This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vkjMNUiL2ebzErIPx2oQJy8M3to.cer File: vkjMNUiL2ebzErIPx2oQJy8M3to.cer (raw, json) Hash identifier: jjSanqMzp6rvS0tPqQTL4O7l4ZBbniJ4U/+Hihv5owU= Subject key identifier: BE:48:CC:35:48:8B:D9:E6:F3:12:B2:0F:C7:6A:10:27:2F:0C:DE:DA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5A8E18D9C690BAF85B5D0556A31BAF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d7/d26971-b7a8-4ede-8bb4-49bc43660c97/1/vkjMNUiL2ebzErIPx2oQJy8M3to.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d7/d26971-b7a8-4ede-8bb4-49bc43660c97/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:18:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 60522 IP: 86.111.152.0/21 IP: 134.255.192.0/22 IP: 185.29.216.0/22 IP: 185.205.124.0/22 IP: 195.192.216.0/21 IP: 217.61.192.0/20 IP: 2a00:ab60::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:8e:18:d9:c6:90:ba:f8:5b:5d:05:56:a3:1b:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=be48cc35488bd9e6f312b20fc76a10272f0cdeda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:0e:ed:04:e5:eb:49:de:c7:bb:2e:d0:99:41: 5a:32:5f:42:24:ed:95:b5:a2:52:8f:39:08:02:63: 29:70:d2:fd:10:09:37:33:1e:f8:44:9d:7b:eb:bf: 60:6d:40:06:6f:85:8a:51:ed:e3:28:3d:c8:5d:18: 09:63:eb:55:1b:55:8f:2b:fd:68:46:52:8d:da:e9: f4:9e:70:0e:00:e6:b6:af:73:2a:ba:9c:dc:89:6a: 07:32:31:26:9e:99:81:78:fb:79:60:d0:f1:26:03: d7:37:5b:e7:4f:84:a3:5a:59:e7:68:79:07:65:56: c0:cc:eb:b1:0e:42:2c:fb:50:6a:0f:51:c2:5d:67: 85:87:e0:0d:6a:2c:42:86:47:06:7d:9c:e6:d0:26: ef:f4:cc:cd:17:33:20:21:21:cc:2c:81:98:7f:4a: d0:bd:80:df:98:50:7f:3c:42:b5:5c:18:0b:cd:c6: 25:80:e6:bb:47:b4:33:52:6b:43:7d:41:31:f4:a9: 2b:05:4f:c6:d8:1e:58:ff:14:2e:a2:e9:34:2c:13: de:cb:65:ed:35:ae:fe:6b:80:4c:bb:d8:fe:90:5a: eb:9b:dc:5e:3c:d9:30:9c:27:ec:fa:91:82:35:ac: b2:ef:8a:51:7e:0e:dd:05:bb:d1:03:ff:d7:b4:6d: 73:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:48:CC:35:48:8B:D9:E6:F3:12:B2:0F:C7:6A:10:27:2F:0C:DE:DA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d26971-b7a8-4ede-8bb4-49bc43660c97/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d26971-b7a8-4ede-8bb4-49bc43660c97/1/vkjMNUiL2ebzErIPx2oQJy8M3to.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.111.152.0/21 134.255.192.0/22 185.29.216.0/22 185.205.124.0/22 195.192.216.0/21 217.61.192.0/20 IPv6: 2a00:ab60::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 60522 Signature Algorithm: sha256WithRSAEncryption 05:68:56:85:15:48:4a:77:14:af:39:b4:41:2b:07:9e:d3:37: 18:ae:13:d3:12:2f:e7:f9:05:e1:f6:bb:e5:01:60:8c:c6:af: fe:e4:b2:a4:89:0e:77:54:c0:66:c3:7f:d3:25:e3:83:7e:9a: 10:2c:1c:f1:cd:7e:a8:b6:84:04:98:93:9e:7e:c9:1b:ed:56: 59:28:0b:ad:b8:07:e0:37:b8:c3:bd:8b:08:41:8b:73:20:fb: d9:bf:79:47:82:c8:14:b3:c2:9f:b0:d8:a6:eb:42:7a:8f:52: 87:f6:54:42:84:b6:a4:10:be:a7:df:bc:f0:62:3a:61:92:1d: 7e:0b:03:2b:b0:82:87:2d:4c:e4:cf:82:23:e2:da:1e:37:4f: d9:27:f9:d1:52:9b:94:e1:52:ed:49:e1:6f:ed:51:ca:27:85: 97:a3:2f:bc:d7:44:2e:3b:14:c2:97:0f:18:3f:6a:64:f1:f6: c9:c0:7b:65:04:28:d4:25:52:47:61:99:5b:05:03:bd:ed:69: ce:1e:7b:8d:93:76:d0:37:99:3a:f4:5c:aa:e8:71:9b:0f:e9: c4:01:61:2b:2f:66:5a:b5:bb:a6:1b:3b:e2:15:3f:9c:57:f8: 29:76:fd:cf:11:42:34:c0:a9:59:d1:d3:5e:34:6c:60:be:7b: ae:6d:a9:70 -----BEGIN CERTIFICATE----- MIIFwTCCBKmgAwIBAgISAZt6Wo4Y2caQuvhbXQVWoxuvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZTQ4Y2MzNTQ4OGJkOWU2ZjMxMmIyMGZjNzZhMTAyNzJmMGNkZWRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqw7tBOXrSd7Huy7QmUFaMl9CJO2V taJSjzkIAmMpcNL9EAk3Mx74RJ17679gbUAGb4WKUe3jKD3IXRgJY+tVG1WPK/1o RlKN2un0nnAOAOa2r3MqupzciWoHMjEmnpmBePt5YNDxJgPXN1vnT4SjWlnnaHkH ZVbAzOuxDkIs+1BqD1HCXWeFh+ANaixChkcGfZzm0Cbv9MzNFzMgISHMLIGYf0rQ vYDfmFB/PEK1XBgLzcYlgOa7R7QzUmtDfUEx9KkrBU/G2B5Y/xQuouk0LBPey2Xt Na7+a4BMu9j+kFrrm9xePNkwnCfs+pGCNayy74pRfg7dBbvRA//XtG1zgwIDAQAB o4ICzTCCAskwHQYDVR0OBBYEFL5IzDVIi9nm8xKyD8dqECcvDN7aMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q3L2QyNjk3 MS1iN2E4LTRlZGUtOGJiNC00OWJjNDM2NjBjOTcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDcvZDI2OTcx LWI3YTgtNGVkZS04YmI0LTQ5YmM0MzY2MGM5Ny8xL3Zrak1OVWlMMmViekVySVB4 Mm9RSnk4TTN0by5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEwGCCsGAQUF BwEHAQH/BD0wOzAqBAIAATAkAwQDVm+YAwQChv/AAwQCuR3YAwQCuc18AwQDw8DY AwQE2T3AMA0EAgACMAcDBQMqAKtgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDs ajANBgkqhkiG9w0BAQsFAAOCAQEABWhWhRVISncUrzm0QSsHntM3GK4T0xIv5/kF 4fa75QFgjMav/uSypIkOd1TAZsN/0yXjg36aECwc8c1+qLaEBJiTnn7JG+1WWSgL rbgH4De4w72LCEGLcyD72b95R4LIFLPCn7DYputCeo9Sh/ZUQoS2pBC+p9+88GI6 YZIdfgsDK7CChy1M5M+CI+LaHjdP2Sf50VKblOFS7Unhb+1RyieFl6MvvNdELjsU wpcPGD9qZPH2ycB7ZQQo1CVSR2GZWwUDve1pzh57jZN20DeZOvRcquhxmw/pxAFh Ky9mWrW7phs74hU/nFf4KXb9zxFCNMCpWdHTXjRsYL57rm2pcA== -----END CERTIFICATE-----Generated at Mon Jan 26 15:03:51 2026 by rpki-client