This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vwsqDaqOVGfNM-lIJaeGMyLThT4.cer File: vwsqDaqOVGfNM-lIJaeGMyLThT4.cer (raw, json) Hash identifier: RIAszg8BYBLi7Hoy3V1RGs9kqyUDJcQmyduqBKIC5Vs= Subject key identifier: BF:0B:2A:0D:AA:8E:54:67:CD:33:E9:48:25:A7:86:33:22:D3:85:3E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019AA0BA044112192F47D3096ED5BA2A6867 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ab/f4478b-b6f3-40c2-b858-2c333a5a1646/1/vwsqDaqOVGfNM-lIJaeGMyLThT4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ab/f4478b-b6f3-40c2-b858-2c333a5a1646/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 20 Nov 2025 10:05:36 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 203857 IP: 109.175.172.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a0:ba:04:41:12:19:2f:47:d3:09:6e:d5:ba:2a:68:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Nov 20 10:05:36 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=bf0b2a0daa8e5467cd33e94825a7863322d3853e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:37:d1:e4:c5:3b:29:96:a6:d4:ad:cc:35:9c: 06:c0:8c:ce:e7:44:fb:30:d9:ad:77:03:21:65:71: 55:7a:7d:09:e1:ff:59:9a:b7:de:78:28:89:50:19: 93:85:7e:74:25:77:f2:38:0d:86:1d:85:5c:8e:f8: da:38:98:4a:4c:63:29:e4:72:d4:0a:4f:98:e4:1a: 05:97:2b:a8:4e:4d:e5:5d:d7:bc:4b:1f:b5:d9:82: c2:09:45:3c:9a:9b:c5:71:db:08:02:70:d1:7b:6d: be:a0:46:1c:21:b1:f5:e4:ae:0c:28:b0:8d:46:77: bb:04:c3:dc:16:bc:2d:52:7e:50:25:29:6a:5a:da: 18:12:3d:95:86:72:af:df:59:6e:ce:3b:b6:21:33: 27:58:72:04:16:4b:15:f0:ee:80:0d:da:2b:ca:64: 24:01:9d:9e:e4:53:06:88:f1:78:6a:a8:ef:94:3e: bd:ed:d0:0c:9b:43:1e:e4:2f:e5:6a:33:ae:42:a9: ef:bb:f8:99:aa:63:4b:6b:ad:b4:5a:41:4a:c3:4e: eb:9a:84:96:5a:5c:81:dd:7d:d9:58:d3:75:14:54: 06:5b:81:0d:c9:77:fd:b1:b4:0e:8e:91:4c:b6:40: 06:29:5e:ad:ea:49:78:19:3f:a3:74:5f:93:ed:04: ed:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:0B:2A:0D:AA:8E:54:67:CD:33:E9:48:25:A7:86:33:22:D3:85:3E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/f4478b-b6f3-40c2-b858-2c333a5a1646/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/f4478b-b6f3-40c2-b858-2c333a5a1646/1/vwsqDaqOVGfNM-lIJaeGMyLThT4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.175.172.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 203857 Signature Algorithm: sha256WithRSAEncryption 7e:03:82:f9:65:e0:e9:0f:e6:b9:6c:0e:9a:f1:8d:92:ad:9b: b1:03:cc:5e:f0:29:a0:d7:a4:8a:c7:41:7c:86:93:1a:33:c2: 41:21:70:dd:ab:a8:ff:7f:35:36:ea:6d:20:81:62:df:46:d6: bc:f0:d8:b9:79:fd:af:42:68:c0:e5:af:1f:0c:3b:a3:ab:60: a8:7e:6c:ec:b4:90:0f:80:87:b7:4d:38:53:a3:ed:a5:cf:bb: cd:64:95:e0:f6:b8:d1:c5:b9:f2:11:0b:ab:71:e0:6d:71:f7: 07:7a:d1:5e:96:81:97:66:11:40:ef:39:8a:db:ca:be:c8:0d: 49:41:eb:27:6f:c4:a5:cc:8d:69:49:e7:1a:34:88:33:1b:f2: b0:a6:13:2d:34:98:71:37:91:db:d8:2c:96:5b:a3:fb:38:75: d3:cc:1c:84:05:2b:2e:30:08:cb:b2:cc:17:6a:ee:2f:b1:e0: e0:75:41:23:ce:69:e4:5d:66:39:92:79:2b:3b:90:c3:ba:0d: d8:80:50:f3:4d:45:72:a6:78:eb:f7:c2:22:8f:e5:55:c9:85: 35:2e:ab:7e:fa:c5:da:32:e6:e6:43:01:7e:a0:93:3a:f5:25: 78:19:61:89:96:e7:63:9f:02:b9:ab:45:91:75:b5:99:b7:ae: 58:71:96:4c -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZqgugRBEhkvR9MJbtW6KmhnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMTIwMTAwNTM2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZjBiMmEwZGFhOGU1NDY3Y2QzM2U5NDgyNWE3ODYzMzIyZDM4NTNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTfR5MU7KZam1K3MNZwGwIzO50T7 MNmtdwMhZXFVen0J4f9ZmrfeeCiJUBmThX50JXfyOA2GHYVcjvjaOJhKTGMp5HLU Ck+Y5BoFlyuoTk3lXde8Sx+12YLCCUU8mpvFcdsIAnDRe22+oEYcIbH15K4MKLCN Rne7BMPcFrwtUn5QJSlqWtoYEj2VhnKv31luzju2ITMnWHIEFksV8O6ADdorymQk AZ2e5FMGiPF4aqjvlD697dAMm0Me5C/lajOuQqnvu/iZqmNLa620WkFKw07rmoSW WlyB3X3ZWNN1FFQGW4ENyXf9sbQOjpFMtkAGKV6t6kl4GT+jdF+T7QTtMwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFL8LKg2qjlRnzTPpSCWnhjMi04U+MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FiL2Y0NDc4 Yi1iNmYzLTQwYzItYjg1OC0yYzMzM2E1YTE2NDYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWIvZjQ0Nzhi LWI2ZjMtNDBjMi1iODU4LTJjMzMzYTVhMTY0Ni8xL3Z3c3FEYXFPVkdmTk0tbElK YWVHTXlMVGhUNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAba+sMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMcUTANBgkqhkiG9w0BAQsFAAOCAQEAfgOC+WXg6Q/muWwOmvGNkq2bsQPMXvAp oNekisdBfIaTGjPCQSFw3auo/381NuptIIFi30bWvPDYuXn9r0JowOWvHww7o6tg qH5s7LSQD4CHt004U6Ptpc+7zWSV4Pa40cW58hELq3HgbXH3B3rRXpaBl2YRQO85 itvKvsgNSUHrJ2/EpcyNaUnnGjSIMxvysKYTLTSYcTeR29gslluj+zh108wchAUr LjAIy7LMF2ruL7Hg4HVBI85p5F1mOZJ5KzuQw7oN2IBQ801FcqZ46/fCIo/lVcmF NS6rfvrF2jLm5kMBfqCTOvUleBlhiZbnY58CuatFkXW1mbeuWHGWTA== -----END CERTIFICATE-----Generated at Sat Dec 6 05:54:25 2025 by rpki-client