This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QSHH-wQVOCnZahwDjw33FNpZVAQ.cer File: QSHH-wQVOCnZahwDjw33FNpZVAQ.cer (raw, json) Hash identifier: RF5AWrwP/WfTPa4LOoeJMi/26uZ3CZe8tN4eylzqyt8= Subject key identifier: 41:21:C7:FB:04:15:38:29:D9:6A:1C:03:8F:0D:F7:14:DA:59:54:04 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA440F101D9FB62AA6C05BD3D016D6F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/97/05e109-2347-4a7c-8adb-d1981dd446cf/1/QSHH-wQVOCnZahwDjw33FNpZVAQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/97/05e109-2347-4a7c-8adb-d1981dd446cf/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:18:40 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 213032 IP: 2001:678:dc4::/48 IP: 2001:678:dc8::/48 IP: 2001:67c:27c4::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:40:f1:01:d9:fb:62:aa:6c:05:bd:3d:01:6d:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4121c7fb04153829d96a1c038f0df714da595404 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b5:c3:05:c5:a3:09:39:99:88:25:f8:1f:b7: 4b:80:5e:f1:fc:33:1c:64:31:91:6d:4d:ca:90:ef: 25:25:90:2f:5c:2f:ae:37:ab:fb:d0:71:2d:39:30: 7f:9c:a9:68:59:44:7b:41:38:8e:ec:32:36:0c:2f: f7:70:91:ec:28:ab:84:77:09:ec:06:7c:6e:17:66: f7:98:b0:c6:c1:16:31:4f:52:a9:e1:76:69:23:e3: 5a:c0:51:62:ac:57:f1:87:d0:7b:3d:00:6f:3f:33: 42:03:fa:d4:cb:44:42:91:d3:cb:fe:30:ad:22:0d: 38:33:ee:08:0c:45:18:67:9d:be:77:0a:72:f0:d3: bf:10:06:6f:da:92:b4:62:bd:b0:0c:3f:99:ce:e8: 38:22:81:fa:a1:49:15:65:0f:a7:f8:fa:67:1d:4b: 28:91:ff:6a:3d:4a:91:63:63:dc:11:2c:37:d8:cc: 17:44:16:e8:cb:e5:24:7d:51:21:28:49:0b:3b:ac: 62:52:ef:fd:fd:23:dc:f4:ad:49:6f:3a:1b:ea:27: 1e:4f:ac:e1:55:72:b0:b7:2d:d1:19:99:8e:d4:a7: 26:84:ba:bb:da:1f:08:b5:33:47:fa:34:03:d5:73: 27:06:64:a9:1f:09:7b:bd:6a:75:63:e9:72:7d:ff: da:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:21:C7:FB:04:15:38:29:D9:6A:1C:03:8F:0D:F7:14:DA:59:54:04 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/05e109-2347-4a7c-8adb-d1981dd446cf/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/05e109-2347-4a7c-8adb-d1981dd446cf/1/QSHH-wQVOCnZahwDjw33FNpZVAQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:dc4::/48 2001:678:dc8::/48 2001:67c:27c4::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 213032 Signature Algorithm: sha256WithRSAEncryption 0f:bc:7b:c4:2f:68:71:5b:6e:0f:5d:01:44:fe:10:64:3a:f2: 11:54:e8:dd:d4:7c:4d:87:de:cf:b0:8b:69:d2:d2:ab:89:58: 34:43:a0:e9:35:4c:b2:b6:8d:a5:13:6b:d7:6a:5a:ac:97:24: 2e:99:6a:7e:06:26:44:ed:fe:71:0c:45:bb:ae:7c:dd:45:6c: 67:3f:db:30:6c:6e:cc:57:d8:bf:cf:0c:e1:51:9d:ab:c3:74: 8a:a0:6f:df:b0:c9:71:6d:89:a9:29:af:31:46:d3:70:bf:7e: af:13:ac:c9:70:f5:15:26:c1:d0:3a:a5:d3:37:ac:43:75:78: a5:e7:5e:04:ac:dd:75:0a:53:3e:7c:88:4d:29:57:ad:90:74: 72:e7:cd:a7:1b:b2:fe:bd:37:15:29:9c:05:6f:44:5f:d3:c6: 4d:e5:d7:33:f0:2f:2a:8d:9f:08:1f:57:5c:ee:ea:2c:c2:a8: 04:2e:2e:43:63:08:58:98:86:c2:c7:7d:65:74:7a:1c:7d:01: 95:f8:d2:f2:26:64:28:71:5c:67:e7:70:15:0f:d7:c3:51:a5: 7e:bd:80:5a:3b:9f:e3:45:2f:d7:2d:45:b4:b1:89:d0:c6:24: 13:29:8e:e8:6b:e0:36:56:08:fe:f2:83:c9:c2:a7:e6:c5:41: ac:77:fc:d9 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt7pEDxAdn7YqpsBb09AW1vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MTIxYzdmYjA0MTUzODI5ZDk2YTFjMDM4ZjBkZjcxNGRhNTk1NDA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrXDBcWjCTmZiCX4H7dLgF7x/DMc ZDGRbU3KkO8lJZAvXC+uN6v70HEtOTB/nKloWUR7QTiO7DI2DC/3cJHsKKuEdwns BnxuF2b3mLDGwRYxT1Kp4XZpI+NawFFirFfxh9B7PQBvPzNCA/rUy0RCkdPL/jCt Ig04M+4IDEUYZ52+dwpy8NO/EAZv2pK0Yr2wDD+Zzug4IoH6oUkVZQ+n+PpnHUso kf9qPUqRY2PcESw32MwXRBboy+UkfVEhKEkLO6xiUu/9/SPc9K1Jbzob6iceT6zh VXKwty3RGZmO1KcmhLq72h8ItTNH+jQD1XMnBmSpHwl7vWp1Y+lyff/aGQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFEEhx/sEFTgp2WocA48N9xTaWVQEMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk3LzA1ZTEw OS0yMzQ3LTRhN2MtOGFkYi1kMTk4MWRkNDQ2Y2YvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTcvMDVlMTA5 LTIzNDctNGE3Yy04YWRiLWQxOTgxZGQ0NDZjZi8xL1FTSEgtd1FWT0NuWmFod0Rq dzMzRk5wWlZBUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzAhBAIAAjAbAwcAIAEGeA3EAwcAIAEGeA3IAwcAIAEGfCfEMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwNAKDANBgkqhkiG9w0BAQsFAAOCAQEAD7x7 xC9ocVtuD10BRP4QZDryEVTo3dR8TYfez7CLadLSq4lYNEOg6TVMsraNpRNr12pa rJckLplqfgYmRO3+cQxFu6583UVsZz/bMGxuzFfYv88M4VGdq8N0iqBv37DJcW2J qSmvMUbTcL9+rxOsyXD1FSbB0Dql0zesQ3V4pedeBKzddQpTPnyITSlXrZB0cufN pxuy/r03FSmcBW9EX9PGTeXXM/AvKo2fCB9XXO7qLMKoBC4uQ2MIWJiGwsd9ZXR6 HH0BlfjS8iZkKHFcZ+dwFQ/Xw1Glfr2AWjuf40Uv1y1FtLGJ0MYkEymO6GvgNlYI /vKDycKn5sVBrHf82Q== -----END CERTIFICATE-----Generated at Mon Feb 2 08:13:31 2026 by rpki-client