This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QD1jsy5xwcFpJD79ttVu1cprgk4.cer File: QD1jsy5xwcFpJD79ttVu1cprgk4.cer (raw, json) Hash identifier: lFwU+j+47nS+T93fhwQkteDz9G82YcBNTruiq+Sg7zU= Subject key identifier: 40:3D:63:B3:2E:71:C1:C1:69:24:3E:FD:B6:D5:6E:D5:CA:6B:82:4E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5CC8164684B0552DE7A7BE6FF5F332 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:19:51 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.47.190.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:c8:16:46:84:b0:55:2d:e7:a7:be:6f:f5:f3:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:19:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=403d63b32e71c1c169243efdb6d56ed5ca6b824e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:b6:0f:e3:6b:09:3d:50:42:6b:27:36:ef:99: 83:63:cb:19:81:e2:46:d6:79:52:db:49:ed:e1:ce: 61:40:5b:77:75:1a:cf:0f:74:f0:ec:7e:08:3a:e6: 52:ee:3f:7e:92:6f:24:8c:35:43:4d:0b:69:37:96: 07:cb:8d:f2:a7:ba:75:af:c6:c2:80:15:e9:71:d7: 51:00:d0:13:ef:74:0a:ca:cc:1e:3f:c9:28:01:66: 55:ae:da:1a:e0:98:cf:55:22:e5:8c:01:78:67:60: 55:df:22:b7:fc:6c:f4:22:fb:76:2e:d0:fb:e9:e1: a9:ab:5d:b0:78:ac:14:13:a8:2e:3b:de:ae:2f:76: 6d:f3:d8:cb:fa:e5:1f:cc:96:6d:14:36:a8:fa:34: 51:a2:e6:38:c2:3c:52:fb:b5:a4:98:2b:25:b7:a7: 2c:88:0c:1e:47:1c:b8:ca:80:5c:c0:c6:0f:bc:61: 33:1a:a5:3a:4b:83:9c:ff:b8:27:7d:88:51:e3:c5: 4e:1e:15:e9:94:78:27:a1:b2:c4:24:b1:b6:14:fe: c8:93:f6:94:80:82:60:be:d5:b4:cd:d5:7c:0a:aa: 6c:3a:12:9c:d9:24:13:34:9f:b9:da:3b:25:ce:85: c0:b0:2c:4b:0e:c1:bc:62:6d:93:d0:0d:b3:4c:5a: 52:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:3D:63:B3:2E:71:C1:C1:69:24:3E:FD:B6:D5:6E:D5:CA:6B:82:4E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.47.190.0/24 Signature Algorithm: sha256WithRSAEncryption 48:f6:bc:dc:e2:2c:b5:f1:c1:8b:d8:7c:ae:2b:e9:3b:35:96: f4:dc:91:1f:8a:41:f8:15:ef:53:40:97:b1:ef:c6:3a:6e:9e: 3b:05:59:10:b0:6b:22:b4:72:99:9a:36:4e:69:b1:03:39:1c: 7c:35:e3:ae:fd:da:6b:b1:2f:34:67:c1:91:27:47:59:0c:27: e6:bc:cc:27:bc:b8:79:82:99:3d:2d:0f:3d:bf:cd:19:78:53: db:b1:e7:dd:00:3f:06:a5:df:49:83:c3:21:c1:e6:76:8d:dd: ca:28:e3:b6:6e:4e:6b:b5:fd:31:5e:a3:e2:9f:66:cf:d9:c8: ab:fe:64:b2:e3:9b:55:af:29:b3:a1:bc:68:da:69:70:6c:bc: 3a:28:01:3c:62:94:fb:ab:36:95:4a:c6:55:96:8e:ba:79:6e: 4a:20:3f:60:5f:60:96:b3:bd:39:ac:97:aa:f1:4e:40:31:da: 56:55:48:8e:d2:35:4b:1a:dc:f8:a0:21:a6:e5:44:68:c9:13: 24:c0:d7:10:7b:f0:19:a4:38:a6:1d:3a:bd:10:8b:ae:b0:5d: a3:f6:11:31:fe:89:75:16:61:9a:f5:51:0a:64:a8:9d:af:08: 23:58:54:ff:29:e8:f6:65:7e:88:67:17:60:71:2a:d0:cc:26: 70:4e:50:ec -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt9XMgWRoSwVS3np75v9fMyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxOTUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MDNkNjNiMzJlNzFjMWMxNjkyNDNlZmRiNmQ1NmVkNWNhNmI4MjRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3bYP42sJPVBCayc275mDY8sZgeJG 1nlS20nt4c5hQFt3dRrPD3Tw7H4IOuZS7j9+km8kjDVDTQtpN5YHy43yp7p1r8bC gBXpcddRANAT73QKysweP8koAWZVrtoa4JjPVSLljAF4Z2BV3yK3/Gz0Ivt2LtD7 6eGpq12weKwUE6guO96uL3Zt89jL+uUfzJZtFDao+jRRouY4wjxS+7WkmCslt6cs iAweRxy4yoBcwMYPvGEzGqU6S4Oc/7gnfYhR48VOHhXplHgnobLEJLG2FP7Ik/aU gIJgvtW0zdV8CqpsOhKc2SQTNJ+52jslzoXAsCxLDsG8Ym2T0A2zTFpSawIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFEA9Y7MuccHBaSQ+/bbVbtXKa4JOMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU0L2QwMTJm MC02Yjg5LTQwZGMtYmQ1Ni1iMzU0YzAzOTM3NWEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTQvZDAxMmYw LTZiODktNDBkYy1iZDU2LWIzNTRjMDM5Mzc1YS8xL1FEMWpzeTV4d2NGcEpENzl0 dFZ1MWNwcmdrNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwS++MA0GCSqGSIb3DQEBCwUAA4IBAQBI9rzc 4iy18cGL2HyuK+k7NZb03JEfikH4Fe9TQJex78Y6bp47BVkQsGsitHKZmjZOabED ORx8NeOu/dprsS80Z8GRJ0dZDCfmvMwnvLh5gpk9LQ89v80ZeFPbsefdAD8Gpd9J g8MhweZ2jd3KKOO2bk5rtf0xXqPin2bP2cir/mSy45tVrymzobxo2mlwbLw6KAE8 YpT7qzaVSsZVlo66eW5KID9gX2CWs705rJeq8U5AMdpWVUiO0jVLGtz4oCGm5URo yRMkwNcQe/AZpDimHTq9EIuusF2j9hEx/ol1FmGa9VEKZKidrwgjWFT/Kej2ZX6I ZxdgcSrQzCZwTlDs -----END CERTIFICATE-----Generated at Mon Jan 26 21:01:02 2026 by rpki-client