This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.cer File: QRZSBM_kcHPMhtbeQ8QdiBfi5C4.cer (raw, json) Hash identifier: fzMS1ApPs6t8taHk4R3TZCpcfzPcgD/zRpbtkoMReUc= Subject key identifier: 41:16:52:04:CF:E4:70:73:CC:86:D6:DE:43:C4:1D:88:17:E2:E4:2E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5C6DCCFFB863BFD8EA16AA76F356E5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/69/fd3568-dde9-409c-bbd0-34d28b43c324/1/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/69/fd3568-dde9-409c-bbd0-34d28b43c324/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:19:28 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 58337 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:6d:cc:ff:b8:63:bf:d8:ea:16:aa:76:f3:56:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:19:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=41165204cfe47073cc86d6de43c41d8817e2e42e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:2c:11:ef:f5:12:85:97:9f:c8:fd:0f:c5:ab: ff:17:c4:84:b1:40:ea:c9:b6:c3:49:7b:e3:ec:47: 47:6e:70:db:0d:e8:ac:da:86:ec:f6:5c:0d:10:c1: 6b:72:19:2a:30:f9:bf:db:b7:d2:5a:ef:48:19:46: a7:77:44:ef:81:fa:d0:28:39:af:a0:ad:d7:6d:02: a5:17:66:9e:ac:62:0a:2c:94:ff:a0:b4:cf:36:61: af:2a:b6:f5:ba:35:68:b0:32:cd:2e:95:d4:12:a4: e8:24:74:ce:b0:f8:b3:2f:5f:05:0e:68:e8:0b:75: 14:7c:7d:18:2d:84:f0:a6:24:01:76:ae:96:39:e0: 61:c9:29:32:f1:a1:e2:b2:07:fc:5f:27:9b:64:5a: 00:25:cc:9b:78:a8:03:a9:4f:31:f3:2e:9f:a9:81: 6c:e0:5a:c5:20:b2:0e:85:40:8e:8b:99:b6:ef:8b: 33:0a:fb:4b:a7:6a:d7:6f:c3:5a:0a:b6:46:9e:0f: 9d:bc:84:7f:29:9c:03:17:3f:59:f1:07:c5:2b:05: d8:86:61:c5:e7:b0:72:f0:74:70:2c:dd:45:c2:02: 70:55:32:e2:91:32:0d:eb:19:6f:b9:88:f5:6f:84: 89:3e:52:64:40:5c:46:45:c6:cc:fa:53:a3:65:29: b7:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:16:52:04:CF:E4:70:73:CC:86:D6:DE:43:C4:1D:88:17:E2:E4:2E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/fd3568-dde9-409c-bbd0-34d28b43c324/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/fd3568-dde9-409c-bbd0-34d28b43c324/1/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 58337 Signature Algorithm: sha256WithRSAEncryption 98:b0:6e:d4:08:ee:06:cb:0d:dc:dd:e2:5b:e1:a6:1a:9c:7e: 90:88:cd:97:b7:bf:9e:6d:82:b1:61:ca:3c:f4:2e:37:d3:4d: da:9c:b0:b1:9e:5d:b5:7d:6c:89:20:98:42:eb:0e:77:45:63: 11:0f:18:34:14:0e:f5:b9:f1:ac:3d:2b:a3:3d:04:42:82:4a: c6:3c:b2:4c:25:1f:0f:70:21:1f:fb:df:2f:58:80:da:4c:e6: b1:76:29:79:67:14:b6:6d:ae:2c:99:c3:4e:a3:07:00:44:03: 77:65:4f:29:68:8e:e2:ac:02:db:df:b4:64:1d:8b:8e:5a:99: 8e:71:95:83:86:e5:c7:bb:fe:fd:c0:60:1c:17:31:d2:70:1f: 8c:7f:1f:b3:3f:63:da:60:57:c5:6a:b1:bb:87:d1:e1:d7:09: 4b:5d:28:55:30:63:27:75:89:11:2b:a7:3e:8c:de:c9:7f:96: 09:f0:49:e0:64:83:8a:b4:09:10:a0:85:a9:83:0d:5e:33:ca: d9:4a:15:81:58:09:91:f0:24:3f:b6:e6:b2:b6:d7:4e:64:d3: c5:2d:ff:e3:03:d4:cd:eb:ad:8b:7d:80:e8:e3:43:1b:32:a6: 70:45:7c:63:b1:5f:65:7a:48:f8:e7:18:0a:43:b9:c9:fd:24: b0:3f:9c:1b -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt9XG3M/7hjv9jqFqp281blMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxOTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MTE2NTIwNGNmZTQ3MDczY2M4NmQ2ZGU0M2M0MWQ4ODE3ZTJlNDJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSwR7/UShZefyP0Pxav/F8SEsUDq ybbDSXvj7EdHbnDbDeis2obs9lwNEMFrchkqMPm/27fSWu9IGUand0TvgfrQKDmv oK3XbQKlF2aerGIKLJT/oLTPNmGvKrb1ujVosDLNLpXUEqToJHTOsPizL18FDmjo C3UUfH0YLYTwpiQBdq6WOeBhySky8aHisgf8XyebZFoAJcybeKgDqU8x8y6fqYFs 4FrFILIOhUCOi5m274szCvtLp2rXb8NaCrZGng+dvIR/KZwDFz9Z8QfFKwXYhmHF 57By8HRwLN1FwgJwVTLikTIN6xlvuYj1b4SJPlJkQFxGRcbM+lOjZSm3fwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFEEWUgTP5HBzzIbW3kPEHYgX4uQuMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY5L2ZkMzU2 OC1kZGU5LTQwOWMtYmJkMC0zNGQyOGI0M2MzMjQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjkvZmQzNTY4 LWRkZTktNDA5Yy1iYmQwLTM0ZDI4YjQzYzMyNC8xL1FSWlNCTV9rY0hQTWh0YmVR OFFkaUJmaTVDNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDj4TANBgkqhkiG9w0BAQsFAAOCAQEAmLBu1AjuBssN 3N3iW+GmGpx+kIjNl7e/nm2CsWHKPPQuN9NN2pywsZ5dtX1siSCYQusOd0VjEQ8Y NBQO9bnxrD0roz0EQoJKxjyyTCUfD3AhH/vfL1iA2kzmsXYpeWcUtm2uLJnDTqMH AEQDd2VPKWiO4qwC29+0ZB2LjlqZjnGVg4blx7v+/cBgHBcx0nAfjH8fsz9j2mBX xWqxu4fR4dcJS10oVTBjJ3WJESunPozeyX+WCfBJ4GSDirQJEKCFqYMNXjPK2UoV gVgJkfAkP7bmsrbXTmTTxS3/4wPUzeuti32A6ONDGzKmcEV8Y7FfZXpI+OcYCkO5 yf0ksD+cGw== -----END CERTIFICATE-----Generated at Mon Feb 9 15:06:19 2026 by rpki-client