This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.cer File: Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.cer (raw, json) Hash identifier: WgSjTKp3qd7wW6p1S4PGTztklKvjlF4hdXGVZtexW0o= Subject key identifier: 42:AD:D0:8D:75:24:9A:06:7D:BB:C6:31:7B:E5:BA:6E:3F:4D:5F:C9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ED2874F89A3243D969807DDB036692 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ab/8976e2-14f5-4cef-9912-cd3c160a6f46/1/Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ab/8976e2-14f5-4cef-9912-cd3c160a6f46/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:19:04 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 208150 IP: 217.138.104.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:28:74:f8:9a:32:43:d9:69:80:7d:db:03:66:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=42add08d75249a067dbbc6317be5ba6e3f4d5fc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b8:3f:c3:2a:85:17:c1:7d:a8:49:76:48:c3: fb:c9:56:05:c9:d0:19:44:51:bc:6e:be:77:a5:d8: 94:bf:a1:88:d2:ca:d9:13:fa:cd:d9:b5:b3:a2:a8: 26:42:6c:37:08:a0:dc:c0:3b:32:89:00:73:c5:8c: fd:64:26:f6:5f:84:2f:28:62:c7:95:72:18:d3:de: 74:5d:eb:3e:16:83:c1:84:3a:41:5b:89:77:c9:f2: 08:27:31:91:fd:70:1d:80:3f:38:08:49:c1:94:f1: 83:86:ec:64:cb:13:95:56:de:d7:77:3f:c2:1b:fb: 3d:e5:6c:50:c7:35:5b:52:dc:2a:fd:38:b0:33:91: 1b:3a:03:a7:ec:ab:be:29:d1:07:38:fa:67:71:86: ab:32:c4:f2:c4:8c:0a:07:73:b8:37:81:2b:1d:2b: 3d:e1:8d:92:28:98:ea:d4:70:d2:d5:c6:de:cc:0e: 72:70:8d:ae:d1:89:df:88:1c:6f:08:2d:0d:7e:54: e7:d0:55:be:f7:fe:7f:80:f7:95:28:b4:56:48:80: cf:19:d0:c8:4d:54:ad:6a:6b:64:b4:5f:8e:4d:39: d6:7a:4b:27:b9:02:9d:12:8f:3a:31:f1:5a:1e:29: 6d:22:8a:ef:55:ee:30:7e:3a:59:d3:ca:02:e2:c4: e5:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:AD:D0:8D:75:24:9A:06:7D:BB:C6:31:7B:E5:BA:6E:3F:4D:5F:C9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/8976e2-14f5-4cef-9912-cd3c160a6f46/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/8976e2-14f5-4cef-9912-cd3c160a6f46/1/Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.138.104.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 208150 Signature Algorithm: sha256WithRSAEncryption 12:db:b8:a7:4e:6d:05:1f:66:a3:ad:35:40:29:bf:f8:58:01: eb:ac:e7:a6:7e:a8:10:7f:bb:9d:1f:50:ab:dd:36:72:4a:19: 8f:1a:e7:cb:1b:97:14:a9:63:bb:71:1f:c9:41:d8:8d:c8:44: 5b:09:f7:e1:b9:96:76:c7:a6:0c:86:56:b5:33:99:cc:47:ad: be:30:ed:32:58:33:a9:42:17:96:f5:8e:d7:7a:db:b3:8c:dc: 84:29:2b:0c:45:10:95:b8:84:1a:ff:90:12:c1:a9:fa:2a:f4: f9:83:25:0c:80:68:6a:ee:fc:2f:4d:c8:52:12:53:0a:8b:7e: 27:c9:3b:f4:83:66:52:69:f5:82:87:d0:2a:dd:12:a0:dd:21: 0a:e5:d4:02:9e:96:e5:98:c4:9d:64:d7:ed:c3:5c:23:a2:3f: 10:1f:c6:3a:20:e9:82:63:fc:f8:13:8b:ce:03:30:92:db:ad: ac:1d:5d:76:e9:3b:05:55:4e:99:85:7f:29:78:4c:67:28:43: 2e:ac:8b:d2:ef:8e:14:bc:78:de:7d:55:31:29:7e:ce:65:35: 5a:71:b1:50:cb:4b:30:17:19:24:e7:c1:ad:87:5c:e4:12:67: 99:97:f2:47:df:b5:fb:40:3b:4e:0f:ce:47:e1:63:ce:86:04: 13:b4:9b:66 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt57Sh0+JoyQ9lpgH3bA2aSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MmFkZDA4ZDc1MjQ5YTA2N2RiYmM2MzE3YmU1YmE2ZTNmNGQ1ZmM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz7g/wyqFF8F9qEl2SMP7yVYFydAZ RFG8br53pdiUv6GI0srZE/rN2bWzoqgmQmw3CKDcwDsyiQBzxYz9ZCb2X4QvKGLH lXIY0950Xes+FoPBhDpBW4l3yfIIJzGR/XAdgD84CEnBlPGDhuxkyxOVVt7Xdz/C G/s95WxQxzVbUtwq/TiwM5EbOgOn7Ku+KdEHOPpncYarMsTyxIwKB3O4N4ErHSs9 4Y2SKJjq1HDS1cbezA5ycI2u0YnfiBxvCC0NflTn0FW+9/5/gPeVKLRWSIDPGdDI TVStamtktF+OTTnWeksnuQKdEo86MfFaHiltIorvVe4wfjpZ08oC4sTlkwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFEKt0I11JJoGfbvGMXvlum4/TV/JMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FiLzg5NzZl Mi0xNGY1LTRjZWYtOTkxMi1jZDNjMTYwYTZmNDYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWIvODk3NmUy LTE0ZjUtNGNlZi05OTEyLWNkM2MxNjBhNmY0Ni8xL1FxM1FqWFVrbWdaOXU4WXhl LVc2Ymo5Tlg4ay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQA2YpoMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMtFjANBgkqhkiG9w0BAQsFAAOCAQEAEtu4p05tBR9mo601QCm/+FgB66znpn6o EH+7nR9Qq902ckoZjxrnyxuXFKlju3EfyUHYjchEWwn34bmWdsemDIZWtTOZzEet vjDtMlgzqUIXlvWO13rbs4zchCkrDEUQlbiEGv+QEsGp+ir0+YMlDIBoau78L03I UhJTCot+J8k79INmUmn1gofQKt0SoN0hCuXUAp6W5ZjEnWTX7cNcI6I/EB/GOiDp gmP8+BOLzgMwktutrB1dduk7BVVOmYV/KXhMZyhDLqyL0u+OFLx43n1VMSl+zmU1 WnGxUMtLMBcZJOfBrYdc5BJnmZfyR9+1+0A7Tg/OR+FjzoYEE7SbZg== -----END CERTIFICATE-----Generated at Mon Feb 9 15:13:56 2026 by rpki-client