This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4qde-QNvXBQ-V9-vvJLAJVwxWbo.cer File: 4qde-QNvXBQ-V9-vvJLAJVwxWbo.cer (raw, json) Hash identifier: LQMqr3qwYhs3xGL+Wo7VK90OSDBeWj2/8UdersJORno= Subject key identifier: E2:A7:5E:F9:03:6F:5C:14:3E:57:DF:AF:BC:92:C0:25:5C:31:59:BA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DC98E8B42AB4714DFE8567BAFE197CA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/42/d4d411-9966-4291-aa59-f90850e74296/1/4qde-QNvXBQ-V9-vvJLAJVwxWbo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/42/d4d411-9966-4291-aa59-f90850e74296/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:18:39 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 209197 IP: 185.207.28.0/22 IP: 2a0b:1f40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:8e:8b:42:ab:47:14:df:e8:56:7b:af:e1:97:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e2a75ef9036f5c143e57dfafbc92c0255c3159ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:3f:ae:07:46:4d:64:30:4b:f3:3e:82:86:d3: 20:0f:c9:32:a7:25:23:77:8f:09:63:6e:c7:a1:74: 1b:38:a1:50:27:14:ca:a9:00:fa:25:fd:b4:bc:d1: 75:2d:d7:10:3c:59:59:cb:0c:3b:8e:21:24:1b:a5: 3b:e3:a6:cd:ef:fd:23:bb:8e:45:80:8a:b7:e0:39: 43:60:a1:fd:d1:43:a7:43:ea:30:01:cc:71:e8:99: 80:d0:38:e0:32:65:e6:f4:3e:c5:67:b7:04:10:be: e2:b3:23:62:6c:e3:c4:70:f5:a6:69:d7:23:e6:32: 09:2d:4f:49:b7:f2:98:95:62:bd:9a:c0:d3:e3:c2: 29:de:6b:bf:55:8f:6c:b8:e4:6a:e9:ab:d7:c0:a9: 90:39:bd:c0:f6:ff:f4:3a:de:6a:a4:8b:44:df:b7: cf:a5:f1:97:c6:45:ac:b0:4a:ed:8f:f5:11:2e:48: f6:e7:54:df:67:9f:c9:dc:3b:e9:a4:d1:43:00:84: a6:72:82:87:5c:7e:5d:6d:58:ce:53:e2:5e:07:56: 92:e6:a7:c9:91:d7:2d:ba:df:86:11:81:c6:a2:5d: c5:72:97:aa:fd:0f:c8:90:3f:4b:e0:e4:4c:2b:66: ca:e3:20:13:0a:f8:bc:b0:30:7a:b4:ca:c6:b9:0b: d5:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:A7:5E:F9:03:6F:5C:14:3E:57:DF:AF:BC:92:C0:25:5C:31:59:BA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d4d411-9966-4291-aa59-f90850e74296/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d4d411-9966-4291-aa59-f90850e74296/1/4qde-QNvXBQ-V9-vvJLAJVwxWbo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.207.28.0/22 IPv6: 2a0b:1f40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 209197 Signature Algorithm: sha256WithRSAEncryption 2d:f0:02:3d:86:6d:32:99:34:c0:e3:5f:34:19:51:f9:83:90: 97:55:c5:fa:3e:2c:76:f5:80:06:0c:e2:b6:20:b7:57:ee:d0: d8:bf:6a:66:08:4c:d9:e8:79:a9:36:20:ed:fa:eb:ad:34:a1: 73:2f:f2:07:af:e7:26:b8:34:69:22:90:92:3d:a3:72:b9:d2: 2a:31:eb:e5:1f:4f:fd:39:21:a7:f4:49:60:f2:34:51:32:e5: 21:b9:0d:f0:47:ab:8e:6f:e3:bb:eb:e6:b4:b3:33:64:8f:17: 18:b0:93:65:01:92:d0:3b:1b:09:8c:25:8d:b1:94:79:ff:6c: 2c:1e:2d:df:b6:65:81:f2:74:d2:ed:1f:6f:24:4f:91:a6:8e: 11:f8:31:79:02:2d:da:4c:d4:17:70:65:78:d6:9c:fb:f7:26: fb:fb:37:56:4d:e3:a8:ad:ea:da:50:88:a1:21:04:1f:12:a4: 89:83:ed:3f:b0:c2:19:08:db:f6:10:58:8c:4a:de:5e:96:8e: d3:10:b4:94:0d:38:c1:c0:9b:92:88:57:d6:71:d3:28:0f:16: dc:c5:d5:5c:d9:e0:41:ac:76:3a:10:e7:15:9f:c9:82:ba:ad: 2e:9d:46:c5:1f:3e:1c:f0:54:b5:ee:bf:0a:e1:40:ee:15:80: d5:2b:e7:1a -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt9yY6LQqtHFN/oVnuv4ZfKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMmE3NWVmOTAzNmY1YzE0M2U1N2RmYWZiYzkyYzAyNTVjMzE1OWJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2j+uB0ZNZDBL8z6ChtMgD8kypyUj d48JY27HoXQbOKFQJxTKqQD6Jf20vNF1LdcQPFlZyww7jiEkG6U746bN7/0ju45F gIq34DlDYKH90UOnQ+owAcxx6JmA0DjgMmXm9D7FZ7cEEL7isyNibOPEcPWmadcj 5jIJLU9Jt/KYlWK9msDT48Ip3mu/VY9suORq6avXwKmQOb3A9v/0Ot5qpItE37fP pfGXxkWssErtj/URLkj251TfZ5/J3DvppNFDAISmcoKHXH5dbVjOU+JeB1aS5qfJ kdctut+GEYHGol3Fcpeq/Q/IkD9L4ORMK2bK4yATCvi8sDB6tMrGuQvV4QIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFOKnXvkDb1wUPlffr7ySwCVcMVm6MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQyL2Q0ZDQx MS05OTY2LTQyOTEtYWE1OS1mOTA4NTBlNzQyOTYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDIvZDRkNDEx LTk5NjYtNDI5MS1hYTU5LWY5MDg1MGU3NDI5Ni8xLzRxZGUtUU52WEJRLVY5LXZ2 SkxBSlZ3eFdiby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuc8cMA0EAgACMAcDBQMqCx9AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMxLTANBgkqhkiG9w0BAQsFAAOCAQEALfACPYZtMpk0 wONfNBlR+YOQl1XF+j4sdvWABgzitiC3V+7Q2L9qZghM2eh5qTYg7frrrTShcy/y B6/nJrg0aSKQkj2jcrnSKjHr5R9P/Tkhp/RJYPI0UTLlIbkN8Eerjm/ju+vmtLMz ZI8XGLCTZQGS0DsbCYwljbGUef9sLB4t37ZlgfJ00u0fbyRPkaaOEfgxeQIt2kzU F3BleNac+/cm+/s3Vk3jqK3q2lCIoSEEHxKkiYPtP7DCGQjb9hBYjEreXpaO0xC0 lA04wcCbkohX1nHTKA8W3MXVXNngQax2OhDnFZ/JgrqtLp1GxR8+HPBUte6/CuFA 7hWA1SvnGg== -----END CERTIFICATE-----Generated at Mon Feb 9 15:11:45 2026 by rpki-client