This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QDOdMESZ0GmuzYvQ6PugLlIvV2o.cer File: QDOdMESZ0GmuzYvQ6PugLlIvV2o.cer (raw, json) Hash identifier: 6PJBfvHSmd6HNxdfrfobTaD9dCJuVl3xUDAKhZFhIFQ= Subject key identifier: 40:33:9D:30:44:99:D0:69:AE:CD:8B:D0:E8:FB:A0:2E:52:2F:57:6A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC93FDD1586B1BE51B9C50EC78B873B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6e/5fe88a-16e1-481f-98e8-031e58905923/1/QDOdMESZ0GmuzYvQ6PugLlIvV2o.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6e/5fe88a-16e1-481f-98e8-031e58905923/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:19:28 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 52063 IP: 46.254.184.0/21 IP: 185.109.116.0/22 IP: 194.11.244.0/23 IP: 194.13.108.0/23 IP: 194.13.140.0/23 IP: 194.13.236.0/23 IP: 194.48.232.0/22 IP: 217.198.48.0/21 IP: 2a00:9400::/32 IP: 2a05:b140::/30 IP: 2a06:2100::/30 IP: 2a0c:c740::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:3f:dd:15:86:b1:be:51:b9:c5:0e:c7:8b:87:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:19:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=40339d304499d069aecd8bd0e8fba02e522f576a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d3:57:f5:07:12:87:b0:f0:9f:f9:7e:a4:6b: 94:5b:a5:c4:3d:43:d2:d1:c8:4b:4a:0f:4c:ce:f8: 1c:e3:fd:ef:0f:86:f8:15:9b:0e:87:51:0f:a8:cf: e8:09:32:7d:80:c6:64:9f:e4:96:81:9f:f2:9d:c6: 5c:87:d2:55:70:e4:ee:4a:3f:1e:8a:52:1f:b1:13: 2e:e5:fe:1e:4a:c7:97:ae:55:dc:3f:fb:4c:f7:12: 57:b1:43:77:d1:71:c9:b2:ec:73:72:b6:86:ba:8a: c6:ac:4e:1d:01:ad:5d:84:9b:7d:75:2c:ea:42:0a: 9e:f1:f8:80:9d:d5:00:5a:d8:a4:48:e1:b5:58:08: 57:de:69:80:43:3e:9f:48:ef:89:b4:43:d6:05:47: e3:a9:52:94:0b:4e:1a:7e:2c:08:7f:01:3b:72:e5: b2:c4:f0:86:b5:6b:99:3a:ae:35:59:38:cb:d6:16: 4a:cc:33:af:8c:e9:a1:d0:25:96:61:3b:62:08:ae: a4:71:36:fc:d4:63:3d:02:a0:60:61:5d:53:98:8b: 32:77:97:6c:80:23:17:6b:b9:03:6d:c0:ad:64:bd: e2:20:1f:d6:42:76:34:84:dc:24:5a:a7:3f:22:06: 33:59:70:12:97:ec:0b:41:9a:ed:2d:e0:9c:fc:f7: 9c:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:33:9D:30:44:99:D0:69:AE:CD:8B:D0:E8:FB:A0:2E:52:2F:57:6A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5fe88a-16e1-481f-98e8-031e58905923/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5fe88a-16e1-481f-98e8-031e58905923/1/QDOdMESZ0GmuzYvQ6PugLlIvV2o.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.254.184.0/21 185.109.116.0/22 194.11.244.0/23 194.13.108.0/23 194.13.140.0/23 194.13.236.0/23 194.48.232.0/22 217.198.48.0/21 IPv6: 2a00:9400::/32 2a05:b140::/30 2a06:2100::/30 2a0c:c740::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52063 Signature Algorithm: sha256WithRSAEncryption 06:e7:3a:1b:c6:0d:da:8b:2d:b5:6f:fb:b1:03:31:3e:c5:32: 53:55:67:5f:cb:8f:6f:eb:d6:e3:22:6b:41:a5:f0:4d:1d:90: fd:03:c2:89:c2:de:7e:70:66:26:3f:09:40:3a:27:0b:85:d9: 1b:43:2f:6b:e2:2e:08:cf:5c:05:ad:80:63:8f:c5:56:72:0d: 0d:c4:60:ad:53:5a:0c:08:4f:1d:cc:a4:5c:53:cf:3d:2e:1a: bb:04:b3:b3:ec:82:45:e2:ef:d5:bf:7e:97:42:4d:0b:f5:54: db:ea:d0:3e:c1:04:ea:05:42:09:81:c2:17:47:65:65:df:12: c4:b6:8a:3c:13:ef:62:18:98:10:24:42:39:47:53:5e:1c:b7: 0a:6e:bc:24:2d:34:2a:12:37:20:c2:e2:22:61:5e:cd:d5:b2: ed:f8:b8:19:9a:1a:b8:44:be:de:e2:7a:8e:9e:d7:77:dc:df: d9:7c:3a:c1:e7:b5:cc:e7:79:44:44:b6:0f:17:e7:30:13:5c: ae:0a:d2:4c:05:9a:10:31:4c:ef:a5:01:53:22:a7:89:0f:6f: 69:f1:02:82:17:f5:f7:1e:23:43:61:88:fd:bf:33:4e:ce:4f: 8b:ec:09:10:4e:d1:5f:4c:d6:dd:e3:19:78:ff:9e:60:13:30: b4:7d:80:7b -----BEGIN CERTIFICATE----- MIIF4jCCBMqgAwIBAgISAZt6yT/dFYaxvlG5xQ7Hi4c7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxOTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MDMzOWQzMDQ0OTlkMDY5YWVjZDhiZDBlOGZiYTAyZTUyMmY1NzZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttNX9QcSh7Dwn/l+pGuUW6XEPUPS 0chLSg9Mzvgc4/3vD4b4FZsOh1EPqM/oCTJ9gMZkn+SWgZ/yncZch9JVcOTuSj8e ilIfsRMu5f4eSseXrlXcP/tM9xJXsUN30XHJsuxzcraGuorGrE4dAa1dhJt9dSzq Qgqe8fiAndUAWtikSOG1WAhX3mmAQz6fSO+JtEPWBUfjqVKUC04afiwIfwE7cuWy xPCGtWuZOq41WTjL1hZKzDOvjOmh0CWWYTtiCK6kcTb81GM9AqBgYV1TmIsyd5ds gCMXa7kDbcCtZL3iIB/WQnY0hNwkWqc/IgYzWXASl+wLQZrtLeCc/Pec7wIDAQAB o4IC7jCCAuowHQYDVR0OBBYEFEAznTBEmdBprs2L0Oj7oC5SL1dqMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZlLzVmZTg4 YS0xNmUxLTQ4MWYtOThlOC0wMzFlNTg5MDU5MjMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmUvNWZlODhh LTE2ZTEtNDgxZi05OGU4LTAzMWU1ODkwNTkyMy8xL1FET2RNRVNaMEdtdXpZdlE2 UHVnTGxJdlYyby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMG0GCCsGAQUF BwEHAQH/BF4wXDA2BAIAATAwAwQDLv64AwQCuW10AwQBwgv0AwQBwg1sAwQBwg2M AwQBwg3sAwQCwjDoAwQD2cYwMCIEAgACMBwDBQAqAJQAAwUCKgWxQAMFAioGIQAD BQAqDMdAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDLXzANBgkqhkiG9w0BAQsF AAOCAQEABuc6G8YN2osttW/7sQMxPsUyU1VnX8uPb+vW4yJrQaXwTR2Q/QPCicLe fnBmJj8JQDonC4XZG0Mva+IuCM9cBa2AY4/FVnINDcRgrVNaDAhPHcykXFPPPS4a uwSzs+yCReLv1b9+l0JNC/VU2+rQPsEE6gVCCYHCF0dlZd8SxLaKPBPvYhiYECRC OUdTXhy3Cm68JC00KhI3IMLiImFezdWy7fi4GZoauES+3uJ6jp7Xd9zf2Xw6wee1 zOd5RES2DxfnMBNcrgrSTAWaEDFM76UBUyKniQ9vafECghf19x4jQ2GI/b8zTs5P i+wJEE7RX0zW3eMZeP+eYBMwtH2Aew== -----END CERTIFICATE-----Generated at Mon Feb 2 15:56:09 2026 by rpki-client