This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/valtAqgi9GJTwq7mgEQdWsJ8PfU.cer File: valtAqgi9GJTwq7mgEQdWsJ8PfU.cer (raw, json) Hash identifier: PwA7RFlkJWO08KySBuiqhHF1iB81fhoSe+TKxCmqNu0= Subject key identifier: BD:A9:6D:02:A8:22:F4:62:53:C2:AE:E6:80:44:1D:5A:C2:7C:3D:F5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7FF08BD8882E8D13FE19C5EE394FFE7C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/valtAqgi9GJTwq7mgEQdWsJ8PfU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 18:20:29 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 5.153.96.0/21 IP: 5.153.192.0/19 IP: 31.12.96.0/19 IP: 31.13.0.0/21 IP: 37.252.32.0/19 IP: 91.199.78.0/24 IP: 93.121.0.0/17 IP: 95.172.224.0/19 IP: 141.138.224.0/19 IP: 151.249.0.0/18 IP: 159.20.32.0/19 IP: 185.196.80.0/22 IP: 193.105.150.0/24 IP: 212.105.160.0/19 IP: 2001:67c:2544::/48 IP: 2a00:10e8::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f0:8b:d8:88:2e:8d:13:fe:19:c5:ee:39:4f:fe:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 18:20:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bda96d02a822f46253c2aee680441d5ac27c3df5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:6e:c7:a7:71:38:08:14:3d:f7:57:9f:8d:f0: 0a:73:05:2f:b3:3c:dd:d6:14:84:85:6c:6b:a8:17: 91:36:83:de:d3:37:8c:e1:f9:df:a8:c7:30:a5:a1: 10:63:65:a6:a7:6f:6d:8c:2c:74:5e:7a:fa:02:aa: 36:c2:db:46:9e:ec:3d:5b:8c:95:a9:9e:b1:e2:48: 30:4e:78:1f:bb:e1:05:a2:d0:8a:ea:a8:e6:cd:8a: 3f:17:13:be:42:a8:73:64:f8:80:cb:3c:06:c6:f4: b5:05:af:fe:63:3e:b4:21:68:86:1c:1f:1b:7d:e6: c8:da:ed:b1:3f:e6:79:59:53:bb:63:01:b1:65:a8: 82:c6:00:96:74:d0:51:c5:b2:da:ee:a9:c7:94:cd: aa:7e:a5:cb:33:54:de:10:d7:cd:cc:53:31:d5:79: 23:79:1d:3b:c1:8e:e4:ae:c4:81:8f:91:25:49:37: f1:12:cc:3c:36:3c:bc:6e:40:38:b2:4e:f9:78:21: 42:74:cd:0c:4c:b8:b4:60:c2:0e:73:b6:88:50:75: 34:37:7c:01:28:00:bf:c5:e9:e4:99:40:00:94:90: 49:10:6c:ad:70:7a:f8:ab:8b:06:7e:b3:88:a1:d0: 62:20:8c:18:37:9d:a0:8f:e9:e9:86:a5:9f:d3:68: 66:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:A9:6D:02:A8:22:F4:62:53:C2:AE:E6:80:44:1D:5A:C2:7C:3D:F5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/valtAqgi9GJTwq7mgEQdWsJ8PfU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.153.96.0/21 5.153.192.0/19 31.12.96.0/19 31.13.0.0/21 37.252.32.0/19 91.199.78.0/24 93.121.0.0/17 95.172.224.0/19 141.138.224.0/19 151.249.0.0/18 159.20.32.0/19 185.196.80.0/22 193.105.150.0/24 212.105.160.0/19 IPv6: 2001:67c:2544::/48 2a00:10e8::/29 Signature Algorithm: sha256WithRSAEncryption 01:00:ec:97:42:b7:d7:7e:1d:c3:c1:c5:fa:0e:6e:77:53:d5: f5:c5:42:74:de:b2:99:fe:9e:53:d0:d3:86:07:a7:96:c5:8a: 9a:ee:02:34:1c:b2:ca:5e:8b:c5:db:93:91:5d:b9:07:78:f8: 13:15:82:87:84:8e:3d:ee:93:fd:45:e7:a2:96:70:f9:34:38: b3:50:32:55:15:aa:94:b3:a6:8a:71:26:d9:0b:43:a4:b3:b0: f6:f7:56:76:32:39:ab:fd:ab:cb:83:1e:f7:43:29:f7:75:d4: b3:04:12:51:24:4d:e7:06:31:89:61:59:4e:1e:96:65:7f:73: 57:d8:10:d5:b6:97:e6:ed:5d:f2:8f:00:74:34:75:0b:aa:3f: 82:2b:ca:56:1e:98:b1:92:1b:85:27:61:86:bf:4a:33:91:1b: ed:3a:24:8d:21:b6:cb:74:4d:9f:bf:6f:3e:60:b5:7f:f7:cc: 36:2a:2d:06:8f:d8:7f:c4:9a:da:76:ea:e8:90:96:86:c3:f9: d7:8e:e5:da:c5:18:fb:ec:b2:36:d7:06:0f:fb:45:8a:a1:37: 5a:88:30:08:73:9e:a5:ab:eb:c4:64:8b:cd:5e:03:fc:47:ff: 1c:30:61:5d:c6:b7:3c:9e:d4:62:19:af:7f:ac:30:58:16:9f: 96:b8:30:1d -----BEGIN CERTIFICATE----- MIIF3zCCBMegAwIBAgISAZt/8IvYiC6NE/4Zxe45T/58MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTgyMDI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZGE5NmQwMmE4MjJmNDYyNTNjMmFlZTY4MDQ0MWQ1YWMyN2MzZGY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoW7Hp3E4CBQ991efjfAKcwUvszzd 1hSEhWxrqBeRNoPe0zeM4fnfqMcwpaEQY2Wmp29tjCx0Xnr6Aqo2wttGnuw9W4yV qZ6x4kgwTngfu+EFotCK6qjmzYo/FxO+QqhzZPiAyzwGxvS1Ba/+Yz60IWiGHB8b febI2u2xP+Z5WVO7YwGxZaiCxgCWdNBRxbLa7qnHlM2qfqXLM1TeENfNzFMx1Xkj eR07wY7krsSBj5ElSTfxEsw8Njy8bkA4sk75eCFCdM0MTLi0YMIOc7aIUHU0N3wB KAC/xenkmUAAlJBJEGytcHr4q4sGfrOIodBiIIwYN52gj+nphqWf02hmPQIDAQAB o4IC6zCCAucwHQYDVR0OBBYEFL2pbQKoIvRiU8Ku5oBEHVrCfD31MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE2L2EyN2Iz OS04MDExLTQxNDItODZjMi1jZjgzZDZlNDA1NTgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTYvYTI3YjM5 LTgwMTEtNDE0Mi04NmMyLWNmODNkNmU0MDU1OC8xL3ZhbHRBcWdpOUdKVHdxN21n RVFkV3NKOFBmVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGFBggrBgEF BQcBBwEB/wR2MHQwWgQCAAEwVAMEAwWZYAMEBQWZwAMEBR8MYAMEAx8NAAMEBSX8 IAMEAFvHTgMEB115AAMEBV+s4AMEBY2K4AMEBpf5AAMEBZ8UIAMEArnEUAMEAMFp lgMEBdRpoDAWBAIAAjAQAwcAIAEGfCVEAwUDKgAQ6DANBgkqhkiG9w0BAQsFAAOC AQEAAQDsl0K3134dw8HF+g5ud1PV9cVCdN6ymf6eU9DThgenlsWKmu4CNByyyl6L xduTkV25B3j4ExWCh4SOPe6T/UXnopZw+TQ4s1AyVRWqlLOminEm2QtDpLOw9vdW djI5q/2ry4Me90Mp93XUswQSUSRN5wYxiWFZTh6WZX9zV9gQ1baX5u1d8o8AdDR1 C6o/givKVh6YsZIbhSdhhr9KM5Eb7TokjSG2y3RNn79vPmC1f/fMNiotBo/Yf8Sa 2nbq6JCWhsP5147l2sUY++yyNtcGD/tFiqE3WogwCHOepavrxGSLzV4D/Ef/HDBh Xca3PJ7UYhmvf6wwWBaflrgwHQ== -----END CERTIFICATE-----Generated at Sun Jan 25 20:05:49 2026 by rpki-client