This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vmWzDa10rHadS1syMS2o-oGrM9E.cer File: vmWzDa10rHadS1syMS2o-oGrM9E.cer (raw, json) Hash identifier: IPnsQR7x1Hya+VXLOq1DCowISdPcGkHwTTLToCN4zgU= Subject key identifier: BE:65:B3:0D:AD:74:AC:76:9D:4B:5B:32:31:2D:A8:FA:81:AB:33:D1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F151D699D172EBF4B288E35B1699656 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/35/66e032-ab6a-4d3a-a12b-510cfa455640/1/vmWzDa10rHadS1syMS2o-oGrM9E.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/35/66e032-ab6a-4d3a-a12b-510cfa455640/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:20:48 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 198165 IP: 193.150.48.0/24 IP: 193.201.122.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:1d:69:9d:17:2e:bf:4b:28:8e:35:b1:69:96:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:20:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=be65b30dad74ac769d4b5b32312da8fa81ab33d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f6:ad:0c:18:95:c3:7e:d4:0e:bc:27:75:f3: c9:b6:03:48:2c:1e:c2:9c:ac:9f:86:e2:6d:2a:0c: a4:5b:1a:33:90:79:97:d1:29:ab:c9:5e:13:9b:ca: 49:2e:8f:a5:48:fc:d4:25:b4:f0:40:79:7e:18:20: f2:8d:a4:c8:4f:27:d0:b0:8e:9c:4d:4d:e9:e5:3c: 4f:ce:37:ff:8d:df:08:8a:a4:ff:a1:6d:10:79:f3: 37:ca:a1:f4:67:15:98:61:ff:01:de:9d:c5:e9:2d: c7:21:38:ad:74:cb:52:a4:94:62:8b:97:d5:b8:ed: 5e:e2:1c:17:56:d5:01:16:58:74:1f:df:13:05:9a: 64:41:56:71:1a:bc:d9:29:42:1e:ba:8d:37:69:d1: fe:e2:dd:79:08:3c:ba:36:88:62:d9:38:6c:c7:e1: 94:5b:98:b9:c5:2e:c9:12:e7:18:89:05:86:5f:44: ad:32:f8:79:cd:84:15:56:c8:e3:a6:20:76:70:b9: dc:5c:1f:fa:13:44:ee:9d:b8:dd:03:40:d7:79:f2: 19:01:de:dd:b5:12:cf:de:69:6f:3d:c2:a5:ac:0a: 55:01:99:c0:5f:fa:1e:db:23:99:90:c4:55:42:b3: c4:af:e1:16:2e:6a:e8:cb:6b:3a:72:f3:e1:0c:ed: e4:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:65:B3:0D:AD:74:AC:76:9D:4B:5B:32:31:2D:A8:FA:81:AB:33:D1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/66e032-ab6a-4d3a-a12b-510cfa455640/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/66e032-ab6a-4d3a-a12b-510cfa455640/1/vmWzDa10rHadS1syMS2o-oGrM9E.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.150.48.0/24 193.201.122.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 198165 Signature Algorithm: sha256WithRSAEncryption 16:93:15:34:ff:32:3a:fc:3e:36:c9:c7:9f:4b:77:f7:8c:6e: 8d:1c:37:fa:34:57:81:e7:4f:6a:85:35:d5:42:59:3c:d0:0a: e4:28:63:ea:06:84:b2:78:71:cf:1b:5d:2e:3d:87:bb:15:65: 12:7f:3e:0e:84:24:c7:30:bc:d0:59:99:87:75:75:2b:ab:ab: e8:55:74:23:0f:c9:22:ab:6b:ee:a7:82:75:5b:fb:c3:ea:4b: 05:de:62:bc:21:f9:0b:81:05:1d:1e:89:0b:12:0a:c4:2f:b8: ac:bc:cc:b8:77:89:c7:52:03:9d:9a:cf:cb:08:c3:d7:24:1c: 45:d2:c0:4b:16:b0:b3:b8:f3:d4:9f:39:a0:74:be:be:2a:89: 05:c2:18:c8:7e:e4:c9:08:31:94:81:0e:65:83:6e:f5:d3:d0: 7a:95:5b:cf:f8:e7:9d:25:57:77:83:b1:65:af:27:cb:d3:ab: 19:01:f0:69:b7:42:d7:eb:a0:24:8b:88:b2:eb:3e:2c:ab:9b: 4b:35:97:73:8f:6a:0e:0d:8b:71:20:a1:26:a1:53:ee:33:7a: 59:96:20:ea:1d:d0:b2:98:b1:e7:41:15:71:65:05:f8:d0:a2: 13:4f:e8:d6:8b:21:d1:6f:15:ef:9f:0f:09:72:f3:32:0f:8e: ed:b1:3c:de -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZt/FR1pnRcuv0sojjWxaZZWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMDQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZTY1YjMwZGFkNzRhYzc2OWQ0YjViMzIzMTJkYThmYTgxYWIzM2QxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfatDBiVw37UDrwndfPJtgNILB7C nKyfhuJtKgykWxozkHmX0SmryV4Tm8pJLo+lSPzUJbTwQHl+GCDyjaTITyfQsI6c TU3p5TxPzjf/jd8IiqT/oW0QefM3yqH0ZxWYYf8B3p3F6S3HITitdMtSpJRii5fV uO1e4hwXVtUBFlh0H98TBZpkQVZxGrzZKUIeuo03adH+4t15CDy6Nohi2Thsx+GU W5i5xS7JEucYiQWGX0StMvh5zYQVVsjjpiB2cLncXB/6E0TunbjdA0DXefIZAd7d tRLP3mlvPcKlrApVAZnAX/oe2yOZkMRVQrPEr+EWLmroy2s6cvPhDO3kZwIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFL5lsw2tdKx2nUtbMjEtqPqBqzPRMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM1LzY2ZTAz Mi1hYjZhLTRkM2EtYTEyYi01MTBjZmE0NTU2NDAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzUvNjZlMDMy LWFiNmEtNGQzYS1hMTJiLTUxMGNmYTQ1NTY0MC8xL3ZtV3pEYTEwckhhZFMxc3lN UzJvLW9Hck05RS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQAwZYwAwQBwcl6MBoGCCsGAQUFBwEIAQH/BAsw CaAHMAUCAwMGFTANBgkqhkiG9w0BAQsFAAOCAQEAFpMVNP8yOvw+NsnHn0t394xu jRw3+jRXgedPaoU11UJZPNAK5Chj6gaEsnhxzxtdLj2HuxVlEn8+DoQkxzC80FmZ h3V1K6ur6FV0Iw/JIqtr7qeCdVv7w+pLBd5ivCH5C4EFHR6JCxIKxC+4rLzMuHeJ x1IDnZrPywjD1yQcRdLASxaws7jz1J85oHS+viqJBcIYyH7kyQgxlIEOZYNu9dPQ epVbz/jnnSVXd4OxZa8ny9OrGQHwabdC1+ugJIuIsus+LKubSzWXc49qDg2LcSCh JqFT7jN6WZYg6h3Qspix50EVcWUF+NCiE0/o1osh0W8V758PCXLzMg+O7bE83g== -----END CERTIFICATE-----Generated at Sun Jan 25 23:33:47 2026 by rpki-client