This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Q3JOYeO6L5RmWRcznm2sK2gKGM8.cer File: Q3JOYeO6L5RmWRcznm2sK2gKGM8.cer (raw, json) Hash identifier: UwSNARiMm/zHqhr8+zdRYE+o1hHOgkxS/E6uTsb6kdw= Subject key identifier: 43:72:4E:61:E3:BA:2F:94:66:59:17:33:9E:6D:AC:2B:68:0A:18:CF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CED4486E93A68CF68B2FE0DA12BB3D2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d0/03af8b-3e58-4916-a9b5-6b877036aa1a/1/Q3JOYeO6L5RmWRcznm2sK2gKGM8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d0/03af8b-3e58-4916-a9b5-6b877036aa1a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:03 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.240.248.0/22 IP: 193.150.21.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:44:86:e9:3a:68:cf:68:b2:fe:0d:a1:2b:b3:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=43724e61e3ba2f94665917339e6dac2b680a18cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:7f:7b:13:75:5e:87:93:fd:0b:d8:cd:cc:9a: de:82:c7:50:19:77:fd:d8:a5:58:49:e8:80:61:75: d6:93:21:16:08:b6:ad:04:eb:e5:67:3f:16:f3:32: 99:a8:6e:d8:15:70:9b:d8:d8:40:e8:67:36:9e:49: 8a:21:e6:23:4c:fa:60:05:f9:e0:4b:a5:a8:a3:2e: a3:bb:33:96:09:cd:b1:f0:33:71:ad:17:5c:65:15: f3:4b:ba:43:bc:87:46:92:ac:66:d5:cd:5b:41:7b: de:7e:f8:3a:ca:b4:1f:45:7c:b0:13:00:ab:76:35: e7:ab:86:b5:e5:0e:af:7e:93:0b:60:9c:f5:83:e1: ef:c7:47:41:b8:40:6c:d7:e7:4b:8a:ca:cc:02:cb: 25:ee:8a:bb:ce:c6:91:db:2f:3c:7f:d3:a0:e2:b7: ac:5a:df:09:51:a4:06:b0:e1:3a:11:00:9f:9b:90: e0:bd:54:cd:5b:08:dd:03:52:63:c5:f6:c8:56:5f: 1b:0f:82:9e:f1:66:c8:f9:29:60:91:20:bb:7d:f2: 89:c7:fe:20:ab:d8:de:78:44:df:b8:a6:3a:74:f2: 51:f7:71:18:d8:18:14:e2:ea:9a:54:ec:07:8f:70: 48:91:55:b6:21:a0:33:33:15:b9:73:71:1e:82:87: d0:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:72:4E:61:E3:BA:2F:94:66:59:17:33:9E:6D:AC:2B:68:0A:18:CF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/03af8b-3e58-4916-a9b5-6b877036aa1a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/03af8b-3e58-4916-a9b5-6b877036aa1a/1/Q3JOYeO6L5RmWRcznm2sK2gKGM8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.240.248.0/22 193.150.21.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:ef:48:e7:ce:0b:98:54:54:1b:d4:f8:7d:4d:ed:50:91:b6: 92:15:e8:a5:7b:e7:ce:ea:7a:ac:b1:a1:8a:c7:0c:67:b8:36: 03:92:c1:42:e4:58:03:70:6e:9c:87:c0:0c:a2:4b:45:fb:10: 97:99:95:fe:17:ae:e2:7d:a7:c9:83:14:f8:de:d9:6e:3e:58: b7:1d:e2:e7:cb:82:53:30:8b:74:06:87:b8:08:df:56:03:3d: 0d:db:42:39:90:cf:27:e3:be:5d:05:db:53:f3:1f:48:11:c7: 46:7e:79:31:a8:19:24:f5:ab:9d:bb:c4:b6:14:b9:92:ed:b1: f0:2c:93:bc:09:05:0f:4a:43:12:eb:cf:f1:f3:b0:0a:a2:f8: 88:50:f8:55:9c:02:d1:9a:7e:49:94:e1:97:75:05:e1:32:cd: 72:9d:35:af:14:19:00:32:a6:2e:c5:0b:82:03:ce:e2:2f:87: 00:7f:14:c5:7c:63:f1:f3:ce:c7:5f:e7:b6:43:5f:65:43:97: 2e:a1:a9:9a:3d:6b:5c:27:53:6b:3e:fc:e2:56:46:b7:f2:4b: fb:7f:43:af:f2:29:13:ba:a6:ae:e0:c6:4e:80:8f:3d:db:2f: f2:af:b9:65:22:4b:23:86:cc:93:54:cb:24:14:ba:5d:b2:05: 52:20:cb:0b -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgISAZt87USG6Tpoz2iy/g2hK7PSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MzcyNGU2MWUzYmEyZjk0NjY1OTE3MzM5ZTZkYWMyYjY4MGExOGNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtH97E3Veh5P9C9jNzJregsdQGXf9 2KVYSeiAYXXWkyEWCLatBOvlZz8W8zKZqG7YFXCb2NhA6Gc2nkmKIeYjTPpgBfng S6Wooy6juzOWCc2x8DNxrRdcZRXzS7pDvIdGkqxm1c1bQXvefvg6yrQfRXywEwCr djXnq4a15Q6vfpMLYJz1g+Hvx0dBuEBs1+dLisrMAssl7oq7zsaR2y88f9Og4res Wt8JUaQGsOE6EQCfm5DgvVTNWwjdA1JjxfbIVl8bD4Ke8WbI+SlgkSC7ffKJx/4g q9jeeETfuKY6dPJR93EY2BgU4uqaVOwHj3BIkVW2IaAzMxW5c3EegofQowIDAQAB o4ICijCCAoYwHQYDVR0OBBYEFENyTmHjui+UZlkXM55trCtoChjPMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2QwLzAzYWY4 Yi0zZTU4LTQ5MTYtYTliNS02Yjg3NzAzNmFhMWEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDAvMDNhZjhi LTNlNTgtNDkxNi1hOWI1LTZiODc3MDM2YWExYS8xL1EzSk9ZZU82TDVSbVdSY3pu bTJzSzJnS0dNOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQCW/D4AwQAwZYVMA0GCSqGSIb3DQEBCwUAA4IB AQAu70jnzguYVFQb1Ph9Te1QkbaSFeile+fO6nqssaGKxwxnuDYDksFC5FgDcG6c h8AMoktF+xCXmZX+F67ifafJgxT43tluPli3HeLny4JTMIt0Boe4CN9WAz0N20I5 kM8n475dBdtT8x9IEcdGfnkxqBkk9audu8S2FLmS7bHwLJO8CQUPSkMS68/x87AK oviIUPhVnALRmn5JlOGXdQXhMs1ynTWvFBkAMqYuxQuCA87iL4cAfxTFfGPx887H X+e2Q19lQ5cuoamaPWtcJ1NrPvziVka38kv7f0Ov8ikTuqau4MZOgI892y/yr7ll IksjhsyTVMskFLpdsgVSIMsL -----END CERTIFICATE-----Generated at Mon Feb 9 18:28:30 2026 by rpki-client