This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QhLmk-jn-4sxqoVTsw2VvvBINyk.cer File: QhLmk-jn-4sxqoVTsw2VvvBINyk.cer (raw, json) Hash identifier: GVHaLM6n84gUPjhunOO9BeJxNhTTykQu4ygnduw9W8o= Subject key identifier: 42:12:E6:93:E8:E7:FB:8B:31:AA:85:53:B3:0D:95:BE:F0:48:37:29 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7FF217130CC8E13249C43609BF792C07 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 18:22:10 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 9023 IP: 193.46.40.0/22 IP: 2001:67c:2418::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:17:13:0c:c8:e1:32:49:c4:36:09:bf:79:2c:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 18:22:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4212e693e8e7fb8b31aa8553b30d95bef0483729 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:9a:16:e6:76:a9:79:3e:4d:81:ed:81:d1:8e: b9:d5:f7:a2:89:de:17:6a:86:94:50:54:b4:c7:fc: d5:77:64:a8:c7:01:e6:e3:5e:88:f9:bd:39:40:1b: 7a:0a:63:b7:35:8d:f5:8b:63:5e:6d:bb:1e:73:66: 97:14:7d:c0:90:dc:fb:8e:b0:5e:52:61:a8:1b:b6: 5b:2b:bc:4e:ce:5d:dd:cf:06:69:4c:21:f1:43:70: 08:8e:78:c7:79:70:9c:92:c2:c2:c3:57:c9:1f:4e: 4f:c1:b8:0a:fc:2e:ca:47:59:b6:6d:d1:fb:ed:7a: 8f:aa:a1:5e:85:58:9c:cd:5b:a7:f5:fd:5f:a2:df: fe:88:74:3f:e7:4c:99:1a:98:70:cd:fe:ec:b0:26: 29:a6:9f:6b:91:52:ee:bb:e5:99:ac:3b:f8:59:b5: dd:22:d0:94:91:91:e9:44:6e:c6:5e:c7:c1:a6:ac: 69:ff:9f:84:7a:4d:f1:93:24:51:ce:3f:f6:6e:3f: 40:b3:4c:a3:22:da:97:6f:6d:0a:ba:5c:c2:96:04: dd:29:5d:a9:97:c8:8b:90:4e:53:be:63:d5:1d:69: 54:d9:94:8e:f0:f3:3b:c6:d2:5d:95:21:95:e0:d2: 29:1f:13:2d:91:da:41:cb:bf:97:1c:9f:86:ee:6a: 93:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:12:E6:93:E8:E7:FB:8B:31:AA:85:53:B3:0D:95:BE:F0:48:37:29 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.46.40.0/22 IPv6: 2001:67c:2418::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 9023 Signature Algorithm: sha256WithRSAEncryption 9d:86:4f:43:7a:b3:41:9f:a8:d5:f7:35:05:fb:f9:57:5b:a2: be:38:9e:6a:6b:25:c3:09:07:26:e5:67:b8:c1:04:4d:2d:f9: 1b:81:0d:ce:2e:a2:d4:4c:3c:38:40:33:57:17:30:5f:c4:96: e6:84:bb:7f:6a:16:85:8b:70:ae:a2:37:b2:c6:88:ae:2e:2e: 90:59:0f:98:8e:28:3c:5b:56:a6:43:55:d0:45:00:28:04:73: 5e:7d:1a:cd:7e:83:ce:a9:c7:6b:0d:8a:dd:be:54:63:4d:50: c0:df:ab:3a:8d:0d:b5:0d:72:69:70:f3:d6:c9:d9:65:96:4b: 0a:73:78:67:f7:5f:f0:d1:0a:41:c0:57:e2:f6:55:97:89:99: 53:a4:64:f3:fb:19:00:01:32:7c:70:89:30:61:a5:b2:11:64: 8e:88:0d:ea:1b:aa:81:75:5e:73:d3:32:2b:79:0b:db:ab:e5: a2:6b:f6:1f:86:7f:dd:26:0f:fd:5e:97:12:30:4f:94:ee:dc: fe:57:16:dd:b0:32:7a:2b:11:5d:fe:b6:85:3f:18:60:19:52: 84:0f:5a:be:71:1b:d0:71:7f:43:11:4d:e6:b2:76:fd:23:43: 93:99:4d:c2:71:65:ff:51:f9:0d:8f:0b:d9:c5:4d:d5:7a:9d: 61:06:66:bb -----BEGIN CERTIFICATE----- MIIFpDCCBIygAwIBAgISAZt/8hcTDMjhMknENgm/eSwHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTgyMjEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MjEyZTY5M2U4ZTdmYjhiMzFhYTg1NTNiMzBkOTViZWYwNDgzNzI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA65oW5napeT5Nge2B0Y651feiid4X aoaUUFS0x/zVd2SoxwHm416I+b05QBt6CmO3NY31i2Nebbsec2aXFH3AkNz7jrBe UmGoG7ZbK7xOzl3dzwZpTCHxQ3AIjnjHeXCcksLCw1fJH05PwbgK/C7KR1m2bdH7 7XqPqqFehViczVun9f1fot/+iHQ/50yZGphwzf7ssCYppp9rkVLuu+WZrDv4WbXd ItCUkZHpRG7GXsfBpqxp/5+Eek3xkyRRzj/2bj9As0yjItqXb20KulzClgTdKV2p l8iLkE5TvmPVHWlU2ZSO8PM7xtJdlSGV4NIpHxMtkdpBy7+XHJ+G7mqTpQIDAQAB o4ICsDCCAqwwHQYDVR0OBBYEFEIS5pPo5/uLMaqFU7MNlb7wSDcpMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkyL2UyMTMy NS05OTEwLTQ3ZTgtOTljYy03NWE1NTVjOGZiNDEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTIvZTIxMzI1 LTk5MTAtNDdlOC05OWNjLTc1YTU1NWM4ZmI0MS8xL1FoTG1rLWpuLTRzeHFvVlRz dzJWdnZCSU55ay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQCwS4oMA8EAgACMAkDBwAgAQZ8JBgwGQYIKwYB BQUHAQgBAf8ECjAIoAYwBAICIz8wDQYJKoZIhvcNAQELBQADggEBAJ2GT0N6s0Gf qNX3NQX7+Vdbor44nmprJcMJByblZ7jBBE0t+RuBDc4uotRMPDhAM1cXMF/EluaE u39qFoWLcK6iN7LGiK4uLpBZD5iOKDxbVqZDVdBFACgEc159Gs1+g86px2sNit2+ VGNNUMDfqzqNDbUNcmlw89bJ2WWWSwpzeGf3X/DRCkHAV+L2VZeJmVOkZPP7GQAB MnxwiTBhpbIRZI6IDeobqoF1XnPTMit5C9ur5aJr9h+Gf90mD/1elxIwT5Tu3P5X Ft2wMnorEV3+toU/GGAZUoQPWr5xG9Bxf0MRTeaydv0jQ5OZTcJxZf9R+Q2PC9nF TdV6nWEGZrs= -----END CERTIFICATE-----Generated at Mon Feb 9 15:08:58 2026 by rpki-client