This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QcDxLXt-PST_2s2mIykIit-CLGU.cer
File:                     QcDxLXt-PST_2s2mIykIit-CLGU.cer (raw, json)
Hash identifier:          lgAJTof48f7t94AgCFRLeHN8axTtbkSUr2+bhQdYYeI=
Subject key identifier:   41:C0:F1:2D:7B:7E:3D:24:FF:DA:CD:A6:23:29:08:8A:DF:82:2C:65
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B9D8AD3778D798003DC1E85C097048D80
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/21/99a8fd-bf6e-41da-b92e-ce9ed925e51b/1/QcDxLXt-PST_2s2mIykIit-CLGU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/21/99a8fd-bf6e-41da-b92e-ce9ed925e51b/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 08 Jan 2026 12:17:59 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 215137
                          IP: 2a04:1ac0::/29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:10:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:9d:8a:d3:77:8d:79:80:03:dc:1e:85:c0:97:04:8d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  8 12:17:59 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=41c0f12d7b7e3d24ffdacda62329088adf822c65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d4:21:eb:37:e0:4b:cf:7d:6c:26:82:84:7c:
                    15:1c:24:bc:6a:01:82:5a:08:50:37:1b:13:0a:79:
                    9c:b7:f6:01:25:cd:a7:88:37:31:c6:59:a3:50:0a:
                    f2:ad:7c:b9:66:3c:cb:34:18:c2:63:fd:30:b7:b8:
                    8d:d2:e3:8f:65:58:0a:52:1b:dd:38:56:91:0f:15:
                    7e:4e:82:c6:ed:b3:e2:82:3e:f9:eb:fc:a5:d2:d8:
                    39:e4:2d:5d:83:5f:90:53:65:86:12:74:81:c7:04:
                    0c:75:3f:61:a2:37:11:fc:46:78:15:21:48:89:a2:
                    ac:e8:1e:e5:4c:bf:dc:85:71:14:b4:17:3d:89:f7:
                    88:b3:11:37:e9:40:7e:2d:4c:26:8c:41:cc:77:81:
                    57:ce:b9:bb:87:73:dc:de:71:8c:9f:bc:df:d9:9c:
                    e0:90:28:7c:b3:94:27:65:c5:43:be:d5:ae:68:0f:
                    f3:93:7a:0b:8f:13:5d:62:3b:75:c0:f3:b2:c2:af:
                    06:39:52:e3:1f:26:55:9e:3c:03:b3:22:fe:0c:5e:
                    b0:42:fd:74:de:3e:92:d1:63:48:4a:ea:0c:ec:94:
                    d2:99:a5:74:ad:86:ee:cf:18:22:04:41:4e:b3:29:
                    08:89:e9:46:bc:a5:89:b1:ad:7a:4e:08:b2:40:ef:
                    ac:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:C0:F1:2D:7B:7E:3D:24:FF:DA:CD:A6:23:29:08:8A:DF:82:2C:65
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/99a8fd-bf6e-41da-b92e-ce9ed925e51b/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/99a8fd-bf6e-41da-b92e-ce9ed925e51b/1/QcDxLXt-PST_2s2mIykIit-CLGU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a04:1ac0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215137

    Signature Algorithm: sha256WithRSAEncryption
         48:b5:d1:3c:07:55:1b:d1:72:b6:f0:42:d4:c9:8a:5f:a1:4c:
         40:8d:69:03:e7:1f:32:84:9e:07:4d:e5:08:53:7c:56:34:a1:
         82:54:24:04:80:da:22:38:37:4a:76:47:e1:f2:d1:b2:f3:2a:
         12:4d:a5:40:3f:10:2d:a2:c0:41:5b:98:46:10:0f:95:f7:49:
         60:8f:f5:a7:29:db:4b:5f:ed:c2:a4:3b:04:ba:0c:43:34:5a:
         b4:29:9c:7f:41:31:13:ae:c7:3a:18:72:f5:91:66:28:59:23:
         90:c8:42:6b:90:1e:79:77:b2:56:71:ed:47:b1:e1:ae:a1:0d:
         a7:46:73:b4:64:82:1c:34:ac:a7:d0:99:e6:76:8e:56:0c:85:
         4a:11:47:7b:b5:cf:9a:e0:2d:6c:7d:32:7f:f5:ea:6d:f4:03:
         27:e1:da:d8:a9:8e:f4:ac:14:bd:2b:19:43:6d:46:5c:c3:2b:
         f7:88:17:35:d4:28:78:8b:33:06:2d:09:cf:e2:92:74:d8:57:
         28:47:56:73:04:00:16:4d:65:58:b8:9c:08:41:63:de:3c:e3:
         88:c8:89:95:8d:e7:bd:a2:00:81:8c:4d:ed:0b:e8:fe:dc:92:
         d3:e5:00:14:8a:cc:b1:cd:04:6a:89:f1:dd:57:1f:d3:06:e2:
         b6:41:f5:61
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgISAZuditN3jXmAA9wehcCXBI2AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMTA4MTIxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MWMwZjEyZDdiN2UzZDI0ZmZkYWNkYTYyMzI5MDg4YWRmODIyYzY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9Qh6zfgS899bCaChHwVHCS8agGC
WghQNxsTCnmct/YBJc2niDcxxlmjUAryrXy5ZjzLNBjCY/0wt7iN0uOPZVgKUhvd
OFaRDxV+ToLG7bPigj756/yl0tg55C1dg1+QU2WGEnSBxwQMdT9hojcR/EZ4FSFI
iaKs6B7lTL/chXEUtBc9ifeIsxE36UB+LUwmjEHMd4FXzrm7h3Pc3nGMn7zf2Zzg
kCh8s5QnZcVDvtWuaA/zk3oLjxNdYjt1wPOywq8GOVLjHyZVnjwDsyL+DF6wQv10
3j6S0WNISuoM7JTSmaV0rYbuzxgiBEFOsykIielGvKWJsa16TgiyQO+sQwIDAQAB
o4ICoTCCAp0wHQYDVR0OBBYEFEHA8S17fj0k/9rNpiMpCIrfgixlMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzIxLzk5YThm
ZC1iZjZlLTQxZGEtYjkyZS1jZTllZDkyNWU1MWIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjEvOTlhOGZk
LWJmNmUtNDFkYS1iOTJlLWNlOWVkOTI1ZTUxYi8xL1FjRHhMWHQtUFNUXzJzMm1J
eWtJaXQtQ0xHVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUDKgQawDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMDSGEwDQYJKoZIhvcNAQELBQADggEBAEi10TwHVRvRcrbwQtTJil+hTECNaQPn
HzKEngdN5QhTfFY0oYJUJASA2iI4N0p2R+Hy0bLzKhJNpUA/EC2iwEFbmEYQD5X3
SWCP9acp20tf7cKkOwS6DEM0WrQpnH9BMROuxzoYcvWRZihZI5DIQmuQHnl3slZx
7Uex4a6hDadGc7Rkghw0rKfQmeZ2jlYMhUoRR3u1z5rgLWx9Mn/16m30Ayfh2tip
jvSsFL0rGUNtRlzDK/eIFzXUKHiLMwYtCc/iknTYVyhHVnMEABZNZVi4nAhBY948
44jIiZWN572iAIGMTe0L6P7cktPlABSKzLHNBGqJ8d1XH9MG4rZB9WE=
-----END CERTIFICATE-----