This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0qPIzGPQ5-BpylI_NO-zlT7iG2U.cer File: 0qPIzGPQ5-BpylI_NO-zlT7iG2U.cer (raw, json) Hash identifier: BaBHuU9b/GNFkjyndg9MNobmaYkPwQI/n93Hd6FoWmM= Subject key identifier: D2:A3:C8:CC:63:D0:E7:E0:69:CA:52:3F:34:EF:B3:95:3E:E2:1B:65 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5C93EC79CED085DD2CBD83BCCD9D3C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b5/d0a1fe-0b65-4d50-ae2f-12898697a862/1/0qPIzGPQ5-BpylI_NO-zlT7iG2U.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b5/d0a1fe-0b65-4d50-ae2f-12898697a862/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:19:37 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 210862 IP: 193.162.79.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:93:ec:79:ce:d0:85:dd:2c:bd:83:bc:cd:9d:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:19:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d2a3c8cc63d0e7e069ca523f34efb3953ee21b65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:15:58:fb:24:73:7f:66:10:ba:46:b6:c9:d2: 7b:04:32:65:55:9d:ed:ca:9d:11:18:9a:bc:a5:6a: 2c:31:20:1d:82:2f:15:e6:13:d2:37:b4:25:d0:ac: 14:57:48:45:d5:b0:c4:e0:d0:3e:3b:97:40:43:f3: b0:4c:19:f5:1e:36:56:ac:8a:32:80:6b:07:e7:5f: f3:dd:c0:c8:02:c1:ce:8b:37:7b:4b:79:c5:58:0e: 20:cc:f5:e9:06:2f:02:42:91:81:20:b0:52:1e:d3: 5e:78:c5:05:ff:88:5c:7d:67:7e:a2:c7:7f:8b:0d: 8b:fd:7a:5f:41:f6:bc:5d:dc:1a:1d:f3:18:9b:73: 4f:29:f2:76:c3:12:d1:c7:e8:a3:8a:c0:fd:4f:be: 58:e5:cb:12:7b:2b:30:b0:f0:98:21:b4:b6:ab:a3: 0b:a6:4f:2d:9f:05:8a:ab:b1:f6:fd:0a:22:41:08: 8c:95:0e:73:c8:5f:9e:aa:37:16:9a:46:3f:85:65: dc:4d:71:ed:de:e2:6e:31:77:e4:7a:72:19:28:44: ca:5f:b0:5d:6d:f1:21:3e:41:dc:91:58:13:bb:e9: 1f:82:3d:5c:64:7f:2b:a1:b7:3a:4d:b0:1a:ab:80: 8e:46:b3:73:31:f4:a0:91:f4:a6:00:27:74:e8:b8: fe:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:A3:C8:CC:63:D0:E7:E0:69:CA:52:3F:34:EF:B3:95:3E:E2:1B:65 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d0a1fe-0b65-4d50-ae2f-12898697a862/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d0a1fe-0b65-4d50-ae2f-12898697a862/1/0qPIzGPQ5-BpylI_NO-zlT7iG2U.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.162.79.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 210862 Signature Algorithm: sha256WithRSAEncryption 82:5e:33:b6:bd:e7:39:98:47:2e:db:3e:fb:7a:aa:7a:6b:4a: fc:97:8f:6c:bc:46:ba:fb:a2:59:1e:d4:b8:eb:7c:aa:c9:a7: 52:7f:d6:45:fc:b7:de:b6:44:61:ac:0a:04:67:24:fb:91:b3: e5:c2:38:1b:d1:50:52:ea:e5:b6:34:09:3f:27:f2:ba:cb:3a: 74:27:f7:f2:c1:f4:95:f7:b3:bb:a6:ac:d2:bf:03:89:20:32: 61:f2:9a:65:0b:49:78:1b:bd:0d:d1:fc:d9:bb:c2:98:04:2d: 51:b3:09:23:f5:3e:69:30:ce:d9:b0:dc:0f:a6:86:d1:9a:b5: 42:02:48:d6:36:1d:5f:5d:46:26:b3:40:ca:1b:6f:97:b9:43: 4c:ae:4d:da:5c:a1:4e:b5:50:9a:2a:4f:29:9c:14:e6:bc:31: 41:4d:5d:92:fa:a9:1c:62:bb:43:19:ac:30:52:4c:ca:73:10: 6a:7f:4c:90:e0:9e:f2:94:01:09:2e:c5:f2:39:8a:97:2a:b7: 07:f7:1d:a2:93:12:4a:1d:9f:91:52:aa:3f:54:0a:11:27:76: a1:db:d4:62:a6:ba:80:03:4b:42:72:1f:f0:80:94:b8:51:b8: c3:41:a5:8b:05:ab:bd:89:e9:99:cb:e2:07:a2:43:ae:2a:f3: 78:02:04:50 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt9XJPsec7Qhd0svYO8zZ08MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxOTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMmEzYzhjYzYzZDBlN2UwNjljYTUyM2YzNGVmYjM5NTNlZTIxYjY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRVY+yRzf2YQuka2ydJ7BDJlVZ3t yp0RGJq8pWosMSAdgi8V5hPSN7Ql0KwUV0hF1bDE4NA+O5dAQ/OwTBn1HjZWrIoy gGsH51/z3cDIAsHOizd7S3nFWA4gzPXpBi8CQpGBILBSHtNeeMUF/4hcfWd+osd/ iw2L/XpfQfa8XdwaHfMYm3NPKfJ2wxLRx+ijisD9T75Y5csSeyswsPCYIbS2q6ML pk8tnwWKq7H2/QoiQQiMlQ5zyF+eqjcWmkY/hWXcTXHt3uJuMXfkenIZKETKX7Bd bfEhPkHckVgTu+kfgj1cZH8robc6TbAaq4CORrNzMfSgkfSmACd06Lj+vwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFNKjyMxj0OfgacpSPzTvs5U+4htlMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I1L2QwYTFm ZS0wYjY1LTRkNTAtYWUyZi0xMjg5ODY5N2E4NjIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjUvZDBhMWZl LTBiNjUtNGQ1MC1hZTJmLTEyODk4Njk3YTg2Mi8xLzBxUEl6R1BRNS1CcHlsSV9O Ty16bFQ3aUcyVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwaJPMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwM3rjANBgkqhkiG9w0BAQsFAAOCAQEAgl4ztr3nOZhHLts++3qqemtK/JePbLxG uvuiWR7UuOt8qsmnUn/WRfy33rZEYawKBGck+5Gz5cI4G9FQUurltjQJPyfyuss6 dCf38sH0lfezu6as0r8DiSAyYfKaZQtJeBu9DdH82bvCmAQtUbMJI/U+aTDO2bDc D6aG0Zq1QgJI1jYdX11GJrNAyhtvl7lDTK5N2lyhTrVQmipPKZwU5rwxQU1dkvqp HGK7QxmsMFJMynMQan9MkOCe8pQBCS7F8jmKlyq3B/cdopMSSh2fkVKqP1QKESd2 odvUYqa6gANLQnIf8ICUuFG4w0GliwWrvYnpmcviB6JDrirzeAIEUA== -----END CERTIFICATE-----Generated at Mon Feb 9 22:40:38 2026 by rpki-client