This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DQSRPQQ9uxF89rkyPIqyR8tS4lE.cer File: DQSRPQQ9uxF89rkyPIqyR8tS4lE.cer (raw, json) Hash identifier: JOF+FOB4o41V/F+AjyL0Zq1LygoIClBqOb1utWbid5k= Subject key identifier: 0D:04:91:3D:04:3D:BB:11:7C:F6:B9:32:3C:8A:B2:47:CB:52:E2:51 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A320CAA5A9DF97CEE97A287CBA93FB Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:35 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 176.124.247.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:20:ca:a5:a9:df:97:ce:e9:7a:28:7c:ba:93:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0d04913d043dbb117cf6b9323c8ab247cb52e251 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:31:5d:6f:e6:de:68:a1:95:85:59:cd:1e:0a: 72:bd:86:ce:80:dd:ed:a8:14:3f:4d:46:2e:b3:32: e4:6f:75:89:7c:a2:2c:12:c9:5a:39:63:33:53:38: da:59:a7:8f:71:69:9d:bf:31:5c:44:01:30:80:4c: 78:6a:ff:49:8f:b1:09:a0:6f:7c:6a:f3:8a:b0:24: 71:8f:ce:94:55:23:57:99:1c:c1:a8:a1:2c:7b:6e: b6:52:c8:fd:45:b5:eb:72:57:6c:ae:64:2b:05:b6: d6:d8:e8:06:f1:98:14:af:27:a1:8e:17:68:61:3e: 0c:67:36:0e:a4:54:c0:98:34:40:54:a6:0c:d1:4a: 54:27:fb:42:af:c9:aa:58:28:e9:91:7f:3e:c5:11: 03:3c:43:54:fe:7a:41:5c:dc:81:9f:8d:65:e3:72: 93:75:e5:26:00:b3:dd:20:d0:97:20:57:a9:0b:3f: 42:c6:a9:85:24:03:44:00:ba:ff:3b:ba:97:57:c8: 80:61:d4:ff:30:d5:ae:10:ee:c7:44:9f:30:90:95: aa:99:1a:b3:db:8e:33:52:a3:58:0f:e2:13:37:68: 8a:5e:75:43:fc:13:ff:c5:d5:46:7c:fe:36:9b:f9: 13:21:49:47:54:3b:c1:e9:1d:e8:cd:fe:0e:3d:c6: a7:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:04:91:3D:04:3D:BB:11:7C:F6:B9:32:3C:8A:B2:47:CB:52:E2:51 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.124.247.0/24 Signature Algorithm: sha256WithRSAEncryption 45:c4:7f:2f:6b:48:78:a5:49:be:05:cb:44:a2:5d:81:76:7a: bc:db:74:5e:33:46:27:f7:68:0d:69:27:e6:0e:23:d2:0c:c9: 68:fb:48:db:73:04:75:e4:9c:21:0b:6f:64:84:88:b3:02:1f: 12:1f:c2:d8:dd:8d:8d:a9:1a:be:5c:61:06:c9:b9:99:47:72: ca:db:0d:21:dd:1d:10:97:2a:9c:12:db:ec:25:54:c0:6d:fc: de:59:f6:fa:67:54:64:13:43:63:3a:5b:ab:b6:97:03:b2:bc: 80:5d:aa:7e:1b:a3:5c:32:77:c9:33:38:a7:c3:18:e2:f8:ad: 97:c1:c1:5f:79:9d:0e:c0:99:28:ae:ea:74:d0:43:26:dc:c1: 2d:12:7d:bd:f1:f3:3e:25:3b:5e:b5:e9:dc:56:ea:92:ab:ac: 5f:bd:36:e0:68:20:c1:fd:61:7f:30:79:18:34:0d:c3:59:80: bd:ff:ee:6b:dd:c1:0e:fe:6c:70:20:10:84:28:fc:dc:a1:27: 08:f1:3e:6e:2c:50:d7:70:f3:77:e2:bc:75:ac:5f:13:92:09: d7:9c:2c:81:d3:da:ff:f8:7c:13:22:87:01:fc:96:46:8d:ff: 88:65:ba:91:10:32:bb:41:1c:d7:b2:5e:bd:07:91:4b:1f:c7: c9:36:0c:b5 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt4oyDKpanfl87peih8upP7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZDA0OTEzZDA0M2RiYjExN2NmNmI5MzIzYzhhYjI0N2NiNTJlMjUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0zFdb+beaKGVhVnNHgpyvYbOgN3t qBQ/TUYuszLkb3WJfKIsEslaOWMzUzjaWaePcWmdvzFcRAEwgEx4av9Jj7EJoG98 avOKsCRxj86UVSNXmRzBqKEse262Usj9RbXrcldsrmQrBbbW2OgG8ZgUryehjhdo YT4MZzYOpFTAmDRAVKYM0UpUJ/tCr8mqWCjpkX8+xREDPENU/npBXNyBn41l43KT deUmALPdINCXIFepCz9CxqmFJANEALr/O7qXV8iAYdT/MNWuEO7HRJ8wkJWqmRqz 244zUqNYD+ITN2iKXnVD/BP/xdVGfP42m/kTIUlHVDvB6R3ozf4OPcan8wIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFA0EkT0EPbsRfPa5MjyKskfLUuJRMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JlLzQ3ZGZm MC0yYjExLTQ0YmMtYjcyMS05NmM4MWZiNjUxYTAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmUvNDdkZmYw LTJiMTEtNDRiYy1iNzIxLTk2YzgxZmI2NTFhMC8xL0RRU1JQUVE5dXhGODlya3lQ SXF5Ujh0UzRsRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAsHz3MA0GCSqGSIb3DQEBCwUAA4IBAQBFxH8v a0h4pUm+BctEol2Bdnq823ReM0Yn92gNaSfmDiPSDMlo+0jbcwR15JwhC29khIiz Ah8SH8LY3Y2NqRq+XGEGybmZR3LK2w0h3R0QlyqcEtvsJVTAbfzeWfb6Z1RkE0Nj OlurtpcDsryAXap+G6NcMnfJMzinwxji+K2XwcFfeZ0OwJkorup00EMm3MEtEn29 8fM+JTtetencVuqSq6xfvTbgaCDB/WF/MHkYNA3DWYC9/+5r3cEO/mxwIBCEKPzc oScI8T5uLFDXcPN34rx1rF8TkgnXnCyB09r/+HwTIocB/JZGjf+IZbqREDK7QRzX sl69B5FLH8fJNgy1 -----END CERTIFICATE-----Generated at Mon Feb 9 16:53:33 2026 by rpki-client