This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QZs3miRkEoEOioBSpio5aIyjRXk.cer File: QZs3miRkEoEOioBSpio5aIyjRXk.cer (raw, json) Hash identifier: d8h3982Q4MdWRO8ivZr/ccSADijGxXdVTX0cjg31NRk= Subject key identifier: 41:9B:37:9A:24:64:12:81:0E:8A:80:52:A6:2A:39:68:8C:A3:45:79 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B36808EFA7335AD08229879C7AC3542 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e7/20256e-1e03-400a-9878-fcc89ece5906/1/QZs3miRkEoEOioBSpio5aIyjRXk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e7/20256e-1e03-400a-9878-fcc89ece5906/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:48 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 56932 IP: 91.225.48.0/22 IP: 193.176.248.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:80:8e:fa:73:35:ad:08:22:98:79:c7:ac:35:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=419b379a246412810e8a8052a62a39688ca34579 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b1:19:ef:b8:f1:49:1a:a7:1d:20:90:e2:b3: 2f:31:7f:ca:5f:7d:51:1d:2b:57:68:bc:b8:1f:66: c7:19:05:67:c3:45:0a:68:d4:a4:78:73:2f:79:17: 0c:de:de:d8:08:a3:54:a2:fe:9e:18:63:d0:57:35: 29:13:3d:d0:e6:76:ab:1f:ee:92:0f:be:e9:b9:c8: 79:57:5f:af:01:9e:ce:68:d9:64:1e:ad:5b:38:d6: c9:46:57:05:37:a5:51:e8:d0:52:18:a6:59:0f:6d: 65:1d:f3:10:42:a8:e2:06:26:2b:8d:7d:13:50:4e: 2b:56:6a:ae:12:a1:2d:82:d0:70:8a:49:c3:21:fd: 4b:42:44:8c:6b:09:fa:0e:01:77:3f:cf:fc:d8:75: c0:36:dd:4a:f5:09:48:3f:53:98:f4:e3:2f:ac:45: 6e:5c:70:6a:53:81:ca:1c:a5:59:23:72:b0:ce:d5: 87:e2:74:50:b2:0f:77:73:6d:7b:61:cc:67:ae:9e: 74:f6:c6:cf:2e:0c:51:99:23:10:c7:7c:19:31:94: a8:24:67:8b:05:f8:0c:40:cb:21:a1:22:c8:20:55: 05:54:6d:ea:ce:8c:5d:5e:fe:e4:2a:54:d8:5d:85: fe:fc:8d:2b:76:cb:7a:3b:e1:6c:83:c8:e2:cb:38: 2b:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:9B:37:9A:24:64:12:81:0E:8A:80:52:A6:2A:39:68:8C:A3:45:79 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/20256e-1e03-400a-9878-fcc89ece5906/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/20256e-1e03-400a-9878-fcc89ece5906/1/QZs3miRkEoEOioBSpio5aIyjRXk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.225.48.0/22 193.176.248.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 56932 Signature Algorithm: sha256WithRSAEncryption af:a7:ec:64:42:0b:40:54:38:2d:e9:05:ef:16:7d:34:f2:81: 68:b9:75:57:78:61:8b:be:dc:dd:08:54:5d:05:62:32:94:6b: 40:fb:71:e3:5a:2e:10:5f:49:a1:60:8c:41:ea:70:90:18:ff: df:4e:11:d0:f4:ec:23:24:68:6e:48:61:90:07:ab:cd:33:e2: 64:30:82:85:7b:ff:d0:28:4d:57:23:56:0c:5f:9b:ad:cd:c0: 24:fb:ce:7d:5a:ad:92:1c:c2:57:d5:a7:2d:68:2f:0d:6a:04: 17:3b:3e:37:8b:04:70:4e:8e:9d:94:cc:84:ef:78:6b:79:7d: 18:28:dd:5a:bf:a4:80:f2:26:fc:a0:5b:f7:8a:ad:f4:d1:eb: 82:f6:7f:61:78:98:34:4e:c7:b3:09:ce:d4:8e:2a:c8:d8:bf: 4c:bd:29:22:02:ba:08:64:43:0d:62:9f:62:cd:9b:b1:44:a4: bc:f8:88:ef:f2:24:b7:74:61:4c:27:e9:dd:36:c6:f9:74:e8: 80:77:eb:5e:1c:e8:2f:9e:8e:54:ab:9b:21:56:88:31:6b:1d: 2a:76:d4:eb:a4:25:bb:8d:54:00:85:e5:8b:b5:c0:12:00:fd: af:87:c5:74:7e:35:c0:50:98:1e:7a:fc:5c:8b:a5:2a:93:e6: e2:d5:5e:e5 -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZt7NoCO+nM1rQgimHnHrDVCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MTliMzc5YTI0NjQxMjgxMGU4YTgwNTJhNjJhMzk2ODhjYTM0NTc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbEZ77jxSRqnHSCQ4rMvMX/KX31R HStXaLy4H2bHGQVnw0UKaNSkeHMveRcM3t7YCKNUov6eGGPQVzUpEz3Q5narH+6S D77puch5V1+vAZ7OaNlkHq1bONbJRlcFN6VR6NBSGKZZD21lHfMQQqjiBiYrjX0T UE4rVmquEqEtgtBwiknDIf1LQkSMawn6DgF3P8/82HXANt1K9QlIP1OY9OMvrEVu XHBqU4HKHKVZI3KwztWH4nRQsg93c217Ycxnrp509sbPLgxRmSMQx3wZMZSoJGeL BfgMQMshoSLIIFUFVG3qzoxdXv7kKlTYXYX+/I0rdst6O+Fsg8jiyzgrCQIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFEGbN5okZBKBDoqAUqYqOWiMo0V5MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U3LzIwMjU2 ZS0xZTAzLTQwMGEtOTg3OC1mY2M4OWVjZTU5MDYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTcvMjAyNTZl LTFlMDMtNDAwYS05ODc4LWZjYzg5ZWNlNTkwNi8xL1FaczNtaVJrRW9FT2lvQlNw aW81YUl5alJYay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQCW+EwAwQCwbD4MBoGCCsGAQUFBwEIAQH/BAsw CaAHMAUCAwDeZDANBgkqhkiG9w0BAQsFAAOCAQEAr6fsZEILQFQ4LekF7xZ9NPKB aLl1V3hhi77c3QhUXQViMpRrQPtx41ouEF9JoWCMQepwkBj/304R0PTsIyRobkhh kAerzTPiZDCChXv/0ChNVyNWDF+brc3AJPvOfVqtkhzCV9WnLWgvDWoEFzs+N4sE cE6OnZTMhO94a3l9GCjdWr+kgPIm/KBb94qt9NHrgvZ/YXiYNE7HswnO1I4qyNi/ TL0pIgK6CGRDDWKfYs2bsUSkvPiI7/Ikt3RhTCfp3TbG+XTogHfrXhzoL56OVKub IVaIMWsdKnbU66Qlu41UAIXli7XAEgD9r4fFdH41wFCYHnr8XIulKpPm4tVe5Q== -----END CERTIFICATE-----Generated at Mon Feb 9 18:26:29 2026 by rpki-client