This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vaYQQ1QkhQlrDfQ1HMDal383cN0.cer File: vaYQQ1QkhQlrDfQ1HMDal383cN0.cer (raw, json) Hash identifier: 2xC0PaQ5M//8kgglwFe+WssdW6m4bVmQ3bMJ+s+69DM= Subject key identifier: BD:A6:10:43:54:24:85:09:6B:0D:F4:35:1C:C0:DA:97:7F:37:70:DD Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCA6135611A22CFE5CCEC1D275D4F5C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2e/196689-2db7-4e80-b92c-3a2ad88deade/1/vaYQQ1QkhQlrDfQ1HMDal383cN0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2e/196689-2db7-4e80-b92c-3a2ad88deade/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:19:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 147.32.0.0/16 IP: 193.84.104.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:61:35:61:1a:22:cf:e5:cc:ec:1d:27:5d:4f:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:19:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bda61043542485096b0df4351cc0da977f3770dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:9d:de:c1:ff:5a:70:cc:71:98:b7:a0:e1:8c: ce:27:56:1e:0d:42:18:99:fc:67:5f:45:42:83:5c: ff:14:a3:30:a3:d7:de:cf:0d:39:6c:0e:6c:c6:cf: 80:f4:62:c0:fd:d4:6c:b0:e2:38:65:a0:85:3e:a3: 14:61:1a:5b:c3:04:32:4a:f0:06:22:5f:3d:23:11: 6c:1c:ae:52:0d:68:f0:88:4d:ce:53:cf:7e:24:69: 9e:53:5b:55:2a:46:17:ab:2d:a5:2f:87:07:6d:4a: b0:50:03:ca:b6:a6:7f:e8:d5:b7:0f:9f:c0:94:2d: 5e:de:df:2b:89:c4:9e:dc:76:e6:b5:70:72:01:3c: 44:76:16:c1:65:f1:82:e8:ef:56:92:e9:2d:97:25: fc:85:c5:39:92:ce:56:dc:9d:83:c8:20:ff:40:90: 66:71:9a:ab:9b:a3:f0:94:a5:79:06:cd:da:9f:c8: 63:da:11:cc:01:17:8f:28:81:97:44:e1:da:82:4c: bf:79:23:74:2d:7c:d6:3c:80:cc:a2:d7:0f:43:1f: cb:f4:26:78:6f:91:36:86:c6:63:96:39:04:2f:6a: c9:15:60:e4:69:6f:1f:3b:6e:f5:4d:25:fb:0c:ee: f4:3b:8c:4e:75:69:d6:91:df:61:28:00:23:57:7c: 20:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:A6:10:43:54:24:85:09:6B:0D:F4:35:1C:C0:DA:97:7F:37:70:DD X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/196689-2db7-4e80-b92c-3a2ad88deade/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/196689-2db7-4e80-b92c-3a2ad88deade/1/vaYQQ1QkhQlrDfQ1HMDal383cN0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.32.0.0/16 193.84.104.0/22 Signature Algorithm: sha256WithRSAEncryption 64:87:01:6d:73:92:07:71:5d:8d:0f:a7:bd:40:0c:e5:bc:ab: ac:63:d1:75:f8:c4:b1:51:36:5e:75:0f:14:eb:b1:f1:a6:0e: 72:52:fb:24:6f:e5:c4:5a:53:60:7a:ce:66:55:4b:c9:cd:f5: 44:61:7c:c4:d5:94:c1:28:e3:b0:4c:1c:2f:d0:5d:f0:1e:12: 4f:bd:bb:ad:4f:17:55:b3:4d:56:05:5a:aa:b2:d2:db:07:1d: 71:40:40:69:83:43:19:70:a2:a6:50:79:08:45:50:5a:28:a4: 17:55:cd:e7:df:5e:7c:bb:55:26:9c:e7:09:98:e8:d5:d8:c7: bb:54:d5:a3:08:14:d2:aa:94:1b:aa:af:e0:93:df:2f:34:fc: a3:b0:bf:0a:e5:a7:cc:ea:4a:8d:8e:ea:19:c0:c5:c1:1a:66: 5a:26:ed:67:59:10:6c:ee:69:a3:85:60:42:b3:b8:be:e1:79: 2b:00:8e:92:1b:30:81:50:c0:a3:59:64:a2:13:e4:d2:90:e3: ff:2f:3e:9f:28:49:e4:92:0c:3c:2d:10:e4:93:84:f8:13:8c: d5:8f:c3:1d:e7:d3:4d:58:b0:57:b0:35:12:dd:da:ee:12:7e: 00:17:59:f5:5b:8a:5f:79:c7:a7:62:80:d2:3c:b2:5a:47:45: 49:fa:af:89 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgISAZt9ymE1YRoiz+XM7B0nXU9cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxOTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZGE2MTA0MzU0MjQ4NTA5NmIwZGY0MzUxY2MwZGE5NzdmMzc3MGRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJ3ewf9acMxxmLeg4YzOJ1YeDUIY mfxnX0VCg1z/FKMwo9fezw05bA5sxs+A9GLA/dRssOI4ZaCFPqMUYRpbwwQySvAG Il89IxFsHK5SDWjwiE3OU89+JGmeU1tVKkYXqy2lL4cHbUqwUAPKtqZ/6NW3D5/A lC1e3t8ricSe3HbmtXByATxEdhbBZfGC6O9WkuktlyX8hcU5ks5W3J2DyCD/QJBm cZqrm6PwlKV5Bs3an8hj2hHMARePKIGXROHagky/eSN0LXzWPIDMotcPQx/L9CZ4 b5E2hsZjljkEL2rJFWDkaW8fO271TSX7DO70O4xOdWnWkd9hKAAjV3wgCQIDAQAB o4ICiTCCAoUwHQYDVR0OBBYEFL2mEENUJIUJaw30NRzA2pd/N3DdMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJlLzE5NjY4 OS0yZGI3LTRlODAtYjkyYy0zYTJhZDg4ZGVhZGUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmUvMTk2Njg5 LTJkYjctNGU4MC1iOTJjLTNhMmFkODhkZWFkZS8xL3ZhWVFRMVFraFFsckRmUTFI TURhbDM4M2NOMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCQGCCsGAQUF BwEHAQH/BBUwEzARBAIAATALAwMAkyADBALBVGgwDQYJKoZIhvcNAQELBQADggEB AGSHAW1zkgdxXY0Pp71ADOW8q6xj0XX4xLFRNl51DxTrsfGmDnJS+yRv5cRaU2B6 zmZVS8nN9URhfMTVlMEo47BMHC/QXfAeEk+9u61PF1WzTVYFWqqy0tsHHXFAQGmD QxlwoqZQeQhFUFoopBdVzeffXny7VSac5wmY6NXYx7tU1aMIFNKqlBuqr+CT3y80 /KOwvwrlp8zqSo2O6hnAxcEaZlom7WdZEGzuaaOFYEKzuL7heSsAjpIbMIFQwKNZ ZKIT5NKQ4/8vPp8oSeSSDDwtEOSThPgTjNWPwx3n001YsFewNRLd2u4SfgAXWfVb il95x6digNI8slpHRUn6r4k= -----END CERTIFICATE-----Generated at Mon Jan 26 10:51:32 2026 by rpki-client