This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vZC8PjcRQLQqIdaX2DANlBCiSao.cer File: vZC8PjcRQLQqIdaX2DANlBCiSao.cer (raw, json) Hash identifier: mGicmDVYOrPQoHPdGe6HFUDt2DkimAYdefZ1uQ2V43I= Subject key identifier: BD:90:BC:3E:37:11:40:B4:2A:21:D6:97:D8:30:0D:94:10:A2:49:AA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ECCB2DC55EE82243DD782E85AC8495 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:40 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 195.234.41.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:cb:2d:c5:5e:e8:22:43:dd:78:2e:85:ac:84:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bd90bc3e371140b42a21d697d8300d9410a249aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:7f:6e:d1:cb:6b:9d:0e:ed:33:b4:63:85:56: bf:c8:55:c5:87:4d:cc:54:49:23:60:ee:aa:aa:5b: 51:ff:f4:35:0a:d4:93:03:67:cc:1b:5f:26:3c:16: a7:7f:02:5b:4a:fe:e3:39:00:79:56:4d:e6:a6:77: d6:4a:6d:bc:7a:6a:14:0a:4a:a9:15:e3:4d:0d:07: 73:04:b4:cc:31:a8:a4:c2:4f:f6:3a:25:d5:5f:39: 34:0a:7b:e8:bf:da:d8:f5:e1:e7:03:a7:22:79:98: 4b:cb:60:0d:f3:76:a3:1a:c4:67:37:dd:4e:ec:96: 6c:dd:4b:d0:14:66:2f:6c:97:d3:5b:5b:d7:03:14: ef:7d:40:66:cb:c4:a8:12:e3:83:ba:e1:61:ce:31: 9a:f9:07:81:00:84:16:2c:62:7f:2c:03:f6:c5:2f: 70:1b:5f:06:d5:00:a2:c2:50:82:42:2f:39:0b:2b: 67:46:20:ce:f4:f1:72:5a:3c:07:a2:74:2c:0e:e9: 30:38:9e:29:69:05:0a:91:dd:4b:44:2f:4f:56:79: 5e:be:46:c0:0e:e8:69:f0:59:b0:62:3e:09:d0:c5: ed:85:d7:b3:37:d8:eb:7d:29:5f:9e:3c:b3:46:ba: ea:9d:bd:94:8a:fb:1c:db:37:b3:81:a6:61:0f:11: c0:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:90:BC:3E:37:11:40:B4:2A:21:D6:97:D8:30:0D:94:10:A2:49:AA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.234.41.0/24 Signature Algorithm: sha256WithRSAEncryption a4:79:ce:83:b3:de:cf:26:52:cc:94:6d:4b:1f:f7:22:e4:ba: 5c:6e:71:f4:3e:32:ef:9a:7d:f4:49:e8:ce:82:4f:f2:1b:dd: 72:2a:6e:22:8d:ea:8c:72:6f:dc:54:07:62:7d:24:62:36:24: 45:38:30:7c:01:a9:72:4c:02:a8:6a:b3:67:2c:3b:5a:a9:56: 97:bc:09:26:ee:92:59:e6:40:eb:39:5f:5e:0a:33:95:e1:66: c2:d4:62:3a:41:08:96:57:37:39:10:72:aa:ef:86:c0:f8:c1: 3d:f1:1a:49:4c:9c:6f:fa:4c:d7:76:0d:53:5d:8b:d1:46:53: 1b:3f:4f:91:cd:0a:65:a8:52:66:85:2c:ba:03:99:1b:fe:f7: 1a:cc:e6:b2:3e:0a:b4:ed:10:4a:d6:bb:3f:66:d4:c1:8c:20: 4d:e6:d6:d3:18:72:01:29:64:92:e3:f1:9c:9a:d7:e5:9b:20: 02:d7:4a:f4:90:71:f3:d1:b2:6d:08:d4:56:e9:c3:c3:32:18: e6:99:94:95:d4:3f:14:3d:a4:14:88:ca:a4:9a:75:2e:f1:50: 7d:15:8c:57:37:3f:40:f2:06:30:66:01:6e:cb:e3:a7:65:46: 30:9e:9e:5c:f4:cb:32:e3:e8:08:b8:1f:c4:f0:cd:f1:50:5b: 15:7a:5a:d8 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt57MstxV7oIkPdeC6FrISVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZDkwYmMzZTM3MTE0MGI0MmEyMWQ2OTdkODMwMGQ5NDEwYTI0OWFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuH9u0ctrnQ7tM7RjhVa/yFXFh03M VEkjYO6qqltR//Q1CtSTA2fMG18mPBanfwJbSv7jOQB5Vk3mpnfWSm28emoUCkqp FeNNDQdzBLTMMaikwk/2OiXVXzk0Cnvov9rY9eHnA6cieZhLy2AN83ajGsRnN91O 7JZs3UvQFGYvbJfTW1vXAxTvfUBmy8SoEuODuuFhzjGa+QeBAIQWLGJ/LAP2xS9w G18G1QCiwlCCQi85CytnRiDO9PFyWjwHonQsDukwOJ4paQUKkd1LRC9PVnlevkbA Duhp8FmwYj4J0MXthdezN9jrfSlfnjyzRrrqnb2Uivsc2zezgaZhDxHAewIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFL2QvD43EUC0KiHWl9gwDZQQokmqMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2IyLzU0ZThh Ni00ZDgxLTQ4NzUtYTk4Ny1mZWIwZTUxNWMwMmMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjIvNTRlOGE2 LTRkODEtNDg3NS1hOTg3LWZlYjBlNTE1YzAyYy8xL3ZaQzhQamNSUUxRcUlkYVgy REFObEJDaVNhby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAw+opMA0GCSqGSIb3DQEBCwUAA4IBAQCkec6D s97PJlLMlG1LH/ci5LpcbnH0PjLvmn30SejOgk/yG91yKm4ijeqMcm/cVAdifSRi NiRFODB8AalyTAKoarNnLDtaqVaXvAkm7pJZ5kDrOV9eCjOV4WbC1GI6QQiWVzc5 EHKq74bA+ME98RpJTJxv+kzXdg1TXYvRRlMbP0+RzQplqFJmhSy6A5kb/vcazOay Pgq07RBK1rs/ZtTBjCBN5tbTGHIBKWSS4/GcmtflmyAC10r0kHHz0bJtCNRW6cPD MhjmmZSV1D8UPaQUiMqkmnUu8VB9FYxXNz9A8gYwZgFuy+OnZUYwnp5c9Msy4+gI uB/E8M3xUFsVelrY -----END CERTIFICATE-----Generated at Mon Jan 26 01:56:35 2026 by rpki-client