This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QclkksAECK1U1zDA62KeOgtQ2A8.cer File: QclkksAECK1U1zDA62KeOgtQ2A8.cer (raw, json) Hash identifier: Lgv941+KaDBe6kzAsS3cE/KuWybsisSo+We24aGu8Zc= Subject key identifier: 41:C9:64:92:C0:04:08:AD:54:D7:30:C0:EB:62:9E:3A:0B:50:D8:0F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F15CA365F316E7D3100B711C9A03B92 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e5/19d090-103b-43db-b074-a4e37c867b09/1/QclkksAECK1U1zDA62KeOgtQ2A8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e5/19d090-103b-43db-b074-a4e37c867b09/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.213.112.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:ca:36:5f:31:6e:7d:31:00:b7:11:c9:a0:3b:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=41c96492c00408ad54d730c0eb629e3a0b50d80f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:e9:bb:df:00:00:ee:77:9e:0e:a2:6e:7b:c0: 2b:c1:91:c1:3f:76:0e:fe:bf:fc:7f:d2:04:93:b5: 7b:90:4c:fd:02:bd:d3:fb:4c:7f:86:f6:07:b5:d3: 39:a8:f4:94:98:20:e6:c1:7f:cf:89:60:05:ad:8c: 68:9f:32:4c:f9:f2:80:4d:a2:62:3d:84:62:33:c8: 4d:62:e7:95:2c:d4:14:dd:d7:93:0f:91:73:a5:2e: 55:43:55:1c:a1:33:9b:0f:5e:1d:bf:03:ed:12:4b: 3f:6c:cd:b6:91:df:a6:de:bc:de:3d:a1:e9:4a:3c: 65:d3:62:dd:62:96:8f:d5:3e:d4:11:06:42:fa:f4: 26:60:58:82:1e:77:b4:ae:45:ac:42:4d:78:da:ff: 40:dd:c8:d7:7c:66:b8:cf:50:56:1a:c0:08:f4:9b: 1b:c3:e4:0c:e2:66:91:81:45:aa:98:f1:c9:08:13: 5a:c3:82:29:b4:f0:98:36:63:25:c6:6e:f5:e7:88: 1e:fe:1d:1f:01:e9:d1:0f:26:89:3e:f8:34:4f:25: c8:77:90:69:a3:b0:15:f5:09:09:2f:97:b1:3f:30: a4:8b:bc:47:c1:c9:37:e9:69:26:f8:38:b7:db:e2: be:a2:39:66:52:c6:81:72:47:f7:cd:e0:58:be:4d: 3e:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:C9:64:92:C0:04:08:AD:54:D7:30:C0:EB:62:9E:3A:0B:50:D8:0F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/19d090-103b-43db-b074-a4e37c867b09/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/19d090-103b-43db-b074-a4e37c867b09/1/QclkksAECK1U1zDA62KeOgtQ2A8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.213.112.0/24 Signature Algorithm: sha256WithRSAEncryption 0b:0f:4f:7a:49:ec:83:3e:95:5e:1d:7e:f5:ca:09:2a:f2:90: 09:df:9f:6a:34:1b:bf:b0:4d:5e:68:bd:90:8f:bd:7b:d2:46: aa:d6:ea:8a:d1:4b:c2:b4:aa:8a:1d:22:cc:ae:36:91:b4:93: 5c:5e:53:d6:77:52:89:8f:38:8d:6e:b6:7c:bb:f0:03:e2:54: 60:76:f2:7f:3f:60:a7:62:c9:8a:f0:db:45:f9:8f:f3:6d:fa: fe:86:04:a6:14:9e:8e:c7:82:ea:0d:bd:6d:8c:75:17:a1:65: 67:e3:87:34:af:89:79:67:ee:7c:ac:e1:ab:e0:ed:fa:9c:c3: 71:77:7e:fc:25:15:04:97:2e:35:3e:ca:b6:d9:27:34:a6:b2: cd:fe:87:dd:44:26:98:2e:ad:74:f4:4a:97:4a:ea:26:27:d1: c8:64:70:66:1e:af:5c:47:ec:83:0e:17:35:21:07:fb:d0:a1: bd:2b:db:12:7b:ab:07:f9:67:b4:18:29:c0:c2:a1:f3:dc:8e: c2:cf:49:46:9f:ec:ad:66:56:94:1d:01:39:7a:05:00:11:b1: bd:2a:37:ca:f8:e0:90:1f:2e:b6:e9:46:c8:d8:d9:d5:b9:9d: 28:81:92:93:74:0d:fd:25:59:35:9a:35:a9:7d:ca:7b:65:47: 06:89:32:63 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt/Fco2XzFufTEAtxHJoDuSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MWM5NjQ5MmMwMDQwOGFkNTRkNzMwYzBlYjYyOWUzYTBiNTBkODBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0um73wAA7neeDqJue8ArwZHBP3YO /r/8f9IEk7V7kEz9Ar3T+0x/hvYHtdM5qPSUmCDmwX/PiWAFrYxonzJM+fKATaJi PYRiM8hNYueVLNQU3deTD5FzpS5VQ1UcoTObD14dvwPtEks/bM22kd+m3rzePaHp Sjxl02LdYpaP1T7UEQZC+vQmYFiCHne0rkWsQk142v9A3cjXfGa4z1BWGsAI9Jsb w+QM4maRgUWqmPHJCBNaw4IptPCYNmMlxm7154ge/h0fAenRDyaJPvg0TyXId5Bp o7AV9QkJL5exPzCki7xHwck36Wkm+Di32+K+ojlmUsaBckf3zeBYvk0+jQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFEHJZJLABAitVNcwwOtinjoLUNgPMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U1LzE5ZDA5 MC0xMDNiLTQzZGItYjA3NC1hNGUzN2M4NjdiMDkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTUvMTlkMDkw LTEwM2ItNDNkYi1iMDc0LWE0ZTM3Yzg2N2IwOS8xL1FjbGtrc0FFQ0sxVTF6REE2 MktlT2d0UTJBOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW9VwMA0GCSqGSIb3DQEBCwUAA4IBAQALD096 SeyDPpVeHX71ygkq8pAJ359qNBu/sE1eaL2Qj7170kaq1uqK0UvCtKqKHSLMrjaR tJNcXlPWd1KJjziNbrZ8u/AD4lRgdvJ/P2CnYsmK8NtF+Y/zbfr+hgSmFJ6Ox4Lq Db1tjHUXoWVn44c0r4l5Z+58rOGr4O36nMNxd378JRUEly41Psq22Sc0prLN/ofd RCaYLq109EqXSuomJ9HIZHBmHq9cR+yDDhc1IQf70KG9K9sSe6sH+We0GCnAwqHz 3I7Cz0lGn+ytZlaUHQE5egUAEbG9KjfK+OCQHy626UbI2NnVuZ0ogZKTdA39JVk1 mjWpfcp7ZUcGiTJj -----END CERTIFICATE-----Generated at Mon Feb 9 15:11:01 2026 by rpki-client