This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Q_aHvzg-MgRbwCfcyuqtzzbI5xU.cer File: Q_aHvzg-MgRbwCfcyuqtzzbI5xU.cer (raw, json) Hash identifier: 8kSGMuw8Pjc1nNOQuZgDg02ygl234XJZpLuVojyB5Go= Subject key identifier: 43:F6:87:BF:38:3E:32:04:5B:C0:27:DC:CA:EA:AD:CF:36:C8:E7:15 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A59E3000F18E80B370DED5AED17FC18 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c8/851a00-595a-4fb8-ac2c-9261626a48c5/1/Q_aHvzg-MgRbwCfcyuqtzzbI5xU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c8/851a00-595a-4fb8-ac2c-9261626a48c5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:17:49 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 205410 IP: 2a0c:6200::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:59:e3:00:0f:18:e8:0b:37:0d:ed:5a:ed:17:fc:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=43f687bf383e32045bc027dccaeaadcf36c8e715 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a5:35:5a:c3:d4:e4:58:0e:c2:b6:fc:e7:95: e3:60:7e:59:32:26:71:8a:af:9b:cf:c6:e1:1e:e2: 97:16:af:92:08:42:ec:05:67:cc:45:62:2a:21:09: 49:7d:25:87:2b:c0:e9:12:18:a7:18:aa:f3:8e:0f: ad:b5:4d:91:b8:3d:ad:73:09:52:b4:98:00:5f:65: 19:cd:23:88:9b:6c:a2:55:9c:86:a0:92:81:29:fb: a0:4f:09:e9:2e:67:6f:12:f4:dd:82:ec:cd:5a:20: 7b:c0:66:f3:20:40:c2:bc:95:5d:3a:70:55:d4:63: 80:ce:53:32:66:5b:db:82:a6:9b:53:cb:49:58:8a: f3:1b:7d:6e:93:f3:5a:24:71:50:4b:37:7d:a0:3f: f7:2c:2f:99:a5:dc:76:5d:2c:e5:33:b2:93:d6:9e: d0:75:28:8c:c0:97:b5:54:21:fb:d3:7a:f1:6a:8d: 71:9a:da:37:6f:de:84:2b:4f:fe:5a:fc:f6:b8:b1: e4:27:9b:13:80:b5:1f:52:7e:85:39:04:9d:42:2b: 06:e6:6b:c4:b6:ca:e0:85:da:f9:34:e3:cd:e8:62: 85:5c:f6:0b:5c:69:f1:46:a0:5f:af:c1:78:3b:47: 60:14:95:88:dd:f2:d0:95:25:aa:a8:e1:b3:9c:84: ec:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:F6:87:BF:38:3E:32:04:5B:C0:27:DC:CA:EA:AD:CF:36:C8:E7:15 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/851a00-595a-4fb8-ac2c-9261626a48c5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/851a00-595a-4fb8-ac2c-9261626a48c5/1/Q_aHvzg-MgRbwCfcyuqtzzbI5xU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:6200::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 205410 Signature Algorithm: sha256WithRSAEncryption 24:f5:89:a5:d0:a8:23:d4:2a:be:cd:00:8f:36:be:22:6d:ca: 42:b8:ae:20:c5:ca:43:3b:76:01:20:31:a9:b7:e9:02:12:b4: 7b:bc:7e:a7:a1:30:a0:59:77:5a:59:e8:ab:29:a4:d4:63:09: 4a:59:c2:e5:28:43:aa:0a:bc:7f:04:b1:3f:3c:70:21:70:99: 29:47:45:4a:f3:25:25:0e:d1:9c:d4:3c:a1:0b:c8:02:09:02: cf:79:3b:70:7e:ad:9d:89:13:a2:2a:e8:23:8a:bb:86:20:3b: f6:7a:e2:2b:92:2b:b9:a3:58:b9:7e:f9:58:57:3b:75:d7:a8: 4a:2b:df:cd:7f:29:ea:70:a3:51:51:aa:e4:69:91:df:e0:3c: 5a:6c:f1:2d:fd:88:a1:fd:fd:be:c1:29:77:42:c1:e8:e1:71: 7f:43:84:7e:18:8a:a2:75:4c:ab:50:55:43:ae:70:34:8a:ed: 72:94:2e:86:2a:16:3a:d8:ab:eb:a9:a9:6e:a1:12:1e:4b:d5: cb:dc:50:a8:89:58:e2:70:3b:5c:2c:28:9f:90:69:56:98:39: 79:ee:6a:65:6f:92:48:a0:02:3c:2e:15:7a:50:f3:46:98:21: e3:e8:c8:11:17:af:f0:c5:58:e9:bf:ee:00:26:76:d9:3f:00: 45:84:1e:bf -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgISAZt6WeMADxjoCzcN7VrtF/wYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0M2Y2ODdiZjM4M2UzMjA0NWJjMDI3ZGNjYWVhYWRjZjM2YzhlNzE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6U1WsPU5FgOwrb855XjYH5ZMiZx iq+bz8bhHuKXFq+SCELsBWfMRWIqIQlJfSWHK8DpEhinGKrzjg+ttU2RuD2tcwlS tJgAX2UZzSOIm2yiVZyGoJKBKfugTwnpLmdvEvTdguzNWiB7wGbzIEDCvJVdOnBV 1GOAzlMyZlvbgqabU8tJWIrzG31uk/NaJHFQSzd9oD/3LC+Zpdx2XSzlM7KT1p7Q dSiMwJe1VCH703rxao1xmto3b96EK0/+Wvz2uLHkJ5sTgLUfUn6FOQSdQisG5mvE tsrghdr5NOPN6GKFXPYLXGnxRqBfr8F4O0dgFJWI3fLQlSWqqOGznITsNQIDAQAB o4ICoTCCAp0wHQYDVR0OBBYEFEP2h784PjIEW8An3Mrqrc82yOcVMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M4Lzg1MWEw MC01OTVhLTRmYjgtYWMyYy05MjYxNjI2YTQ4YzUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzgvODUxYTAw LTU5NWEtNGZiOC1hYzJjLTkyNjE2MjZhNDhjNS8xL1FfYUh2emctTWdSYndDZmN5 dXF0enpiSTV4VS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF BwEHAQH/BBEwDzANBAIAAjAHAwUDKgxiADAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMDImIwDQYJKoZIhvcNAQELBQADggEBACT1iaXQqCPUKr7NAI82viJtykK4riDF ykM7dgEgMam36QIStHu8fqehMKBZd1pZ6KsppNRjCUpZwuUoQ6oKvH8EsT88cCFw mSlHRUrzJSUO0ZzUPKELyAIJAs95O3B+rZ2JE6Iq6COKu4YgO/Z64iuSK7mjWLl+ +VhXO3XXqEor381/Kepwo1FRquRpkd/gPFps8S39iKH9/b7BKXdCwejhcX9DhH4Y iqJ1TKtQVUOucDSK7XKULoYqFjrYq+upqW6hEh5L1cvcUKiJWOJwO1wsKJ+QaVaY OXnuamVvkkigAjwuFXpQ80aYIePoyBEXr/DFWOm/7gAmdtk/AEWEHr8= -----END CERTIFICATE-----Generated at Mon Feb 9 15:10:24 2026 by rpki-client