This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QTevCPGaoVvtP0G-YrNjA9zH3PQ.cer File: QTevCPGaoVvtP0G-YrNjA9zH3PQ.cer (raw, json) Hash identifier: z9JBnelhw7S2/cgudzJRJfsv+CpYwWdaVOWpT8fxXS0= Subject key identifier: 41:37:AF:08:F1:9A:A1:5B:ED:3F:41:BE:62:B3:63:03:DC:C7:DC:F4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7758A5F2BE0047A273B7DB21519B67AC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/QTevCPGaoVvtP0G-YrNjA9zH3PQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:17:36 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 194.242.6.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:a5:f2:be:00:47:a2:73:b7:db:21:51:9b:67:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4137af08f19aa15bed3f41be62b36303dcc7dcf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ea:b5:58:87:98:fb:b4:12:05:9a:4d:ce:54: e0:e2:ef:f2:7f:6d:40:c7:e7:35:4b:ee:1f:57:c7: 4a:60:00:5e:a7:91:02:ba:13:04:36:0d:a5:3d:35: 3b:a5:b6:ea:26:20:a8:99:3f:27:4c:fb:dd:b8:b8: f9:78:e8:1d:8e:88:9f:7d:2e:21:51:88:19:54:a2: cc:64:58:08:ad:41:c8:6d:3f:3e:17:85:ca:7b:61: ae:a8:d8:f4:96:62:9a:3c:6b:c5:eb:cd:4f:50:e3: 6c:09:1a:45:e3:7f:79:74:10:df:70:da:71:0b:96: a1:fc:ad:97:5d:c4:73:10:6a:f1:00:14:35:04:ec: bf:7a:2e:66:5c:9b:1d:ec:1f:81:b2:2a:b3:48:65: 23:d8:12:0b:b2:03:25:21:4f:43:83:2f:23:46:49: ca:d9:b5:e5:21:35:fa:d5:19:c2:51:ff:40:a0:42: 2b:71:fc:f2:6a:c8:75:ab:17:85:95:1a:33:00:81: e4:67:b5:cd:2f:12:e2:47:af:e6:48:be:c6:14:f0: 65:ca:1b:57:a6:49:90:be:eb:67:04:27:85:fd:d6: d9:f0:52:cb:40:17:0b:98:cb:13:a0:0b:51:a8:00: 05:d7:c2:68:0a:f9:e0:6f:d1:a8:29:6e:90:0c:51: 88:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:37:AF:08:F1:9A:A1:5B:ED:3F:41:BE:62:B3:63:03:DC:C7:DC:F4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/QTevCPGaoVvtP0G-YrNjA9zH3PQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.242.6.0/23 Signature Algorithm: sha256WithRSAEncryption 00:ef:69:fd:38:f6:5e:d1:8c:87:fe:0c:f6:f6:a5:40:c7:7a: 80:87:9a:e1:08:43:3b:70:cb:1e:26:40:b5:71:f6:e3:00:74: e9:9e:93:64:06:6e:48:a5:e0:96:76:2e:a6:e2:a3:8f:8a:e7: 15:5f:16:aa:f1:ef:45:77:28:8b:69:47:8b:dd:76:97:8c:06: e6:a5:38:b2:40:33:03:ec:51:33:7b:e7:5a:d1:92:85:71:0b: ef:17:50:e6:a7:bd:6e:6c:2d:84:1c:db:45:d7:68:88:25:c0: 1f:d0:fc:c1:da:9c:5d:52:91:f8:e9:30:cc:ab:9a:8f:1c:c6: 33:f7:df:42:a0:a3:d0:e5:74:af:da:d3:fc:b8:b3:36:f8:e6: 67:a6:f0:84:76:c5:87:7b:d7:91:17:0a:a1:60:5f:52:26:f7: 3d:bb:fa:f7:e3:87:9f:ee:f0:ec:0f:7c:4e:66:d6:ec:6b:82: 6a:e3:00:59:09:78:b8:03:52:92:78:2d:43:0c:b1:72:34:02: 95:67:8d:fa:82:ca:e4:5b:0e:ae:cf:18:82:b4:83:79:76:f6: f3:35:99:ff:6a:70:8d:d1:28:e6:3b:74:87:b6:c1:a2:91:c1: 68:14:ea:f6:43:a3:40:2c:57:12:e9:7c:59:66:3e:2c:df:57: 5e:7a:0e:8d -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt3WKXyvgBHonO32yFRm2esMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MTM3YWYwOGYxOWFhMTViZWQzZjQxYmU2MmIzNjMwM2RjYzdkY2Y0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Oq1WIeY+7QSBZpNzlTg4u/yf21A x+c1S+4fV8dKYABep5ECuhMENg2lPTU7pbbqJiComT8nTPvduLj5eOgdjoiffS4h UYgZVKLMZFgIrUHIbT8+F4XKe2GuqNj0lmKaPGvF681PUONsCRpF4395dBDfcNpx C5ah/K2XXcRzEGrxABQ1BOy/ei5mXJsd7B+BsiqzSGUj2BILsgMlIU9Dgy8jRknK 2bXlITX61RnCUf9AoEIrcfzyash1qxeFlRozAIHkZ7XNLxLiR6/mSL7GFPBlyhtX pkmQvutnBCeF/dbZ8FLLQBcLmMsToAtRqAAF18JoCvngb9GoKW6QDFGItwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFEE3rwjxmqFb7T9BvmKzYwPcx9z0MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU1L2RmZGQy NC00ZDE2LTRlNzMtYjYxOS03ZjVlYzI3NWNhYTQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTUvZGZkZDI0 LTRkMTYtNGU3My1iNjE5LTdmNWVjMjc1Y2FhNC8xL1FUZXZDUEdhb1Z2dFAwRy1Z ck5qQTl6SDNQUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQBwvIGMA0GCSqGSIb3DQEBCwUAA4IBAQAA72n9 OPZe0YyH/gz29qVAx3qAh5rhCEM7cMseJkC1cfbjAHTpnpNkBm5IpeCWdi6m4qOP iucVXxaq8e9FdyiLaUeL3XaXjAbmpTiyQDMD7FEze+da0ZKFcQvvF1Dmp71ubC2E HNtF12iIJcAf0PzB2pxdUpH46TDMq5qPHMYz999CoKPQ5XSv2tP8uLM2+OZnpvCE dsWHe9eRFwqhYF9SJvc9u/r344ef7vDsD3xOZtbsa4Jq4wBZCXi4A1KSeC1DDLFy NAKVZ436gsrkWw6uzxiCtIN5dvbzNZn/anCN0SjmO3SHtsGikcFoFOr2Q6NALFcS 6XxZZj4s31deeg6N -----END CERTIFICATE-----Generated at Mon Jan 26 13:42:05 2026 by rpki-client