This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.cer File: 0qRFJgLJ35d8nV3Y3BO2Zh30ATY.cer (raw, json) Hash identifier: SOvBq2PJRmOpZiRymT8moFiJJhdQHftRCXEyftH/Q3M= Subject key identifier: D2:A4:45:26:02:C9:DF:97:7C:9D:5D:D8:DC:13:B6:66:1D:F4:01:36 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC957CD3386555C299FDE5335661D71 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:19:34 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 21448 AS: 197898 AS: 200707 AS: 202415 IP: 185.98.176.0/22 IP: 185.110.52.0/22 IP: 193.110.88.0/24 IP: 194.28.136.0/22 IP: 195.69.92.0/22 IP: 217.9.192.0/20 IP: 2a00:8000::/29 IP: 2a03:37e0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 21:21:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:57:cd:33:86:55:5c:29:9f:de:53:35:66:1d:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:19:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d2a4452602c9df977c9d5dd8dc13b6661df40136 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:98:35:77:ea:d2:f3:c0:a5:a1:d5:82:0d:f2: db:f5:07:10:34:7b:66:74:50:49:b7:42:91:55:b7: f4:0b:e4:7d:5b:ee:76:f2:df:32:60:92:ad:e3:2c: fb:a1:c1:ca:57:eb:5b:a5:e9:50:91:b7:2e:d6:9e: ae:fe:36:00:8f:59:39:70:34:bf:0e:49:ad:05:f3: b0:4d:48:22:ed:4d:98:92:04:ef:3a:7a:ad:5a:b7: b9:23:99:a5:f3:15:42:e3:77:2a:92:4e:56:52:09: 68:ea:58:08:30:b5:f7:7e:b0:74:65:a0:27:b3:eb: 20:fb:93:f9:08:89:70:21:11:c1:e6:20:eb:5f:7f: b1:fa:5a:00:52:25:36:f8:32:3f:35:15:21:23:de: 1d:94:69:26:11:a5:e9:d9:0d:b6:78:30:35:72:26: d9:b3:fc:e8:10:8d:89:dc:c8:19:74:c2:ae:16:b1: 96:99:dc:2f:30:67:85:ac:e8:e2:71:3e:fb:52:dd: 78:32:fd:0b:07:7e:75:23:d7:2d:3d:d0:99:2e:33: 64:6d:8b:a2:49:bb:eb:96:7d:19:7d:05:48:b6:99: 59:73:d4:63:79:ce:68:dd:09:d0:1a:5d:75:d2:f8: 62:95:d0:3f:7b:37:b3:cb:01:92:f6:1e:4c:8f:e0: ca:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:A4:45:26:02:C9:DF:97:7C:9D:5D:D8:DC:13:B6:66:1D:F4:01:36 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.98.176.0/22 185.110.52.0/22 193.110.88.0/24 194.28.136.0/22 195.69.92.0/22 217.9.192.0/20 IPv6: 2a00:8000::/29 2a03:37e0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 21448 197898 200707 202415 Signature Algorithm: sha256WithRSAEncryption 37:84:41:77:5b:ab:ac:9c:61:5b:fb:5c:7e:a7:b3:16:42:89: 53:2f:1a:a1:34:56:9d:5d:73:06:4e:c0:97:79:1b:be:72:d4: 4e:ee:3e:70:17:97:c0:d5:13:34:c1:b4:67:fc:f3:d6:c7:61: d5:4d:13:3d:c7:d6:2f:34:f1:62:e2:26:75:73:78:48:7f:50: 9d:6b:d7:f7:3a:35:af:02:ad:af:32:68:46:b1:11:cd:97:4e: e8:04:e9:24:1e:61:75:32:7e:fb:4f:e9:7c:08:df:f8:7a:34: ce:bf:5e:51:1a:1c:b1:a3:5d:1d:5a:cc:08:c5:e4:6a:fd:77: e8:b7:53:94:9f:11:f6:4c:3e:cf:6a:4f:e7:a9:59:e5:f0:12: 8c:85:e8:ed:87:7c:26:68:bb:4f:5f:34:d0:f7:e0:92:a1:ce: 42:5a:4a:9f:64:17:58:f2:25:e7:7b:bf:46:5e:e2:dc:f9:97: a4:f9:20:c0:e6:b5:d9:ec:3a:34:7b:a2:9c:60:56:ed:13:3d: 84:f1:77:5e:b7:b0:0e:5e:a5:52:16:c3:8b:3f:28:5a:3d:aa: 05:cf:c4:87:1f:c2:2f:06:b2:02:b8:1c:84:f3:34:41:51:a9: 5a:ee:85:dd:4a:22:d8:ee:fc:da:8d:23:ce:03:f1:31:d3:80: ec:c4:2e:64 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgISAZt6yVfNM4ZVXCmf3lM1Zh1xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxOTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMmE0NDUyNjAyYzlkZjk3N2M5ZDVkZDhkYzEzYjY2NjFkZjQwMTM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZg1d+rS88ClodWCDfLb9QcQNHtm dFBJt0KRVbf0C+R9W+528t8yYJKt4yz7ocHKV+tbpelQkbcu1p6u/jYAj1k5cDS/ DkmtBfOwTUgi7U2YkgTvOnqtWre5I5ml8xVC43cqkk5WUglo6lgIMLX3frB0ZaAn s+sg+5P5CIlwIRHB5iDrX3+x+loAUiU2+DI/NRUhI94dlGkmEaXp2Q22eDA1cibZ s/zoEI2J3MgZdMKuFrGWmdwvMGeFrOjicT77Ut14Mv0LB351I9ctPdCZLjNkbYui Sbvrln0ZfQVItplZc9Rjec5o3QnQGl110vhildA/ezezywGS9h5Mj+DKLQIDAQAB o4IC4jCCAt4wHQYDVR0OBBYEFNKkRSYCyd+XfJ1d2NwTtmYd9AE2MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZjL2Q1ZmQ5 OS04YWUwLTRhZTAtYjZiNC1mZTc0ZWY3YWFjOTUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmMvZDVmZDk5 LThhZTAtNGFlMC1iNmI0LWZlNzRlZjdhYWM5NS8xLzBxUkZKZ0xKMzVkOG5WM1kz Qk8yWmgzMEFUWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFMGCCsGAQUF BwEHAQH/BEQwQjAqBAIAATAkAwQCuWKwAwQCuW40AwQAwW5YAwQCwhyIAwQCw0Vc AwQE2QnAMBQEAgACMA4DBQMqAIAAAwUAKgM34DAoBggrBgEFBQcBCAEB/wQZMBeg FTATAgJTyAIDAwUKAgMDEAMCAwMWrzANBgkqhkiG9w0BAQsFAAOCAQEAN4RBd1ur rJxhW/tcfqezFkKJUy8aoTRWnV1zBk7Al3kbvnLUTu4+cBeXwNUTNMG0Z/zz1sdh 1U0TPcfWLzTxYuImdXN4SH9QnWvX9zo1rwKtrzJoRrERzZdO6ATpJB5hdTJ++0/p fAjf+Ho0zr9eURocsaNdHVrMCMXkav136LdTlJ8R9kw+z2pP56lZ5fASjIXo7Yd8 Jmi7T1800PfgkqHOQlpKn2QXWPIl53u/Rl7i3PmXpPkgwOa12ew6NHuinGBW7RM9 hPF3XrewDl6lUhbDiz8oWj2qBc/Ehx/CLwayArgchPM0QVGpWu6F3Uoi2O782o0j zgPxMdOA7MQuZA== -----END CERTIFICATE-----Generated at Tue Feb 3 02:12:06 2026 by rpki-client