This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.cer File: Q_rXlUivxcg-Wbv-OIxkSSy1UBM.cer (raw, json) Hash identifier: cspIAic6e90FZ8PV15rza8gtm2F84PcxrCUEwjefHsA= Subject key identifier: 43:FA:D7:95:48:AF:C5:C8:3E:59:BB:FE:38:8C:64:49:2C:B5:50:13 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B6CE42D40EED6B890EB080639CB4D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:30 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 49594 IP: 95.174.72.0/21 IP: 185.29.32.0/22 IP: 188.73.0.0/18 IP: 188.231.0.0/17 IP: 213.151.160.0 -- 213.151.165.255 IP: 213.151.167.0/24 IP: 2a02:468::/29 IP: 2a03:800::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:6c:e4:2d:40:ee:d6:b8:90:eb:08:06:39:cb:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=43fad79548afc5c83e59bbfe388c64492cb55013 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:95:92:37:6a:db:da:3e:79:ed:27:cc:c5:da: ce:28:fe:d2:10:2d:31:e9:a1:49:83:9b:2a:df:dc: 59:8f:47:c2:79:6b:3b:f5:df:f0:75:2e:a3:db:f1: 06:18:99:69:33:be:89:fc:45:03:a4:de:dd:bd:f2: 5f:28:cb:83:f3:71:35:30:ae:58:07:36:4b:6c:30: 39:80:d1:8e:a3:ea:56:5a:8e:24:6b:82:f1:ad:3c: 4c:ec:05:af:82:ad:3b:f4:bb:df:4d:26:f6:ee:7d: fc:d4:ec:dd:d7:07:48:37:60:bc:b5:a6:94:d2:45: be:aa:d1:82:00:41:df:23:a6:6d:d3:59:52:8f:be: 85:0b:56:a6:d2:bf:5d:53:d9:2e:22:fe:45:f9:8b: d7:75:fd:7a:43:64:d7:51:6a:0d:92:2c:3f:05:d7: b4:26:41:4a:3a:76:ae:1b:3c:1d:dc:2a:b3:0c:39: 25:37:cf:82:fb:21:77:d9:7e:1e:d0:df:de:4b:46: 44:68:2c:5e:f8:72:57:b9:45:e8:b6:24:9e:08:34: 49:c7:cb:07:78:3d:73:8c:4d:fb:3b:9b:76:83:dd: aa:35:71:37:e9:bb:e4:df:8d:86:2f:28:88:ba:e5: e0:ee:1a:6b:f1:4e:5b:d0:7d:aa:81:5d:a5:5c:01: bd:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:FA:D7:95:48:AF:C5:C8:3E:59:BB:FE:38:8C:64:49:2C:B5:50:13 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.174.72.0/21 185.29.32.0/22 188.73.0.0/18 188.231.0.0/17 213.151.160.0-213.151.165.255 213.151.167.0/24 IPv6: 2a02:468::/29 2a03:800::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 49594 Signature Algorithm: sha256WithRSAEncryption 1c:4f:ed:54:05:ee:12:27:93:03:a5:4d:0d:0c:92:ff:54:c1: 43:dc:29:30:ec:f7:1c:d1:8e:e5:ef:25:13:02:37:69:40:1d: 73:02:18:16:be:64:ae:6e:f7:be:32:b9:1c:e8:eb:dd:b1:51: 7b:9f:a5:2c:f0:03:04:e4:dc:bc:01:fe:39:e7:50:6f:2e:97: 0f:50:b8:81:50:48:af:4a:ba:b2:fd:f6:8f:ca:f1:ea:64:a5: b7:b0:e0:2e:16:88:f9:6c:bf:54:dc:e4:9d:0b:4a:9d:ac:93: 8c:05:15:7d:c8:82:d1:ed:eb:5a:ed:cb:a1:a4:60:bb:fc:cc: 40:c4:24:dd:cf:c1:06:43:aa:2a:41:7d:36:b8:25:a7:65:a6: 9d:cc:d3:f2:60:83:5d:06:9d:0b:0a:90:15:33:b1:d3:a1:15: e0:8f:91:05:1d:c4:b7:4f:f3:b7:52:46:82:8a:8e:e2:fa:dc: 71:63:3f:bb:47:c6:4b:e1:fa:32:e4:b9:8f:58:0e:e3:8b:47: d8:7b:fb:b2:5b:32:0f:3e:e2:25:66:19:c2:ff:1f:9b:55:1a: f1:8e:7c:69:e1:2e:af:a8:96:da:2f:34:8c:02:db:b5:ac:aa: d3:c6:a3:ac:24:51:fb:6a:8d:09:60:a8:88:b8:22:d1:d4:b1: b2:f2:b2:06 -----BEGIN CERTIFICATE----- MIIF0DCCBLigAwIBAgISAZt6W2zkLUDu1riQ6wgGOctNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0M2ZhZDc5NTQ4YWZjNWM4M2U1OWJiZmUzODhjNjQ0OTJjYjU1MDEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5JWSN2rb2j557SfMxdrOKP7SEC0x 6aFJg5sq39xZj0fCeWs79d/wdS6j2/EGGJlpM76J/EUDpN7dvfJfKMuD83E1MK5Y BzZLbDA5gNGOo+pWWo4ka4LxrTxM7AWvgq079LvfTSb27n381Ozd1wdIN2C8taaU 0kW+qtGCAEHfI6Zt01lSj76FC1am0r9dU9kuIv5F+YvXdf16Q2TXUWoNkiw/Bde0 JkFKOnauGzwd3CqzDDklN8+C+yF32X4e0N/eS0ZEaCxe+HJXuUXotiSeCDRJx8sH eD1zjE37O5t2g92qNXE36bvk342GLyiIuuXg7hpr8U5b0H2qgV2lXAG9yQIDAQAB o4IC3DCCAtgwHQYDVR0OBBYEFEP615VIr8XIPlm7/jiMZEkstVATMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y4LzJjZjJj MS0xOTYyLTRiNzAtOWU1Yi1mZTg1NWRhYmI3NWUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjgvMmNmMmMx LTE5NjItNGI3MC05ZTViLWZlODU1ZGFiYjc1ZS8xL1FfclhsVWl2eGNnLVdidi1P SXhrU1N5MVVCTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFsGCCsGAQUF BwEHAQH/BEwwSjAyBAIAATAsAwQDX65IAwQCuR0gAwQGvEkAAwQHvOcAMAwDBAXV l6ADBAHVl6QDBADVl6cwFAQCAAIwDgMFAyoCBGgDBQMqAwgAMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwDBujANBgkqhkiG9w0BAQsFAAOCAQEAHE/tVAXuEieTA6VN DQyS/1TBQ9wpMOz3HNGO5e8lEwI3aUAdcwIYFr5krm73vjK5HOjr3bFRe5+lLPAD BOTcvAH+OedQby6XD1C4gVBIr0q6sv32j8rx6mSlt7DgLhaI+Wy/VNzknQtKnayT jAUVfciC0e3rWu3LoaRgu/zMQMQk3c/BBkOqKkF9Nrglp2WmnczT8mCDXQadCwqQ FTOx06EV4I+RBR3Et0/zt1JGgoqO4vrccWM/u0fGS+H6MuS5j1gO44tH2Hv7slsy Dz7iJWYZwv8fm1Ua8Y58aeEur6iW2i80jALbtayq08ajrCRR+2qNCWCoiLgi0dSx svKyBg== -----END CERTIFICATE-----Generated at Wed Jan 21 10:30:45 2026 by rpki-client