This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vxtInm2bjH2Dyh5yelmE2-V3r7w.cer File: vxtInm2bjH2Dyh5yelmE2-V3r7w.cer (raw, json) Hash identifier: lSHCh3l0M2/1IG3JtlLn9QW3RUtk54tL7VgYfu4cbnU= Subject key identifier: BF:1B:48:9E:6D:9B:8C:7D:83:CA:1E:72:7A:59:84:DB:E5:77:AF:BC Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA6D67458C44A26D7354645FDFEA801 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/66/b441ca-e77c-4211-8712-182cd4aac436/1/vxtInm2bjH2Dyh5yelmE2-V3r7w.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/66/b441ca-e77c-4211-8712-182cd4aac436/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:20:21 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 47721 IP: 91.241.55.0/24 IP: 146.19.74.0/24 IP: 185.124.84.0/22 IP: 193.9.51.0/24 IP: 195.96.145.0/24 IP: 2a0f:7640::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:d6:74:58:c4:4a:26:d7:35:46:45:fd:fe:a8:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:20:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bf1b489e6d9b8c7d83ca1e727a5984dbe577afbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:54:c1:22:b9:75:53:8d:c8:1a:4c:ac:8e:33: 23:20:a5:f5:17:77:a6:8a:f8:da:b6:d5:04:bb:8e: 65:a0:09:13:64:99:53:fa:78:71:0a:bf:bf:45:5d: 3d:79:d6:f3:1a:69:51:cc:6b:5d:31:10:53:30:1c: 67:7e:21:aa:a2:e7:10:04:2c:1b:74:f4:4d:7e:e0: ef:04:2f:cc:46:35:b0:b8:34:2c:49:3b:15:57:d8: 13:cc:21:0e:c1:ca:c0:5c:2c:cb:ec:30:42:ee:54: dc:ab:d3:e0:44:e5:2b:6c:62:56:e8:5a:a5:41:66: f0:8a:9e:9e:b6:b5:5c:9e:33:1c:47:0d:cb:1a:b2: 79:13:d5:db:63:46:6f:46:b2:e4:5e:bf:7b:35:42: 29:58:6a:2f:07:1f:71:ff:89:26:8b:d9:a5:87:de: 35:75:7b:c6:4b:02:54:ab:ee:5c:b8:9c:29:e7:15: 81:55:5b:5d:84:8c:7a:c3:86:f7:0e:26:b1:da:1d: 43:90:84:bb:7c:0b:e7:5c:54:53:39:69:67:bd:52: cd:98:ae:d2:7d:0d:57:3c:a4:da:a6:f5:a3:58:a5: bb:31:7d:1a:9a:9f:3b:57:ac:2b:ff:9b:b3:92:4a: 6f:51:b9:e9:46:38:88:6b:71:75:fa:58:cc:91:69: ad:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:1B:48:9E:6D:9B:8C:7D:83:CA:1E:72:7A:59:84:DB:E5:77:AF:BC X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b441ca-e77c-4211-8712-182cd4aac436/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b441ca-e77c-4211-8712-182cd4aac436/1/vxtInm2bjH2Dyh5yelmE2-V3r7w.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.241.55.0/24 146.19.74.0/24 185.124.84.0/22 193.9.51.0/24 195.96.145.0/24 IPv6: 2a0f:7640::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 47721 Signature Algorithm: sha256WithRSAEncryption 56:ff:e7:1b:35:19:e7:2f:d3:a6:1d:98:da:34:c6:55:29:7d: 06:f1:bd:79:b2:50:ea:15:3a:1e:9c:f2:b7:0a:74:13:d1:6c: a5:bf:39:50:a8:fb:89:73:01:23:21:3d:61:14:06:20:d1:2d: 6d:dd:dd:b2:ca:05:38:06:72:e8:ca:15:f2:e0:47:a2:b1:51: 5f:65:fb:20:69:f5:d6:81:ec:96:63:57:30:e0:cd:58:f7:cc: 10:5c:29:e3:d9:93:65:a6:09:97:3a:2e:43:f4:0d:18:fa:69: a4:c8:81:a6:43:fe:80:5d:d2:ec:a8:98:1d:e2:24:68:b9:cd: 86:0c:dc:bc:db:b6:b3:17:74:32:db:1c:c8:5a:0c:3e:06:da: 07:c0:a0:a4:40:67:84:56:f4:26:b9:62:bc:35:ee:72:41:ae: d6:da:81:4a:c7:41:f2:e2:be:8f:11:c9:32:5b:7b:25:83:59: f2:ee:10:5c:ef:68:cd:65:44:16:96:56:36:c0:27:c3:41:de: 09:05:dd:ed:18:99:0b:31:6e:cd:9e:cf:7b:65:76:35:c9:01: 13:b6:7c:bc:75:fa:c2:bb:44:52:06:fe:61:9c:35:c9:31:1c: 16:11:47:bb:b7:92:a5:16:ea:07:c0:31:73:ba:d4:f0:b1:bd: 18:0d:04:8f -----BEGIN CERTIFICATE----- MIIFuzCCBKOgAwIBAgISAZt+ptZ0WMRKJtc1RkX9/qgBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIyMDIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZjFiNDg5ZTZkOWI4YzdkODNjYTFlNzI3YTU5ODRkYmU1NzdhZmJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1VTBIrl1U43IGkysjjMjIKX1F3em ivjattUEu45loAkTZJlT+nhxCr+/RV09edbzGmlRzGtdMRBTMBxnfiGqoucQBCwb dPRNfuDvBC/MRjWwuDQsSTsVV9gTzCEOwcrAXCzL7DBC7lTcq9PgROUrbGJW6Fql QWbwip6etrVcnjMcRw3LGrJ5E9XbY0ZvRrLkXr97NUIpWGovBx9x/4kmi9mlh941 dXvGSwJUq+5cuJwp5xWBVVtdhIx6w4b3Diax2h1DkIS7fAvnXFRTOWlnvVLNmK7S fQ1XPKTapvWjWKW7MX0amp87V6wr/5uzkkpvUbnpRjiIa3F1+ljMkWmtSQIDAQAB o4ICxzCCAsMwHQYDVR0OBBYEFL8bSJ5tm4x9g8oecnpZhNvld6+8MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY2L2I0NDFj YS1lNzdjLTQyMTEtODcxMi0xODJjZDRhYWM0MzYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjYvYjQ0MWNh LWU3N2MtNDIxMS04NzEyLTE4MmNkNGFhYzQzNi8xL3Z4dElubTJiakgyRHloNXll bG1FMi1WM3I3dy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUF BwEHAQH/BDcwNTAkBAIAATAeAwQAW/E3AwQAkhNKAwQCuXxUAwQAwQkzAwQAw2CR MA0EAgACMAcDBQMqD3ZAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwC6aTANBgkq hkiG9w0BAQsFAAOCAQEAVv/nGzUZ5y/Tph2Y2jTGVSl9BvG9ebJQ6hU6Hpzytwp0 E9Fspb85UKj7iXMBIyE9YRQGINEtbd3dssoFOAZy6MoV8uBHorFRX2X7IGn11oHs lmNXMODNWPfMEFwp49mTZaYJlzouQ/QNGPpppMiBpkP+gF3S7KiYHeIkaLnNhgzc vNu2sxd0MtscyFoMPgbaB8CgpEBnhFb0JrlivDXuckGu1tqBSsdB8uK+jxHJMlt7 JYNZ8u4QXO9ozWVEFpZWNsAnw0HeCQXd7RiZCzFuzZ7Pe2V2NckBE7Z8vHX6wrtE Ugb+YZw1yTEcFhFHu7eSpRbqB8Axc7rU8LG9GA0Ejw== -----END CERTIFICATE-----Generated at Mon Jan 26 05:35:56 2026 by rpki-client