:f4:97:ce:55: 18:48:73:ec:d3:1c:6f:9e:b8:84:cf:91:ca:da:84: d2:9b:51:4a:3f:1d:a4:d9:83:46:72:0a:c2:27:d4: 7d:48:12:e1:79:9d:5f:92:b8:a7:f2:34:7c:c8:06: 75:4b:b0:f0:0b:22:58:4d:8a:00:57:7d:62:70:5d: b6:5b:1c:0d:24:4b:97:d1:33:d2:31:aa:84:90:12: c3:35:38:72:a8:d8:75:aa:22:a1:12:1b:a3:8d:78: c3:02:3d:87:63:69:8d:20:95:e9:6f:18:23:24:8c: 76:ef:92:23:20:b1:f2:81:7e:c6:3f:78:42:91:9e: b3:93:54:a4:fe:e3:f2:ac:d9:27:a9:75:0d:2e:a1: b3:4e:8c:b1:dc:6f:1f:96:22:4c:8f:49:de:47:85: bc:79:ad:08:4b:e1:31:16:c9:da:ac:cc:93:2c:e7: d3:4e:40:19:4c:37:02:fc:24:85:5e:b7:f4:ea:b8: 96:cd:3a:65:54:84:99:2e:aa:8e:b3:b0:23:fb:8e: a9:6a:74:e2:c3:eb:fe:22:13:ad:e8:66:f1:18:3f: 7a:ba:09:44:03:94:53:0d:83:ba:fb:46:21:0b:cb: d2:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:85:27:2A:40:80:90:4F:75:E2:35:A4:7A:F0:B4:12:66:E2:A6:03 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/282cb0-91be-422a-95d3-24f20f9675ec/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/282cb0-91be-422a-95d3-24f20f9675ec/1/vYUnKkCAkE914jWkevC0EmbipgM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.247.34.0/24 Signature Algorithm: sha256WithRSAEncryption 59:f2:cb:74:15:60:84:54:66:e1:e0:27:01:74:8e:ee:3d:fe: a7:bb:c6:56:a2:35:37:a1:b4:9d:cf:b9:ab:1a:38:47:3f:0b: be:87:da:40:fc:87:db:d1:c2:6d:bb:b2:6f:59:68:1b:0d:dd: ce:67:6c:c5:2e:16:be:89:44:72:ea:55:99:b4:61:65:d9:d0: 14:90:f1:39:65:5e:58:6a:76:ce:8e:93:6c:ec:f4:8c:fa:79: 69:36:69:54:3f:e1:fe:43:1e:75:71:6f:4b:94:ae:ab:1e:de: 7d:dc:02:40:79:38:f2:25:d7:50:12:c5:b8:6e:fb:d7:2d:a3: 28:07:ed:37:07:d5:c2:f9:b6:60:a6:34:62:1c:f1:ea:6e:ba: 37:62:0e:db:53:f1:04:64:a4:78:b3:91:2a:8a:3f:79:59:cb: f9:f2:7d:c8:89:36:e7:af:fc:e0:f8:1a:35:83:49:a6:9b:88: 26:32:32:ec:3e:3b:74:62:b4:b4:66:f0:88:f5:a7:22:c3:e7: 69:05:74:9e:c7:33:21:55:30:37:e2:b1:41:12:3d:78:22:26: 41:a1:4f:88:76:1b:25:40:5d:04:48:10:ef:9c:03:43:87:9c: 45:39:6e:6b:b4:f4:87:c5:89:f5:cb:ec:c7:77:bb:45:d1:fb: fc:f7:5d:d9 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt7Nj1kapVRNwQwjpILAJZeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZDg1MjcyYTQwODA5MDRmNzVlMjM1YTQ3YWYwYjQxMjY2ZTJhNjAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtP6I057lEoIxvBIoeea3r7J3vAOA WalGZPSXzlUYSHPs0xxvnriEz5HK2oTSm1FKPx2k2YNGcgrCJ9R9SBLheZ1fkrin 8jR8yAZ1S7DwCyJYTYoAV31icF22WxwNJEuX0TPSMaqEkBLDNThyqNh1qiKhEhuj jXjDAj2HY2mNIJXpbxgjJIx275IjILHygX7GP3hCkZ6zk1Sk/uPyrNknqXUNLqGz Toyx3G8fliJMj0neR4W8ea0IS+ExFsnarMyTLOfTTkAZTDcC/CSFXrf06riWzTpl VISZLqqOs7Aj+46panTiw+v+IhOt6GbxGD96uglEA5RTDYO6+0YhC8vSUQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFL2FJypAgJBPdeI1pHrwtBJm4qYDMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E0LzI4MmNi MC05MWJlLTQyMmEtOTVkMy0yNGYyMGY5Njc1ZWMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTQvMjgyY2Iw LTkxYmUtNDIyYS05NWQzLTI0ZjIwZjk2NzVlYy8xL3ZZVW5La0NBa0U5MTRqV2tl dkMwRW1iaXBnTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwvciMA0GCSqGSIb3DQEBCwUAA4IBAQBZ8st0 FWCEVGbh4CcBdI7uPf6nu8ZWojU3obSdz7mrGjhHPwu+h9pA/Ifb0cJtu7JvWWgb Dd3OZ2zFLha+iURy6lWZtGFl2dAUkPE5ZV5YanbOjpNs7PSM+nlpNmlUP+H+Qx51 cW9LlK6rHt593AJAeTjyJddQEsW4bvvXLaMoB+03B9XC+bZgpjRiHPHqbro3Yg7b U/EEZKR4s5Eqij95Wcv58n3IiTbnr/zg+Bo1g0mmm4gmMjLsPjt0YrS0ZvCI9aci w+dpBXSexzMhVTA34rFBEj14IiZBoU+IdhslQF0ESBDvnANDh5xFOW5rtPSHxYn1 y+zHd7tF0fv8913Z -----END CERTIFICATE-----Generated at Sun Jan 25 22:32:11 2026 by rpki-client