This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/veasKPlU4T3LfbabwiK3hbTXXyw.cer File: veasKPlU4T3LfbabwiK3hbTXXyw.cer (raw, json) Hash identifier: 5kaeB3SYeb/YTwq1jL2Hw7KTsUBlN/mUf09ZlUIIaK8= Subject key identifier: BD:E6:AC:28:F9:54:E1:3D:CB:7D:B6:9B:C2:22:B7:85:B4:D7:5F:2C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C80953505952822115E5C6797CAB651 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/veasKPlU4T3LfbabwiK3hbTXXyw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:19:20 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 25275 IP: 195.234.224.0/22 IP: 2001:67c:2ccc::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:95:35:05:95:28:22:11:5e:5c:67:97:ca:b6:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:19:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bde6ac28f954e13dcb7db69bc222b785b4d75f2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:96:95:58:8b:fc:3f:e8:fd:4f:b7:0c:f0:6b: 05:33:8e:9c:0d:36:25:5e:e2:35:6a:34:2c:16:f9: 1f:98:3e:bf:7d:14:a3:9d:e7:db:84:6d:f9:b6:0e: 7a:79:2a:c3:8c:63:e1:6b:dd:70:a2:e8:b3:d6:91: a5:1c:47:ca:5c:37:4d:ec:c5:ce:44:ee:ee:df:53: eb:92:8d:09:39:cc:84:ff:2d:9f:88:0d:44:cf:cc: ef:89:2c:29:fd:9e:ef:6e:d4:89:a3:a7:09:c5:d3: 68:9b:0a:1b:6b:59:53:06:f9:02:42:b1:b7:16:d8: 85:99:c3:b3:6e:ac:fe:44:f0:32:81:f5:e0:11:72: 93:70:d1:93:b9:39:3c:93:f5:99:fe:29:28:0d:82: 90:2c:12:fd:e2:b1:72:6f:a8:b2:2d:0f:e8:7f:88: 67:ed:83:63:98:72:ab:bf:f3:15:9f:19:5e:b3:c5: 71:64:f7:58:b9:e2:2c:03:85:0b:62:a4:6c:7e:f0: 42:60:59:f9:de:06:bf:9e:89:f5:aa:62:f1:5b:b0: c3:54:95:03:fa:db:a9:26:f1:5b:f8:4d:63:59:23: 3c:66:17:8f:e8:f1:f3:53:87:df:ea:c0:33:14:8e: c2:2d:90:a7:51:0c:f3:e5:79:98:8f:82:8c:27:52: e4:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:E6:AC:28:F9:54:E1:3D:CB:7D:B6:9B:C2:22:B7:85:B4:D7:5F:2C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/veasKPlU4T3LfbabwiK3hbTXXyw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.234.224.0/22 IPv6: 2001:67c:2ccc::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 25275 Signature Algorithm: sha256WithRSAEncryption 54:00:1e:bd:7a:c0:3a:ff:3d:43:c7:fa:f2:88:ee:61:af:e3: f8:0e:05:b2:8f:30:57:49:f4:b7:6b:b8:8b:8a:09:4f:90:24: 62:87:e1:84:8f:e2:6e:c0:cf:10:cb:8b:39:f4:f9:3e:e0:98: 98:41:cc:be:32:55:e8:bd:c4:a7:64:5b:7b:8b:e6:16:e5:b4: 22:f1:48:da:b8:b6:b4:de:84:54:84:92:a0:e1:9c:8f:7b:45: 87:50:58:c2:b2:dd:3b:d8:84:7e:62:c9:96:00:6d:57:29:60: 40:25:e2:a1:68:17:0c:8f:33:eb:68:0c:be:cb:44:9e:9b:5a: 3f:87:37:9f:e4:6a:7a:c0:95:ff:10:fb:56:db:fc:b3:cb:d2: 45:d5:e7:e5:ce:bd:45:20:d0:2a:c8:3d:1d:49:7b:2b:df:d0: 66:64:7b:d6:4f:f3:c8:a3:42:44:5e:b1:09:28:db:8d:97:8b: 75:b5:e3:fc:dd:64:81:a9:b7:28:d8:30:5e:fd:03:df:7d:61: a5:53:ca:65:ec:72:af:6e:66:f8:19:80:ef:ac:3b:fe:70:e4: 6d:b5:62:db:a3:f2:ed:33:0e:68:3b:5f:19:3a:95:c2:55:5c: 90:c0:b7:12:9c:d8:4a:26:43:e6:5e:5a:2c:99:29:72:b0:1a: 82:33:38:63 -----BEGIN CERTIFICATE----- MIIFpDCCBIygAwIBAgISAZt8gJU1BZUoIhFeXGeXyrZRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxOTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZGU2YWMyOGY5NTRlMTNkY2I3ZGI2OWJjMjIyYjc4NWI0ZDc1ZjJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJaVWIv8P+j9T7cM8GsFM46cDTYl XuI1ajQsFvkfmD6/fRSjnefbhG35tg56eSrDjGPha91wouiz1pGlHEfKXDdN7MXO RO7u31Prko0JOcyE/y2fiA1Ez8zviSwp/Z7vbtSJo6cJxdNomwoba1lTBvkCQrG3 FtiFmcOzbqz+RPAygfXgEXKTcNGTuTk8k/WZ/ikoDYKQLBL94rFyb6iyLQ/of4hn 7YNjmHKrv/MVnxles8VxZPdYueIsA4ULYqRsfvBCYFn53ga/non1qmLxW7DDVJUD +tupJvFb+E1jWSM8ZheP6PHzU4ff6sAzFI7CLZCnUQzz5XmYj4KMJ1LklwIDAQAB o4ICsDCCAqwwHQYDVR0OBBYEFL3mrCj5VOE9y322m8Iit4W0118sMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2UzLzViNGUx My1iM2RkLTRkOGEtOGU3MS1jYWU2YzcyNWQ5MmYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTMvNWI0ZTEz LWIzZGQtNGQ4YS04ZTcxLWNhZTZjNzI1ZDkyZi8xL3ZlYXNLUGxVNFQzTGZiYWJ3 aUszaGJUWFh5dy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQCw+rgMA8EAgACMAkDBwAgAQZ8LMwwGQYIKwYB BQUHAQgBAf8ECjAIoAYwBAICYrswDQYJKoZIhvcNAQELBQADggEBAFQAHr16wDr/ PUPH+vKI7mGv4/gOBbKPMFdJ9LdruIuKCU+QJGKH4YSP4m7AzxDLizn0+T7gmJhB zL4yVei9xKdkW3uL5hbltCLxSNq4trTehFSEkqDhnI97RYdQWMKy3TvYhH5iyZYA bVcpYEAl4qFoFwyPM+toDL7LRJ6bWj+HN5/kanrAlf8Q+1bb/LPL0kXV5+XOvUUg 0CrIPR1Jeyvf0GZke9ZP88ijQkResQko242Xi3W14/zdZIGptyjYMF79A999YaVT ymXscq9uZvgZgO+sO/5w5G21Ytuj8u0zDmg7Xxk6lcJVXJDAtxKc2EomQ+ZeWiyZ KXKwGoIzOGM= -----END CERTIFICATE-----Generated at Sun Jan 25 12:09:01 2026 by rpki-client