This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Q5j2JNV_RhPAv2URYcdWwxZlmrk.cer File: Q5j2JNV_RhPAv2URYcdWwxZlmrk.cer (raw, json) Hash identifier: 2K3KbnIDy4TBIYypurFen1Ub/8PDZOTN2KE2ysRJQRA= Subject key identifier: 43:98:F6:24:D5:7F:46:13:C0:BF:65:11:61:C7:56:C3:16:65:9A:B9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ECA28D402EA70EA21C516E51CBD46B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/84/d7c4a0-272e-4409-8d3b-6a79fee919eb/1/Q5j2JNV_RhPAv2URYcdWwxZlmrk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/84/d7c4a0-272e-4409-8d3b-6a79fee919eb/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:29 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 24751 IP: 62.72.224.0/19 IP: 62.80.128.0/19 IP: 85.134.0.0/17 IP: 2a00:4380::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:a2:8d:40:2e:a7:0e:a2:1c:51:6e:51:cb:d4:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4398f624d57f4613c0bf651161c756c316659ab9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:55:ca:a2:ce:26:e5:49:fc:4c:49:ce:73:41: bf:d0:40:5c:52:17:aa:51:24:38:14:b7:96:b4:42: ce:fe:65:70:18:c0:b2:eb:e9:ea:a1:b2:2a:7a:d4: 74:3b:2f:0a:c8:11:a9:b4:28:0a:81:f2:40:04:e5: 7d:3c:cd:3f:47:a5:89:96:9e:41:e8:c7:ed:70:9f: 81:78:1d:76:92:ad:29:d1:2b:70:97:25:a0:46:03: 00:08:71:5e:9e:ad:e8:49:97:2c:bc:42:d8:33:85: e1:05:9b:4b:58:11:fb:cc:a1:c2:82:fe:86:fe:10: 6c:36:ea:7f:87:86:a4:3b:79:13:1a:62:b1:e6:6e: 9e:bf:92:b1:f9:69:48:9d:12:bf:7a:0e:1e:28:cd: 5e:c7:63:ad:38:4e:d8:47:3f:7e:8d:bd:05:7d:08: 83:d8:82:2b:b7:e8:51:0c:38:0b:d5:34:13:7f:72: 18:81:98:ab:93:05:46:a2:34:e8:0b:76:50:4d:90: bd:f5:4a:19:d0:1a:51:8d:25:f2:a1:7a:2b:85:4c: 9a:40:ea:8c:73:e3:79:58:d1:55:9d:54:03:c8:71: 5b:71:bc:5e:02:05:52:fe:05:bc:26:74:ab:b2:70: 28:14:47:de:a7:d0:8d:ca:d5:c2:96:8d:ca:d8:50: 5a:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:98:F6:24:D5:7F:46:13:C0:BF:65:11:61:C7:56:C3:16:65:9A:B9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d7c4a0-272e-4409-8d3b-6a79fee919eb/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d7c4a0-272e-4409-8d3b-6a79fee919eb/1/Q5j2JNV_RhPAv2URYcdWwxZlmrk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.72.224.0/19 62.80.128.0/19 85.134.0.0/17 IPv6: 2a00:4380::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 24751 Signature Algorithm: sha256WithRSAEncryption 12:a5:96:d4:6c:6f:61:d8:e2:97:e8:15:d3:f3:fd:21:db:31: 05:b5:6a:67:32:7e:06:a8:59:50:07:be:04:2f:e6:46:ca:4d: 76:37:88:9c:b2:c3:79:09:c5:f2:d3:be:64:5e:85:df:36:c7: e1:02:48:31:f5:38:7a:bd:19:14:f7:03:fb:2a:0f:5a:74:d1: 34:fd:bd:65:d5:e8:a6:6f:b6:84:1e:83:62:0a:5a:6b:20:67: f9:46:00:e9:7b:7c:39:c4:10:9a:28:62:e7:82:42:36:17:cd: 3d:94:6f:c1:32:bf:24:bf:47:62:d6:ed:1b:5c:df:1c:db:40: 7d:1c:63:aa:24:45:64:6f:e3:68:7a:d4:68:8c:76:37:33:50: 08:5c:0b:e8:88:e2:54:8a:96:24:6e:9a:37:8e:af:29:71:cb: f1:d5:0c:36:5b:68:1a:d4:c2:38:3c:2c:b2:38:6d:6d:5b:93: 2b:46:33:3e:4e:c0:bd:2c:02:79:34:15:75:76:27:bf:89:bd: 7c:43:1a:86:47:42:06:7b:49:e8:69:d1:0d:9e:e9:e0:6b:17: 23:7c:ad:94:a0:4d:3e:18:d3:76:98:bd:2f:b6:5a:23:80:e9: 58:49:b9:48:15:ea:6a:9a:44:48:b9:90:7a:4e:2b:91:9e:d8: 07:5f:32:3f -----BEGIN CERTIFICATE----- MIIFrjCCBJagAwIBAgISAZt57KKNQC6nDqIcUW5Ry9RrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0Mzk4ZjYyNGQ1N2Y0NjEzYzBiZjY1MTE2MWM3NTZjMzE2NjU5YWI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA51XKos4m5Un8TEnOc0G/0EBcUheq USQ4FLeWtELO/mVwGMCy6+nqobIqetR0Oy8KyBGptCgKgfJABOV9PM0/R6WJlp5B 6MftcJ+BeB12kq0p0StwlyWgRgMACHFenq3oSZcsvELYM4XhBZtLWBH7zKHCgv6G /hBsNup/h4akO3kTGmKx5m6ev5Kx+WlInRK/eg4eKM1ex2OtOE7YRz9+jb0FfQiD 2IIrt+hRDDgL1TQTf3IYgZirkwVGojToC3ZQTZC99UoZ0BpRjSXyoXorhUyaQOqM c+N5WNFVnVQDyHFbcbxeAgVS/gW8JnSrsnAoFEfep9CNytXClo3K2FBaKwIDAQAB o4ICujCCArYwHQYDVR0OBBYEFEOY9iTVf0YTwL9lEWHHVsMWZZq5MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg0L2Q3YzRh MC0yNzJlLTQ0MDktOGQzYi02YTc5ZmVlOTE5ZWIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODQvZDdjNGEw LTI3MmUtNDQwOS04ZDNiLTZhNzlmZWU5MTllYi8xL1E1ajJKTlZfUmhQQXYyVVJZ Y2RXd3habG1yay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQFPkjgAwQFPlCAAwQHVYYAMA0EAgACMAcDBQMq AEOAMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAmCvMA0GCSqGSIb3DQEBCwUAA4IB AQASpZbUbG9h2OKX6BXT8/0h2zEFtWpnMn4GqFlQB74EL+ZGyk12N4icssN5CcXy 075kXoXfNsfhAkgx9Th6vRkU9wP7Kg9adNE0/b1l1eimb7aEHoNiClprIGf5RgDp e3w5xBCaKGLngkI2F809lG/BMr8kv0di1u0bXN8c20B9HGOqJEVkb+NoetRojHY3 M1AIXAvoiOJUipYkbpo3jq8pccvx1Qw2W2ga1MI4PCyyOG1tW5MrRjM+TsC9LAJ5 NBV1die/ib18QxqGR0IGe0noadENnungaxcjfK2UoE0+GNN2mL0vtlojgOlYSblI FepqmkRIuZB6TiuRntgHXzI/ -----END CERTIFICATE-----Generated at Mon Feb 9 19:52:03 2026 by rpki-client