This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vOdcQ6QVAdNUF66BO-KfQif7Lc8.cer File: vOdcQ6QVAdNUF66BO-KfQif7Lc8.cer (raw, json) Hash identifier: ZXk8fVJztdk9eL1Bag/uJRxUtXt52A51asS1IAht5e8= Subject key identifier: BC:E7:5C:43:A4:15:01:D3:54:17:AE:81:3B:E2:9F:42:27:FB:2D:CF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79110E1AE73C848CA45E3FEA7DA24513 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f6/ca7c4a-f946-49e6-9f41-02f92aa4e2a0/1/vOdcQ6QVAdNUF66BO-KfQif7Lc8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f6/ca7c4a-f946-49e6-9f41-02f92aa4e2a0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:39 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 203785 IP: 213.134.1.0/24 IP: 2a13:4b80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 05 Jan 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:0e:1a:e7:3c:84:8c:a4:5e:3f:ea:7d:a2:45:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bce75c43a41501d35417ae813be29f4227fb2dcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:8c:24:59:d3:54:94:cd:43:a3:cd:4c:cf:23: 2c:b0:e4:09:f8:08:a7:0c:af:50:1e:9f:67:fc:96: 33:b3:a2:a6:91:dc:9c:fa:64:45:d1:50:f5:9d:1a: 91:5d:07:38:33:28:93:22:8a:f6:39:d5:ee:04:a6: 45:dd:35:fd:78:e2:fb:5c:02:5e:6e:3e:ea:82:15: 5f:4c:2d:57:94:74:37:a0:f9:54:2e:33:62:f1:7c: 6b:3e:e5:40:ad:62:3e:16:6c:34:e0:4a:47:60:f0: 8c:e6:17:20:f2:83:90:ad:12:19:85:af:87:28:a5: 60:e6:b8:f8:2b:11:81:bd:d9:9f:39:66:84:23:ff: 99:b2:b3:11:81:dd:7e:73:28:6e:a2:72:bd:6b:87: 57:99:60:0c:f9:72:8d:21:06:2f:68:4d:90:aa:87: 3d:97:bd:ed:0d:8c:65:e2:de:21:0c:86:fa:8e:1b: f4:15:5e:65:10:35:c5:0b:47:40:74:49:0f:45:e6: 9d:86:f8:3c:7b:e3:cc:0d:b3:a9:e9:91:9a:96:ac: 67:89:4e:ed:8d:0f:11:eb:49:eb:e3:44:0c:87:6e: 56:52:f5:50:6f:bd:7a:95:1f:86:83:15:72:61:2e: fe:fe:83:4e:68:ed:8e:5c:6d:cb:d1:ee:57:18:03: fe:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:E7:5C:43:A4:15:01:D3:54:17:AE:81:3B:E2:9F:42:27:FB:2D:CF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/ca7c4a-f946-49e6-9f41-02f92aa4e2a0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/ca7c4a-f946-49e6-9f41-02f92aa4e2a0/1/vOdcQ6QVAdNUF66BO-KfQif7Lc8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.134.1.0/24 IPv6: 2a13:4b80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 203785 Signature Algorithm: sha256WithRSAEncryption 5a:07:04:cc:5d:5b:fa:f8:25:e2:db:e7:50:de:41:4e:f7:34: d9:8e:a4:ae:c6:d8:05:e2:66:f1:53:be:86:90:38:69:66:f3: 55:e4:b1:9d:4b:3b:90:1a:04:bb:40:b1:65:95:ce:92:bd:d9: e3:44:5a:56:55:65:e1:5d:b0:02:28:e5:61:a2:17:b8:c0:b9: ab:e3:a8:61:80:23:05:06:8f:5c:27:99:cf:b9:3e:75:7b:13: b5:b5:e6:38:b7:1f:d3:10:3b:45:36:7b:2f:63:e7:33:dd:85: 46:96:a9:44:c9:be:19:c0:c9:b6:c6:09:b1:d8:3e:92:0b:b0: 46:36:9f:3a:f6:47:91:e7:e2:ef:70:00:b5:64:11:f3:2d:07: f4:d5:26:d6:26:77:43:15:47:8e:71:28:a2:6c:79:bf:e6:2a: f3:c3:e4:e6:3a:4b:20:f0:19:79:e8:2d:03:13:09:27:6d:aa: 3c:a9:a1:e9:7a:ce:bc:fc:58:ea:9d:8a:0f:5b:90:75:3c:74: d5:30:4c:ba:c1:ed:70:e1:af:9b:09:30:c9:65:91:33:a7:ba: b1:9b:eb:11:de:32:7a:ca:e3:04:6d:92:41:5d:29:bb:c4:60: 88:6a:64:79:b4:c5:09:e9:53:30:98:f4:c8:6e:bf:e3:8d:6f: 13:05:58:69 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt5EQ4a5zyEjKReP+p9okUTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiY2U3NWM0M2E0MTUwMWQzNTQxN2FlODEzYmUyOWY0MjI3ZmIyZGNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4owkWdNUlM1Do81MzyMssOQJ+Ain DK9QHp9n/JYzs6Kmkdyc+mRF0VD1nRqRXQc4MyiTIor2OdXuBKZF3TX9eOL7XAJe bj7qghVfTC1XlHQ3oPlULjNi8XxrPuVArWI+Fmw04EpHYPCM5hcg8oOQrRIZha+H KKVg5rj4KxGBvdmfOWaEI/+ZsrMRgd1+cyhuonK9a4dXmWAM+XKNIQYvaE2Qqoc9 l73tDYxl4t4hDIb6jhv0FV5lEDXFC0dAdEkPReadhvg8e+PMDbOp6ZGalqxniU7t jQ8R60nr40QMh25WUvVQb716lR+GgxVyYS7+/oNOaO2OXG3L0e5XGAP+eQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFLznXEOkFQHTVBeugTvin0In+y3PMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y2L2NhN2M0 YS1mOTQ2LTQ5ZTYtOWY0MS0wMmY5MmFhNGUyYTAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjYvY2E3YzRh LWY5NDYtNDllNi05ZjQxLTAyZjkyYWE0ZTJhMC8xL3ZPZGNRNlFWQWROVUY2NkJP LUtmUWlmN0xjOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQA1YYBMA0EAgACMAcDBQMqE0uAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMcCTANBgkqhkiG9w0BAQsFAAOCAQEAWgcEzF1b+vgl 4tvnUN5BTvc02Y6krsbYBeJm8VO+hpA4aWbzVeSxnUs7kBoEu0CxZZXOkr3Z40Ra VlVl4V2wAijlYaIXuMC5q+OoYYAjBQaPXCeZz7k+dXsTtbXmOLcf0xA7RTZ7L2Pn M92FRpapRMm+GcDJtsYJsdg+kguwRjafOvZHkefi73AAtWQR8y0H9NUm1iZ3QxVH jnEoomx5v+Yq88Pk5jpLIPAZeegtAxMJJ22qPKmh6XrOvPxY6p2KD1uQdTx01TBM usHtcOGvmwkwyWWRM6e6sZvrEd4yesrjBG2SQV0pu8RgiGpkebTFCelTMJj0yG6/ 441vEwVYaQ== -----END CERTIFICATE-----Generated at Mon Jan 5 03:02:43 2026 by rpki-client