This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vvZlBYLADbslkc7cKYwM08WWirA.cer File: vvZlBYLADbslkc7cKYwM08WWirA.cer (raw, json) Hash identifier: F19rJr1P0MJvm8NBcNbL0ew48aKkIVewoijeET3PTtA= Subject key identifier: BE:F6:65:05:82:C0:0D:BB:25:91:CE:DC:29:8C:0C:D3:C5:96:8A:B0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B791147F7DFBEBE49EE208F2770F017B1 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/83/ffc204-d4d2-4a67-85af-f9a33ff011cb/1/vvZlBYLADbslkc7cKYwM08WWirA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/83/ffc204-d4d2-4a67-85af-f9a33ff011cb/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:54 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.253.192.0/22 IP: 2a04:4c00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:47:f7:df:be:be:49:ee:20:8f:27:70:f0:17:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bef6650582c00dbb2591cedc298c0cd3c5968ab0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:2e:5c:50:ee:e4:46:07:d1:10:45:68:23:3e: 46:39:14:81:55:9a:e5:89:0f:a8:81:bf:15:94:d0: 75:a3:fd:9f:20:22:86:66:f3:11:ca:79:ee:40:10: 81:29:b4:79:9d:aa:3b:74:5f:de:88:d9:2c:f8:fb: 4b:3f:96:45:e4:4c:4f:7b:30:0e:04:0b:20:b8:6e: d8:a0:93:6e:34:49:2f:de:e7:a6:94:d0:04:d1:3e: 7b:99:b5:cb:f2:74:fa:54:6b:d5:05:81:d3:5a:9f: 49:24:61:9d:a9:84:8d:a4:77:6c:33:85:25:1c:a5: 14:d1:60:d5:3a:de:66:40:7c:15:24:5a:f4:45:c5: d4:0b:3d:3d:ba:11:55:6b:c6:08:dc:3f:35:d3:c9: 80:b6:a1:df:c5:36:fd:c9:78:86:d8:21:25:5d:6f: 35:19:e1:7e:77:77:b4:b5:55:38:fc:79:8d:9c:21: ce:ea:be:1a:04:92:39:03:58:4d:7c:30:53:f0:5b: b1:75:7e:25:57:aa:06:e6:d5:4e:e9:c9:75:3c:fb: f2:e8:ff:a5:9c:a1:64:4f:91:9c:aa:92:ff:7f:24: b4:2e:a7:13:9d:9e:c0:e4:c2:51:ae:28:1a:55:4c: ae:d7:e0:fe:37:8c:45:bd:e7:df:43:02:0f:3e:38: 9b:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:F6:65:05:82:C0:0D:BB:25:91:CE:DC:29:8C:0C:D3:C5:96:8A:B0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/ffc204-d4d2-4a67-85af-f9a33ff011cb/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/ffc204-d4d2-4a67-85af-f9a33ff011cb/1/vvZlBYLADbslkc7cKYwM08WWirA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.253.192.0/22 IPv6: 2a04:4c00::/29 Signature Algorithm: sha256WithRSAEncryption 70:dd:69:f3:98:da:13:0c:3d:11:06:dc:c6:c0:57:fb:b1:d2: 6f:ae:24:f0:13:2b:b2:f6:5a:ce:a8:32:6a:d5:bc:a5:3f:35: ba:9a:23:df:35:9b:e1:ba:c0:14:f6:bd:dd:97:6a:09:16:35: 4c:c7:fb:7c:a5:ba:f8:12:68:d0:90:b5:b7:e4:01:48:b3:00: f5:c4:14:cc:37:15:2f:b3:d4:72:f1:b7:09:f5:06:56:23:76: 92:fe:73:74:2e:36:eb:f1:e7:9c:15:8a:4b:a1:b7:55:7c:96: 5f:3b:7c:92:a0:48:0b:e3:c8:b6:1d:e2:21:b7:dc:1f:2d:74: 0d:39:21:66:5e:a3:7e:7b:33:91:57:99:a3:78:a9:50:5a:75: 7e:97:b2:20:24:fd:a3:63:a5:e4:f9:c7:6d:24:7b:86:28:7c: 2c:75:c3:5e:f1:9d:7a:dc:a4:cd:10:1f:b7:59:bc:35:b6:39: 22:ff:c7:9a:bc:e7:b9:cb:24:8d:93:be:14:45:12:1b:2a:00: 64:67:32:19:d4:27:b3:80:a2:34:42:a0:18:70:eb:a1:1e:69: 50:d4:5e:a1:26:01:52:ee:51:25:16:86:ec:26:f4:99:1b:14: ab:9b:07:76:ed:d1:fe:d7:0f:d0:2b:28:26:ac:10:94:c7:b6: 19:e3:82:3f -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt5EUf3376+Se4gjydw8BexMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZWY2NjUwNTgyYzAwZGJiMjU5MWNlZGMyOThjMGNkM2M1OTY4YWIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoS5cUO7kRgfREEVoIz5GORSBVZrl iQ+ogb8VlNB1o/2fICKGZvMRynnuQBCBKbR5nao7dF/eiNks+PtLP5ZF5ExPezAO BAsguG7YoJNuNEkv3uemlNAE0T57mbXL8nT6VGvVBYHTWp9JJGGdqYSNpHdsM4Ul HKUU0WDVOt5mQHwVJFr0RcXUCz09uhFVa8YI3D8108mAtqHfxTb9yXiG2CElXW81 GeF+d3e0tVU4/HmNnCHO6r4aBJI5A1hNfDBT8FuxdX4lV6oG5tVO6cl1PPvy6P+l nKFkT5GcqpL/fyS0LqcTnZ7A5MJRrigaVUyu1+D+N4xFveffQwIPPjibGQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFL72ZQWCwA27JZHO3CmMDNPFloqwMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgzL2ZmYzIw NC1kNGQyLTRhNjctODVhZi1mOWEzM2ZmMDExY2IvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODMvZmZjMjA0 LWQ0ZDItNGE2Ny04NWFmLWY5YTMzZmYwMTFjYi8xL3Z2WmxCWUxBRGJzbGtjN2NL WXdNMDhXV2lyQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuf3AMA0EAgACMAcDBQMqBEwAMA0GCSqGSIb3 DQEBCwUAA4IBAQBw3WnzmNoTDD0RBtzGwFf7sdJvriTwEyuy9lrOqDJq1bylPzW6 miPfNZvhusAU9r3dl2oJFjVMx/t8pbr4EmjQkLW35AFIswD1xBTMNxUvs9Ry8bcJ 9QZWI3aS/nN0Ljbr8eecFYpLobdVfJZfO3ySoEgL48i2HeIht9wfLXQNOSFmXqN+ ezORV5mjeKlQWnV+l7IgJP2jY6Xk+cdtJHuGKHwsdcNe8Z163KTNEB+3Wbw1tjki /8eavOe5yySNk74URRIbKgBkZzIZ1CezgKI0QqAYcOuhHmlQ1F6hJgFS7lElFobs JvSZGxSrmwd27dH+1w/QKygmrBCUx7YZ44I/ -----END CERTIFICATE-----Generated at Mon Jan 26 06:23:00 2026 by rpki-client