This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vxB-B5UsBpNYzT-CquzrTGlIPKk.cer File: vxB-B5UsBpNYzT-CquzrTGlIPKk.cer (raw, json) Hash identifier: DxZ5BOizfVGSJVQjbtgfAd0nejGAXaDPc+gEWXSvJ7c= Subject key identifier: BF:10:7E:07:95:2C:06:93:58:CD:3F:82:AA:EC:EB:4C:69:48:3C:A9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC93A4D7ACF5752E2835CC8802DEF71 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/vxB-B5UsBpNYzT-CquzrTGlIPKk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:19:26 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 206488 AS: 208257 AS: 208265 AS: 211650 IP: 45.149.180.0/22 IP: 151.248.20.0/22 IP: 185.185.92.0/22 IP: 185.251.70.0/24 IP: 2a0b:5080::/29 IP: 2a0f:6a00::/29 IP: 2a0f:f200::/29 IP: 2a10:aec0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:3a:4d:7a:cf:57:52:e2:83:5c:c8:80:2d:ef:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:19:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bf107e07952c069358cd3f82aaeceb4c69483ca9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:42:80:a7:ab:db:f4:09:48:d4:d8:d4:06:28: ba:11:f6:27:50:9e:e3:65:65:61:dc:3b:a3:ed:8d: 59:ac:3c:9e:2d:e7:b0:7d:29:a0:4b:fe:07:2a:e3: ef:3c:42:36:bd:7a:84:ad:7e:71:a9:ed:96:6c:b6: 83:b6:0f:2f:0f:c6:78:b1:1f:e9:19:50:ef:1b:a5: d3:29:88:63:10:77:d8:bb:4d:d8:29:af:9a:6e:a8: e2:c2:7e:71:fa:db:d2:ef:33:35:cc:96:71:d6:05: 8a:e6:46:67:0c:b4:8b:eb:79:19:c3:de:7e:e6:1c: c8:d2:2d:1d:24:3e:3d:8a:6f:3d:a2:61:11:e3:42: 1e:00:b5:c7:04:3d:6f:4e:3d:02:08:b6:6a:7a:ca: e6:39:e9:aa:ac:06:07:78:2b:54:d0:70:14:db:ae: 64:cc:64:c8:2e:a5:1b:8e:05:72:ca:38:40:bb:f5: 9f:8d:68:fe:56:3e:0a:bf:c5:a5:07:bc:b5:36:8c: 29:1a:b0:f5:f4:e0:e8:ea:3b:60:89:38:dc:9e:66: ad:3a:c6:3f:60:ee:a7:e6:8b:58:92:9e:0b:43:47: 28:ea:f9:72:61:8d:10:46:c2:0d:30:73:54:50:61: 86:2e:6c:40:14:ae:5a:fb:5e:58:86:69:c7:d6:d0: d2:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:10:7E:07:95:2C:06:93:58:CD:3F:82:AA:EC:EB:4C:69:48:3C:A9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/vxB-B5UsBpNYzT-CquzrTGlIPKk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.149.180.0/22 151.248.20.0/22 185.185.92.0/22 185.251.70.0/24 IPv6: 2a0b:5080::/29 2a0f:6a00::/29 2a0f:f200::/29 2a10:aec0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 206488 208257 208265 211650 Signature Algorithm: sha256WithRSAEncryption 4d:b4:47:7d:29:fb:df:af:e8:1d:8b:0b:d1:42:d6:ea:72:a1: c8:7c:85:d6:79:fd:e0:56:4f:a8:8f:9b:c0:26:2e:58:8c:cd: 31:7d:60:83:3a:62:a3:5e:72:f4:68:68:ce:34:a6:61:48:48: 47:bf:61:c0:36:15:a2:d9:e3:49:74:00:c8:e7:b7:81:ea:59: 66:2b:2d:59:1e:2d:c6:19:07:af:09:85:37:51:cb:98:08:56: b8:41:8d:3c:35:9d:64:d5:28:73:66:1d:e4:fe:c2:b7:20:c6: 8c:11:dc:c2:3a:00:ef:f9:0c:89:bf:d5:50:d4:16:55:bf:cf: 0e:12:14:c4:c3:7e:0f:72:21:15:c7:40:80:04:95:ef:f9:78: 18:9d:ce:78:79:9e:3f:69:7d:ba:88:69:fe:fb:f5:85:86:92: 3e:97:d6:62:6f:0c:9d:ee:90:d6:2f:4b:0d:b3:fe:88:21:a6: 7f:9e:22:cc:58:c5:ee:90:09:bc:bf:60:19:ef:20:c6:05:ee: f8:03:2f:ff:5e:90:f6:6a:4c:8a:15:57:ea:ec:f9:5c:65:e1: 28:a3:83:83:91:5a:ca:df:00:4d:a2:7d:9d:11:9d:ea:71:2a: fc:f0:f1:4e:18:5c:97:54:67:e2:bd:1f:8a:44:cd:66:61:cc: f7:9f:65:0f -----BEGIN CERTIFICATE----- MIIF2TCCBMGgAwIBAgISAZt6yTpNes9XUuKDXMiALe9xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxOTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZjEwN2UwNzk1MmMwNjkzNThjZDNmODJhYWVjZWI0YzY5NDgzY2E5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2kKAp6vb9AlI1NjUBii6EfYnUJ7j ZWVh3Duj7Y1ZrDyeLeewfSmgS/4HKuPvPEI2vXqErX5xqe2WbLaDtg8vD8Z4sR/p GVDvG6XTKYhjEHfYu03YKa+abqjiwn5x+tvS7zM1zJZx1gWK5kZnDLSL63kZw95+ 5hzI0i0dJD49im89omER40IeALXHBD1vTj0CCLZqesrmOemqrAYHeCtU0HAU265k zGTILqUbjgVyyjhAu/WfjWj+Vj4Kv8WlB7y1NowpGrD19ODo6jtgiTjcnmatOsY/ YO6n5otYkp4LQ0co6vlyYY0QRsINMHNUUGGGLmxAFK5a+15YhmnH1tDSTQIDAQAB o4IC5TCCAuEwHQYDVR0OBBYEFL8QfgeVLAaTWM0/gqrs60xpSDypMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVmLzdlMjhl ZS1jNjVkLTQ1MjktYTQ3Yi00ODYzM2Q3MTg1OTAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWYvN2UyOGVl LWM2NWQtNDUyOS1hNDdiLTQ4NjMzZDcxODU5MC8xL3Z4Qi1CNVVzQnBOWXpULUNx dXpyVEdsSVBLay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFUGCCsGAQUF BwEHAQH/BEYwRDAeBAIAATAYAwQCLZW0AwQCl/gUAwQCublcAwQAuftGMCIEAgAC MBwDBQMqC1CAAwUDKg9qAAMFAyoP8gADBQMqEK7AMCkGCCsGAQUFBwEIAQH/BBow GKAWMBQCAwMmmAIDAy2BAgMDLYkCAwM6wjANBgkqhkiG9w0BAQsFAAOCAQEATbRH fSn736/oHYsL0ULW6nKhyHyF1nn94FZPqI+bwCYuWIzNMX1ggzpio15y9GhozjSm YUhIR79hwDYVotnjSXQAyOe3gepZZistWR4txhkHrwmFN1HLmAhWuEGNPDWdZNUo c2Yd5P7CtyDGjBHcwjoA7/kMib/VUNQWVb/PDhIUxMN+D3IhFcdAgASV7/l4GJ3O eHmeP2l9uohp/vv1hYaSPpfWYm8Mne6Q1i9LDbP+iCGmf54izFjF7pAJvL9gGe8g xgXu+AMv/16Q9mpMihVX6uz5XGXhKKODg5Fayt8ATaJ9nRGd6nEq/PDxThhcl1Rn 4r0fikTNZmHM959lDw== -----END CERTIFICATE-----Generated at Mon Jan 26 04:47:41 2026 by rpki-client