This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vJxAOtAH4qJCprCQYaPBo2CmTVo.cer File: vJxAOtAH4qJCprCQYaPBo2CmTVo.cer (raw, json) Hash identifier: eYtf7rJq3+QRqxfZC9HO4V1UFGGEY9wWVGisudy2iMI= Subject key identifier: BC:9C:40:3A:D0:07:E2:A2:42:A6:B0:90:61:A3:C1:A3:60:A6:4D:5A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F14F13365AC7F078DD23218E73EA818 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:20:37 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 204149 IP: 185.112.188.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:f1:33:65:ac:7f:07:8d:d2:32:18:e7:3e:a8:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:20:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bc9c403ad007e2a242a6b09061a3c1a360a64d5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ad:91:f9:7e:83:ec:af:4d:cf:18:16:4b:af: 4f:a2:be:cf:69:d0:eb:95:c9:fa:d3:fc:19:11:08: 59:cd:88:86:c4:69:bb:62:0a:e9:04:b0:0a:a6:25: f6:61:f1:7b:94:b5:1d:36:8e:70:ae:60:22:1c:b2: 5f:df:6b:a3:dd:af:de:7e:86:81:98:dc:26:a5:35: 20:0a:d2:3b:60:98:c5:a1:ca:b5:98:93:70:c8:c4: 0b:e1:6e:65:b5:ff:47:01:38:de:50:31:bf:ca:41: ab:38:5c:75:d9:00:95:20:35:97:a5:24:98:63:08: 9d:cf:70:d5:cc:b3:c4:31:ac:9e:ba:e1:25:3e:1d: 53:9b:2f:e9:ab:d2:29:e3:b7:a3:ac:0a:55:55:79: bb:f7:c3:29:eb:7f:bf:06:7b:be:8f:0e:1f:c7:14: af:5e:d7:f1:c3:e9:c2:f7:26:3d:7f:77:5c:9a:f5: 5b:38:6b:b1:9a:1e:79:61:45:31:21:74:35:a9:f4: fb:60:ac:3a:29:cc:47:87:ff:e0:2e:6b:2f:bd:d0: 51:31:1d:d6:d7:5c:f8:09:02:a7:66:2b:eb:d7:ef: 3c:dc:b2:86:ed:20:43:75:e1:08:3b:ef:60:b1:48: 70:b7:a8:03:81:e5:6d:34:36:48:ad:f9:56:5c:b7: 51:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:9C:40:3A:D0:07:E2:A2:42:A6:B0:90:61:A3:C1:A3:60:A6:4D:5A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.112.188.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 204149 Signature Algorithm: sha256WithRSAEncryption 11:f4:ea:30:40:7d:a7:a0:1d:5f:0e:36:34:95:21:73:af:0d: be:30:7f:21:37:1d:9a:35:79:53:90:ee:4d:54:99:85:bc:23: cf:ec:b5:17:f2:fd:0f:a1:1b:30:9e:3a:aa:20:57:e8:d2:89: 62:32:93:58:6c:3f:3e:aa:a8:df:b7:4d:a7:83:4e:39:ab:72: 12:f0:b5:7e:40:0e:0e:62:c7:05:5f:19:20:31:ea:99:d1:c3: 98:9f:1e:9d:45:37:71:14:9f:f1:32:01:08:df:ad:11:eb:90: 20:c9:9d:0b:f4:bc:88:88:25:53:1e:e5:17:5b:2d:93:c7:49: d7:97:87:86:73:bc:fd:61:b9:cf:70:95:d8:fa:c8:f3:02:f4: c9:b7:dd:73:49:9f:8d:ef:62:f7:8e:26:60:97:3f:d9:90:09: 94:7f:6a:b6:76:36:98:5e:39:26:7e:d4:27:88:e5:68:38:4d: 81:33:06:56:c9:91:0b:e4:ad:fa:c3:d7:f0:f1:71:ab:30:23: d4:8c:49:32:2c:b3:b1:84:55:f4:9d:00:3b:b1:7a:f2:2e:70: db:9d:a7:ee:3e:33:95:27:2c:e1:5f:7d:15:94:14:08:47:79: eb:dd:fc:1b:a6:10:08:3e:4b:f8:4d:d6:e5:d0:66:f3:ba:3f: a0:0a:83:0d -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt/FPEzZax/B43SMhjnPqgYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMDM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYzljNDAzYWQwMDdlMmEyNDJhNmIwOTA2MWEzYzFhMzYwYTY0ZDVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAna2R+X6D7K9NzxgWS69Por7PadDr lcn60/wZEQhZzYiGxGm7YgrpBLAKpiX2YfF7lLUdNo5wrmAiHLJf32uj3a/efoaB mNwmpTUgCtI7YJjFocq1mJNwyMQL4W5ltf9HATjeUDG/ykGrOFx12QCVIDWXpSSY Ywidz3DVzLPEMayeuuElPh1Tmy/pq9Ip47ejrApVVXm798Mp63+/Bnu+jw4fxxSv Xtfxw+nC9yY9f3dcmvVbOGuxmh55YUUxIXQ1qfT7YKw6KcxHh//gLmsvvdBRMR3W 11z4CQKnZivr1+883LKG7SBDdeEIO+9gsUhwt6gDgeVtNDZIrflWXLdR2QIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFLycQDrQB+KiQqawkGGjwaNgpk1aMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E5LzRhZTRj Ny1mMjg2LTRjNmUtOTUxNC04OGU2ODE2MjcxZjcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTkvNGFlNGM3 LWYyODYtNGM2ZS05NTE0LTg4ZTY4MTYyNzFmNy8xL3ZKeEFPdEFINHFKQ3ByQ1FZ YVBCbzJDbVRWby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCuXC8MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMddTANBgkqhkiG9w0BAQsFAAOCAQEAEfTqMEB9p6AdXw42NJUhc68NvjB/ITcd mjV5U5DuTVSZhbwjz+y1F/L9D6EbMJ46qiBX6NKJYjKTWGw/Pqqo37dNp4NOOaty EvC1fkAODmLHBV8ZIDHqmdHDmJ8enUU3cRSf8TIBCN+tEeuQIMmdC/S8iIglUx7l F1stk8dJ15eHhnO8/WG5z3CV2PrI8wL0ybfdc0mfje9i944mYJc/2ZAJlH9qtnY2 mF45Jn7UJ4jlaDhNgTMGVsmRC+St+sPX8PFxqzAj1IxJMiyzsYRV9J0AO7F68i5w 252n7j4zlScs4V99FZQUCEd56938G6YQCD5L+E3W5dBm87o/oAqDDQ== -----END CERTIFICATE-----Generated at Thu Jan 8 23:15:18 2026 by rpki-client