This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Qh8QiIKp4tcngttlJ9pNmt7rGcw.cer File: Qh8QiIKp4tcngttlJ9pNmt7rGcw.cer (raw, json) Hash identifier: yu9VnDsqxrCbtdIU4y0EgR/Nq+p7OWvJtkKhk990VJ0= Subject key identifier: 42:1F:10:88:82:A9:E2:D7:27:82:DB:65:27:DA:4D:9A:DE:EB:19:CC Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C126ADD83BB13F922BA005095C811BB Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:19:00 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 45.86.112.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 19:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:6a:dd:83:bb:13:f9:22:ba:00:50:95:c8:11:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=421f108882a9e2d72782db6527da4d9adeeb19cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:3f:79:bb:ac:b6:9c:a8:d9:be:4f:65:d0:f4: b1:37:c5:34:99:14:eb:ee:9d:93:b1:07:f2:09:c8: 9c:04:a9:ad:e8:ae:2e:f8:07:7a:bf:ea:b8:57:53: 3b:2b:64:88:d1:24:4a:a8:fb:4c:33:fd:e1:ab:b5: e0:fa:78:e3:30:a0:59:a9:3b:52:2c:74:29:24:cc: f8:58:02:5e:4b:0a:90:d6:e4:48:7b:a9:89:53:1c: e4:42:09:fe:4a:88:c5:d9:fc:2a:da:36:b6:80:74: 20:0f:67:80:68:70:04:4b:46:c4:d4:0d:7f:9d:1c: 64:d4:cd:a3:b3:0d:7f:0b:b9:e9:cc:5c:93:a9:de: c6:93:14:fe:49:fa:ec:1e:57:ec:a1:7e:34:e9:ac: 6d:fa:65:6c:df:ac:99:bb:ac:f5:dd:22:ca:a8:26: 05:ff:a3:2b:f4:f6:e0:2e:c6:61:f4:53:1c:35:58: 90:9a:e0:7e:57:54:4f:75:85:e1:12:67:fb:ed:ca: 11:2b:5e:64:bf:ff:40:f5:83:38:e1:eb:64:9a:a1: 6b:dd:fe:c6:7a:cc:29:82:b9:77:e1:5a:cf:6f:f4: 78:15:9d:18:a3:8a:51:51:82:c6:fe:70:c3:1a:04: ce:0c:09:ab:1c:99:45:7b:e6:82:7d:96:72:71:eb: 68:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:1F:10:88:82:A9:E2:D7:27:82:DB:65:27:DA:4D:9A:DE:EB:19:CC X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.86.112.0/22 Signature Algorithm: sha256WithRSAEncryption 9c:a9:c1:bb:5f:8f:f4:5c:91:3e:ec:7c:57:68:e4:ea:83:f2: bb:a9:68:a8:d3:ae:8d:fc:2a:a6:55:40:33:ce:db:fa:59:9b: ea:da:b4:60:21:58:a7:ad:7f:c0:4f:13:1a:0f:d4:80:7b:84: fe:9b:25:0c:ea:05:04:11:29:11:4a:a7:69:00:73:5e:a3:ce: 5b:25:7f:db:3f:72:42:7b:ea:0a:79:04:b8:2a:be:12:0a:67: 8b:d4:24:ac:21:64:dc:47:78:15:cd:39:24:d6:63:55:b3:6a: 32:b8:30:42:44:07:a7:d3:5a:a3:84:48:b2:4e:41:fb:f1:35: 4e:c5:03:e1:93:f1:ed:2d:05:7d:af:6f:d7:f4:3f:78:6e:cc: e6:b8:18:26:b3:ba:83:b9:69:3d:5b:0c:0e:a6:0f:09:92:74: b3:5e:4f:31:a0:57:00:31:d5:2b:a1:ad:f4:9c:9b:31:5a:3a: 9c:ca:c7:8e:5c:91:e5:27:0d:64:70:bc:07:32:a1:9e:0b:98: 29:61:84:23:35:56:93:2c:78:5b:ac:99:2b:e0:ee:55:35:1f: 15:4c:14:59:0f:20:9c:22:eb:7d:5d:e6:a0:1d:94:fa:ba:0f: 00:b9:0f:e8:8e:df:ae:29:3d:07:94:3b:b8:fd:ee:ab:8f:3f: 33:b2:0f:5a -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt8Emrdg7sT+SK6AFCVyBG7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MjFmMTA4ODgyYTllMmQ3Mjc4MmRiNjUyN2RhNGQ5YWRlZWIxOWNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsz95u6y2nKjZvk9l0PSxN8U0mRTr 7p2TsQfyCcicBKmt6K4u+Ad6v+q4V1M7K2SI0SRKqPtMM/3hq7Xg+njjMKBZqTtS LHQpJMz4WAJeSwqQ1uRIe6mJUxzkQgn+SojF2fwq2ja2gHQgD2eAaHAES0bE1A1/ nRxk1M2jsw1/C7npzFyTqd7GkxT+SfrsHlfsoX406axt+mVs36yZu6z13SLKqCYF /6Mr9PbgLsZh9FMcNViQmuB+V1RPdYXhEmf77coRK15kv/9A9YM44etkmqFr3f7G eswpgrl34VrPb/R4FZ0Yo4pRUYLG/nDDGgTODAmrHJlFe+aCfZZycetoRwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFEIfEIiCqeLXJ4LbZSfaTZre6xnMMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM2LzIxOTIy YS1kZDc5LTRmNTYtODNiZS0wYTA2OWRlYzEwMGEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzYvMjE5MjJh LWRkNzktNGY1Ni04M2JlLTBhMDY5ZGVjMTAwYS8xL1FoOFFpSUtwNHRjbmd0dGxK OXBObXQ3ckdjdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCLVZwMA0GCSqGSIb3DQEBCwUAA4IBAQCcqcG7 X4/0XJE+7HxXaOTqg/K7qWio066N/CqmVUAzztv6WZvq2rRgIVinrX/ATxMaD9SA e4T+myUM6gUEESkRSqdpAHNeo85bJX/bP3JCe+oKeQS4Kr4SCmeL1CSsIWTcR3gV zTkk1mNVs2oyuDBCRAen01qjhEiyTkH78TVOxQPhk/HtLQV9r2/X9D94bszmuBgm s7qDuWk9WwwOpg8JknSzXk8xoFcAMdUroa30nJsxWjqcyseOXJHlJw1kcLwHMqGe C5gpYYQjNVaTLHhbrJkr4O5VNR8VTBRZDyCcIut9XeagHZT6ug8AuQ/ojt+uKT0H lDu4/e6rjz8zsg9a -----END CERTIFICATE-----Generated at Fri Jan 2 23:51:56 2026 by rpki-client