This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KQH1AZqXC6W-DHVNIPeGcYGPSi4.cer File: KQH1AZqXC6W-DHVNIPeGcYGPSi4.cer (raw, json) Hash identifier: wYAOrAVhKrBemCxtMm7PX2Ay1sbrZrQx6isH8LtRJz0= Subject key identifier: 29:01:F5:01:9A:97:0B:A5:BE:0C:75:4D:20:F7:86:71:81:8F:4A:2E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC9216E4C76E8B29D4766A47BECEEE4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/14/27b62e-3639-4e74-affe-2b2f2b8908cc/1/KQH1AZqXC6W-DHVNIPeGcYGPSi4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/14/27b62e-3639-4e74-affe-2b2f2b8908cc/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:19:20 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 51698 IP: 91.227.152.0/23 IP: 178.159.248.0/21 IP: 185.47.154.0/23 IP: 185.65.138.0/23 IP: 2a01:9160::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:21:6e:4c:76:e8:b2:9d:47:66:a4:7b:ec:ee:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:19:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2901f5019a970ba5be0c754d20f78671818f4a2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:17:ae:0f:0e:d6:a9:30:10:d9:fd:a5:a2:93: 9e:1e:43:d2:6d:7a:7f:c2:86:cc:e6:00:b3:d7:f3: d5:ef:80:60:2b:a0:49:19:e3:d7:56:b1:73:9b:0c: b4:84:f6:e6:69:a6:5b:3b:da:17:f2:6a:b0:32:56: 92:45:7d:e6:13:a9:3f:02:0c:73:76:42:7a:a9:89: 33:ce:08:3b:52:83:ce:18:8c:4c:8a:ad:50:2d:34: f2:d8:c9:23:18:92:3d:d9:d9:d0:67:9e:a0:18:9b: f1:61:2f:31:e3:cd:44:e2:2c:be:64:e1:af:9a:a3: 6e:2a:79:a2:e5:f8:91:00:d1:0f:dc:12:2f:9d:46: 47:fc:89:5c:65:cc:33:4e:40:8b:71:ef:dd:5a:5d: 8f:b5:b6:03:54:76:ae:fd:42:55:e6:3a:3f:d3:b2: c8:cd:ad:11:d7:39:3a:db:4e:a6:3d:48:91:a9:a0: b1:ae:52:05:fc:11:32:74:8e:c6:35:50:19:c1:f6: 9f:c3:b7:2f:52:1b:cd:20:14:00:0b:6c:d8:28:dc: 38:05:f9:da:cb:f8:26:50:c9:d2:3f:4f:8e:58:12: c0:cb:37:24:13:ae:66:86:16:ae:ce:78:ec:e9:5a: c8:43:09:6b:29:d9:af:1f:73:a5:7e:24:c5:7c:7a: 5d:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:01:F5:01:9A:97:0B:A5:BE:0C:75:4D:20:F7:86:71:81:8F:4A:2E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/27b62e-3639-4e74-affe-2b2f2b8908cc/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/27b62e-3639-4e74-affe-2b2f2b8908cc/1/KQH1AZqXC6W-DHVNIPeGcYGPSi4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.227.152.0/23 178.159.248.0/21 185.47.154.0/23 185.65.138.0/23 IPv6: 2a01:9160::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 51698 Signature Algorithm: sha256WithRSAEncryption af:f5:17:78:0d:c1:0a:ee:3b:6a:5d:58:83:ba:36:7e:d1:28: 0e:31:ac:d5:1e:43:ed:0b:a8:6d:fa:64:6b:a4:66:0c:b2:af: 9b:32:d3:e2:96:e4:b2:92:35:a5:62:77:e0:74:5f:b9:a5:45: 51:b2:1e:f1:68:31:e2:1d:32:18:f7:0e:05:43:c2:23:1f:d5: 0b:3f:5a:09:18:f7:91:e1:73:5d:39:46:06:54:d2:61:ea:08: 4b:5f:76:86:86:8f:90:42:e9:53:66:40:1c:81:bc:0d:42:97: b1:fb:4d:93:d9:30:fb:0e:f8:63:46:41:36:e8:e7:f1:82:5e: 46:f3:5c:09:ba:87:41:3d:8f:01:9f:b1:c1:a2:90:12:4a:fc: 08:4c:27:4a:44:75:75:74:8d:72:3a:ad:7c:32:97:64:4f:9a: 30:61:a3:e0:3c:70:49:8b:39:21:a7:6a:e7:77:fe:8c:c7:14: ef:b1:97:f1:e3:4c:59:8a:f1:e7:1b:80:33:8e:a4:1b:86:a9: 75:90:1a:eb:32:32:f1:10:a6:df:19:54:fe:0b:0f:d9:4a:42: c0:92:d3:28:d7:0a:3a:32:db:07:28:21:80:61:ad:f7:5d:0d: 87:3b:b9:47:5b:cd:b5:8d:0d:0f:a7:c6:be:11:0f:9f:96:ef: 77:04:87:e2 -----BEGIN CERTIFICATE----- MIIFtTCCBJ2gAwIBAgISAZt6ySFuTHbosp1HZqR77O7kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxOTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOTAxZjUwMTlhOTcwYmE1YmUwYzc1NGQyMGY3ODY3MTgxOGY0YTJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2heuDw7WqTAQ2f2lopOeHkPSbXp/ wobM5gCz1/PV74BgK6BJGePXVrFzmwy0hPbmaaZbO9oX8mqwMlaSRX3mE6k/Agxz dkJ6qYkzzgg7UoPOGIxMiq1QLTTy2MkjGJI92dnQZ56gGJvxYS8x481E4iy+ZOGv mqNuKnmi5fiRANEP3BIvnUZH/IlcZcwzTkCLce/dWl2PtbYDVHau/UJV5jo/07LI za0R1zk6206mPUiRqaCxrlIF/BEydI7GNVAZwfafw7cvUhvNIBQAC2zYKNw4Bfna y/gmUMnSP0+OWBLAyzckE65mhhauznjs6VrIQwlrKdmvH3OlfiTFfHpdtwIDAQAB o4ICwTCCAr0wHQYDVR0OBBYEFCkB9QGalwulvgx1TSD3hnGBj0ouMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE0LzI3YjYy ZS0zNjM5LTRlNzQtYWZmZS0yYjJmMmI4OTA4Y2MvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTQvMjdiNjJl LTM2MzktNGU3NC1hZmZlLTJiMmYyYjg5MDhjYy8xL0tRSDFBWnFYQzZXLURIVk5J UGVHY1lHUFNpNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF BwEHAQH/BDEwLzAeBAIAATAYAwQBW+OYAwQDsp/4AwQBuS+aAwQBuUGKMA0EAgAC MAcDBQAqAZFgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDJ8jANBgkqhkiG9w0B AQsFAAOCAQEAr/UXeA3BCu47al1Yg7o2ftEoDjGs1R5D7Quobfpka6RmDLKvmzLT 4pbkspI1pWJ34HRfuaVFUbIe8Wgx4h0yGPcOBUPCIx/VCz9aCRj3keFzXTlGBlTS YeoIS192hoaPkELpU2ZAHIG8DUKXsftNk9kw+w74Y0ZBNujn8YJeRvNcCbqHQT2P AZ+xwaKQEkr8CEwnSkR1dXSNcjqtfDKXZE+aMGGj4DxwSYs5Iadq53f+jMcU77GX 8eNMWYrx5xuAM46kG4apdZAa6zIy8RCm3xlU/gsP2UpCwJLTKNcKOjLbByghgGGt 910Nhzu5R1vNtY0ND6fGvhEPn5bvdwSH4g== -----END CERTIFICATE-----Generated at Mon Feb 9 15:08:44 2026 by rpki-client