This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vrs3Cx2yDf2QiVQkesseCgUkCsE.cer File: vrs3Cx2yDf2QiVQkesseCgUkCsE.cer (raw, json) Hash identifier: sR8suCjm75f+kn3fuZBpNdrsfrMz0Owvjzd5pAXHMaI= Subject key identifier: BE:BB:37:0B:1D:B2:0D:FD:90:89:54:24:7A:CB:1E:0A:05:24:0A:C1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019A7CEACF2A77197995270002F1CE87F814 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/03/d6aef7-0a82-4963-9993-fc918f2e74ec/1/vrs3Cx2yDf2QiVQkesseCgUkCsE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/03/d6aef7-0a82-4963-9993-fc918f2e74ec/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 13 Nov 2025 11:12:34 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 47178 IP: 93.188.112.0/21 IP: 185.99.224.0/22 IP: 2a05:ba80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:7c:ea:cf:2a:77:19:79:95:27:00:02:f1:ce:87:f8:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Nov 13 11:12:34 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=bebb370b1db20dfd908954247acb1e0a05240ac1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:e4:e4:b6:82:40:72:68:1a:f9:97:0b:d0:27: 03:61:dc:1a:b4:36:7b:d2:f9:ea:31:54:f9:ae:61: 62:8c:9d:2d:f9:ba:64:af:73:a4:dc:11:3c:6d:71: c0:1a:d9:5c:41:2c:c4:0e:ad:99:75:a2:f3:f4:e6: cf:7f:45:0d:9b:ef:99:9a:59:36:f1:04:63:8c:31: e8:88:a8:0d:46:53:06:07:14:08:79:fd:9a:00:3a: 14:1a:22:de:60:06:ac:e9:ca:c4:b1:3f:53:bb:05: d6:36:72:00:48:dc:25:72:07:b7:a5:d5:46:7e:a2: 8a:ff:ae:2f:0c:c9:52:58:f2:63:69:21:ea:ea:b1: dd:79:07:71:0f:6e:4f:73:b5:d9:ca:53:24:45:12: 4a:1b:b3:fe:5f:0f:bc:87:84:b1:6a:93:20:65:01: 7f:64:2b:30:2f:93:33:b4:20:86:cf:87:89:f6:cb: 42:46:67:e4:17:ff:49:97:d3:89:23:a6:60:ee:47: f2:09:40:17:9e:58:2a:4c:b0:c9:be:69:e1:b0:c9: 58:2f:3a:04:84:a2:35:d7:2b:e7:cf:a1:ae:3e:8b: a2:c5:01:b4:2a:87:04:e9:5d:50:c0:97:cc:eb:b6: f0:bf:5a:57:ff:7e:aa:6c:50:30:09:73:28:b2:12: 11:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:BB:37:0B:1D:B2:0D:FD:90:89:54:24:7A:CB:1E:0A:05:24:0A:C1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d6aef7-0a82-4963-9993-fc918f2e74ec/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d6aef7-0a82-4963-9993-fc918f2e74ec/1/vrs3Cx2yDf2QiVQkesseCgUkCsE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.188.112.0/21 185.99.224.0/22 IPv6: 2a05:ba80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 47178 Signature Algorithm: sha256WithRSAEncryption 38:ba:4b:b0:3f:15:98:a0:12:7b:59:a9:d6:80:81:69:54:8b: 0f:22:ed:a6:3b:62:93:80:62:da:d4:b2:20:48:a1:f1:58:1a: 8b:31:e7:0c:ad:3d:b1:c9:34:71:27:89:b1:7e:5a:0a:d5:b1: d5:fd:37:d4:a8:7a:ed:5d:9c:2e:b0:8a:42:2b:7d:bf:9d:91: 94:ca:2b:ba:3c:35:61:3e:a7:6c:82:90:2e:6e:c6:fc:db:f2: 63:50:f9:87:d8:df:e7:26:39:99:b4:57:b0:ae:c4:58:4f:3c: 49:4a:f6:4b:7f:0d:9d:23:23:1b:45:df:ff:20:7e:21:96:9b: 64:e1:2a:2a:5b:a8:59:60:f4:28:7f:26:32:61:3a:1f:e8:83: 1a:61:69:53:a5:8a:86:38:65:12:81:ba:63:dc:99:68:c5:66: 39:7f:c3:34:1c:3b:d2:c3:2a:d1:82:99:db:e5:55:c0:4d:66: 55:a7:e6:81:f9:93:54:51:e5:f4:b6:d8:83:b6:28:cd:02:8e: fa:73:30:2f:80:0c:f9:66:be:58:03:98:bd:3a:8a:eb:41:22: 0f:97:8c:f5:da:87:d9:3a:a7:65:b4:0d:be:e3:18:d2:18:68: 66:53:10:22:a9:da:57:bb:40:0d:88:6c:6a:f4:a4:01:6a:de: 87:19:da:01 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZp86s8qdxl5lScAAvHOh/gUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMTEzMTExMjM0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZWJiMzcwYjFkYjIwZGZkOTA4OTU0MjQ3YWNiMWUwYTA1MjQwYWMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOTktoJAcmga+ZcL0CcDYdwatDZ7 0vnqMVT5rmFijJ0t+bpkr3Ok3BE8bXHAGtlcQSzEDq2ZdaLz9ObPf0UNm++Zmlk2 8QRjjDHoiKgNRlMGBxQIef2aADoUGiLeYAas6crEsT9TuwXWNnIASNwlcge3pdVG fqKK/64vDMlSWPJjaSHq6rHdeQdxD25Pc7XZylMkRRJKG7P+Xw+8h4SxapMgZQF/ ZCswL5MztCCGz4eJ9stCRmfkF/9Jl9OJI6Zg7kfyCUAXnlgqTLDJvmnhsMlYLzoE hKI11yvnz6GuPouixQG0KocE6V1QwJfM67bwv1pX/36qbFAwCXMoshIR9wIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFL67Nwsdsg39kIlUJHrLHgoFJArBMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzAzL2Q2YWVm Ny0wYTgyLTQ5NjMtOTk5My1mYzkxOGYyZTc0ZWMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDMvZDZhZWY3 LTBhODItNDk2My05OTkzLWZjOTE4ZjJlNzRlYy8xL3ZyczNDeDJ5RGYyUWlWUWtl c3NlQ2dVa0NzRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQDXbxwAwQCuWPgMA0EAgACMAcDBQMqBbqAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwC4SjANBgkqhkiG9w0BAQsFAAOCAQEAOLpL sD8VmKASe1mp1oCBaVSLDyLtpjtik4Bi2tSyIEih8VgaizHnDK09sck0cSeJsX5a CtWx1f031Kh67V2cLrCKQit9v52RlMorujw1YT6nbIKQLm7G/NvyY1D5h9jf5yY5 mbRXsK7EWE88SUr2S38NnSMjG0Xf/yB+IZabZOEqKluoWWD0KH8mMmE6H+iDGmFp U6WKhjhlEoG6Y9yZaMVmOX/DNBw70sMq0YKZ2+VVwE1mVafmgfmTVFHl9LbYg7Yo zQKO+nMwL4AM+Wa+WAOYvTqK60EiD5eM9dqH2TqnZbQNvuMY0hhoZlMQIqnaV7tA DYhsavSkAWrehxnaAQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:58:44 2025 by rpki-client