This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QOY0vcMMDEtfeUXz0EHiNQW80Vk.cer File: QOY0vcMMDEtfeUXz0EHiNQW80Vk.cer (raw, json) Hash identifier: c8Vds6AI9vMZqEVKprCjfd6xWTg7HTYh1ddBkXu1H+o= Subject key identifier: 40:E6:34:BD:C3:0C:0C:4B:5F:79:45:F3:D0:41:E2:35:05:BC:D1:59 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5CB206966D87E40B152B132135CB50 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/67/c33731-3c52-4c85-9789-bd27afad9c3d/1/QOY0vcMMDEtfeUXz0EHiNQW80Vk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/67/c33731-3c52-4c85-9789-bd27afad9c3d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:19:45 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 21420 IP: 193.109.235.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:b2:06:96:6d:87:e4:0b:15:2b:13:21:35:cb:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:19:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=40e634bdc30c0c4b5f7945f3d041e23505bcd159 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:62:89:be:de:37:a4:22:7b:3c:12:95:3c:e5: 0e:7e:ff:69:57:b6:23:cd:c5:7b:c5:e5:e8:68:8b: 8b:77:5f:99:74:16:6d:84:1e:92:49:71:1c:25:06: 05:e6:d5:fe:99:3b:c0:19:5c:af:f5:6a:9c:52:e2: 6a:06:b7:55:bd:f3:d6:a9:32:e7:bc:b3:a7:8d:5b: d2:dd:be:15:54:be:bd:2d:46:b4:89:f0:8b:b3:19: cc:50:d0:bb:13:92:90:d1:88:fd:5b:1d:99:9b:49: 42:5a:04:65:c4:cb:fb:8e:01:96:e1:54:6e:56:69: 35:93:99:a4:f1:fe:e4:b6:87:32:54:14:55:69:eb: ff:66:70:7e:a2:12:63:85:50:31:60:ce:18:e4:f6: e5:4c:50:47:a0:d7:6b:8e:5e:a9:ed:9f:2e:e8:6a: ba:2a:7d:f6:14:dd:51:0a:8f:33:57:46:02:ab:b2: 06:ce:42:0f:5e:02:c7:99:41:6e:cd:7a:60:07:a4: b6:f9:1e:13:49:09:d7:6a:5e:33:ee:4c:78:29:d4: 41:34:e0:40:f1:f4:38:5e:a5:a7:7d:f2:11:e0:ef: c5:b5:8a:ba:56:10:40:22:2f:d5:37:f4:d4:cd:cf: 25:97:c5:83:94:a9:ac:91:ab:fa:72:8c:e9:cf:3c: fa:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:E6:34:BD:C3:0C:0C:4B:5F:79:45:F3:D0:41:E2:35:05:BC:D1:59 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c33731-3c52-4c85-9789-bd27afad9c3d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c33731-3c52-4c85-9789-bd27afad9c3d/1/QOY0vcMMDEtfeUXz0EHiNQW80Vk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.109.235.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 21420 Signature Algorithm: sha256WithRSAEncryption 23:51:b6:80:7b:1e:a8:1c:b7:c2:02:70:9a:23:67:9b:0e:7c: bd:fe:4c:b1:0d:ac:fb:7e:0a:a8:61:df:f4:30:da:20:66:85: dc:12:95:18:e0:0c:e8:a1:14:a4:4b:a9:02:f3:77:25:3a:56: 41:58:1d:14:e3:f6:e7:4f:02:11:11:b2:aa:30:8e:6a:93:d4: ec:7a:d6:f7:dd:62:87:37:af:f9:83:57:65:bc:ae:38:70:e5: 0d:66:bd:71:6d:6d:04:d6:6a:76:c8:c5:d0:46:22:42:02:2e: 29:4e:4c:8a:f2:c1:e2:07:a3:81:3a:07:32:9a:1c:7d:5a:f7: 7a:cd:86:66:f9:b9:77:92:4e:3f:b6:f8:b4:64:c0:3f:fe:d8: 82:d9:08:ea:3f:1e:d4:08:c3:a0:d5:43:db:7a:7d:b5:c0:70: 49:5c:5d:54:22:d6:de:14:21:dc:28:82:b0:4a:f5:68:c5:0e: fb:50:b6:0d:db:4b:0a:49:e1:32:76:ab:ad:ba:6b:49:14:3f: 26:15:a0:60:a2:bc:92:8f:8a:d0:e5:d0:9a:be:20:29:31:5e: b3:8f:ff:8a:31:91:7e:e6:bc:94:57:9c:f4:36:be:a5:02:f9: 49:18:9c:af:f9:af:b1:21:98:cb:04:94:70:10:ee:7c:21:56: 64:09:fc:57 -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISAZt9XLIGlm2H5AsVKxMhNctQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxOTQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MGU2MzRiZGMzMGMwYzRiNWY3OTQ1ZjNkMDQxZTIzNTA1YmNkMTU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWKJvt43pCJ7PBKVPOUOfv9pV7Yj zcV7xeXoaIuLd1+ZdBZthB6SSXEcJQYF5tX+mTvAGVyv9WqcUuJqBrdVvfPWqTLn vLOnjVvS3b4VVL69LUa0ifCLsxnMUNC7E5KQ0Yj9Wx2Zm0lCWgRlxMv7jgGW4VRu Vmk1k5mk8f7ktocyVBRVaev/ZnB+ohJjhVAxYM4Y5PblTFBHoNdrjl6p7Z8u6Gq6 Kn32FN1RCo8zV0YCq7IGzkIPXgLHmUFuzXpgB6S2+R4TSQnXal4z7kx4KdRBNOBA 8fQ4XqWnffIR4O/FtYq6VhBAIi/VN/TUzc8ll8WDlKmskav6cozpzzz6zQIDAQAB o4ICnzCCApswHQYDVR0OBBYEFEDmNL3DDAxLX3lF89BB4jUFvNFZMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY3L2MzMzcz MS0zYzUyLTRjODUtOTc4OS1iZDI3YWZhZDljM2QvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjcvYzMzNzMx LTNjNTItNGM4NS05Nzg5LWJkMjdhZmFkOWMzZC8xL1FPWTB2Y01NREV0ZmVVWHow RUhpTlFXODBWay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwW3rMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQC AlOsMA0GCSqGSIb3DQEBCwUAA4IBAQAjUbaAex6oHLfCAnCaI2ebDny9/kyxDaz7 fgqoYd/0MNogZoXcEpUY4AzooRSkS6kC83clOlZBWB0U4/bnTwIREbKqMI5qk9Ts etb33WKHN6/5g1dlvK44cOUNZr1xbW0E1mp2yMXQRiJCAi4pTkyK8sHiB6OBOgcy mhx9Wvd6zYZm+bl3kk4/tvi0ZMA//tiC2QjqPx7UCMOg1UPben21wHBJXF1UItbe FCHcKIKwSvVoxQ77ULYN20sKSeEydqutumtJFD8mFaBgorySj4rQ5dCaviApMV6z j/+KMZF+5ryUV5z0Nr6lAvlJGJyv+a+xIZjLBJRwEO58IVZkCfxX -----END CERTIFICATE-----Generated at Mon Feb 9 16:50:11 2026 by rpki-client