This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QaWbCWDqZda5I5PuA0ehqDL5uYQ.cer File: QaWbCWDqZda5I5PuA0ehqDL5uYQ.cer (raw, json) Hash identifier: 997ipgrmpE9THshvfh9VoveRcCJ7K2IDWjfQf8HpZaM= Subject key identifier: 41:A5:9B:09:60:EA:65:D6:B9:23:93:EE:03:47:A1:A8:32:F9:B9:84 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B791031AC9A7A69F98A59BD819140B786 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/QaWbCWDqZda5I5PuA0ehqDL5uYQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:17:43 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 29668 AS: 60012 IP: 81.19.48.0/20 IP: 81.91.240.0/20 IP: 176.221.56.0/21 IP: 185.62.76.0/22 IP: 185.204.44.0/22 IP: 2a01:90::/32 IP: 2a04:ef80::/29 IP: 2a0a:f3c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:31:ac:9a:7a:69:f9:8a:59:bd:81:91:40:b7:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=41a59b0960ea65d6b92393ee0347a1a832f9b984 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:52:46:cd:aa:0d:42:70:6d:a8:d4:a2:b9:aa: d6:f7:d2:61:5e:ee:3a:90:2b:e0:a9:9f:3a:59:f3: 39:b0:7c:fc:16:87:27:b0:8d:32:1b:f3:ce:fb:05: 63:5f:9f:e6:0b:ec:42:b0:a1:69:12:63:7e:5b:76: 49:9f:6c:ec:8f:6d:ae:30:c1:61:af:8d:e0:bc:e4: 56:3b:bf:8b:69:a6:7f:78:b2:c3:a8:f9:fd:d6:08: 12:ec:6f:ed:3e:1c:7b:d5:a5:ce:e0:32:c0:70:e4: fe:48:7f:a2:81:af:93:35:a7:a3:ad:a8:15:c1:7f: 1c:5d:ec:04:4d:fd:df:ba:94:04:07:06:20:92:ab: 21:08:07:2b:b1:eb:05:f0:57:19:5d:d9:33:6b:cd: 54:8f:95:b1:85:a7:08:87:26:4a:9b:61:58:e1:af: b1:b2:14:37:90:e2:9b:c7:6c:2d:3d:a9:5f:7a:40: 0d:3e:9b:1f:9b:4c:54:cc:97:cd:2c:2f:1e:bb:4e: f3:b2:0e:42:97:5c:ab:bd:01:c5:fe:31:56:98:a8: 86:6e:78:cc:82:d3:4d:26:04:40:a7:1c:ec:b9:e9: ad:c6:cf:86:70:fb:5b:e3:0b:52:00:bf:01:ea:f0: 25:a2:91:fa:38:2d:c5:63:2a:a3:f7:b5:35:72:6d: 13:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:A5:9B:09:60:EA:65:D6:B9:23:93:EE:03:47:A1:A8:32:F9:B9:84 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/QaWbCWDqZda5I5PuA0ehqDL5uYQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.19.48.0/20 81.91.240.0/20 176.221.56.0/21 185.62.76.0/22 185.204.44.0/22 IPv6: 2a01:90::/32 2a04:ef80::/29 2a0a:f3c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 29668 60012 Signature Algorithm: sha256WithRSAEncryption 88:27:54:74:ab:15:34:76:9c:28:cc:d4:ee:24:ed:af:49:82: 4e:8a:fa:56:d1:29:98:3e:f1:24:7c:b7:94:03:02:ec:e6:38: 46:e4:87:f0:7e:38:ed:d2:93:a9:d5:de:40:62:8f:43:1b:58: e8:99:ce:5f:13:e3:f0:4a:dd:e2:fd:a7:76:b7:5b:96:26:bb: 60:98:21:d4:a0:51:48:2c:e0:b3:69:e2:c6:1d:13:e1:0e:09: bc:ca:28:a6:15:d5:4b:29:c1:51:53:70:9d:5e:e1:dc:37:91: fc:64:83:fb:65:4b:f5:af:fd:15:75:f2:89:73:0b:af:99:a8: 8a:40:5d:ed:f9:c3:ff:a5:e3:d5:f0:9c:26:0a:43:1a:16:84: 3b:7e:86:59:d2:22:fb:99:f2:b0:b3:85:21:cd:9f:7a:6e:8a: 7a:e5:d5:31:d9:f2:34:6e:f3:b7:77:cc:c4:a1:8e:75:c1:e1: c3:e2:50:42:5d:10:2b:b9:94:13:a8:d8:98:1b:59:e7:6d:ee: 84:5e:39:e3:62:00:04:1b:1f:79:e1:81:f9:0d:25:02:05:d2: 22:90:ba:5c:f8:6c:68:f6:27:38:a5:4b:2e:76:66:28:9e:dc: ab:01:0a:c7:27:a0:be:01:d1:e3:ad:b9:69:2b:69:4e:96:4b: 78:2c:37:74 -----BEGIN CERTIFICATE----- MIIFzTCCBLWgAwIBAgISAZt5EDGsmnpp+YpZvYGRQLeGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MWE1OWIwOTYwZWE2NWQ2YjkyMzkzZWUwMzQ3YTFhODMyZjliOTg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlJGzaoNQnBtqNSiuarW99JhXu46 kCvgqZ86WfM5sHz8FocnsI0yG/PO+wVjX5/mC+xCsKFpEmN+W3ZJn2zsj22uMMFh r43gvORWO7+LaaZ/eLLDqPn91ggS7G/tPhx71aXO4DLAcOT+SH+iga+TNaejragV wX8cXewETf3fupQEBwYgkqshCAcrsesF8FcZXdkza81Uj5WxhacIhyZKm2FY4a+x shQ3kOKbx2wtPalfekANPpsfm0xUzJfNLC8eu07zsg5Cl1yrvQHF/jFWmKiGbnjM gtNNJgRApxzsuemtxs+GcPtb4wtSAL8B6vAlopH6OC3FYyqj97U1cm0T5QIDAQAB o4IC2TCCAtUwHQYDVR0OBBYEFEGlmwlg6mXWuSOT7gNHoagy+bmEMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdhLzBhMWI4 My04NmJhLTQwMWEtYTU0My1iZmRlYzBjMTEyZTMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2EvMGExYjgz LTg2YmEtNDAxYS1hNTQzLWJmZGVjMGMxMTJlMy8xL1FhV2JDV0RxWmRhNUk1UHVB MGVocURMNXVZUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFQGCCsGAQUF BwEHAQH/BEUwQzAkBAIAATAeAwQEURMwAwQEUVvwAwQDsN04AwQCuT5MAwQCucws MBsEAgACMBUDBQAqAQCQAwUDKgTvgAMFAyoK88AwHgYIKwYBBQUHAQgBAf8EDzAN oAswCQICc+QCAwDqbDANBgkqhkiG9w0BAQsFAAOCAQEAiCdUdKsVNHacKMzU7iTt r0mCTor6VtEpmD7xJHy3lAMC7OY4RuSH8H447dKTqdXeQGKPQxtY6JnOXxPj8Erd 4v2ndrdblia7YJgh1KBRSCzgs2nixh0T4Q4JvMoophXVSynBUVNwnV7h3DeR/GSD +2VL9a/9FXXyiXMLr5moikBd7fnD/6Xj1fCcJgpDGhaEO36GWdIi+5nysLOFIc2f em6KeuXVMdnyNG7zt3fMxKGOdcHhw+JQQl0QK7mUE6jYmBtZ523uhF4542IABBsf eeGB+Q0lAgXSIpC6XPhsaPYnOKVLLnZmKJ7cqwEKxyegvgHR4625aStpTpZLeCw3 dA== -----END CERTIFICATE-----Generated at Tue Jan 27 00:35:10 2026 by rpki-client