This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CqqnnKrP9fAwS5rpAC4nE_v_bVI.cer File: CqqnnKrP9fAwS5rpAC4nE_v_bVI.cer (raw, json) Hash identifier: dPg2Ef4FcCG2fsj3Qt0+ufMCphDlAHN4hXpAkPtrAvA= Subject key identifier: 0A:AA:A7:9C:AA:CF:F5:F0:30:4B:9A:E9:00:2E:27:13:FB:FF:6D:52 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F81667C0EC3AE22715004BC61FC5107 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/CqqnnKrP9fAwS5rpAC4nE_v_bVI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:19:05 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 2001:67c:554::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:81:66:7c:0e:c3:ae:22:71:50:04:bc:61:fc:51:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0aaaa79caacff5f0304b9ae9002e2713fbff6d52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:5f:44:10:7b:c5:2c:ad:49:52:d0:8d:a6:b0: 5a:15:48:79:ab:0d:e6:1d:3a:3e:28:85:99:d3:b4: ea:eb:58:88:99:b8:2b:3b:d6:d0:df:ed:72:f2:fb: 3f:54:8a:6f:72:2f:4d:eb:a3:ce:63:c2:41:f1:17: 56:49:12:bc:f6:29:38:51:0e:3d:f2:1a:80:6b:5a: 9a:ef:1c:2a:75:f2:7f:a4:00:a6:2d:a2:a1:a3:a1: 6e:a9:d5:4a:c2:0c:e1:9b:0b:f4:90:93:01:16:2b: 19:b9:b3:49:ca:7d:3a:38:a2:04:9f:d6:01:77:6e: 70:a0:c9:96:69:14:4f:76:61:73:21:8f:cd:fd:e2: 3b:32:6b:d1:d4:64:9d:b2:4b:8a:5e:43:fd:be:e9: 0a:13:84:9d:26:23:57:b3:e9:2b:19:7d:5b:a9:e0: 2b:a8:57:b5:3e:67:56:ca:d6:7c:21:9f:8a:60:ef: 10:a3:42:ff:d7:c0:18:ff:0d:1c:c2:7b:e4:e7:dc: 41:a4:3b:6e:2b:20:a2:06:c3:5a:bd:01:62:a7:6c: 89:2a:c9:b5:b2:95:41:b2:4b:e7:4f:16:91:45:71: 94:6a:94:95:f4:d3:8f:28:ad:32:93:5b:5c:7e:75: 78:14:38:0a:37:3b:70:8a:9d:4b:48:0b:d1:7b:d8: 88:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:AA:A7:9C:AA:CF:F5:F0:30:4B:9A:E9:00:2E:27:13:FB:FF:6D:52 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/CqqnnKrP9fAwS5rpAC4nE_v_bVI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:554::/48 Signature Algorithm: sha256WithRSAEncryption a4:f5:6e:f8:45:28:76:d7:49:02:8d:0e:86:63:11:72:94:2e: 6e:6b:91:a6:d9:fe:f2:a9:f0:c4:71:cb:1f:3e:35:7b:c3:78: 1c:fa:07:e2:58:60:ba:1c:3e:66:14:48:98:be:d8:87:0a:35: a4:73:47:37:c1:a4:dc:a4:8a:84:4b:ad:b5:1f:2d:b8:87:83: 78:81:55:a0:ff:0b:18:ae:45:ae:7c:20:23:98:80:e0:d9:55: 8f:cf:15:37:af:c4:a2:61:8b:28:6b:6c:3b:4e:af:c9:10:a7: a3:6a:3d:31:3f:a0:ba:4a:e3:86:39:f3:5c:bc:dc:8e:67:05: 70:6f:17:a7:e1:4e:d6:9a:fe:70:a2:c2:06:b7:7a:a9:14:8e: 95:fd:da:39:37:e8:88:f8:f7:20:3a:01:b1:81:ec:a6:c5:0f: d2:7e:0e:03:fa:18:cb:00:3a:74:cd:98:42:3e:9b:76:0c:ef: 8e:64:a4:bf:fb:01:85:15:cc:a7:cd:b0:d4:3b:89:27:4b:a1: b6:6e:17:3e:c4:9a:28:81:b8:21:bd:c6:69:67:b4:a9:ff:79: 20:e1:c3:b2:b9:30:5c:61:3f:88:d3:a9:3b:58:69:0a:45:17: ce:85:91:ae:81:5b:74:b5:09:0c:9d:ef:35:ce:70:62:e7:a9: b2:ed:8a:3a -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgISAZt/gWZ8DsOuInFQBLxh/FEHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYWFhYTc5Y2FhY2ZmNWYwMzA0YjlhZTkwMDJlMjcxM2ZiZmY2ZDUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtV9EEHvFLK1JUtCNprBaFUh5qw3m HTo+KIWZ07Tq61iImbgrO9bQ3+1y8vs/VIpvci9N66POY8JB8RdWSRK89ik4UQ49 8hqAa1qa7xwqdfJ/pACmLaKho6FuqdVKwgzhmwv0kJMBFisZubNJyn06OKIEn9YB d25woMmWaRRPdmFzIY/N/eI7MmvR1GSdskuKXkP9vukKE4SdJiNXs+krGX1bqeAr qFe1PmdWytZ8IZ+KYO8Qo0L/18AY/w0cwnvk59xBpDtuKyCiBsNavQFip2yJKsm1 spVBskvnTxaRRXGUapSV9NOPKK0yk1tcfnV4FDgKNztwip1LSAvRe9iIiwIDAQAB o4IChzCCAoMwHQYDVR0OBBYEFAqqp5yqz/XwMEua6QAuJxP7/21SMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NjLzJmYzI2 Ni0xMjQ3LTRmMDAtYjE2MS02ZWI5YTIyMTI5ZTEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2MvMmZjMjY2 LTEyNDctNGYwMC1iMTYxLTZlYjlhMjIxMjllMS8xL0NxcW5uS3JQOWZBd1M1cnBB QzRuRV92X2JWSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAVUMA0GCSqGSIb3DQEBCwUAA4IBAQCk 9W74RSh210kCjQ6GYxFylC5ua5Gm2f7yqfDEccsfPjV7w3gc+gfiWGC6HD5mFEiY vtiHCjWkc0c3waTcpIqES621Hy24h4N4gVWg/wsYrkWufCAjmIDg2VWPzxU3r8Si YYsoa2w7Tq/JEKejaj0xP6C6SuOGOfNcvNyOZwVwbxen4U7Wmv5wosIGt3qpFI6V /do5N+iI+PcgOgGxgeymxQ/Sfg4D+hjLADp0zZhCPpt2DO+OZKS/+wGFFcynzbDU O4knS6G2bhc+xJoogbghvcZpZ7Sp/3kg4cOyuTBcYT+I06k7WGkKRRfOhZGugVt0 tQkMne81znBi56my7Yo6 -----END CERTIFICATE-----Generated at Mon Feb 9 15:04:49 2026 by rpki-client