This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vue3VIWfbTyHDSKveE8jRPy6pjA.cer File: vue3VIWfbTyHDSKveE8jRPy6pjA.cer (raw, json) Hash identifier: 3YKmyH49KbQ1dhCuu8h3wfw5gKkl2/WWqtP6zeL6xiQ= Subject key identifier: BE:E7:B7:54:85:9F:6D:3C:87:0D:22:AF:78:4F:23:44:FC:BA:A6:30 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B043D95A56884F485F1D73FD29826B6F8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/77/36c386-2f53-4a0e-920d-628765eb1d59/1/vue3VIWfbTyHDSKveE8jRPy6pjA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/77/36c386-2f53-4a0e-920d-628765eb1d59/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Tue 09 Dec 2025 17:51:43 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: IP: 195.191.49.0/24 IP: 195.245.198.0/24 IP: 2a12:2080::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:04:3d:95:a5:68:84:f4:85:f1:d7:3f:d2:98:26:b6:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 9 17:51:43 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=bee7b754859f6d3c870d22af784f2344fcbaa630 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:d3:78:18:72:d9:39:46:d0:32:f6:18:43:1b: 08:e5:ac:89:23:f3:d6:84:8e:ec:2b:f7:0b:d5:c3: ff:f5:4e:dd:ed:46:02:d2:9f:32:f4:4e:e0:21:e5: 86:5f:26:a2:54:c7:80:cc:f7:f7:6c:f0:7c:59:a8: 76:22:31:f3:45:80:23:7a:60:56:29:e4:79:7a:b4: f9:be:a6:d3:19:9d:b2:4b:52:2a:a1:de:b3:4a:14: 47:8d:ad:c6:e6:1f:5e:fd:8f:ad:1a:4a:df:b5:22: d3:6a:86:56:24:f9:c7:78:d3:2a:42:1e:d9:67:85: 76:41:c0:ce:0f:5f:91:bf:b4:d1:f6:30:ef:2e:78: 6c:9f:3a:10:7f:5f:88:ed:80:b5:38:f8:9c:a1:7c: e6:25:26:77:97:07:92:91:1d:56:75:bf:12:3a:d8: 46:07:21:50:0b:be:9f:f2:b8:2d:41:e2:ea:7a:32: ce:90:e5:85:7f:16:f8:99:12:c4:93:01:e4:76:67: 8e:78:20:a2:6a:95:b0:e2:cb:a6:e9:15:f0:c5:5a: dd:53:40:93:46:9a:37:a0:23:f9:96:6c:b7:dd:19: 81:e1:bc:6d:95:85:d3:42:29:70:4e:22:39:d3:4c: 25:55:1c:41:a4:a6:94:bf:f0:df:05:91:db:99:4f: ee:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:E7:B7:54:85:9F:6D:3C:87:0D:22:AF:78:4F:23:44:FC:BA:A6:30 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/36c386-2f53-4a0e-920d-628765eb1d59/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/36c386-2f53-4a0e-920d-628765eb1d59/1/vue3VIWfbTyHDSKveE8jRPy6pjA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.191.49.0/24 195.245.198.0/24 IPv6: 2a12:2080::/29 Signature Algorithm: sha256WithRSAEncryption 45:a3:a3:87:e2:7e:aa:45:7d:4c:58:a4:fb:5c:f9:38:ee:e5: fa:15:b7:5f:09:fe:27:e8:02:86:3f:4b:80:76:73:c9:ca:b5: 57:cc:9c:7e:7d:ca:71:44:01:2b:b2:a2:2b:d1:64:39:8e:49: d8:53:87:7b:bf:78:e2:72:b6:b0:19:38:5c:bc:c5:fb:5a:89: 4e:17:b9:f6:13:66:9b:f5:50:4e:79:0b:e7:d3:2a:b5:3f:b8: e8:5d:76:54:6d:d7:4a:dd:b6:f7:58:42:8c:59:13:35:39:17: 66:07:b1:72:72:9e:c5:2d:6f:ac:30:d5:da:fc:6b:25:e1:eb: fe:bd:26:3b:d8:2f:f5:73:1a:50:e7:32:d9:a5:56:1c:cf:d8: 79:6f:90:14:b4:5d:9a:d2:0b:9d:ea:3d:80:ba:4c:87:95:09: 0a:e3:2b:37:98:43:da:c4:a5:ff:39:c8:87:3f:63:88:17:ff: e8:53:b1:8c:3d:f9:30:aa:00:fe:0a:e2:88:ea:f2:11:ac:a8: df:ea:fe:d6:ba:4f:e9:95:97:31:41:b3:db:02:cc:2d:89:87: 05:28:b0:e9:74:8e:fa:33:51:e1:50:8d:13:2b:28:2f:3f:c2: 12:27:9c:25:b8:8c:4c:e2:8d:cd:f2:24:a7:de:bc:fd:11:7e: 51:ce:4f:a5 -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgISAZsEPZWlaIT0hfHXP9KYJrb4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjA5MTc1MTQzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZWU3Yjc1NDg1OWY2ZDNjODcwZDIyYWY3ODRmMjM0NGZjYmFhNjMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2tN4GHLZOUbQMvYYQxsI5ayJI/PW hI7sK/cL1cP/9U7d7UYC0p8y9E7gIeWGXyaiVMeAzPf3bPB8Wah2IjHzRYAjemBW KeR5erT5vqbTGZ2yS1Iqod6zShRHja3G5h9e/Y+tGkrftSLTaoZWJPnHeNMqQh7Z Z4V2QcDOD1+Rv7TR9jDvLnhsnzoQf1+I7YC1OPicoXzmJSZ3lweSkR1Wdb8SOthG ByFQC76f8rgtQeLqejLOkOWFfxb4mRLEkwHkdmeOeCCiapWw4sum6RXwxVrdU0CT Rpo3oCP5lmy33RmB4bxtlYXTQilwTiI500wlVRxBpKaUv/DfBZHbmU/uMwIDAQAB o4ICmTCCApUwHQYDVR0OBBYEFL7nt1SFn208hw0ir3hPI0T8uqYwMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc3LzM2YzM4 Ni0yZjUzLTRhMGUtOTIwZC02Mjg3NjVlYjFkNTkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzcvMzZjMzg2 LTJmNTMtNGEwZS05MjBkLTYyODc2NWViMWQ1OS8xL3Z1ZTNWSVdmYlR5SERTS3Zl RThqUlB5NnBqQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQAw78xAwQAw/XGMA0EAgACMAcDBQMqEiCAMA0G CSqGSIb3DQEBCwUAA4IBAQBFo6OH4n6qRX1MWKT7XPk47uX6FbdfCf4n6AKGP0uA dnPJyrVXzJx+fcpxRAErsqIr0WQ5jknYU4d7v3jicrawGThcvMX7WolOF7n2E2ab 9VBOeQvn0yq1P7joXXZUbddK3bb3WEKMWRM1ORdmB7Fycp7FLW+sMNXa/Gsl4ev+ vSY72C/1cxpQ5zLZpVYcz9h5b5AUtF2a0gud6j2AukyHlQkK4ys3mEPaxKX/OciH P2OIF//oU7GMPfkwqgD+CuKI6vIRrKjf6v7Wuk/plZcxQbPbAswtiYcFKLDpdI76 M1HhUI0TKygvP8ISJ5wluIxM4o3N8iSn3rz9EX5Rzk+l -----END CERTIFICATE-----Generated at Sun Dec 21 03:20:43 2025 by rpki-client