This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vnx56aIdsmvWrgdQJ22xsK-n7Ns.cer File: vnx56aIdsmvWrgdQJ22xsK-n7Ns.cer (raw, json) Hash identifier: WsBxVHiYoUPo3zKPLRUIeFBn6z04IUa+BD3SmCycZHg= Subject key identifier: BE:7C:79:E9:A2:1D:B2:6B:D6:AE:07:50:27:6D:B1:B0:AF:A7:EC:DB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA33C5A5BAF46C6323AD6437B987599 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8a/16339a-2603-4e8f-901c-cfe2c7ff018b/1/vnx56aIdsmvWrgdQJ22xsK-n7Ns.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8a/16339a-2603-4e8f-901c-cfe2c7ff018b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:17:34 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 213748 IP: 2001:67c:f70::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:3c:5a:5b:af:46:c6:32:3a:d6:43:7b:98:75:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=be7c79e9a21db26bd6ae0750276db1b0afa7ecdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c6:30:82:c9:be:c3:12:47:30:24:61:10:62: 9b:7f:32:10:a2:63:c1:88:5a:79:1d:82:f2:1b:b6: 26:8b:5b:50:68:c6:2d:ad:4c:47:6d:ba:5e:57:e2: 6e:c9:fe:a4:33:8a:fa:b6:c2:e6:22:8e:7f:0c:2b: 9e:06:43:7f:c7:b1:e1:84:d7:14:df:ed:8e:ac:82: a1:ea:38:82:f7:ce:32:83:38:3c:97:12:fc:38:d4: 81:40:26:e0:35:4d:7c:cd:ec:63:7b:02:9d:3c:30: 6f:d6:8b:f2:27:f7:29:bf:29:8e:ca:81:dd:e7:c1: 56:eb:65:25:d6:49:48:17:95:5f:90:40:d1:66:7b: 73:ec:9a:ae:d6:2c:ff:81:3e:96:41:5d:3d:c8:4c: 7a:52:ac:27:f9:3c:85:a4:e2:ac:1f:91:74:10:ec: 1e:1e:b2:b8:f4:91:82:aa:1a:3a:82:e7:09:29:9e: 3a:31:56:26:ed:2a:0e:68:cb:a4:b7:3c:29:23:95: a9:0c:de:7b:b0:48:27:47:68:53:32:2f:8a:2d:e7: 4d:66:0f:9f:bf:3c:24:10:8c:7a:45:2d:30:1a:93: bb:22:5c:23:6e:5c:ac:79:81:34:8f:15:49:5b:b8: 24:4e:98:6a:39:27:3e:0f:f8:5a:cf:52:cc:a8:51: 3e:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:7C:79:E9:A2:1D:B2:6B:D6:AE:07:50:27:6D:B1:B0:AF:A7:EC:DB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/16339a-2603-4e8f-901c-cfe2c7ff018b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/16339a-2603-4e8f-901c-cfe2c7ff018b/1/vnx56aIdsmvWrgdQJ22xsK-n7Ns.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:f70::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 213748 Signature Algorithm: sha256WithRSAEncryption 9a:ce:a4:ae:b5:0d:89:41:b0:1e:70:ec:56:22:50:5c:f1:5c: d9:f9:73:ca:fb:35:dd:70:5d:52:94:34:4f:f2:3e:ef:c9:7b: b5:cf:e6:c8:d3:e7:9d:a8:a7:e8:4b:b8:81:78:f4:95:70:64: 4e:02:23:f4:53:f4:3b:e4:89:06:cb:16:7f:82:21:13:35:bf: 61:67:38:ee:ae:bf:40:cd:eb:69:1a:40:6d:2a:2a:e9:fd:bb: 36:30:44:e7:03:d1:3f:23:21:7f:d1:40:23:a2:94:ad:38:8a: fb:c3:27:56:7e:8a:32:c2:88:67:64:66:e6:1b:a2:ec:0b:b6: f3:81:d0:34:2b:b8:5a:00:03:00:73:3b:fc:27:d3:94:63:19: 9e:6b:28:7f:ca:26:13:9c:f9:59:3b:ee:ed:32:90:2b:36:96: f5:99:06:ff:79:36:d5:e3:21:c5:a7:e0:08:07:eb:c1:cc:76: 9c:d7:f6:bd:bb:b0:58:a1:31:a7:72:a7:38:1b:21:75:c8:2d: 86:55:ec:2d:49:8a:29:97:6a:c8:b6:23:08:84:8a:72:76:ec: ba:98:c9:4b:be:9a:84:14:70:95:8b:1f:c8:6c:3f:ee:06:90: fd:52:37:fa:1e:6f:49:8d:be:1f:93:94:03:e9:b2:15:79:0d: 36:6f:14:67 -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZt7ozxaW69GxjI61kN7mHWZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZTdjNzllOWEyMWRiMjZiZDZhZTA3NTAyNzZkYjFiMGFmYTdlY2RiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAysYwgsm+wxJHMCRhEGKbfzIQomPB iFp5HYLyG7Ymi1tQaMYtrUxHbbpeV+Juyf6kM4r6tsLmIo5/DCueBkN/x7HhhNcU 3+2OrIKh6jiC984ygzg8lxL8ONSBQCbgNU18zexjewKdPDBv1ovyJ/cpvymOyoHd 58FW62Ul1klIF5VfkEDRZntz7Jqu1iz/gT6WQV09yEx6Uqwn+TyFpOKsH5F0EOwe HrK49JGCqho6gucJKZ46MVYm7SoOaMuktzwpI5WpDN57sEgnR2hTMi+KLedNZg+f vzwkEIx6RS0wGpO7IlwjblyseYE0jxVJW7gkTphqOSc+D/haz1LMqFE+vwIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFL58eemiHbJr1q4HUCdtsbCvp+zbMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhhLzE2MzM5 YS0yNjAzLTRlOGYtOTAxYy1jZmUyYzdmZjAxOGIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGEvMTYzMzlh LTI2MDMtNGU4Zi05MDFjLWNmZTJjN2ZmMDE4Yi8xL3ZueDU2YUlkc212V3JnZFFK MjJ4c0stbjdOcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfA9wMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwNC9DANBgkqhkiG9w0BAQsFAAOCAQEAms6krrUNiUGwHnDsViJQXPFc2flz yvs13XBdUpQ0T/I+78l7tc/myNPnnain6Eu4gXj0lXBkTgIj9FP0O+SJBssWf4Ih EzW/YWc47q6/QM3raRpAbSoq6f27NjBE5wPRPyMhf9FAI6KUrTiK+8MnVn6KMsKI Z2Rm5hui7Au284HQNCu4WgADAHM7/CfTlGMZnmsof8omE5z5WTvu7TKQKzaW9ZkG /3k21eMhxafgCAfrwcx2nNf2vbuwWKExp3KnOBshdcgthlXsLUmKKZdqyLYjCISK cnbsupjJS76ahBRwlYsfyGw/7gaQ/VI3+h5vSY2+H5OUA+myFXkNNm8UZw== -----END CERTIFICATE-----Generated at Sun Jan 25 23:34:46 2026 by rpki-client