This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vkOZUom2pcqXLEuHteMUnDLLRDA.cer File: vkOZUom2pcqXLEuHteMUnDLLRDA.cer (raw, json) Hash identifier: D97RytzyClpAEMWhg4ac7RoyHNFXYOH5lLKbgppX0fI= Subject key identifier: BE:43:99:52:89:B6:A5:CA:97:2C:4B:87:B5:E3:14:9C:32:CB:44:30 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B35BC0F0F79FB7A71DE85A0DBCE1F4F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:17:57 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 41012 IP: 91.103.32.0 -- 91.103.34.255 IP: 94.116.0.0 -- 94.118.255.255 IP: 94.119.4.0 -- 94.119.255.255 IP: 185.144.140.0/22 IP: 194.42.124.0/23 IP: 2a01:5a0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:bc:0f:0f:79:fb:7a:71:de:85:a0:db:ce:1f:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=be43995289b6a5ca972c4b87b5e3149c32cb4430 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:a0:e7:6b:b6:a7:8a:22:d9:83:6a:3a:90:b8: e3:88:9c:13:c4:59:21:b6:e7:97:8b:aa:1e:f0:30: 62:16:42:f0:98:20:0c:71:02:88:4c:32:b6:42:56: 46:f6:2b:cb:12:2a:68:d1:f7:39:19:a8:be:b9:d2: a9:6b:ba:ce:f2:d6:d4:3c:f0:13:fa:16:a7:61:3a: 84:02:69:37:b7:64:0a:a8:80:26:2c:a8:9d:93:9e: 6d:e2:69:76:77:5c:ac:23:c9:3a:9a:e6:f3:32:94: f4:f2:0c:89:ce:14:90:5f:c3:95:08:16:35:a3:04: 22:be:90:b8:7e:34:f1:ad:7c:a0:c3:54:6a:6b:41: 98:59:08:ab:06:cd:1e:57:4d:b2:ea:0d:6b:6d:58: f5:f8:82:a0:82:92:0f:21:83:96:a9:ab:b0:3b:62: 43:2f:1f:53:2f:c2:1c:80:1d:61:b7:a9:29:78:ff: ef:59:e6:f2:fe:dd:8c:83:f6:62:ab:aa:67:48:8d: ce:f9:af:09:17:d0:de:d8:1f:03:8c:34:66:9e:74: 4e:b3:5f:9b:55:5f:1f:92:d9:88:e6:fb:f7:3b:e0: 6e:e3:99:fa:b2:18:d8:3c:45:f2:fd:81:8d:26:fe: cf:b3:9a:8f:11:8c:de:c5:f6:9c:00:ee:0e:62:85: 1a:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:43:99:52:89:B6:A5:CA:97:2C:4B:87:B5:E3:14:9C:32:CB:44:30 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.103.32.0-91.103.34.255 94.116.0.0-94.118.255.255 94.119.4.0-94.119.255.255 185.144.140.0/22 194.42.124.0/23 IPv6: 2a01:5a0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 41012 Signature Algorithm: sha256WithRSAEncryption 24:bc:7b:7f:74:49:7f:77:f4:c3:55:29:ce:13:f3:04:d8:c5: ef:1d:80:0f:4f:38:fb:66:5b:5c:89:6b:16:4c:fb:b9:0c:a3: cd:26:c9:8c:da:ae:a8:83:55:6e:4b:fd:3e:d3:7f:e0:72:41: 05:cc:4b:1b:b3:fe:61:db:53:07:93:79:9a:39:bb:87:82:b5: ac:2c:53:b8:ad:24:df:ba:fd:37:97:48:9b:23:05:02:a5:44: 43:e9:78:e2:f9:fb:4f:b0:9e:b8:a0:ba:de:01:86:20:5c:b8: df:29:c3:cf:40:e6:93:f4:9e:e4:bd:1c:d0:1d:6b:12:07:ec: 76:48:0b:69:e6:dd:44:2e:87:77:c7:ed:68:58:b4:2c:8f:98: d3:54:18:ad:fd:3d:1c:49:08:e7:a9:e9:cf:8a:f5:73:11:81: dd:b0:3b:1a:5e:48:b5:6b:c1:69:f5:b8:4c:6d:b8:09:67:b6: e3:16:89:30:ad:30:5a:47:0b:ec:19:2a:54:cb:33:49:4b:82: 1f:2e:c6:31:06:27:75:8f:b5:dc:49:ab:94:6c:c3:bd:ad:8b: a7:02:ba:58:78:32:e6:92:f3:7a:63:43:81:12:7a:6a:75:0d: f5:98:f8:76:2b:cf:5d:f0:23:7e:c6:e3:ad:b8:6b:32:61:b9: f3:7d:59:2d -----BEGIN CERTIFICATE----- MIIF0DCCBLigAwIBAgISAZt7NbwPD3n7enHehaDbzh9PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZTQzOTk1Mjg5YjZhNWNhOTcyYzRiODdiNWUzMTQ5YzMyY2I0NDMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6KDna7aniiLZg2o6kLjjiJwTxFkh tueXi6oe8DBiFkLwmCAMcQKITDK2QlZG9ivLEipo0fc5Gai+udKpa7rO8tbUPPAT +hanYTqEAmk3t2QKqIAmLKidk55t4ml2d1ysI8k6mubzMpT08gyJzhSQX8OVCBY1 owQivpC4fjTxrXygw1Rqa0GYWQirBs0eV02y6g1rbVj1+IKggpIPIYOWqauwO2JD Lx9TL8IcgB1ht6kpeP/vWeby/t2Mg/Ziq6pnSI3O+a8JF9De2B8DjDRmnnROs1+b VV8fktmI5vv3O+Bu45n6shjYPEXy/YGNJv7Ps5qPEYzexfacAO4OYoUajwIDAQAB o4IC3DCCAtgwHQYDVR0OBBYEFL5DmVKJtqXKlyxLh7XjFJwyy0QwMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U1Lzc2NGIz NC0wZDk4LTQ1NGMtODVhMi0zMDYwNDVlZmNkNjgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTUvNzY0YjM0 LTBkOTgtNDU0Yy04NWEyLTMwNjA0NWVmY2Q2OC8xL3ZrT1pVb20ycGNxWExFdUh0 ZU1VbkRMTFJEQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFsGCCsGAQUF BwEHAQH/BEwwSjA5BAIAATAzMAwDBAVbZyADBABbZyIwCgMDAl50AwMAXnYwCwME Al53BAMDA15wAwQCuZCMAwQBwip8MA0EAgACMAcDBQAqAQWgMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwCgNDANBgkqhkiG9w0BAQsFAAOCAQEAJLx7f3RJf3f0w1Up zhPzBNjF7x2AD084+2ZbXIlrFkz7uQyjzSbJjNquqINVbkv9PtN/4HJBBcxLG7P+ YdtTB5N5mjm7h4K1rCxTuK0k37r9N5dImyMFAqVEQ+l44vn7T7CeuKC63gGGIFy4 3ynDz0Dmk/Se5L0c0B1rEgfsdkgLaebdRC6Hd8ftaFi0LI+Y01QYrf09HEkI56np z4r1cxGB3bA7Gl5ItWvBafW4TG24CWe24xaJMK0wWkcL7BkqVMszSUuCHy7GMQYn dY+13EmrlGzDva2LpwK6WHgy5pLzemNDgRJ6anUN9Zj4divPXfAjfsbjrbhrMmG5 831ZLQ== -----END CERTIFICATE-----Generated at Sun Jan 25 21:35:57 2026 by rpki-client