This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QHvB3C4R1JG5uF4I0BwiL5d2w8w.cer File: QHvB3C4R1JG5uF4I0BwiL5d2w8w.cer (raw, json) Hash identifier: j2xt+ZglQQ+D9O9EKcU2hXltRPhLitOWXFMcmTGRK9E= Subject key identifier: 40:7B:C1:DC:2E:11:D4:91:B9:B8:5E:08:D0:1C:22:2F:97:76:C3:CC Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C12E3D515DD4739B65BBB4B4775280A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:19:31 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.198.197.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:e3:d5:15:dd:47:39:b6:5b:bb:4b:47:75:28:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:19:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=407bc1dc2e11d491b9b85e08d01c222f9776c3cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:75:79:06:b2:2e:9d:6f:18:7f:14:2d:39:ce: 1a:f4:01:91:92:3d:74:b5:b6:db:fa:db:6f:fb:34: eb:bb:64:0e:13:cb:2b:dd:21:fc:ef:f2:36:c7:58: 87:bd:bc:f1:1f:83:6e:62:61:e3:a7:2a:bd:ad:0c: bf:6a:f1:b9:28:9c:1d:11:fe:95:9d:22:97:56:5a: c9:6c:91:16:71:74:cd:c3:c3:99:b3:b1:dc:b1:04: e2:82:1e:f7:dc:3f:23:1e:14:62:79:ea:fc:30:8d: 50:f9:61:94:56:39:1b:4a:9a:70:48:6c:c7:c6:b8: 10:af:d2:e8:97:b8:fe:57:26:fd:b1:72:6e:66:24: ba:37:bb:8a:f2:55:a0:19:84:66:40:c5:f6:9e:62: 67:ff:8e:e5:fe:f0:74:00:13:a3:a8:b1:2c:59:e5: e0:c6:ef:ed:d3:00:a6:8d:26:ac:ed:3f:cc:01:a1: c7:88:98:58:a4:89:80:28:ef:d0:9c:ac:5b:95:00: dd:3a:4d:d7:00:e3:d4:92:f9:a7:fc:4c:0c:54:9f: 61:dc:53:4d:f2:69:35:c8:31:b8:b4:72:86:28:d3: e0:9f:cc:1c:bb:8a:2a:e7:41:e7:29:26:79:12:65: c1:30:db:01:21:e6:88:f7:5c:e1:8f:dd:2a:2a:b2: 20:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:7B:C1:DC:2E:11:D4:91:B9:B8:5E:08:D0:1C:22:2F:97:76:C3:CC X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.198.197.0/24 Signature Algorithm: sha256WithRSAEncryption 8f:fa:ac:e2:2b:4b:95:d0:1a:fb:19:a8:f3:3e:59:5a:22:4e: 8b:62:9e:96:23:48:57:7c:78:05:83:17:7f:15:e9:a0:8a:e5: 4e:56:3d:7d:d4:4e:cb:c3:dd:c3:3c:ba:da:7f:42:69:70:d5: 90:7d:76:db:de:50:57:d4:ad:20:f8:40:c9:14:42:e2:59:cd: 61:61:81:ac:d4:b3:49:3a:7b:41:9c:82:91:01:3b:4a:54:f0: a8:04:53:48:85:bb:27:a7:ea:c4:ef:0b:e7:cc:ee:fb:f3:25: f7:ee:ac:01:9a:5e:eb:61:5f:e1:52:3a:40:44:0f:fe:53:35: bc:3c:06:63:a0:b3:10:e3:f3:7a:f1:b2:23:04:63:96:05:37: f3:e5:ad:d0:96:31:4e:98:88:6d:c4:4f:a9:14:2b:61:21:6e: 5e:93:1e:07:71:68:a2:de:9b:b4:85:c6:2a:91:53:aa:a0:ae: 26:93:6d:94:96:e6:a1:e1:c9:fa:5b:b5:b9:53:5d:b7:f9:b2: c0:7c:09:c5:a5:54:f0:bb:0a:73:6b:ce:9f:47:b6:9e:06:e0: 2c:8c:05:aa:a2:6d:5a:ab:03:f5:14:57:96:a7:f5:c8:03:6e: f9:81:39:eb:d1:e2:51:18:fe:ce:74:8f:de:a3:3e:a6:36:0c: 0e:17:b2:b2 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt8EuPVFd1HObZbu0tHdSgKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxOTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MDdiYzFkYzJlMTFkNDkxYjliODVlMDhkMDFjMjIyZjk3NzZjM2NjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnV5BrIunW8YfxQtOc4a9AGRkj10 tbbb+ttv+zTru2QOE8sr3SH87/I2x1iHvbzxH4NuYmHjpyq9rQy/avG5KJwdEf6V nSKXVlrJbJEWcXTNw8OZs7HcsQTigh733D8jHhRieer8MI1Q+WGUVjkbSppwSGzH xrgQr9Lol7j+Vyb9sXJuZiS6N7uK8lWgGYRmQMX2nmJn/47l/vB0ABOjqLEsWeXg xu/t0wCmjSas7T/MAaHHiJhYpImAKO/QnKxblQDdOk3XAOPUkvmn/EwMVJ9h3FNN 8mk1yDG4tHKGKNPgn8wcu4oq50HnKSZ5EmXBMNsBIeaI91zhj90qKrIgcQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFEB7wdwuEdSRubheCNAcIi+XdsPMMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU1L2YxMGJj Ny03YzllLTRkOTgtOGQ3Yi03YWYwYTE1ZjQwYjUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTUvZjEwYmM3 LTdjOWUtNGQ5OC04ZDdiLTdhZjBhMTVmNDBiNS8xL1FIdkIzQzRSMUpHNXVGNEkw QndpTDVkMnc4dy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW8bFMA0GCSqGSIb3DQEBCwUAA4IBAQCP+qzi K0uV0Br7GajzPllaIk6LYp6WI0hXfHgFgxd/FemgiuVOVj191E7Lw93DPLraf0Jp cNWQfXbb3lBX1K0g+EDJFELiWc1hYYGs1LNJOntBnIKRATtKVPCoBFNIhbsnp+rE 7wvnzO778yX37qwBml7rYV/hUjpARA/+UzW8PAZjoLMQ4/N68bIjBGOWBTfz5a3Q ljFOmIhtxE+pFCthIW5ekx4HcWii3pu0hcYqkVOqoK4mk22Uluah4cn6W7W5U123 +bLAfAnFpVTwuwpza86fR7aeBuAsjAWqom1aqwP1FFeWp/XIA275gTnr0eJRGP7O dI/eoz6mNgwOF7Ky -----END CERTIFICATE-----Generated at Mon Feb 9 15:07:41 2026 by rpki-client