This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.cer File: vdQmL2QrG7C1Oyptd5jAiZ0eTUM.cer (raw, json) Hash identifier: HCsQWmjZ1U0822ON3b1z1AmGLUq7bjkKa9pNfdyeEYo= Subject key identifier: BD:D4:26:2F:64:2B:1B:B0:B5:3B:2A:6D:77:98:C0:89:9D:1E:4D:43 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C80A81A47A26C4469E8D0DB33D709C5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/27/90c5be-2f6e-4441-9461-3bd79ffc6398/1/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/27/90c5be-2f6e-4441-9461-3bd79ffc6398/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:19:25 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.221.2.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:a8:1a:47:a2:6c:44:69:e8:d0:db:33:d7:09:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:19:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bdd4262f642b1bb0b53b2a6d7798c0899d1e4d43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:02:e8:33:83:2d:b4:16:97:04:15:36:a2:cc: ce:21:77:89:d7:84:71:15:da:e7:15:ac:a6:25:e5: db:07:6d:a3:6d:d6:05:1f:91:c7:bf:04:6e:7b:40: 6e:1d:e8:db:3d:23:52:d1:b4:c3:05:18:62:6f:5a: ac:ba:aa:e2:fb:1e:40:16:2b:32:46:fb:74:57:15: 9a:4b:96:39:ef:8e:c9:1c:5e:b1:3c:93:b4:9a:94: 8a:dd:7f:4e:ce:2a:c4:e2:ed:9c:29:4b:27:7f:e8: 72:d8:ac:08:62:01:6d:eb:82:40:b6:ad:bf:ae:dd: 52:b4:63:03:5b:2b:b6:5f:d4:d3:22:3a:b4:30:47: c5:12:a8:59:13:4a:6f:73:55:38:d3:8f:21:b9:44: 42:48:d5:2b:33:65:5d:e7:e7:4a:4e:ba:91:5b:09: 80:0c:c1:75:82:c9:5d:71:9a:25:a9:1d:a5:43:4b: 55:b0:e6:80:14:1c:b9:9e:ea:26:18:93:af:be:4a: c4:b1:0f:53:e1:66:e5:8a:52:9e:c5:e3:20:b1:da: 3c:f6:4e:63:cc:d3:a0:10:97:bb:c4:1f:12:4b:b3: 5a:02:b0:28:c0:7e:9f:70:69:0d:cb:5d:7a:e3:8c: a7:74:43:89:cd:9f:89:fd:88:f7:93:5b:ec:db:cb: 97:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:D4:26:2F:64:2B:1B:B0:B5:3B:2A:6D:77:98:C0:89:9D:1E:4D:43 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/90c5be-2f6e-4441-9461-3bd79ffc6398/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/90c5be-2f6e-4441-9461-3bd79ffc6398/1/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.221.2.0/23 Signature Algorithm: sha256WithRSAEncryption 57:24:dc:05:89:35:c2:5b:39:d1:43:51:15:b6:84:18:6a:ac: e2:f5:11:a0:49:1a:1b:97:bc:38:3c:49:07:90:b5:42:58:af: 85:12:a8:3d:57:52:a1:da:bd:7e:cf:62:89:18:a0:4c:98:98: 1c:90:d5:28:a0:1a:96:b7:3c:d8:02:33:0a:05:a4:3a:fe:3c: bf:da:0c:8f:ab:94:1f:a4:2a:be:b2:cd:25:66:ef:24:92:9f: 94:4e:33:9c:bd:53:d2:ed:54:72:ff:e7:71:32:8a:fc:89:f7: 08:fa:ac:5f:d0:90:17:da:e0:cc:9b:4c:24:56:1c:5d:6e:30: 79:56:f9:c1:63:aa:bb:f4:f3:18:58:07:90:09:55:d2:db:b3: 95:02:42:4d:2c:b3:cf:3a:e8:c9:2c:d9:6e:9c:c3:62:9a:12: c1:39:34:e7:0d:ed:09:99:7f:ab:a3:cd:77:50:bb:f6:31:ec: 9e:b5:22:6f:31:c3:82:2c:a3:85:68:30:b7:5c:fa:fd:7c:e8: d7:bf:ad:d1:26:f6:d8:13:77:1e:43:44:b7:d0:05:01:b3:4c: 37:86:af:3e:d3:40:e2:81:ac:51:df:50:dd:6e:b4:7f:26:e2: e7:7a:5a:b4:3c:52:77:35:84:01:b9:2b:66:5e:a2:3c:3d:97: d4:31:ca:1b -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt8gKgaR6JsRGno0Nsz1wnFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxOTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZGQ0MjYyZjY0MmIxYmIwYjUzYjJhNmQ3Nzk4YzA4OTlkMWU0ZDQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzALoM4MttBaXBBU2oszOIXeJ14Rx FdrnFaymJeXbB22jbdYFH5HHvwRue0BuHejbPSNS0bTDBRhib1qsuqri+x5AFisy Rvt0VxWaS5Y5747JHF6xPJO0mpSK3X9OzirE4u2cKUsnf+hy2KwIYgFt64JAtq2/ rt1StGMDWyu2X9TTIjq0MEfFEqhZE0pvc1U4048huURCSNUrM2Vd5+dKTrqRWwmA DMF1gsldcZolqR2lQ0tVsOaAFBy5nuomGJOvvkrEsQ9T4WblilKexeMgsdo89k5j zNOgEJe7xB8SS7NaArAowH6fcGkNy11644yndEOJzZ+J/Yj3k1vs28uXEwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFL3UJi9kKxuwtTsqbXeYwImdHk1DMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI3LzkwYzVi ZS0yZjZlLTQ0NDEtOTQ2MS0zYmQ3OWZmYzYzOTgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjcvOTBjNWJl LTJmNmUtNDQ0MS05NDYxLTNiZDc5ZmZjNjM5OC8xL3ZkUW1MMlFyRzdDMU95cHRk NWpBaVowZVRVTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQBW90CMA0GCSqGSIb3DQEBCwUAA4IBAQBXJNwF iTXCWznRQ1EVtoQYaqzi9RGgSRobl7w4PEkHkLVCWK+FEqg9V1Kh2r1+z2KJGKBM mJgckNUooBqWtzzYAjMKBaQ6/jy/2gyPq5QfpCq+ss0lZu8kkp+UTjOcvVPS7VRy /+dxMor8ifcI+qxf0JAX2uDMm0wkVhxdbjB5VvnBY6q79PMYWAeQCVXS27OVAkJN LLPPOujJLNlunMNimhLBOTTnDe0JmX+ro813ULv2MeyetSJvMcOCLKOFaDC3XPr9 fOjXv63RJvbYE3ceQ0S30AUBs0w3hq8+00DigaxR31DdbrR/JuLnelq0PFJ3NYQB uStmXqI8PZfUMcob -----END CERTIFICATE-----Generated at Sun Jan 25 22:20:03 2026 by rpki-client