This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vfegoEi2jsz6TUnqtPFtx5LA0xg.cer File: vfegoEi2jsz6TUnqtPFtx5LA0xg.cer (raw, json) Hash identifier: LiDfEwRsBavVJ+YP5Ecu0GJyx5P2j/k673xejzQaj7c= Subject key identifier: BD:F7:A0:A0:48:B6:8E:CC:FA:4D:49:EA:B4:F1:6D:C7:92:C0:D3:18 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F81FD543C850005E708AC8505694DA7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:19:44 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 194.140.230.0/24 IP: 2001:67c:144::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:81:fd:54:3c:85:00:05:e7:08:ac:85:05:69:4d:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:19:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bdf7a0a048b68eccfa4d49eab4f16dc792c0d318 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:8c:1b:e2:d3:dd:85:5e:0e:af:8c:e0:37:cf: ed:32:34:3e:35:54:ba:55:c7:9e:13:8d:0c:3b:9c: cb:ce:39:0a:67:b2:c7:1b:d4:e4:bf:43:1b:09:1a: 0f:89:4a:ce:71:6e:79:ac:8e:63:f9:8f:e5:92:75: 08:19:d4:a9:40:fe:91:f3:60:c0:b8:12:20:43:71: af:06:de:9a:be:6a:91:e6:41:00:fc:c7:4b:33:af: bd:92:62:92:b8:d3:67:5c:52:57:d3:a4:b9:24:eb: 5f:85:eb:0e:9a:12:47:4e:69:28:bc:61:12:4d:f1: 74:c0:1d:84:d0:30:bb:03:64:d2:77:23:6f:44:73: 79:2b:ca:15:e6:b5:b3:8c:a0:8b:7c:10:c4:65:40: 20:df:92:81:18:e5:88:8c:66:25:08:21:f8:79:fc: f3:f5:7c:88:9b:5f:55:9f:85:f0:f6:2b:da:88:86: ca:30:a0:e5:e6:84:a5:2d:9a:9b:64:0e:5e:ce:88: 78:4e:98:b2:78:23:ce:3a:ee:f2:86:1f:53:6e:62: c8:0d:5e:e7:46:44:8e:b8:b4:d8:f3:a8:12:41:ae: c7:03:01:4c:46:3c:bf:3f:c9:68:5a:c7:9b:37:73: 4d:1f:05:98:43:e3:61:e8:0c:01:89:bd:88:49:d0: 98:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:F7:A0:A0:48:B6:8E:CC:FA:4D:49:EA:B4:F1:6D:C7:92:C0:D3:18 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.140.230.0/24 IPv6: 2001:67c:144::/48 Signature Algorithm: sha256WithRSAEncryption 17:98:5a:9d:10:ad:f0:20:15:5e:27:9b:6a:66:60:1e:1d:d9: 6c:9b:12:85:1e:a1:f4:83:1d:1f:d4:59:23:b9:74:5d:ce:a5: f4:85:bd:9d:c5:e3:c3:18:cc:f2:45:75:73:45:1e:6c:89:31: 15:c1:af:6e:b2:21:48:6a:49:6d:de:b2:af:07:32:e7:df:01: d4:ec:b5:47:ec:83:f7:db:6f:c8:d1:87:b4:13:40:d7:1e:a8: eb:d8:53:3e:46:31:98:a8:f4:d7:28:ed:42:75:5c:72:06:b8: 0f:78:eb:30:83:bc:46:90:bc:7a:ac:c3:cc:13:99:4a:e9:8f: 3d:5e:7e:c6:f6:92:36:1c:41:63:b2:5d:e9:2f:09:d2:6b:28: 95:41:5a:80:2c:b7:d7:d9:e2:73:2c:2f:48:92:16:ea:b1:12: 6d:bb:af:10:8d:8e:00:e6:13:e8:23:28:8b:4e:2f:14:26:64: fc:4e:3f:bb:5c:3a:b0:8b:e6:ce:78:3c:ae:50:34:7d:af:64: ec:d0:5c:2f:4f:60:5c:e9:8b:c4:7c:a5:04:a2:30:e5:4f:c2: 89:d3:1f:2e:1f:e3:10:21:43:06:20:6c:0f:fa:44:07:6a:0e: d4:30:39:ee:07:85:ef:b8:f2:50:a0:b6:06:10:4a:99:49:cd: e1:94:04:90 -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgISAZt/gf1UPIUABecIrIUFaU2nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYxOTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZGY3YTBhMDQ4YjY4ZWNjZmE0ZDQ5ZWFiNGYxNmRjNzkyYzBkMzE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Iwb4tPdhV4Or4zgN8/tMjQ+NVS6 VceeE40MO5zLzjkKZ7LHG9Tkv0MbCRoPiUrOcW55rI5j+Y/lknUIGdSpQP6R82DA uBIgQ3GvBt6avmqR5kEA/MdLM6+9kmKSuNNnXFJX06S5JOtfhesOmhJHTmkovGES TfF0wB2E0DC7A2TSdyNvRHN5K8oV5rWzjKCLfBDEZUAg35KBGOWIjGYlCCH4efzz 9XyIm19Vn4Xw9ivaiIbKMKDl5oSlLZqbZA5ezoh4TpiyeCPOOu7yhh9TbmLIDV7n RkSOuLTY86gSQa7HAwFMRjy/P8loWsebN3NNHwWYQ+Nh6AwBib2ISdCYvQIDAQAB o4IClTCCApEwHQYDVR0OBBYEFL33oKBIto7M+k1J6rTxbceSwNMYMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFhL2UxNmNi Ni1iNDU0LTQ4ZDYtYmRjOC0zNTE2MTkxYTlkNjgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWEvZTE2Y2I2 LWI0NTQtNDhkNi1iZGM4LTM1MTYxOTFhOWQ2OC8xL3ZmZWdvRWkyanN6NlRVbnF0 UEZ0eDVMQTB4Zy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQAwozmMA8EAgACMAkDBwAgAQZ8AUQwDQYJKoZI hvcNAQELBQADggEBABeYWp0QrfAgFV4nm2pmYB4d2WybEoUeofSDHR/UWSO5dF3O pfSFvZ3F48MYzPJFdXNFHmyJMRXBr26yIUhqSW3esq8HMuffAdTstUfsg/fbb8jR h7QTQNceqOvYUz5GMZio9Nco7UJ1XHIGuA946zCDvEaQvHqsw8wTmUrpjz1efsb2 kjYcQWOyXekvCdJrKJVBWoAst9fZ4nMsL0iSFuqxEm27rxCNjgDmE+gjKItOLxQm ZPxOP7tcOrCL5s54PK5QNH2vZOzQXC9PYFzpi8R8pQSiMOVPwonTHy4f4xAhQwYg bA/6RAdqDtQwOe4Hhe+48lCgtgYQSplJzeGUBJA= -----END CERTIFICATE-----Generated at Sun Jan 25 07:28:23 2026 by rpki-client