This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QM1aUDjV4S_hydn1yGZAdMPdCsc.cer File: QM1aUDjV4S_hydn1yGZAdMPdCsc.cer (raw, json) Hash identifier: 2ml+iVSSc4HXJaV5jqIxQ6311PVqmCu6P5BtZVGEAd8= Subject key identifier: 40:CD:5A:50:38:D5:E1:2F:E1:C9:D9:F5:C8:66:40:74:C3:DD:0A:C7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CED86176DDD9CABB6D71AAE48B89F6C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/93/cec119-4c99-4158-99f1-659c671911f1/1/QM1aUDjV4S_hydn1yGZAdMPdCsc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/93/cec119-4c99-4158-99f1-659c671911f1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:19 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 211536 IP: 2001:678:f88::/48 IP: 2a10:afc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:86:17:6d:dd:9c:ab:b6:d7:1a:ae:48:b8:9f:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=40cd5a5038d5e12fe1c9d9f5c8664074c3dd0ac7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:76:43:b2:f2:91:9b:0c:72:eb:e4:46:f0:7d: 33:de:cc:0b:02:bf:a1:9e:86:be:09:54:c8:68:48: 70:cf:24:d2:5f:e2:39:d4:4a:58:47:39:a8:10:0e: 51:9d:bd:36:f3:a0:75:5c:fa:a2:c9:37:15:bd:9b: e6:f1:ca:55:92:5d:68:72:46:bf:b4:65:91:5c:13: dd:78:86:d5:cc:9b:63:53:28:b8:41:53:27:73:d4: ca:30:9a:9c:b3:a3:a7:9d:ed:25:14:17:30:4b:fc: 24:4f:39:d5:42:c5:c7:e4:62:2b:a8:ea:50:b2:5b: b4:15:0d:94:88:ed:b8:82:89:79:0a:05:94:ff:b3: 1d:c6:70:5d:83:cf:63:aa:5b:58:9c:4c:60:9e:7b: 85:68:c4:7d:ec:c7:b8:e8:5d:58:97:6e:62:74:d0: 08:fb:c9:0a:9f:8e:c9:5c:88:6b:98:9d:72:93:82: 49:76:e7:4d:d5:31:9a:95:ce:ac:40:d3:96:5e:ab: a2:3e:68:71:93:36:62:42:37:2f:1e:6b:51:32:34: 44:ad:18:ed:23:c4:94:7c:98:45:e6:ba:b4:03:ca: 3d:c0:26:ad:21:a5:9c:a6:56:8a:41:94:89:2c:4d: c3:2f:72:a7:94:8f:57:fd:8a:3f:19:8b:16:1c:72: 5c:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:CD:5A:50:38:D5:E1:2F:E1:C9:D9:F5:C8:66:40:74:C3:DD:0A:C7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/cec119-4c99-4158-99f1-659c671911f1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/cec119-4c99-4158-99f1-659c671911f1/1/QM1aUDjV4S_hydn1yGZAdMPdCsc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:f88::/48 2a10:afc0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 211536 Signature Algorithm: sha256WithRSAEncryption 26:d5:2e:62:f9:8d:f1:26:63:cc:a1:7a:e3:15:7e:45:b0:17: e5:14:2a:f5:5c:44:11:bb:22:85:8d:b5:a9:3a:cf:f6:26:ea: b1:98:f2:b0:c9:a8:df:72:05:63:56:68:aa:d2:c1:70:96:12: 24:04:8e:e5:98:cb:f6:94:8c:01:2a:1e:1c:f6:ed:3c:5a:3b: 9a:92:e8:fd:db:ba:1a:27:cf:83:e8:d6:3e:84:82:01:c8:ac: 65:b9:a4:42:72:7f:79:4c:27:d8:83:45:b4:6a:97:6b:e7:94: 60:57:12:55:8d:44:26:71:e4:d7:10:52:13:b2:3a:0b:f4:55: a5:b5:13:e6:46:a6:10:78:67:20:11:f6:15:17:b8:b7:a1:bf: 2d:8f:8b:d8:79:f9:64:43:e8:82:e3:1c:30:35:54:0a:09:72: ac:af:ff:79:0f:18:e9:f0:cc:ed:12:89:7c:4d:03:90:66:41: 4a:2b:33:ea:d6:bc:98:1a:be:b7:a1:a7:e3:b9:17:40:8d:4f: 13:4e:09:cf:5b:ae:bb:2b:9f:8d:7d:e1:60:4d:43:f7:94:54: 04:86:33:8f:c0:70:8c:bf:f7:df:7c:3d:05:94:f6:b5:ea:ea: 4d:97:57:3c:af:d3:8a:ef:d8:96:87:9c:ef:55:6a:28:78:9d: 65:89:18:bd -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgISAZt87YYXbd2cq7bXGq5IuJ9sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MGNkNWE1MDM4ZDVlMTJmZTFjOWQ5ZjVjODY2NDA3NGMzZGQwYWM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4XZDsvKRmwxy6+RG8H0z3swLAr+h noa+CVTIaEhwzyTSX+I51EpYRzmoEA5Rnb0286B1XPqiyTcVvZvm8cpVkl1ocka/ tGWRXBPdeIbVzJtjUyi4QVMnc9TKMJqcs6Onne0lFBcwS/wkTznVQsXH5GIrqOpQ slu0FQ2UiO24gol5CgWU/7MdxnBdg89jqltYnExgnnuFaMR97Me46F1Yl25idNAI +8kKn47JXIhrmJ1yk4JJdudN1TGalc6sQNOWXquiPmhxkzZiQjcvHmtRMjRErRjt I8SUfJhF5rq0A8o9wCatIaWcplaKQZSJLE3DL3KnlI9X/Yo/GYsWHHJcWwIDAQAB o4ICqjCCAqYwHQYDVR0OBBYEFEDNWlA41eEv4cnZ9chmQHTD3QrHMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkzL2NlYzEx OS00Yzk5LTQxNTgtOTlmMS02NTljNjcxOTExZjEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTMvY2VjMTE5 LTRjOTktNDE1OC05OWYxLTY1OWM2NzE5MTFmMS8xL1FNMWFVRGpWNFNfaHlkbjF5 R1pBZE1QZENzYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCkGCCsGAQUF BwEHAQH/BBowGDAWBAIAAjAQAwcAIAEGeA+IAwUDKhCvwDAaBggrBgEFBQcBCAEB /wQLMAmgBzAFAgMDOlAwDQYJKoZIhvcNAQELBQADggEBACbVLmL5jfEmY8yheuMV fkWwF+UUKvVcRBG7IoWNtak6z/Ym6rGY8rDJqN9yBWNWaKrSwXCWEiQEjuWYy/aU jAEqHhz27TxaO5qS6P3buhonz4Po1j6EggHIrGW5pEJyf3lMJ9iDRbRql2vnlGBX ElWNRCZx5NcQUhOyOgv0VaW1E+ZGphB4ZyAR9hUXuLehvy2Pi9h5+WRD6ILjHDA1 VAoJcqyv/3kPGOnwzO0SiXxNA5BmQUorM+rWvJgavrehp+O5F0CNTxNOCc9brrsr n4194WBNQ/eUVASGM4/AcIy/9998PQWU9rXq6k2XVzyv04rv2JaHnO9Vaih4nWWJ GL0= -----END CERTIFICATE-----Generated at Fri Jan 9 01:10:34 2026 by rpki-client