This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/veLbhJjuj3s6tcqug4KVlmIHAsE.cer File: veLbhJjuj3s6tcqug4KVlmIHAsE.cer (raw, json) Hash identifier: c95vLkm2BCr1AtVRAWT3dJiYju99ch8p3uTxY8VQC/A= Subject key identifier: BD:E2:DB:84:98:EE:8F:7B:3A:B5:CA:AE:83:82:95:96:62:07:02:C1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5AF0A758E8092B6FF2888FBBCC45A9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:18:58 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 41325 IP: 84.38.48.0/20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:f0:a7:58:e8:09:2b:6f:f2:88:8f:bb:cc:45:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bde2db8498ee8f7b3ab5caae83829596620702c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e3:76:75:99:7c:1f:7f:b3:ca:a0:12:2f:81: 16:30:06:9e:f5:c5:7c:92:ad:46:a5:c1:a9:5e:d1: 91:60:bf:b6:f2:52:26:23:f2:9b:1e:94:52:78:bf: a0:ab:38:9e:83:67:4d:d3:56:81:16:01:3f:1e:fa: 8b:20:73:24:72:5b:ce:06:03:9b:66:75:95:56:17: 4d:c4:a3:ba:9e:90:13:69:b0:0f:aa:59:12:84:c0: 61:55:d0:c9:c9:43:80:79:cd:e2:5a:b8:ab:29:65: ed:6f:c7:a6:c7:e1:5e:b3:e7:ae:bd:d7:ea:08:0b: 6b:cf:36:04:44:4a:9a:68:b8:3d:df:7c:fd:50:3b: 1d:65:6f:96:0e:d2:08:b4:f3:cf:68:d2:e0:a5:08: bc:46:af:fd:4c:8e:60:47:65:09:16:12:3c:68:08: c7:2f:28:7a:96:b9:2f:cb:fe:9f:92:62:95:34:a7: 4d:ff:dd:8c:83:dc:80:b9:d6:80:9a:b0:af:f7:d9: e2:fc:2f:e0:a3:93:0f:80:4d:4c:88:00:1b:8b:e4: dd:c3:5e:2a:b3:a2:5c:df:21:d9:f1:cd:f6:ae:b4: 87:8b:9f:ff:cc:bd:b6:27:5b:25:dc:6e:7d:53:c9: fa:3c:cf:8b:a3:19:c8:1a:fc:18:f3:7b:58:16:76: c3:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:E2:DB:84:98:EE:8F:7B:3A:B5:CA:AE:83:82:95:96:62:07:02:C1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.38.48.0/20 sbgp-autonomousSysNum: critical Autonomous System Numbers: 41325 Signature Algorithm: sha256WithRSAEncryption 6f:a2:c8:b8:e1:a1:ec:ad:f7:47:38:ff:35:4b:d6:96:71:26: 5a:b4:f4:ee:af:a4:78:39:79:fc:f9:cc:20:45:76:d5:25:e8: 46:e6:00:82:4a:04:4d:76:5e:55:45:81:aa:93:5a:f7:86:5f: a7:bb:0f:4c:06:7c:4d:77:7d:45:60:9e:bf:ac:e3:f2:2c:5f: ab:10:da:52:45:12:2d:01:b4:fe:2c:1f:18:68:cc:08:ee:d7: 6a:c7:ae:c2:ee:ec:f9:9b:4e:87:58:c9:44:90:7a:a2:a1:dc: ef:30:0f:3b:59:bd:68:b7:85:c7:52:8b:f5:d8:1b:e1:8c:de: e9:ae:86:5c:c1:b7:2a:47:1e:ee:21:70:8b:f1:de:0d:43:fc: 03:c3:13:0f:03:c9:19:81:b6:14:34:fe:06:87:4a:6c:56:f2: 3c:96:c8:32:3e:82:8b:79:af:d6:ef:cb:7f:75:f5:0f:36:55: 5a:bb:7c:b9:0b:bb:80:04:d3:7d:76:a9:12:aa:2b:7a:d8:8e: b9:4a:64:8a:6b:88:c8:ce:fa:cc:db:dd:7d:7b:80:93:5e:0f: 87:6d:fe:12:94:c9:fa:1a:6d:42:4b:b0:1d:62:fe:18:6e:e9: 71:ba:f4:6e:be:99:de:0d:19:ce:e6:94:24:15:b6:cf:fb:8e: 3b:8d:98:f1 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt6WvCnWOgJK2/yiI+7zEWpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZGUyZGI4NDk4ZWU4ZjdiM2FiNWNhYWU4MzgyOTU5NjYyMDcwMmMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+N2dZl8H3+zyqASL4EWMAae9cV8 kq1GpcGpXtGRYL+28lImI/KbHpRSeL+gqzieg2dN01aBFgE/HvqLIHMkclvOBgOb ZnWVVhdNxKO6npATabAPqlkShMBhVdDJyUOAec3iWrirKWXtb8emx+Fes+euvdfq CAtrzzYEREqaaLg933z9UDsdZW+WDtIItPPPaNLgpQi8Rq/9TI5gR2UJFhI8aAjH Lyh6lrkvy/6fkmKVNKdN/92Mg9yAudaAmrCv99ni/C/go5MPgE1MiAAbi+Tdw14q s6Jc3yHZ8c32rrSHi5//zL22J1sl3G59U8n6PM+LoxnIGvwY83tYFnbD3QIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFL3i24SY7o97OrXKroOClZZiBwLBMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBmL2IxOWJk OC1lMWQ4LTQzODgtYTNiNi0xMjI1NWUzNjEyZWMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGYvYjE5YmQ4 LWUxZDgtNDM4OC1hM2I2LTEyMjU1ZTM2MTJlYy8xL3ZlTGJoSmp1ajNzNnRjcXVn NEtWbG1JSEFzRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQEVCYwMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwChbTANBgkqhkiG9w0BAQsFAAOCAQEAb6LIuOGh7K33Rzj/NUvWlnEmWrT07q+k eDl5/PnMIEV21SXoRuYAgkoETXZeVUWBqpNa94Zfp7sPTAZ8TXd9RWCev6zj8ixf qxDaUkUSLQG0/iwfGGjMCO7Xaseuwu7s+ZtOh1jJRJB6oqHc7zAPO1m9aLeFx1KL 9dgb4Yze6a6GXMG3Kkce7iFwi/HeDUP8A8MTDwPJGYG2FDT+BodKbFbyPJbIMj6C i3mv1u/Lf3X1DzZVWrt8uQu7gATTfXapEqoretiOuUpkimuIyM76zNvdfXuAk14P h23+EpTJ+hptQkuwHWL+GG7pcbr0br6Z3g0ZzuaUJBW2z/uOO42Y8Q== -----END CERTIFICATE-----Generated at Sun Jan 25 18:14:17 2026 by rpki-client