This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QTsVW4BGJkf4WUaogk0in-6q--Y.cer File: QTsVW4BGJkf4WUaogk0in-6q--Y.cer (raw, json) Hash identifier: dzHLh5qVaMwYI9ZEU6R8uC8HN6TS0Cq80397FVjN8l4= Subject key identifier: 41:3B:15:5B:80:46:26:47:F8:59:46:A8:82:4D:22:9F:EE:AA:FB:E6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78348133AFF0E60CF7C93AEAA37260E2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/63/ed63bf-2b0e-4c9b-98b5-4a251cbec791/1/QTsVW4BGJkf4WUaogk0in-6q--Y.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/63/ed63bf-2b0e-4c9b-98b5-4a251cbec791/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:17:45 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 202215 IP: 185.49.208.0/22 IP: 2a01:a2a0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:81:33:af:f0:e6:0c:f7:c9:3a:ea:a3:72:60:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=413b155b80462647f85946a8824d229feeaafbe6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d9:d5:d0:f7:cf:9c:26:ac:17:e9:4e:65:b1: 22:66:26:82:31:fd:fa:9c:a6:a6:87:9c:f0:e5:92: 2c:66:fc:f8:f7:5e:7f:3f:7d:05:da:cd:bf:6e:ea: e7:b4:c0:41:59:77:04:69:d2:2e:c0:38:dd:77:ff: a4:18:db:63:10:d6:0d:39:a6:6f:f6:d8:58:a0:04: aa:8e:e9:1d:6a:0a:cb:f3:5a:7d:5f:b7:de:12:3c: bf:01:74:dd:45:2a:88:e3:b6:aa:df:64:dd:a7:31: 36:70:90:d9:f3:4a:9d:51:e4:68:94:17:59:c8:c2: 3f:18:c5:bc:c8:af:b9:8e:9a:37:7c:3a:22:5d:0e: 2e:68:64:b8:03:c1:9f:4d:02:d4:c9:e8:c2:30:b3: 65:aa:da:f5:98:56:bc:02:75:2a:3d:3a:2d:53:bc: 58:b6:dc:84:e3:ed:8b:06:70:95:83:5c:c3:07:f8: b9:30:e7:cc:fe:26:7e:d9:a7:1e:b9:30:fc:3c:59: 9a:d4:2e:17:cd:a1:58:92:6c:ed:35:17:dd:68:23: 10:4c:50:b1:6a:e6:89:b0:84:f0:be:30:27:2f:00: 24:ba:23:a8:88:b4:80:80:d2:ac:1e:ee:2f:9d:76: ff:a9:42:6a:e3:e4:99:ce:f3:aa:c9:35:d3:a2:f8: 8e:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:3B:15:5B:80:46:26:47:F8:59:46:A8:82:4D:22:9F:EE:AA:FB:E6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ed63bf-2b0e-4c9b-98b5-4a251cbec791/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ed63bf-2b0e-4c9b-98b5-4a251cbec791/1/QTsVW4BGJkf4WUaogk0in-6q--Y.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.49.208.0/22 IPv6: 2a01:a2a0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 202215 Signature Algorithm: sha256WithRSAEncryption 03:1d:43:8e:18:51:b1:fd:af:4a:4d:d1:87:31:39:b8:d4:45: dd:c9:48:d2:5b:2c:43:ea:86:f5:27:34:2f:85:ed:67:68:a5: 6e:fb:81:df:97:f0:ec:8f:3f:50:23:fe:e9:74:7e:63:55:58: 4b:08:b0:35:e7:1d:0a:5a:46:05:75:a6:60:3d:2c:10:fb:5b: 2d:09:52:53:32:a6:fa:f4:95:ae:22:65:ea:53:88:6a:5a:4b: f8:62:37:64:7c:8b:8f:46:0d:1f:54:cc:92:bc:ef:45:9d:b2: 0e:88:37:e5:4d:d9:f8:f5:4a:c9:49:d0:0e:65:e5:98:ac:c6: 53:54:2e:85:5d:df:49:d9:d4:89:61:04:bb:f8:c7:9f:7c:f3: e1:54:60:f8:b1:5e:45:19:b3:49:66:b8:4c:b0:46:ff:49:e0: 4a:1d:4b:ce:a2:06:98:a8:e7:28:9d:9f:ae:fd:ed:99:cb:9b: cd:5a:89:b5:5a:18:36:e1:89:38:d6:23:1c:04:af:e1:c0:30: 52:31:5e:07:e5:75:3b:b7:ad:1a:53:19:31:54:3b:3a:53:1d: 6d:21:46:7a:b7:36:b8:b9:3e:b5:2b:10:f0:38:88:3e:be:0f: f2:ce:aa:46:28:ce:48:35:07:96:98:a1:9b:cd:70:1d:cb:a9: 5f:38:15:c4 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt4NIEzr/DmDPfJOuqjcmDiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MTNiMTU1YjgwNDYyNjQ3Zjg1OTQ2YTg4MjRkMjI5ZmVlYWFmYmU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNnV0PfPnCasF+lOZbEiZiaCMf36 nKamh5zw5ZIsZvz4915/P30F2s2/burntMBBWXcEadIuwDjdd/+kGNtjENYNOaZv 9thYoASqjukdagrL81p9X7feEjy/AXTdRSqI47aq32TdpzE2cJDZ80qdUeRolBdZ yMI/GMW8yK+5jpo3fDoiXQ4uaGS4A8GfTQLUyejCMLNlqtr1mFa8AnUqPTotU7xY ttyE4+2LBnCVg1zDB/i5MOfM/iZ+2aceuTD8PFma1C4XzaFYkmztNRfdaCMQTFCx auaJsITwvjAnLwAkuiOoiLSAgNKsHu4vnXb/qUJq4+SZzvOqyTXToviOSwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFEE7FVuARiZH+FlGqIJNIp/uqvvmMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYzL2VkNjNi Zi0yYjBlLTRjOWItOThiNS00YTI1MWNiZWM3OTEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjMvZWQ2M2Jm LTJiMGUtNGM5Yi05OGI1LTRhMjUxY2JlYzc5MS8xL1FUc1ZXNEJHSmtmNFdVYW9n azBpbi02cS0tWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuTHQMA0EAgACMAcDBQAqAaKgMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMV5zANBgkqhkiG9w0BAQsFAAOCAQEAAx1DjhhRsf2v Sk3RhzE5uNRF3clI0lssQ+qG9Sc0L4XtZ2ilbvuB35fw7I8/UCP+6XR+Y1VYSwiw NecdClpGBXWmYD0sEPtbLQlSUzKm+vSVriJl6lOIalpL+GI3ZHyLj0YNH1TMkrzv RZ2yDog35U3Z+PVKyUnQDmXlmKzGU1QuhV3fSdnUiWEEu/jHn3zz4VRg+LFeRRmz SWa4TLBG/0ngSh1LzqIGmKjnKJ2frv3tmcubzVqJtVoYNuGJONYjHASv4cAwUjFe B+V1O7etGlMZMVQ7OlMdbSFGerc2uLk+tSsQ8DiIPr4P8s6qRijOSDUHlpihm81w HcupXzgVxA== -----END CERTIFICATE-----Generated at Mon Feb 9 15:13:08 2026 by rpki-client