This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_vkYxakzDbvm7uF8uaHWL7yFW94.cer File: _vkYxakzDbvm7uF8uaHWL7yFW94.cer (raw, json) Hash identifier: xLtL02rI7qm05igguOwKabhBiWNUqM7shnrietJYuwA= Subject key identifier: FE:F9:18:C5:A9:33:0D:BB:E6:EE:E1:7C:B9:A1:D6:2F:BC:85:5B:DE Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79EC528092BF260DD7026395F52E477E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:09 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 20832 AS: 29297 AS: 39295 AS: 59395 AS: 196628 AS: 208160 IP: 5.133.16.0/21 IP: 45.88.60.0/22 IP: 46.31.80.0/21 IP: 46.31.168.0/21 IP: 46.231.64.0/21 IP: 82.144.224.0/19 IP: 87.238.216.0/21 IP: 89.105.0.0/19 IP: 109.235.120.0/21 IP: 185.7.188.0/22 IP: 185.36.248.0/22 IP: 185.45.24.0/22 IP: 185.63.80.0/22 IP: 185.65.24.0/22 IP: 185.74.232.0/21 IP: 185.109.104.0/22 IP: 185.159.216.0/22 IP: 185.175.112.0/22 IP: 185.237.88.0/22 IP: 217.119.128.0/24 IP: 217.119.137.0/24 IP: 2a00:11f0::/32 IP: 2a02:5780::/32 IP: 2a02:73c0::/32 IP: 2a03:7e00::/32 IP: 2a05:4b80::/29 IP: 2a05:4bc0::/29 IP: 2a0a:a80::/29 IP: 2a0a:6880::/29 IP: 2a0a:9ec0::/29 IP: 2a0c:1480::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:52:80:92:bf:26:0d:d7:02:63:95:f5:2e:47:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fef918c5a9330dbbe6eee17cb9a1d62fbc855bde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:06:99:78:9a:a9:06:b3:b9:b7:df:3d:9d:ef: 25:36:5d:be:1a:9d:4d:ac:99:41:33:b1:6a:db:79: 49:d6:07:f3:5a:e5:17:56:aa:a8:54:ff:20:6f:11: 00:8d:e3:a0:aa:4c:f4:e6:97:a2:dc:d6:3e:09:44: 95:71:c3:d2:43:74:d0:90:b5:9d:44:61:eb:d6:bc: 51:c0:13:88:6f:37:7e:6c:85:f8:fe:97:1a:02:4e: c0:18:13:fa:d8:01:d1:79:5d:43:98:af:bb:e1:52: 5f:8a:ba:15:bf:d8:f3:74:c4:32:37:d5:c2:8f:ff: 70:8e:3f:76:f4:b3:8f:ef:b7:72:59:dd:c5:dd:40: 3d:97:9c:11:62:98:60:e4:ea:5f:49:f4:32:23:60: de:30:f2:ae:15:c6:ff:fc:4a:68:26:d1:c7:96:22: a8:30:62:68:52:e6:50:78:41:6f:e8:c9:c7:b4:f3: 25:e8:60:65:d7:1f:8f:cd:4f:0b:94:ca:72:86:7e: d7:26:27:e6:95:c5:80:13:43:e4:f6:07:c6:48:9a: 9f:a5:b6:4b:0b:8b:9a:a2:86:e2:f2:c4:64:ca:d6: cf:48:96:4f:fc:bd:04:c8:b9:a6:4b:06:5a:2a:2e: a7:32:7d:53:00:01:d0:71:3c:6d:ff:f7:fe:a5:e7: 1f:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:F9:18:C5:A9:33:0D:BB:E6:EE:E1:7C:B9:A1:D6:2F:BC:85:5B:DE X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.133.16.0/21 45.88.60.0/22 46.31.80.0/21 46.31.168.0/21 46.231.64.0/21 82.144.224.0/19 87.238.216.0/21 89.105.0.0/19 109.235.120.0/21 185.7.188.0/22 185.36.248.0/22 185.45.24.0/22 185.63.80.0/22 185.65.24.0/22 185.74.232.0/21 185.109.104.0/22 185.159.216.0/22 185.175.112.0/22 185.237.88.0/22 217.119.128.0/24 217.119.137.0/24 IPv6: 2a00:11f0::/32 2a02:5780::/32 2a02:73c0::/32 2a03:7e00::/32 2a05:4b80::/29 2a05:4bc0::/29 2a0a:a80::/29 2a0a:6880::/29 2a0a:9ec0::/29 2a0c:1480::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 20832 29297 39295 59395 196628 208160 Signature Algorithm: sha256WithRSAEncryption 12:41:43:36:b6:c3:31:8e:99:23:1e:45:90:55:fe:ae:b9:0e: 21:2a:57:44:4c:a0:ae:92:01:0e:cc:b7:52:65:a9:ff:e1:55: 55:d3:e0:df:94:44:6e:ae:7e:c3:84:0f:dd:fd:34:f9:ba:bf: 11:05:06:7b:03:8c:21:30:2d:3d:46:d3:fd:bb:2b:e9:53:28: 85:c2:4d:ff:32:de:2a:4d:09:cb:4a:99:d3:c8:3e:f0:b8:15: c7:a4:a6:04:1f:71:45:90:22:ee:a0:a9:9b:7a:e8:cf:89:16: de:27:8d:fa:8f:0b:ca:6f:5e:30:96:04:4f:d5:93:3f:35:6b: 16:bb:bb:4c:12:91:14:d1:9b:44:ca:54:f3:26:d0:c7:8f:63: f0:dc:65:2b:24:8f:9d:b5:b5:48:55:53:11:d6:33:6e:10:f5: df:9c:63:b1:2e:bd:ef:64:e2:6c:1d:dd:ff:d9:96:ad:36:46: 07:27:67:28:6f:46:85:8e:b7:db:8a:75:a7:ef:e3:24:06:b2: a2:8c:4a:38:df:95:4a:84:b0:e2:f1:b0:04:03:3e:14:22:45: 78:4f:15:0c:d7:26:38:d3:04:66:fe:2a:a3:51:db:aa:cf:75: a5:db:5a:aa:0d:60:25:c5:c8:75:43:f5:bc:fc:e6:0e:7c:ec: 1f:f4:d8:3a -----BEGIN CERTIFICATE----- MIIGdTCCBV2gAwIBAgISAZt57FKAkr8mDdcCY5X1Lkd+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZWY5MThjNWE5MzMwZGJiZTZlZWUxN2NiOWExZDYyZmJjODU1YmRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwaZeJqpBrO5t989ne8lNl2+Gp1N rJlBM7Fq23lJ1gfzWuUXVqqoVP8gbxEAjeOgqkz05pei3NY+CUSVccPSQ3TQkLWd RGHr1rxRwBOIbzd+bIX4/pcaAk7AGBP62AHReV1DmK+74VJfiroVv9jzdMQyN9XC j/9wjj929LOP77dyWd3F3UA9l5wRYphg5OpfSfQyI2DeMPKuFcb//EpoJtHHliKo MGJoUuZQeEFv6MnHtPMl6GBl1x+PzU8LlMpyhn7XJifmlcWAE0Pk9gfGSJqfpbZL C4uaoobi8sRkytbPSJZP/L0EyLmmSwZaKi6nMn1TAAHQcTxt//f+pecfmQIDAQAB o4IDgTCCA30wHQYDVR0OBBYEFP75GMWpMw275u7hfLmh1i+8hVveMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZmL2VkNjU1 ZC01MTAyLTQ5MzItYjFkYi1iYTI4ODlhZmFhZGQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmYvZWQ2NTVk LTUxMDItNDkzMi1iMWRiLWJhMjg4OWFmYWFkZC8xL192a1l4YWt6RGJ2bTd1Rjh1 YUhXTDd5Rlc5NC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIHoBggrBgEF BQcBBwEB/wSB2DCB1TCBhAQCAAEwfgMEAwWFEAMEAi1YPAMEAy4fUAMEAy4fqAME Ay7nQAMEBVKQ4AMEA1fu2AMEBVlpAAMEA23reAMEArkHvAMEArkk+AMEArktGAME Ark/UAMEArlBGAMEA7lK6AMEArltaAMEArmf2AMEArmvcAMEArntWAMEANl3gAME ANl3iTBMBAIAAjBGAwUAKgAR8AMFACoCV4ADBQAqAnPAAwUAKgN+AAMFAyoFS4AD BQMqBUvAAwUDKgoKgAMFAyoKaIADBQMqCp7AAwUDKgwUgDAxBggrBgEFBQcBCAEB /wQiMCCgHjAcAgJRYAICcnECAwCZfwIDAOgDAgMDABQCAwMtIDANBgkqhkiG9w0B AQsFAAOCAQEAEkFDNrbDMY6ZIx5FkFX+rrkOISpXREygrpIBDsy3UmWp/+FVVdPg 35REbq5+w4QP3f00+bq/EQUGewOMITAtPUbT/bsr6VMohcJN/zLeKk0Jy0qZ08g+ 8LgVx6SmBB9xRZAi7qCpm3roz4kW3ieN+o8Lym9eMJYET9WTPzVrFru7TBKRFNGb RMpU8ybQx49j8NxlKySPnbW1SFVTEdYzbhD135xjsS6972TibB3d/9mWrTZGBydn KG9GhY6324p1p+/jJAayooxKON+VSoSw4vGwBAM+FCJFeE8VDNcmONMEZv4qo1Hb qs91pdtaqg1gJcXIdUP1vPzmDnzsH/TYOg== -----END CERTIFICATE-----Generated at Fri Jan 9 08:00:42 2026 by rpki-client