This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vqse58Ta0p0SfVZdG5N5RlwoiTc.cer File: vqse58Ta0p0SfVZdG5N5RlwoiTc.cer (raw, json) Hash identifier: fy+DjHsaRixoJfTV3ymgwo38UuQNxSvGGBH/xN9peUw= Subject key identifier: BE:AB:1E:E7:C4:DA:D2:9D:12:7D:56:5D:1B:93:79:46:5C:28:89:37 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C72B8EEA96B2E2AA573D8BA3C6BA8D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/vqse58Ta0p0SfVZdG5N5RlwoiTc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:18:20 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 3226 IP: 87.250.0.0/19 IP: 91.146.0.0/18 IP: 92.55.0.0/18 IP: 92.241.224.0/19 IP: 217.14.192.0/20 IP: 217.29.176.0/20 IP: 217.114.144.0/20 IP: 2a00:4580::/30 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:2b:8e:ea:96:b2:e2:aa:57:3d:8b:a3:c6:ba:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=beab1ee7c4dad29d127d565d1b9379465c288937 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:08:d8:fb:f3:d6:ae:bb:3f:8f:0a:2d:4b:e2: 0a:19:64:5f:42:72:7e:db:d9:63:01:fd:48:76:02: aa:af:eb:a1:25:28:cf:d0:be:fd:0f:a7:a6:41:82: 9d:d1:5b:6b:7a:b8:61:d7:e3:6d:50:46:d7:91:d1: 4f:24:6c:70:01:14:35:aa:8c:ae:ab:a6:ea:7e:47: 3d:dc:17:83:7f:90:0f:8e:aa:44:69:49:ad:98:14: 63:91:00:d2:0f:56:25:cb:3a:17:52:cf:c6:c1:43: 31:9f:34:1d:a1:ed:8c:f7:06:63:36:b7:89:f0:f3: 92:7f:9e:aa:2a:d3:0d:60:da:cf:2e:23:15:1a:44: 91:e2:53:69:68:b4:9b:91:83:df:e1:a6:26:47:a0: 08:99:a9:38:9f:0e:3a:e1:4e:d5:06:9d:af:26:e8: ff:c1:13:80:1a:c8:e5:10:17:2b:30:77:e2:0a:ed: 80:06:73:d3:9b:1f:5a:e6:1e:03:f4:c4:59:67:ee: b3:d2:81:1b:c4:80:f0:80:02:06:6b:a3:8f:7d:02: ec:cb:a4:d5:21:a1:5e:ce:08:2c:b6:24:45:39:e9: 56:d6:91:c7:01:f0:3a:b1:9f:f3:84:41:cf:f8:e3: 11:4e:fb:55:a9:bd:bf:ad:aa:41:62:6f:92:26:79: 15:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:AB:1E:E7:C4:DA:D2:9D:12:7D:56:5D:1B:93:79:46:5C:28:89:37 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/vqse58Ta0p0SfVZdG5N5RlwoiTc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.250.0.0/19 91.146.0.0/18 92.55.0.0/18 92.241.224.0/19 217.14.192.0/20 217.29.176.0/20 217.114.144.0/20 IPv6: 2a00:4580::/30 sbgp-autonomousSysNum: critical Autonomous System Numbers: 3226 Signature Algorithm: sha256WithRSAEncryption 24:96:02:8c:1e:8b:de:b5:58:fc:a3:c4:10:ec:12:94:f1:b1: 30:76:dc:17:99:40:8f:ad:ac:ab:2b:8b:9a:82:f8:fc:b6:b7: e8:c1:a4:b9:33:d3:05:9b:a7:f5:e4:dc:ca:48:ca:07:69:51: 92:da:87:86:e6:c8:83:cb:e7:0a:ae:a3:66:fb:a3:1d:79:36: 9c:64:e3:b3:d8:dc:79:44:64:62:e1:84:58:9d:71:38:a5:ce: ae:64:c2:ef:c7:c3:b6:a3:9c:6b:ed:8f:12:1c:32:73:93:5b: a2:02:8e:b6:8b:4c:1f:4d:d3:44:91:c3:3b:e5:ad:3d:c7:b6: 5b:89:79:1e:b0:8a:58:d6:62:45:5f:7d:0d:76:19:1e:51:5c: 64:62:71:08:70:fa:8f:29:66:86:dd:ae:e9:46:cd:64:ba:fa: bf:0f:8d:d7:8d:23:33:64:bf:f5:33:8a:06:d5:b7:0d:66:ba: ee:8c:49:0d:1c:f1:bb:7f:77:a8:1e:4e:1f:37:b2:4e:cd:0f: 50:4a:c0:67:51:aa:e1:ca:e5:5b:65:9e:9c:07:0e:eb:25:11: 2e:68:3e:c2:1d:79:96:3a:a5:b9:d0:a2:a7:c5:df:89:ad:43: e4:27:f1:e3:d7:ad:47:0c:cb:12:7d:80:2c:32:0c:2c:e4:fd: 7c:22:f2:40 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgISAZt3xyuO6pay4qpXPYujxrqNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZWFiMWVlN2M0ZGFkMjlkMTI3ZDU2NWQxYjkzNzk0NjVjMjg4OTM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5gjY+/PWrrs/jwotS+IKGWRfQnJ+ 29ljAf1IdgKqr+uhJSjP0L79D6emQYKd0Vtrerhh1+NtUEbXkdFPJGxwARQ1qoyu q6bqfkc93BeDf5APjqpEaUmtmBRjkQDSD1YlyzoXUs/GwUMxnzQdoe2M9wZjNreJ 8POSf56qKtMNYNrPLiMVGkSR4lNpaLSbkYPf4aYmR6AImak4nw464U7VBp2vJuj/ wROAGsjlEBcrMHfiCu2ABnPTmx9a5h4D9MRZZ+6z0oEbxIDwgAIGa6OPfQLsy6TV IaFezggstiRFOelW1pHHAfA6sZ/zhEHP+OMRTvtVqb2/rapBYm+SJnkVTwIDAQAB o4IC0jCCAs4wHQYDVR0OBBYEFL6rHufE2tKdEn1WXRuTeUZcKIk3MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVhLzYxYTY5 My04MzZhLTQxMjItYjkyOS1lMmE5MjA1YTlkMmEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWEvNjFhNjkz LTgzNmEtNDEyMi1iOTI5LWUyYTkyMDVhOWQyYS8xL3Zxc2U1OFRhMHAwU2ZWWmRH NU41Umx3b2lUYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFIGCCsGAQUF BwEHAQH/BEMwQTAwBAIAATAqAwQFV/oAAwQGW5IAAwQGXDcAAwQFXPHgAwQE2Q7A AwQE2R2wAwQE2XKQMA0EAgACMAcDBQIqAEWAMBkGCCsGAQUFBwEIAQH/BAowCKAG MAQCAgyaMA0GCSqGSIb3DQEBCwUAA4IBAQAklgKMHovetVj8o8QQ7BKU8bEwdtwX mUCPrayrK4uagvj8trfowaS5M9MFm6f15NzKSMoHaVGS2oeG5siDy+cKrqNm+6Md eTacZOOz2Nx5RGRi4YRYnXE4pc6uZMLvx8O2o5xr7Y8SHDJzk1uiAo62i0wfTdNE kcM75a09x7ZbiXkesIpY1mJFX30NdhkeUVxkYnEIcPqPKWaG3a7pRs1kuvq/D43X jSMzZL/1M4oG1bcNZrrujEkNHPG7f3eoHk4fN7JOzQ9QSsBnUarhyuVbZZ6cBw7r JREuaD7CHXmWOqW50KKnxd+JrUPkJ/Hj161HDMsSfYAsMgws5P18IvJA -----END CERTIFICATE-----Generated at Sun Jan 11 23:39:32 2026 by rpki-client