This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QlbgyzjNYSXO4U5Jcii4SQodQOk.cer File: QlbgyzjNYSXO4U5Jcii4SQodQOk.cer (raw, json) Hash identifier: 7JZ4GubO7gJCL4BENPscO7DzfKvSq3dc/zpybPjduYw= Subject key identifier: 42:56:E0:CB:38:CD:61:25:CE:E1:4E:49:72:28:B8:49:0A:1D:40:E9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA4C39A478BA462110477E45CAFB6A5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/47/c314f4-b1ac-426f-8f21-a5e850b6a1bc/1/QlbgyzjNYSXO4U5Jcii4SQodQOk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/47/c314f4-b1ac-426f-8f21-a5e850b6a1bc/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:19:14 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 203778 IP: 194.33.76.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Feb 2026 00:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:c3:9a:47:8b:a4:62:11:04:77:e4:5c:af:b6:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4256e0cb38cd6125cee14e497228b8490a1d40e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:4f:cc:c5:b4:25:fb:e7:e8:d3:14:40:e0:2e: 30:83:30:23:45:a7:17:fc:17:1e:4c:72:fb:72:c9: 93:28:76:b0:c9:d7:da:b4:91:60:67:27:05:22:c9: 2a:0d:2b:2f:9b:19:4f:f2:de:d2:47:f8:f2:50:28: 76:3c:f4:f1:62:7e:54:2c:9a:ab:a9:dd:dd:19:a4: 00:c8:2f:de:94:3c:67:de:79:07:64:7e:70:26:dc: aa:31:3b:94:91:a7:38:13:32:f4:fd:bf:71:6c:73: ac:72:a7:b9:2f:17:75:5b:e8:4b:97:93:96:9b:db: 92:6c:96:08:68:25:ef:0c:b4:58:08:5b:1c:a3:d8: 5c:b1:51:72:36:fc:2b:c9:34:a2:0c:a4:34:b0:9f: e5:b6:1f:4f:ba:c6:87:74:30:5d:cc:82:86:f6:78: 90:13:de:07:a7:4f:1d:74:78:00:67:ff:0e:cb:34: c4:6d:e4:d4:76:34:ff:71:94:33:55:ba:9b:0d:d3: 9f:da:c0:0e:4d:e8:24:b9:89:20:8f:d6:e8:75:5e: 71:9f:c3:f9:d2:d7:e0:fd:d0:a3:b5:e1:53:65:c6: b9:f1:51:7c:8e:82:17:39:fb:64:2f:1e:2e:0e:b4: 9c:82:db:a3:87:36:e8:9e:74:4d:87:c7:43:01:57: 4b:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:56:E0:CB:38:CD:61:25:CE:E1:4E:49:72:28:B8:49:0A:1D:40:E9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c314f4-b1ac-426f-8f21-a5e850b6a1bc/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c314f4-b1ac-426f-8f21-a5e850b6a1bc/1/QlbgyzjNYSXO4U5Jcii4SQodQOk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.33.76.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 203778 Signature Algorithm: sha256WithRSAEncryption a6:f0:83:bd:b4:59:03:e3:95:59:d3:21:d9:0b:de:59:ce:e0: d3:fd:1e:ed:7b:7b:5c:19:42:02:df:87:b6:10:d3:99:6c:26: e0:52:9e:f5:c6:88:4f:02:da:1c:28:b9:33:8f:56:4b:b9:62: dd:67:91:71:5b:7c:f9:b1:ec:f2:cb:f6:eb:33:ca:ec:a2:94: 03:bc:b1:b9:ba:11:cd:e8:e1:36:7f:e4:87:d5:64:2c:68:cc: 3c:ae:22:6d:9b:ab:57:34:a5:e6:f8:f6:fa:3b:8c:a3:81:01: 61:d5:86:69:7f:56:c6:35:7f:26:02:bb:7c:10:5c:66:cb:ee: 77:59:c5:f7:ad:82:fa:bf:2d:43:b8:44:51:69:e6:59:31:88: b2:44:72:51:ba:e9:fb:44:45:10:c0:62:e1:8e:80:23:95:47: 14:4f:3f:68:f7:4a:08:28:97:24:ee:91:83:68:e7:b8:b9:dc: c0:65:57:95:25:0f:8f:91:c6:78:0d:35:3a:28:f2:ef:49:b9: 48:12:d0:a8:41:d2:88:06:7d:67:ba:4e:62:b4:00:58:80:4b: fc:b1:88:89:6a:b5:23:4f:8e:87:a8:d4:8c:50:33:8c:62:d9: fa:9d:4b:80:0d:89:7b:91:ca:62:22:38:ef:c2:84:ab:47:31: c8:d0:0b:35 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt7pMOaR4ukYhEEd+Rcr7alMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MjU2ZTBjYjM4Y2Q2MTI1Y2VlMTRlNDk3MjI4Yjg0OTBhMWQ0MGU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA00/MxbQl++fo0xRA4C4wgzAjRacX /BceTHL7csmTKHawydfatJFgZycFIskqDSsvmxlP8t7SR/jyUCh2PPTxYn5ULJqr qd3dGaQAyC/elDxn3nkHZH5wJtyqMTuUkac4EzL0/b9xbHOscqe5Lxd1W+hLl5OW m9uSbJYIaCXvDLRYCFsco9hcsVFyNvwryTSiDKQ0sJ/lth9PusaHdDBdzIKG9niQ E94Hp08ddHgAZ/8OyzTEbeTUdjT/cZQzVbqbDdOf2sAOTegkuYkgj9bodV5xn8P5 0tfg/dCjteFTZca58VF8joIXOftkLx4uDrScgtujhzbonnRNh8dDAVdLowIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFEJW4Ms4zWElzuFOSXIouEkKHUDpMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ3L2MzMTRm NC1iMWFjLTQyNmYtOGYyMS1hNWU4NTBiNmExYmMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDcvYzMxNGY0 LWIxYWMtNDI2Zi04ZjIxLWE1ZTg1MGI2YTFiYy8xL1FsYmd5empOWVNYTzRVNUpj aWk0U1FvZFFPay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQBwiFMMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMcAjANBgkqhkiG9w0BAQsFAAOCAQEApvCDvbRZA+OVWdMh2QveWc7g0/0e7Xt7 XBlCAt+HthDTmWwm4FKe9caITwLaHCi5M49WS7li3WeRcVt8+bHs8sv26zPK7KKU A7yxuboRzejhNn/kh9VkLGjMPK4ibZurVzSl5vj2+juMo4EBYdWGaX9WxjV/JgK7 fBBcZsvud1nF962C+r8tQ7hEUWnmWTGIskRyUbrp+0RFEMBi4Y6AI5VHFE8/aPdK CCiXJO6Rg2jnuLncwGVXlSUPj5HGeA01Oijy70m5SBLQqEHSiAZ9Z7pOYrQAWIBL /LGIiWq1I0+Oh6jUjFAzjGLZ+p1LgA2Je5HKYiI478KEq0cxyNALNQ== -----END CERTIFICATE-----Generated at Sat Feb 7 05:46:02 2026 by rpki-client