This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-QN586_ZTA8mtn__o01ulGwp1iQ.cer File: 1-QN586_ZTA8mtn__o01ulGwp1iQ.cer (raw, json) Hash identifier: ZfLN+SGXlPd7EBtjXvOf0FeSFxM8/otG8oOeY501yfA= Subject key identifier: F9:03:79:F3:AF:D9:4C:0F:26:B6:7F:FF:A3:4D:6E:94:6C:29:D6:24 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5CE78959748A8B6E2D18DD5FC6A310 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:19:59 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 57543 AS: 204834 AS: 204865 AS: 206325 IP: 178.157.1.0/24 IP: 185.237.84.0/22 IP: 2a0c:a700::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:e7:89:59:74:8a:8b:6e:2d:18:dd:5f:c6:a3:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:19:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f90379f3afd94c0f26b67fffa34d6e946c29d624 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ac:47:7f:79:6f:64:34:f3:f6:17:57:b4:f2: 2b:5c:74:06:d5:0a:b7:bf:55:b3:4f:55:f5:76:86: 48:c0:60:40:42:c9:28:02:b0:68:4f:72:b5:bd:60: 84:15:93:47:4e:8a:d4:ba:83:18:f6:a8:61:36:31: ff:08:2d:2c:3d:d0:c6:44:ec:5e:77:e8:94:08:c1: 6f:fa:07:b8:25:ce:f8:2e:1d:b9:53:9e:fb:33:6a: df:57:8d:1d:1f:73:1a:4f:35:f2:9c:e0:fc:ff:db: 8c:76:1b:6a:3d:34:06:d3:c5:ee:d9:0e:38:a5:e5: 08:b9:51:da:b2:05:13:af:15:26:4d:5f:6c:94:0a: fa:17:6c:db:77:cc:1d:fa:c9:65:3a:ba:77:3b:6f: 04:73:22:00:90:0b:3c:88:40:02:fc:f8:29:4a:72: 06:13:d2:d3:8b:0d:8b:29:be:1b:da:07:85:de:cf: 61:dd:ce:4b:50:e8:01:95:5f:e9:de:9d:be:97:ac: 62:4a:e1:7d:de:93:15:ff:cd:4f:e7:af:41:84:6e: a7:01:7d:64:5f:16:a9:b8:84:bf:d1:a3:2a:d1:f1: 56:7b:eb:a1:e3:e8:3c:bc:b5:9e:6c:d2:a6:23:65: 0a:17:bb:95:40:5b:02:e8:63:8c:e5:c7:a6:28:7f: 42:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:03:79:F3:AF:D9:4C:0F:26:B6:7F:FF:A3:4D:6E:94:6C:29:D6:24 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.157.1.0/24 185.237.84.0/22 IPv6: 2a0c:a700::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 57543 204834 204865 206325 Signature Algorithm: sha256WithRSAEncryption ab:e9:98:9b:f0:ad:41:17:cb:3e:20:a3:8e:c3:a2:1f:18:cc: 46:24:c6:b1:fd:a6:d7:98:11:c0:6a:0c:80:a8:37:2a:0e:ea: 8a:eb:d4:8f:ba:fd:83:c4:38:97:3d:53:b7:67:d6:11:80:9e: 81:cc:52:e8:6f:35:da:89:a3:f3:d8:a5:85:26:51:ed:76:31: 83:d3:bf:4f:1e:e9:66:30:a5:5d:f4:9b:42:43:61:29:00:24: 97:40:bb:4f:19:de:e0:78:0d:c9:01:77:0a:03:33:fb:06:23: 28:9e:a5:18:16:b7:e8:5a:f0:b0:e4:69:f4:01:e2:77:dd:b8: a8:9a:59:98:d6:aa:aa:13:99:08:2a:f6:3b:1d:65:98:d6:94: 06:5c:2f:ac:2f:ae:61:0a:c1:1d:4f:87:be:61:b0:e3:1c:61: d4:2e:36:d6:61:d0:57:38:f0:4e:7c:bb:12:6f:f9:14:8f:15: d5:a9:44:cf:74:a3:97:cb:65:f3:8f:4a:81:61:d5:37:5a:78: 1d:2f:16:f9:02:05:95:09:17:11:0a:26:67:3b:48:71:9c:e0: b9:ca:67:46:63:0a:da:f3:b1:2f:77:1a:05:20:60:8a:d8:be: 72:45:59:2c:ca:0c:59:25:23:4b:06:1b:ef:d1:9c:55:24:0c: ce:21:cb:6a -----BEGIN CERTIFICATE----- MIIFuTCCBKGgAwIBAgISAZt9XOeJWXSKi24tGN1fxqMQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxOTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOTAzNzlmM2FmZDk0YzBmMjZiNjdmZmZhMzRkNmU5NDZjMjlkNjI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApaxHf3lvZDTz9hdXtPIrXHQG1Qq3 v1WzT1X1doZIwGBAQskoArBoT3K1vWCEFZNHTorUuoMY9qhhNjH/CC0sPdDGROxe d+iUCMFv+ge4Jc74Lh25U577M2rfV40dH3MaTzXynOD8/9uMdhtqPTQG08Xu2Q44 peUIuVHasgUTrxUmTV9slAr6F2zbd8wd+sllOrp3O28EcyIAkAs8iEAC/PgpSnIG E9LTiw2LKb4b2geF3s9h3c5LUOgBlV/p3p2+l6xiSuF93pMV/81P569BhG6nAX1k XxapuIS/0aMq0fFWe+uh4+g8vLWebNKmI2UKF7uVQFsC6GOM5cemKH9CGwIDAQAB o4ICxTCCAsEwHQYDVR0OBBYEFPkDefOv2UwPJrZ//6NNbpRsKdYkMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ2L2RlN2Vm Ni1iZGFlLTQ3MTctYjA2MS02ZjIwNzk1MWM0YjIvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDYvZGU3ZWY2 LWJkYWUtNDcxNy1iMDYxLTZmMjA3OTUxYzRiMi8xLzEtUU41ODZfWlRBOG10bl9f bzAxdWxHd3AxaVEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0BggrBgEF BQcBBwEB/wQlMCMwEgQCAAEwDAMEALKdAQMEArntVDANBAIAAjAHAwUDKgynADAp BggrBgEFBQcBCAEB/wQaMBigFjAUAgMA4McCAwMgIgIDAyBBAgMDJfUwDQYJKoZI hvcNAQELBQADggEBAKvpmJvwrUEXyz4go47Doh8YzEYkxrH9pteYEcBqDICoNyoO 6orr1I+6/YPEOJc9U7dn1hGAnoHMUuhvNdqJo/PYpYUmUe12MYPTv08e6WYwpV30 m0JDYSkAJJdAu08Z3uB4DckBdwoDM/sGIyiepRgWt+ha8LDkafQB4nfduKiaWZjW qqoTmQgq9jsdZZjWlAZcL6wvrmEKwR1Ph75hsOMcYdQuNtZh0Fc48E58uxJv+RSP FdWpRM90o5fLZfOPSoFh1TdaeB0vFvkCBZUJFxEKJmc7SHGc4LnKZ0ZjCtrzsS93 GgUgYIrYvnJFWSzKDFklI0sGG+/RnFUkDM4hy2o= -----END CERTIFICATE-----Generated at Mon Feb 9 15:07:28 2026 by rpki-client