This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer File: vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer (raw, json) Hash identifier: 12dBBOVccbW1xv9OQ+c6tu1FhFGBKHCpGpDpq9x51Gk= Subject key identifier: BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B1BAB28C8A250DDC72E0A87F57D84 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:09 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 31376 AS: 35631 AS: 43726 AS: 44380 AS: 44899 AS: 47807 AS: 57631 IP: 80.73.192.0/20 IP: 80.79.240.0/20 IP: 80.249.176.0/20 IP: 91.190.80.0/21 IP: 91.198.130.0/24 IP: 91.215.252.0/22 IP: 91.219.180.0/22 IP: 93.92.192.0/21 IP: 93.190.224.0/21 IP: 94.125.8.0/21 IP: 109.71.176.0/21 IP: 185.42.60.0/22 IP: 185.155.112.0/22 IP: 188.93.240.0/21 IP: 193.26.214.0/24 IP: 193.46.2.0/24 IP: 193.110.236.0/22 IP: 194.153.158.128/25 IP: 195.93.206.0/23 IP: 195.191.146.0/23 IP: 213.108.32.0/21 IP: 217.119.16.0/20 IP: 2a02:16e8::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:1b:ab:28:c8:a2:50:dd:c7:2e:0a:87:f5:7d:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=beba48c7e2c9e05eda546d899146b89f799df85d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ca:a6:84:bb:62:be:99:27:c1:ad:95:80:a7: 95:3c:53:85:76:47:e8:ec:e5:99:2a:3b:ec:da:fe: 7f:78:71:d0:6b:91:4b:12:c0:8d:72:cf:0e:ec:d1: 13:f7:8d:56:e4:cd:8a:ca:2f:d8:39:c9:6e:11:37: a7:d2:57:6c:3c:0b:f7:05:7e:f1:20:87:9f:b5:ee: ce:1c:9c:a0:f4:f4:29:9a:e9:26:49:d9:98:55:ba: 82:70:5c:a7:df:13:07:10:e4:ce:eb:3a:39:de:e5: 15:ca:a1:62:08:a8:f3:3b:f1:f9:49:fd:4b:7a:9e: 7d:63:dc:e7:6f:60:97:c4:d5:1b:b5:5c:5a:aa:67: ea:c4:a4:75:39:58:31:b4:61:4f:8f:e3:d0:11:bc: 11:7d:b1:e8:2f:f9:d7:eb:f5:c8:de:0b:b5:c6:d3: a7:3c:3d:ec:80:aa:a1:18:2d:3a:b3:fc:ca:1b:57: e2:6e:d7:8b:09:2c:36:af:c5:bb:47:f9:9a:2f:d9: 12:c5:bf:34:a6:83:48:b4:13:1c:fe:b1:60:e3:13: a4:26:92:5b:90:2f:a4:92:22:c5:1d:b2:38:c5:b8: f8:e5:56:75:5a:85:c3:d0:a0:dc:39:d1:dc:23:d0: 3b:d0:d2:ec:60:60:0e:4c:64:6b:36:6b:1e:5a:b6: a1:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.73.192.0/20 80.79.240.0/20 80.249.176.0/20 91.190.80.0/21 91.198.130.0/24 91.215.252.0/22 91.219.180.0/22 93.92.192.0/21 93.190.224.0/21 94.125.8.0/21 109.71.176.0/21 185.42.60.0/22 185.155.112.0/22 188.93.240.0/21 193.26.214.0/24 193.46.2.0/24 193.110.236.0/22 194.153.158.128/25 195.93.206.0/23 195.191.146.0/23 213.108.32.0/21 217.119.16.0/20 IPv6: 2a02:16e8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 31376 35631 43726 44380 44899 47807 57631 Signature Algorithm: sha256WithRSAEncryption 04:47:c0:7b:e9:42:59:c9:d7:bd:f5:90:6e:d9:b7:e0:c1:11: c1:82:e1:db:65:a1:32:c9:18:d2:b1:4f:c6:1c:3c:34:85:c7: 16:e0:eb:8f:c6:40:29:b7:85:2f:0b:6e:f0:b9:1f:93:c7:10: 0c:d5:5e:45:f5:7d:b7:b3:ac:07:8a:14:df:5d:60:f2:b7:1e: 52:8d:97:b4:c2:cd:70:b0:b7:10:40:40:27:b6:83:13:19:35: 19:82:e4:cc:9d:b7:7e:eb:35:45:c9:1a:7a:71:d3:63:61:bd: 23:66:88:e8:3e:b3:9e:c9:3d:02:5c:bd:44:9d:5e:b8:61:3c: a8:4d:51:fe:7f:d2:d0:f9:aa:94:b1:6b:7d:03:63:b3:85:9c: 46:cf:25:b2:9e:e9:da:a2:5c:4c:b5:86:2c:a3:5e:c9:27:1d: 08:f8:56:66:2a:19:f0:23:62:87:75:7e:f3:38:06:67:2e:bf: 80:b7:e2:7e:63:c3:34:7c:85:7c:65:bb:93:ca:d6:bf:2f:42: 92:57:96:0f:67:db:a7:10:c7:af:e3:be:c7:cd:4f:5a:c4:16: ce:69:45:49:07:4d:55:80:99:84:92:b7:e8:da:38:aa:19:0a: e1:a6:4c:ed:8e:56:b1:4c:3b:ee:0e:b2:cd:4e:b5:f4:95:78: 78:4e:8f:0f -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgISAZt6WxurKMiiUN3HLgqH9X2EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZWJhNDhjN2UyYzllMDVlZGE1NDZkODk5MTQ2Yjg5Zjc5OWRmODVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscqmhLtivpknwa2VgKeVPFOFdkfo 7OWZKjvs2v5/eHHQa5FLEsCNcs8O7NET941W5M2Kyi/YOcluETen0ldsPAv3BX7x IIefte7OHJyg9PQpmukmSdmYVbqCcFyn3xMHEOTO6zo53uUVyqFiCKjzO/H5Sf1L ep59Y9znb2CXxNUbtVxaqmfqxKR1OVgxtGFPj+PQEbwRfbHoL/nX6/XI3gu1xtOn PD3sgKqhGC06s/zKG1fibteLCSw2r8W7R/maL9kSxb80poNItBMc/rFg4xOkJpJb kC+kkiLFHbI4xbj45VZ1WoXD0KDcOdHcI9A70NLsYGAOTGRrNmseWrahUQIDAQAB o4IDUDCCA0wwHQYDVR0OBBYEFL66SMfiyeBe2lRtiZFGuJ95nfhdMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZkLzdmODgy MS0xNTY2LTQzZjQtYWIyNi0zZDUyMjE4MWEyYzQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmQvN2Y4ODIx LTE1NjYtNDNmNC1hYjI2LTNkNTIyMTgxYTJjNC8xL3ZycEl4LUxKNEY3YVZHMkpr VWE0bjNtZC1GMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGxBggrBgEF BQcBBwEB/wSBoTCBnjCBjAQCAAEwgYUDBARQScADBARQT/ADBARQ+bADBANbvlAD BABbxoIDBAJb1/wDBAJb27QDBANdXMADBANdvuADBANefQgDBANtR7ADBAK5KjwD BAK5m3ADBAO8XfADBADBGtYDBADBLgIDBALBbuwDBQfCmZ6AAwQBw13OAwQBw7+S AwQD1WwgAwQE2XcQMA0EAgACMAcDBQAqAhboMDcGCCsGAQUFBwEIAQH/BCgwJqAk MCICAnqQAgMAiy8CAwCqzgIDAK1cAgMAr2MCAwC6vwIDAOEfMA0GCSqGSIb3DQEB CwUAA4IBAQAER8B76UJZyde99ZBu2bfgwRHBguHbZaEyyRjSsU/GHDw0hccW4OuP xkApt4UvC27wuR+TxxAM1V5F9X23s6wHihTfXWDytx5SjZe0ws1wsLcQQEAntoMT GTUZguTMnbd+6zVFyRp6cdNjYb0jZojoPrOeyT0CXL1EnV64YTyoTVH+f9LQ+aqU sWt9A2OzhZxGzyWynunaolxMtYYso17JJx0I+FZmKhnwI2KHdX7zOAZnLr+At+J+ Y8M0fIV8ZbuTyta/L0KSV5YPZ9unEMev477HzU9axBbOaUVJB01VgJmEkrfo2jiq GQrhpkztjlaxTDvuDrLNTrX0lXh4To8P -----END CERTIFICATE-----Generated at Mon Jan 26 03:30:56 2026 by rpki-client