This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vue3VIWfbTyHDSKveE8jRPy6pjA.cer File: vue3VIWfbTyHDSKveE8jRPy6pjA.cer (raw, json) Hash identifier: 8ynK+TKrRuiiQLdbQSyZ2TGrivqe2z5StT7VGpGxeRs= Subject key identifier: BE:E7:B7:54:85:9F:6D:3C:87:0D:22:AF:78:4F:23:44:FC:BA:A6:30 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ECA2330CF7FC5B2EBBF64009C4A7FC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/77/36c386-2f53-4a0e-920d-628765eb1d59/1/vue3VIWfbTyHDSKveE8jRPy6pjA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/77/36c386-2f53-4a0e-920d-628765eb1d59/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:29 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 195.191.49.0/24 IP: 195.245.198.0/24 IP: 2a12:2080::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:a2:33:0c:f7:fc:5b:2e:bb:f6:40:09:c4:a7:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bee7b754859f6d3c870d22af784f2344fcbaa630 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:d3:78:18:72:d9:39:46:d0:32:f6:18:43:1b: 08:e5:ac:89:23:f3:d6:84:8e:ec:2b:f7:0b:d5:c3: ff:f5:4e:dd:ed:46:02:d2:9f:32:f4:4e:e0:21:e5: 86:5f:26:a2:54:c7:80:cc:f7:f7:6c:f0:7c:59:a8: 76:22:31:f3:45:80:23:7a:60:56:29:e4:79:7a:b4: f9:be:a6:d3:19:9d:b2:4b:52:2a:a1:de:b3:4a:14: 47:8d:ad:c6:e6:1f:5e:fd:8f:ad:1a:4a:df:b5:22: d3:6a:86:56:24:f9:c7:78:d3:2a:42:1e:d9:67:85: 76:41:c0:ce:0f:5f:91:bf:b4:d1:f6:30:ef:2e:78: 6c:9f:3a:10:7f:5f:88:ed:80:b5:38:f8:9c:a1:7c: e6:25:26:77:97:07:92:91:1d:56:75:bf:12:3a:d8: 46:07:21:50:0b:be:9f:f2:b8:2d:41:e2:ea:7a:32: ce:90:e5:85:7f:16:f8:99:12:c4:93:01:e4:76:67: 8e:78:20:a2:6a:95:b0:e2:cb:a6:e9:15:f0:c5:5a: dd:53:40:93:46:9a:37:a0:23:f9:96:6c:b7:dd:19: 81:e1:bc:6d:95:85:d3:42:29:70:4e:22:39:d3:4c: 25:55:1c:41:a4:a6:94:bf:f0:df:05:91:db:99:4f: ee:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:E7:B7:54:85:9F:6D:3C:87:0D:22:AF:78:4F:23:44:FC:BA:A6:30 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/36c386-2f53-4a0e-920d-628765eb1d59/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/36c386-2f53-4a0e-920d-628765eb1d59/1/vue3VIWfbTyHDSKveE8jRPy6pjA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.191.49.0/24 195.245.198.0/24 IPv6: 2a12:2080::/29 Signature Algorithm: sha256WithRSAEncryption 75:2f:db:dc:a8:0a:9f:34:ef:77:50:41:aa:d6:05:4a:4d:dd: 61:46:a6:4d:8c:03:72:12:8f:88:65:ba:75:78:f5:b2:7b:a8: 7a:4f:4f:f1:ec:b5:9a:22:16:b1:80:96:1d:14:c8:05:24:74: 91:db:51:82:95:7f:dc:c7:ef:9b:9a:41:a5:8b:67:80:25:92: cf:6c:8c:34:0d:ad:2b:1e:9b:21:b2:72:eb:73:20:76:e7:cb: 2a:9e:91:c1:53:d0:79:68:81:ec:96:00:bb:d1:2d:3b:cf:3b: 80:0f:bc:f2:5d:56:18:82:08:e4:c4:d3:ae:bb:72:8d:a2:62: 77:d3:39:38:f2:aa:28:a4:1b:87:1b:fb:3a:7d:1f:44:59:44: be:77:d4:db:9d:0f:ff:a7:31:4e:15:10:0d:a6:10:e1:13:ee: 2a:a6:3f:b8:61:3a:f4:4e:d6:91:bf:3e:68:d6:e9:5c:ba:0d: fe:40:20:9b:f4:49:5a:48:7b:80:d1:c9:26:da:e1:90:e2:37: 42:3d:de:32:ac:d3:17:95:cc:47:fd:b3:20:08:13:0a:31:43: 9c:ca:df:c0:21:87:4e:de:5d:c4:11:b8:91:0f:44:31:02:65: 3a:b3:da:93:df:1f:65:88:fd:ea:9c:58:65:fb:a2:2d:b7:ca: d9:78:23:e7 -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgISAZt57KIzDPf8Wy679kAJxKf8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZWU3Yjc1NDg1OWY2ZDNjODcwZDIyYWY3ODRmMjM0NGZjYmFhNjMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2tN4GHLZOUbQMvYYQxsI5ayJI/PW hI7sK/cL1cP/9U7d7UYC0p8y9E7gIeWGXyaiVMeAzPf3bPB8Wah2IjHzRYAjemBW KeR5erT5vqbTGZ2yS1Iqod6zShRHja3G5h9e/Y+tGkrftSLTaoZWJPnHeNMqQh7Z Z4V2QcDOD1+Rv7TR9jDvLnhsnzoQf1+I7YC1OPicoXzmJSZ3lweSkR1Wdb8SOthG ByFQC76f8rgtQeLqejLOkOWFfxb4mRLEkwHkdmeOeCCiapWw4sum6RXwxVrdU0CT Rpo3oCP5lmy33RmB4bxtlYXTQilwTiI500wlVRxBpKaUv/DfBZHbmU/uMwIDAQAB o4ICmTCCApUwHQYDVR0OBBYEFL7nt1SFn208hw0ir3hPI0T8uqYwMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc3LzM2YzM4 Ni0yZjUzLTRhMGUtOTIwZC02Mjg3NjVlYjFkNTkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzcvMzZjMzg2 LTJmNTMtNGEwZS05MjBkLTYyODc2NWViMWQ1OS8xL3Z1ZTNWSVdmYlR5SERTS3Zl RThqUlB5NnBqQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQAw78xAwQAw/XGMA0EAgACMAcDBQMqEiCAMA0G CSqGSIb3DQEBCwUAA4IBAQB1L9vcqAqfNO93UEGq1gVKTd1hRqZNjANyEo+IZbp1 ePWye6h6T0/x7LWaIhaxgJYdFMgFJHSR21GClX/cx++bmkGli2eAJZLPbIw0Da0r HpshsnLrcyB258sqnpHBU9B5aIHslgC70S07zzuAD7zyXVYYggjkxNOuu3KNomJ3 0zk48qoopBuHG/s6fR9EWUS+d9TbnQ//pzFOFRANphDhE+4qpj+4YTr0TtaRvz5o 1ulcug3+QCCb9ElaSHuA0ckm2uGQ4jdCPd4yrNMXlcxH/bMgCBMKMUOcyt/AIYdO 3l3EEbiRD0QxAmU6s9qT3x9liP3qnFhl+6Itt8rZeCPn -----END CERTIFICATE-----Generated at Sun Jan 25 18:05:52 2026 by rpki-client