This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vyOcd5D8PVd2JtW78YYeWcm0cK4.cer File: vyOcd5D8PVd2JtW78YYeWcm0cK4.cer (raw, json) Hash identifier: j+7/JzUEY1+cyJLtLRPG9rtaSDQ+sXy7Ca9aOh/yI1Y= Subject key identifier: BF:23:9C:77:90:FC:3D:57:76:26:D5:BB:F1:86:1E:59:C9:B4:70:AE Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E39050BC722E1480B07F7F80E59173F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:20:24 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 35069 AS: 48375 IP: 93.174.208.0/21 IP: 2a03:e000::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:05:0b:c7:22:e1:48:0b:07:f7:f8:0e:59:17:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:20:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bf239c7790fc3d577626d5bbf1861e59c9b470ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:30:d4:4c:d4:72:29:3f:04:ef:b3:4a:e6:ec: 93:b7:81:00:4b:fb:93:c9:42:f2:fa:5b:3d:46:0a: b6:1a:1b:ea:be:42:6e:a2:ab:0e:f3:dc:4c:0f:f1: 94:12:b9:37:a4:d3:34:04:12:c6:40:b9:19:60:44: fe:63:e2:3d:40:85:1d:8a:1a:75:6c:36:28:16:60: b5:61:7f:fe:c4:77:5c:0a:29:24:51:fd:4f:b0:92: de:e3:51:d6:98:44:40:88:bb:0f:c8:1b:bb:d5:da: f6:1d:75:36:c7:09:4e:71:e9:e4:2f:d0:fb:ed:44: 58:e8:6f:04:21:ac:a3:6b:4e:df:3f:65:e9:03:69: a9:36:91:73:dc:e2:00:a2:73:7c:23:a7:60:5c:f2: 5e:00:10:44:70:77:34:4c:39:fc:90:63:38:fb:1e: 72:32:2d:6f:a6:35:87:6e:e8:7c:67:6a:b3:27:1d: c4:2a:cf:c2:df:e6:a0:0d:c5:a2:4f:1c:f5:4f:cb: f6:1a:51:71:2c:56:05:20:58:b5:47:b7:90:32:63: 19:06:46:4c:7a:39:32:f3:8f:43:cf:86:0a:e6:c6: 6d:d8:bd:0c:1b:22:93:f0:ff:23:6c:03:58:2b:b4: af:f0:e0:4e:78:d1:40:85:0b:08:41:1a:53:f5:7b: c9:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:23:9C:77:90:FC:3D:57:76:26:D5:BB:F1:86:1E:59:C9:B4:70:AE X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.174.208.0/21 IPv6: 2a03:e000::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 35069 48375 Signature Algorithm: sha256WithRSAEncryption 7d:41:8c:c6:f7:99:4a:ac:c0:7a:32:71:df:03:1c:0c:30:20: 17:1b:5f:96:67:05:b2:df:98:19:54:ab:4d:f3:52:00:09:af: 4c:49:66:83:ec:03:28:82:9d:0e:c4:8f:c5:d7:91:28:09:fe: 39:e5:ea:72:de:5a:47:59:cc:0d:12:4a:db:af:ac:43:17:95: 5f:82:b6:1a:16:57:80:dc:ef:35:08:5d:87:0b:a7:af:96:23: 20:8e:42:1c:b9:86:c7:11:9a:1a:e6:dd:77:ca:d4:90:84:b3: 64:39:31:b6:ed:c0:d8:27:4a:65:93:bf:93:a1:f6:2c:d5:3a: 3e:fa:52:07:9f:fc:19:7d:4b:62:78:ca:75:1d:07:53:0e:af: 7e:28:95:f3:35:ea:83:51:f0:1d:4b:a3:f8:44:56:1b:8b:a9: 41:9f:c8:33:b5:b9:88:09:b4:28:35:a3:46:3e:2d:5f:00:33: 22:d6:9b:9e:11:c4:d7:b7:fa:d4:1b:75:fc:d0:44:84:0e:e4: f3:0f:74:ce:a6:52:70:64:1d:77:d8:2f:97:23:17:08:08:d5: 68:d3:13:fd:41:d5:38:c6:5b:aa:33:43:7a:67:85:23:c7:83: 56:db:b5:68:bf:6a:17:fa:17:c4:72:f4:4b:57:7f:4f:65:64: c9:4e:15:dc -----BEGIN CERTIFICATE----- MIIFqDCCBJCgAwIBAgISAZt+OQULxyLhSAsH9/gOWRc/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAyMDI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZjIzOWM3NzkwZmMzZDU3NzYyNmQ1YmJmMTg2MWU1OWM5YjQ3MGFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTDUTNRyKT8E77NK5uyTt4EAS/uT yULy+ls9Rgq2GhvqvkJuoqsO89xMD/GUErk3pNM0BBLGQLkZYET+Y+I9QIUdihp1 bDYoFmC1YX/+xHdcCikkUf1PsJLe41HWmERAiLsPyBu71dr2HXU2xwlOcenkL9D7 7URY6G8EIayja07fP2XpA2mpNpFz3OIAonN8I6dgXPJeABBEcHc0TDn8kGM4+x5y Mi1vpjWHbuh8Z2qzJx3EKs/C3+agDcWiTxz1T8v2GlFxLFYFIFi1R7eQMmMZBkZM ejky849Dz4YK5sZt2L0MGyKT8P8jbANYK7Sv8OBOeNFAhQsIQRpT9XvJywIDAQAB o4ICtDCCArAwHQYDVR0OBBYEFL8jnHeQ/D1XdibVu/GGHlnJtHCuMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFjL2IwZGVl Yy03MjMzLTQyZjMtODc2Ny1iNTUwM2EzMmVkZmUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWMvYjBkZWVj LTcyMzMtNDJmMy04NzY3LWI1NTAzYTMyZWRmZS8xL3Z5T2NkNUQ4UFZkMkp0Vzc4 WVllV2NtMGNLNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQDXa7QMA0EAgACMAcDBQAqA+AAMB8GCCsGAQUF BwEIAQH/BBAwDqAMMAoCAwCI/QIDALz3MA0GCSqGSIb3DQEBCwUAA4IBAQB9QYzG 95lKrMB6MnHfAxwMMCAXG1+WZwWy35gZVKtN81IACa9MSWaD7AMogp0OxI/F15Eo Cf455epy3lpHWcwNEkrbr6xDF5VfgrYaFleA3O81CF2HC6evliMgjkIcuYbHEZoa 5t13ytSQhLNkOTG27cDYJ0plk7+TofYs1To++lIHn/wZfUtieMp1HQdTDq9+KJXz NeqDUfAdS6P4RFYbi6lBn8gztbmICbQoNaNGPi1fADMi1pueEcTXt/rUG3X80ESE DuTzD3TOplJwZB132C+XIxcICNVo0xP9QdU4xluqM0N6Z4Ujx4NW27Vov2oX+hfE cvRLV39PZWTJThXc -----END CERTIFICATE-----Generated at Sun Jan 25 07:27:24 2026 by rpki-client