This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vdJEIU12Ro0_tyq60Yku8j3t6Xg.cer File: vdJEIU12Ro0_tyq60Yku8j3t6Xg.cer (raw, json) Hash identifier: ybo8XdP+k5SBVcI7hLKej4UyxWLSN6VWBibGIz/bSO0= Subject key identifier: BD:D2:44:21:4D:76:46:8D:3F:B7:2A:BA:D1:89:2E:F2:3D:ED:E9:78 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B3593A4BFD27AE25818A6295EE0FC7D2C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 19 Dec 2025 07:47:07 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 8404 AS: 35097 IP: 31.10.128.0/17 IP: 46.126.0.0/15 IP: 46.140.0.0/16 IP: 62.2.0.0/16 IP: 77.56.0.0/14 IP: 80.218.0.0/15 IP: 81.7.224.0/19 IP: 84.20.32.0 -- 84.20.55.255 IP: 84.72.0.0/14 IP: 178.82.0.0/16 IP: 185.235.156.0/22 IP: 194.29.0.0/19 IP: 194.153.157.128/27 IP: 195.202.192.0/18 IP: 212.47.160.0/19 IP: 213.193.64.0/18 IP: 217.162.0.0/16 IP: 217.168.32.0/19 IP: 2a00:e2c0::/32 IP: 2a02:aa00::/27 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 10:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:93:a4:bf:d2:7a:e2:58:18:a6:29:5e:e0:fc:7d:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 19 07:47:07 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=bdd244214d76468d3fb72abad1892ef23dede978 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:0e:89:ba:b7:0b:3e:38:21:fb:1e:fe:aa:22: 6b:03:1a:ce:1d:89:12:0e:1f:eb:70:93:2e:36:cc: ec:3e:34:0e:b8:c0:ac:89:df:2d:a5:d6:dd:d1:01: 13:78:08:43:ae:05:3b:f6:40:52:0f:06:ce:89:79: 72:5c:49:e8:f7:4c:29:1b:d5:d1:c1:46:ca:fc:7b: f0:52:88:a9:d1:36:73:52:2d:3b:23:94:79:cb:6a: ac:8d:64:1d:ef:06:d6:a6:4a:aa:73:42:35:0e:5f: 33:36:3e:e2:b0:0b:f2:68:ec:0d:f4:85:dc:59:db: 52:86:d9:a5:22:fb:40:4c:f1:7d:9d:6b:e0:f3:93: a6:77:ae:ec:e1:e5:3d:b4:9d:9e:20:98:62:b3:08: e1:02:df:df:35:42:36:f0:3f:b6:45:c7:2c:03:ab: 9c:07:d8:65:ef:b6:4d:2e:e8:66:2e:60:ea:3e:47: 5c:12:74:b7:aa:06:ab:d5:55:e2:71:de:4c:20:ee: 13:1f:f1:4b:82:70:c5:40:75:21:81:c1:c8:0d:aa: ae:7d:64:34:1d:41:75:62:5e:4b:3a:77:7a:47:ab: c4:ad:62:1d:51:3b:83:77:5e:26:33:a3:ed:5d:68: 5a:36:ab:e1:fa:d9:bd:67:50:9f:72:70:90:a2:ed: 2d:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:D2:44:21:4D:76:46:8D:3F:B7:2A:BA:D1:89:2E:F2:3D:ED:E9:78 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.10.128.0/17 46.126.0.0/15 46.140.0.0/16 62.2.0.0/16 77.56.0.0/14 80.218.0.0/15 81.7.224.0/19 84.20.32.0-84.20.55.255 84.72.0.0/14 178.82.0.0/16 185.235.156.0/22 194.29.0.0/19 194.153.157.128/27 195.202.192.0/18 212.47.160.0/19 213.193.64.0/18 217.162.0.0/16 217.168.32.0/19 IPv6: 2a00:e2c0::/32 2a02:aa00::/27 sbgp-autonomousSysNum: critical Autonomous System Numbers: 8404 35097 Signature Algorithm: sha256WithRSAEncryption 33:1c:9e:93:5b:fd:43:99:58:eb:32:4e:54:de:59:04:39:41: 36:44:63:5a:cb:a9:51:bb:85:91:69:98:38:db:e9:37:e2:df: f5:44:39:4f:9e:fa:97:47:27:c2:62:1b:c4:04:d5:b9:a8:06: 1e:c9:ae:2a:ef:ad:a8:40:fe:24:77:84:33:79:d2:f6:e3:0c: c0:a4:60:56:98:04:db:bb:c6:fe:1f:1f:23:f4:04:e9:c2:cf: 31:87:6e:24:cc:22:68:ce:00:80:2f:75:69:cf:42:b9:9d:bf: a1:63:91:1f:4a:2f:8a:cd:93:20:7e:a2:07:99:5d:4c:a7:b7: 66:0a:d5:5a:56:d7:dc:56:bd:32:99:67:f2:04:64:7e:df:2c: 7f:f9:3c:0e:31:8a:e1:ce:1d:8a:cc:5b:08:65:e6:28:c8:5d: 14:de:80:47:9f:78:35:50:7e:11:a7:e4:e7:a6:32:91:60:aa: ab:41:cc:92:9e:be:37:fa:0d:7e:f6:0f:54:00:cc:d9:73:fd: 83:bf:e5:fa:da:14:cd:25:f9:40:94:92:00:45:3f:aa:48:e2: 8e:5f:6c:0b:a9:c8:37:3d:79:bc:97:73:1b:9f:2f:78:f2:0f: cf:4c:42:6a:31:b0:fe:2e:41:d3:f7:4a:6e:18:22:98:7a:0c: 28:bd:23:9d -----BEGIN CERTIFICATE----- MIIGGDCCBQCgAwIBAgISAZs1k6S/0nriWBimKV7g/H0sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjE5MDc0NzA3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZGQyNDQyMTRkNzY0NjhkM2ZiNzJhYmFkMTg5MmVmMjNkZWRlOTc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAig6JurcLPjgh+x7+qiJrAxrOHYkS Dh/rcJMuNszsPjQOuMCsid8tpdbd0QETeAhDrgU79kBSDwbOiXlyXEno90wpG9XR wUbK/HvwUoip0TZzUi07I5R5y2qsjWQd7wbWpkqqc0I1Dl8zNj7isAvyaOwN9IXc WdtShtmlIvtATPF9nWvg85Omd67s4eU9tJ2eIJhiswjhAt/fNUI28D+2RccsA6uc B9hl77ZNLuhmLmDqPkdcEnS3qgar1VXicd5MIO4TH/FLgnDFQHUhgcHIDaqufWQ0 HUF1Yl5LOnd6R6vErWIdUTuDd14mM6PtXWhaNqvh+tm9Z1CfcnCQou0tCQIDAQAB o4IDJDCCAyAwHQYDVR0OBBYEFL3SRCFNdkaNP7cqutGJLvI97el4MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q0Lzc1NmVl Zi02NjI5LTQ2M2EtOTlmZi00NmE0M2VmMDIyMWIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDQvNzU2ZWVm LTY2MjktNDYzYS05OWZmLTQ2YTQzZWYwMjIxYi8xL3ZkSkVJVTEyUm8wX3R5cTYw WWt1OGozdDZYZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGeBggrBgEF BQcBBwEB/wSBjjCBizBzBAIAATBtAwQHHwqAAwMBLn4DAwAujAMDAD4CAwMCTTgD AwFQ2gMEBVEH4DAMAwQFVBQgAwQDVBQwAwMCVEgDAwCyUgMEArnrnAMEBcIdAAMF BcKZnYADBAbDysADBAXUL6ADBAbVwUADAwDZogMEBdmoIDAUBAIAAjAOAwUAKgDi wAMFBSoCqgAwHgYIKwYBBQUHAQgBAf8EDzANoAswCQICINQCAwCJGTANBgkqhkiG 9w0BAQsFAAOCAQEAMxyek1v9Q5lY6zJOVN5ZBDlBNkRjWsupUbuFkWmYONvpN+Lf 9UQ5T576l0cnwmIbxATVuagGHsmuKu+tqED+JHeEM3nS9uMMwKRgVpgE27vG/h8f I/QE6cLPMYduJMwiaM4AgC91ac9CuZ2/oWORH0ovis2TIH6iB5ldTKe3ZgrVWlbX 3Fa9Mpln8gRkft8sf/k8DjGK4c4disxbCGXmKMhdFN6AR594NVB+Eafk56YykWCq q0HMkp6+N/oNfvYPVADM2XP9g7/l+toUzSX5QJSSAEU/qkjijl9sC6nINz15vJdz G58vePIPz0xCajGw/i5B0/dKbhgimHoMKL0jnQ== -----END CERTIFICATE-----Generated at Mon Dec 22 14:30:19 2025 by rpki-client