This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QnPDfxOasLj9mBdxtNiMPGF1-aU.cer File: QnPDfxOasLj9mBdxtNiMPGF1-aU.cer (raw, json) Hash identifier: Zhi0vnlVJix+nu/mj0QnqOCNfBNdmJkKbVaJkClTnrI= Subject key identifier: 42:73:C3:7F:13:9A:B0:B8:FD:98:17:71:B4:D8:8C:3C:61:75:F9:A5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019C4C14242F0F482A71E028080DB22AB282 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/99/ac183e-3d9b-479a-9462-562628341df2/1/QnPDfxOasLj9mBdxtNiMPGF1-aU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/99/ac183e-3d9b-479a-9462-562628341df2/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Wed 11 Feb 2026 09:41:54 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 201354 IP: 2001:67c:8d4::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 13 Feb 2026 00:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:4c:14:24:2f:0f:48:2a:71:e0:28:08:0d:b2:2a:b2:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Feb 11 09:41:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4273c37f139ab0b8fd981771b4d88c3c6175f9a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:99:75:7e:da:5a:99:41:5a:4c:60:35:f0:55: d1:e4:a1:ee:e6:0f:6b:97:38:c5:e7:59:1f:a6:00: f0:da:c1:75:24:cb:e9:be:7e:f8:01:dc:18:c3:49: 26:22:98:f5:97:4f:80:d9:9c:bd:85:14:2f:4d:65: 92:9f:31:75:bc:53:bc:07:5f:9e:8e:69:d1:65:f1: 23:6d:d3:03:04:70:f6:dc:b5:3a:79:7b:5b:99:3d: 82:0b:51:05:6b:e8:1d:1b:59:6e:75:b2:7f:70:49: f7:d4:9e:e9:9d:3c:0a:58:39:1f:35:79:c1:44:da: 11:f5:0e:43:45:45:7e:5e:79:bb:2d:2c:bc:e5:3d: a9:fd:40:83:a3:2a:d7:79:82:6c:d7:f3:32:a6:56: df:4f:ee:fd:ee:ad:3a:a5:1d:64:8a:c1:02:78:84: 06:e2:ea:7b:4f:45:90:30:2e:71:15:b6:d1:56:5b: c5:23:1c:59:9e:fb:7a:b0:78:96:1f:62:98:52:70: 99:73:4b:34:c7:33:92:f2:bb:9c:0c:6b:4c:35:02: 38:91:10:45:c7:20:bc:a0:77:0b:85:2f:79:1c:3a: 43:a1:9f:4d:8a:72:54:af:46:ab:80:ae:e8:e5:fa: 70:9a:b5:e2:a2:e3:e4:21:6b:1b:3c:d2:d7:84:50: 66:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:73:C3:7F:13:9A:B0:B8:FD:98:17:71:B4:D8:8C:3C:61:75:F9:A5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ac183e-3d9b-479a-9462-562628341df2/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ac183e-3d9b-479a-9462-562628341df2/1/QnPDfxOasLj9mBdxtNiMPGF1-aU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:8d4::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 201354 Signature Algorithm: sha256WithRSAEncryption 81:47:bc:29:02:d0:77:04:39:36:af:6d:18:65:2d:a3:c3:f5: 02:d1:37:81:71:bb:18:07:3f:63:7b:33:58:12:83:36:66:6a: af:75:91:44:7b:e2:dd:e6:82:cf:4a:77:4f:ed:a3:c4:11:f6: be:6a:a2:8c:36:21:cb:21:82:45:81:47:c0:98:75:05:93:cc: 8d:a2:14:7c:6d:16:c9:32:2d:43:d7:89:bc:b4:a5:5b:29:d2: c7:74:75:b4:82:44:6d:68:7d:eb:60:2f:c0:bb:76:1d:29:d6: 05:4c:37:82:b1:82:da:91:f6:9f:fb:62:1a:66:15:e4:3d:49: de:e4:3e:1e:05:6c:49:5a:30:ca:ad:0e:47:0d:d4:cc:b9:dc: 3e:35:aa:16:0b:98:c3:44:9d:c7:4f:0f:2d:cb:d7:c3:67:37: ff:50:72:44:09:c3:d7:2a:8d:36:fa:5a:6f:58:f3:3f:f4:ff: 7e:da:6e:13:59:1d:7c:b6:e9:52:46:13:b1:e0:16:05:59:a7: aa:6b:bc:8b:74:e5:bb:2d:44:08:03:50:aa:67:3b:99:3d:69: fb:70:bb:c1:ef:28:5e:23:11:e0:b7:b0:42:5e:ea:58:cb:a3: e1:64:c8:ca:03:1f:22:97:7d:4e:f8:b2:c5:f2:f0:41:a3:aa: c7:74:e3:b6 -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZxMFCQvD0gqceAoCA2yKrKCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMjExMDk0MTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MjczYzM3ZjEzOWFiMGI4ZmQ5ODE3NzFiNGQ4OGMzYzYxNzVmOWE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJl1ftpamUFaTGA18FXR5KHu5g9r lzjF51kfpgDw2sF1JMvpvn74AdwYw0kmIpj1l0+A2Zy9hRQvTWWSnzF1vFO8B1+e jmnRZfEjbdMDBHD23LU6eXtbmT2CC1EFa+gdG1ludbJ/cEn31J7pnTwKWDkfNXnB RNoR9Q5DRUV+Xnm7LSy85T2p/UCDoyrXeYJs1/MyplbfT+797q06pR1kisECeIQG 4up7T0WQMC5xFbbRVlvFIxxZnvt6sHiWH2KYUnCZc0s0xzOS8rucDGtMNQI4kRBF xyC8oHcLhS95HDpDoZ9NinJUr0argK7o5fpwmrXiouPkIWsbPNLXhFBmzwIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFEJzw38TmrC4/ZgXcbTYjDxhdfmlMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk5L2FjMTgz ZS0zZDliLTQ3OWEtOTQ2Mi01NjI2MjgzNDFkZjIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTkvYWMxODNl LTNkOWItNDc5YS05NDYyLTU2MjYyODM0MWRmMi8xL1FuUERmeE9hc0xqOW1CZHh0 TmlNUEdGMS1hVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAjUMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwMSijANBgkqhkiG9w0BAQsFAAOCAQEAgUe8KQLQdwQ5Nq9tGGUto8P1AtE3 gXG7GAc/Y3szWBKDNmZqr3WRRHvi3eaCz0p3T+2jxBH2vmqijDYhyyGCRYFHwJh1 BZPMjaIUfG0WyTItQ9eJvLSlWynSx3R1tIJEbWh962AvwLt2HSnWBUw3grGC2pH2 n/tiGmYV5D1J3uQ+HgVsSVowyq0ORw3UzLncPjWqFguYw0Sdx08PLcvXw2c3/1By RAnD1yqNNvpab1jzP/T/ftpuE1kdfLbpUkYTseAWBVmnqmu8i3Tluy1ECANQqmc7 mT1p+3C7we8oXiMR4LewQl7qWMuj4WTIygMfIpd9TviyxfLwQaOqx3Tjtg== -----END CERTIFICATE-----Generated at Thu Feb 12 05:38:58 2026 by rpki-client