This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JqsqOMqsDOPKAf24f9-WNy6FmLY.cer File: JqsqOMqsDOPKAf24f9-WNy6FmLY.cer (raw, json) Hash identifier: LKPjhFDD4QXZILXJFa+9ntGiJJyhIAuziyF8qc+Ab04= Subject key identifier: 26:AB:2A:38:CA:AC:0C:E3:CA:01:FD:B8:7F:DF:96:37:2E:85:98:B6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E3855DB02241D680BAFAC975A30D41F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/JqsqOMqsDOPKAf24f9-WNy6FmLY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:39 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 61358 IP: 176.113.117.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:55:db:02:24:1d:68:0b:af:ac:97:5a:30:d4:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=26ab2a38caac0ce3ca01fdb87fdf96372e8598b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:87:47:88:68:a8:2e:db:36:2a:2a:e3:cc:f3: 20:7f:a4:33:0f:ed:7c:fa:ca:92:9f:3e:21:ee:c2: 32:e3:c3:ce:88:ce:30:09:b4:44:a3:c3:1b:de:93: 92:bd:7d:75:ce:b4:c9:fa:5f:51:34:38:12:80:6d: c7:37:36:85:69:c0:f3:8d:49:6d:96:fd:37:d2:d9: 32:db:b6:28:ec:ac:5c:1b:6d:80:22:57:22:82:1a: 6f:43:ae:48:68:84:cb:77:49:d2:24:49:2a:00:db: 6d:db:75:10:f6:77:64:3f:03:5b:f4:f8:ee:45:8d: 11:f9:82:97:9e:76:0f:4f:db:66:95:08:80:7c:25: 6b:04:ea:34:7b:e5:3e:06:6e:62:57:90:8a:29:7e: 57:b9:aa:76:c7:da:38:00:0c:97:ee:15:5f:56:8f: 66:4f:4d:3c:c6:94:4d:09:16:02:fa:5e:ff:86:82: 9f:cc:ce:df:be:b0:4d:93:8f:87:67:7c:17:ef:1f: 5a:eb:71:2e:54:50:d5:c7:78:26:08:b7:51:4a:df: b6:18:b3:a2:32:28:c9:7c:ee:f1:e5:fb:51:7e:e8: 19:32:c0:99:e4:e6:ea:0b:44:13:1d:f5:54:43:74: 89:5c:02:21:5a:4f:3c:d7:14:a0:3e:fb:15:8f:eb: 89:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:AB:2A:38:CA:AC:0C:E3:CA:01:FD:B8:7F:DF:96:37:2E:85:98:B6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/JqsqOMqsDOPKAf24f9-WNy6FmLY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.113.117.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 61358 Signature Algorithm: sha256WithRSAEncryption 74:be:36:c4:41:04:a6:98:b3:64:51:3d:68:49:47:63:fa:99: 18:ab:26:d1:c1:06:1f:c5:e3:eb:c3:c2:9a:5c:71:fb:52:ca: 3b:04:6a:4d:7a:2b:bd:19:0f:36:9f:56:37:a2:f7:73:3a:69: 44:c4:45:70:49:46:ad:37:b0:e3:88:4f:98:ce:a4:c0:5e:62: 57:d4:c1:f5:c3:af:ea:65:11:06:17:a0:72:00:85:2d:5d:15: 42:0e:5d:de:59:a4:fe:30:8c:f5:ea:bd:8d:89:ee:9d:42:87: 08:ba:6c:59:12:8e:f2:3f:ea:5a:ec:18:f2:94:96:1a:06:6d: 4d:25:0f:e9:a7:0f:7b:aa:f4:54:4a:34:90:71:09:44:40:f1: 56:3b:93:33:70:d6:71:11:0b:b8:f9:0c:46:28:fd:d8:ee:f2: 85:50:08:73:a3:f4:b8:a2:0e:fb:94:22:2e:f1:61:48:54:ab: e5:4c:4e:cc:30:27:e0:79:3a:52:1e:c9:b9:1d:e7:92:88:10: b3:e5:50:18:d3:dd:42:a8:e3:7a:1d:5b:29:42:8e:c9:1d:42: 14:95:2a:bc:8f:a4:2b:d1:57:4d:20:7d:77:9a:8c:e4:ce:76: 3d:3f:7f:01:e5:05:6c:f3:e9:67:70:de:00:f4:3a:c3:b7:84: 72:bd:5b:bb -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt+OFXbAiQdaAuvrJdaMNQfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNmFiMmEzOGNhYWMwY2UzY2EwMWZkYjg3ZmRmOTYzNzJlODU5OGI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtodHiGioLts2KirjzPMgf6QzD+18 +sqSnz4h7sIy48POiM4wCbREo8Mb3pOSvX11zrTJ+l9RNDgSgG3HNzaFacDzjUlt lv030tky27Yo7KxcG22AIlcighpvQ65IaITLd0nSJEkqANtt23UQ9ndkPwNb9Pju RY0R+YKXnnYPT9tmlQiAfCVrBOo0e+U+Bm5iV5CKKX5Xuap2x9o4AAyX7hVfVo9m T008xpRNCRYC+l7/hoKfzM7fvrBNk4+HZ3wX7x9a63EuVFDVx3gmCLdRSt+2GLOi MijJfO7x5ftRfugZMsCZ5ObqC0QTHfVUQ3SJXAIhWk881xSgPvsVj+uJbQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFCarKjjKrAzjygH9uH/fljcuhZi2MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YyLzZiMjc3 MC0wZDMxLTQxNTktYTllOS01Yjk5NDZkZDFiZWEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjIvNmIyNzcw LTBkMzEtNDE1OS1hOWU5LTViOTk0NmRkMWJlYS8xL0pxc3FPTXFzRE9QS0FmMjRm OS1XTnk2Rm1MWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAsHF1MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDvrjANBgkqhkiG9w0BAQsFAAOCAQEAdL42xEEEppizZFE9aElHY/qZGKsm0cEG H8Xj68PCmlxx+1LKOwRqTXorvRkPNp9WN6L3czppRMRFcElGrTew44hPmM6kwF5i V9TB9cOv6mURBhegcgCFLV0VQg5d3lmk/jCM9eq9jYnunUKHCLpsWRKO8j/qWuwY 8pSWGgZtTSUP6acPe6r0VEo0kHEJREDxVjuTM3DWcRELuPkMRij92O7yhVAIc6P0 uKIO+5QiLvFhSFSr5UxOzDAn4Hk6Uh7JuR3nkogQs+VQGNPdQqjjeh1bKUKOyR1C FJUqvI+kK9FXTSB9d5qM5M52PT9/AeUFbPPpZ3DeAPQ6w7eEcr1buw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:26:50 2026 by rpki-client