This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QeCd-53O-KUy-yEdLoplRs759YA.cer File: QeCd-53O-KUy-yEdLoplRs759YA.cer (raw, json) Hash identifier: yGOLMm5W6dhovzLPvl0fKiC0egj2QAjdZ06h4vq9AQY= Subject key identifier: 41:E0:9D:FB:9D:CE:F8:A5:32:FB:21:1D:2E:8A:65:46:CE:F9:F5:80 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B775921EEF3673B4DD5DBF97A8202AD1B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:18:08 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 15608 IP: 193.41.43.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:21:ee:f3:67:3b:4d:d5:db:f9:7a:82:02:ad:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=41e09dfb9dcef8a532fb211d2e8a6546cef9f580 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:31:17:9d:37:87:df:ce:0a:4e:bc:9a:d6:b9: 69:a0:7b:1f:a3:05:ae:1b:af:bb:62:82:c5:4f:75: 15:e3:d4:b9:38:da:67:67:37:c7:8e:8b:e0:25:48: 98:2f:5a:1e:63:38:22:33:e5:aa:b6:e7:21:6a:01: 1e:48:14:56:ff:db:bd:af:70:0e:f0:6d:51:51:87: 9a:5c:55:4d:51:f4:f4:3f:f8:59:17:ad:e7:b1:2a: 05:6b:c9:e2:fe:94:11:55:ad:dd:4d:32:23:ce:76: 15:55:3c:65:cb:1e:2d:44:a5:51:cb:d6:39:4d:da: fd:6f:76:0b:5e:63:a1:1e:9a:65:c1:9d:f4:c7:3a: 46:6a:e4:89:a6:1b:cd:1f:2f:21:eb:6c:4a:c1:54: d6:4e:3f:85:00:af:54:4e:7d:48:4a:ea:55:33:88: 9d:78:15:ef:96:18:d7:6c:f6:5d:29:85:a4:f1:af: 64:2c:b2:65:cf:cf:b4:2e:00:32:61:37:26:bc:8e: 09:a9:e9:57:e1:7c:32:18:ae:fc:04:85:d5:52:73: ed:3c:5c:33:06:38:58:6f:a4:bc:96:4e:8d:02:d2: 81:e0:c8:e7:77:46:e7:41:30:d2:b8:53:9a:fb:f7: 24:f7:da:c2:9d:54:0e:51:e6:7a:7d:4a:1e:7a:1b: 9b:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:E0:9D:FB:9D:CE:F8:A5:32:FB:21:1D:2E:8A:65:46:CE:F9:F5:80 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.41.43.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 15608 Signature Algorithm: sha256WithRSAEncryption 0d:1d:97:f0:08:ca:d7:71:7f:67:14:33:d6:38:6b:2e:64:89: 53:fa:d8:1f:80:16:bd:b5:c5:40:6d:31:c9:c0:60:e3:d0:46: 70:9a:f5:cb:88:b9:fc:ca:91:c8:1a:55:ff:e1:37:76:7b:c0: 35:1c:85:bb:f5:95:5c:34:e7:18:32:ac:d5:69:5c:d5:ff:a6: c2:78:6f:ea:c4:5b:df:22:37:bc:e6:45:4c:75:bd:29:45:e2: 0d:7e:27:aa:93:46:a6:0a:c3:bf:c9:cd:6e:8a:ed:36:1f:db: c4:d6:30:9e:6b:8f:8d:df:e9:cd:f7:1d:d6:15:21:c6:bc:9e: 02:7a:78:b4:47:7f:0c:96:84:e3:9c:e2:5a:2d:95:3d:c4:8e: 03:3a:64:76:ae:c5:16:ef:a2:43:41:3d:41:76:81:5f:6a:86: 90:85:d8:56:3a:0a:06:ac:fd:c4:e2:a8:0e:43:70:aa:90:4c: e3:65:3f:4e:2d:46:ab:82:8e:2e:03:09:88:54:e7:a5:3f:af: b2:e1:ef:3b:14:8b:7d:89:e2:76:72:af:19:0f:e2:19:ee:c1: 6f:5d:c3:6f:32:3f:e0:43:d4:ed:15:53:59:6d:2a:f3:7c:e9: 71:14:c8:93:9e:64:f2:3a:b1:28:99:28:6c:85:fe:e8:b8:16: 74:06:32:38 -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISAZt3WSHu82c7TdXb+XqCAq0bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MWUwOWRmYjlkY2VmOGE1MzJmYjIxMWQyZThhNjU0NmNlZjlmNTgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzEXnTeH384KTrya1rlpoHsfowWu G6+7YoLFT3UV49S5ONpnZzfHjovgJUiYL1oeYzgiM+WqtuchagEeSBRW/9u9r3AO 8G1RUYeaXFVNUfT0P/hZF63nsSoFa8ni/pQRVa3dTTIjznYVVTxlyx4tRKVRy9Y5 Tdr9b3YLXmOhHpplwZ30xzpGauSJphvNHy8h62xKwVTWTj+FAK9UTn1ISupVM4id eBXvlhjXbPZdKYWk8a9kLLJlz8+0LgAyYTcmvI4JqelX4XwyGK78BIXVUnPtPFwz BjhYb6S8lk6NAtKB4Mjnd0bnQTDSuFOa+/ck99rCnVQOUeZ6fUoeehubpwIDAQAB o4ICnzCCApswHQYDVR0OBBYEFEHgnfudzvilMvshHS6KZUbO+fWAMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYxLzM5ZDZk Yy0wNjY0LTQzMDUtOGNlMC0yMGJmYTc4YzlhMWIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjEvMzlkNmRj LTA2NjQtNDMwNS04Y2UwLTIwYmZhNzhjOWExYi8xL1FlQ2QtNTNPLUtVeS15RWRM b3BsUnM3NTlZQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwSkrMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQC Ajz4MA0GCSqGSIb3DQEBCwUAA4IBAQANHZfwCMrXcX9nFDPWOGsuZIlT+tgfgBa9 tcVAbTHJwGDj0EZwmvXLiLn8ypHIGlX/4Td2e8A1HIW79ZVcNOcYMqzVaVzV/6bC eG/qxFvfIje85kVMdb0pReINfieqk0amCsO/yc1uiu02H9vE1jCea4+N3+nN9x3W FSHGvJ4Ceni0R38MloTjnOJaLZU9xI4DOmR2rsUW76JDQT1BdoFfaoaQhdhWOgoG rP3E4qgOQ3CqkEzjZT9OLUargo4uAwmIVOelP6+y4e87FIt9ieJ2cq8ZD+IZ7sFv XcNvMj/gQ9TtFVNZbSrzfOlxFMiTnmTyOrEomShshf7ouBZ0BjI4 -----END CERTIFICATE-----Generated at Mon Feb 9 15:07:24 2026 by rpki-client