This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Qq_VYNUTB34zn6v-DM2pCUC92BQ.cer File: Qq_VYNUTB34zn6v-DM2pCUC92BQ.cer (raw, json) Hash identifier: 5ZCeXtJmOBAlR1iOKfSC0vgbARyfR7gfppFj40EP3mM= Subject key identifier: 42:AF:D5:60:D5:13:07:7E:33:9F:AB:FE:0C:CD:A9:09:40:BD:D8:14 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C808F9163D8EBAE495F6C883FF65157 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f1/549b8b-6494-4a92-a94e-cf8ce22c3af7/1/Qq_VYNUTB34zn6v-DM2pCUC92BQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f1/549b8b-6494-4a92-a94e-cf8ce22c3af7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:19:18 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 197958 IP: 91.230.189.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:8f:91:63:d8:eb:ae:49:5f:6c:88:3f:f6:51:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:19:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=42afd560d513077e339fabfe0ccda90940bdd814 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:b1:00:83:2e:15:f1:ec:65:95:d8:d7:dc:52: 3c:23:c9:69:4d:9f:fb:51:e1:fa:2f:69:fd:f2:66: 28:7e:c1:cc:6c:7c:0e:59:dc:6a:2f:be:28:b8:09: 22:25:eb:32:d2:ca:68:13:ca:3e:08:7b:69:27:cd: a4:63:14:ca:a9:5c:5f:65:eb:c8:d8:e8:da:5f:75: 9c:6c:fc:31:2a:14:ef:77:aa:09:9d:e9:8c:42:29: fa:df:fa:2c:4b:2a:52:df:f6:a4:c8:36:52:09:1d: e5:e7:71:a7:32:82:0f:bc:91:0a:64:6f:64:61:73: 48:39:92:e9:7b:ab:dc:e3:89:d2:8e:07:52:4f:1d: b0:d0:57:58:c7:1b:67:90:9c:b2:a7:dd:c3:2b:cf: 33:50:ee:ca:5a:e5:99:44:bf:cc:1b:52:74:ec:a0: 26:d7:ba:70:c6:f8:72:64:9a:30:87:1a:ef:07:9c: d0:3f:ed:7f:05:c9:af:2c:15:4e:3f:b4:11:62:00: e5:30:11:61:12:f5:a5:a3:b3:0a:a5:60:f1:b3:7f: 54:e5:99:02:19:4f:37:e4:10:c2:28:0a:16:db:14: 0d:c9:07:36:c2:2a:f1:3b:99:5f:5d:f6:f5:fd:74: a0:d4:de:a5:1e:9e:8e:6e:52:9d:c2:b9:50:c8:63: 7c:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:AF:D5:60:D5:13:07:7E:33:9F:AB:FE:0C:CD:A9:09:40:BD:D8:14 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/549b8b-6494-4a92-a94e-cf8ce22c3af7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/549b8b-6494-4a92-a94e-cf8ce22c3af7/1/Qq_VYNUTB34zn6v-DM2pCUC92BQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.230.189.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 197958 Signature Algorithm: sha256WithRSAEncryption 0b:42:f1:15:7e:45:d5:d7:ab:8b:67:c4:b1:e7:de:16:3e:60: c3:9e:47:36:3b:50:3f:ea:57:60:84:e7:7f:e8:53:09:36:76: a6:f0:bd:72:9d:2c:a5:0e:03:ef:61:7f:24:5b:54:92:e9:00: 8f:3a:cd:db:fd:47:26:da:92:82:1e:b2:93:cc:4d:9f:8b:ad: 68:55:d2:bb:ed:51:65:e3:98:d1:bd:6c:b1:64:b3:61:66:6a: 0d:17:fe:48:c6:29:d5:92:31:c7:b6:a1:67:a7:b7:1e:c8:19: d9:b4:4b:a9:16:79:4e:f6:d8:56:42:65:69:7f:4f:b3:74:80: ef:ea:d2:e2:86:8c:47:3d:80:f9:16:98:02:59:04:90:dc:53: 6f:07:e8:51:2e:29:1e:c5:be:2b:ab:45:d0:c7:43:b7:03:e4: 66:86:70:26:da:b5:e1:5b:cb:ca:20:7d:9b:d5:8f:d7:3b:0c: 18:84:23:bc:59:f7:28:cf:4a:53:75:87:1b:ab:31:a2:38:98: 90:2c:53:a9:1b:e4:f8:9b:df:78:8c:eb:d8:02:bf:a7:ba:60: 18:4b:da:b3:5e:d7:18:27:ff:99:d2:57:70:32:6c:cd:b2:9b: 76:7b:f0:56:01:f4:ac:8a:4e:3f:14:6d:a8:e2:3f:6e:a2:0a: 73:2e:56:77 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt8gI+RY9jrrklfbIg/9lFXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxOTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MmFmZDU2MGQ1MTMwNzdlMzM5ZmFiZmUwY2NkYTkwOTQwYmRkODE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1LEAgy4V8exlldjX3FI8I8lpTZ/7 UeH6L2n98mYofsHMbHwOWdxqL74ouAkiJesy0spoE8o+CHtpJ82kYxTKqVxfZevI 2OjaX3WcbPwxKhTvd6oJnemMQin63/osSypS3/akyDZSCR3l53GnMoIPvJEKZG9k YXNIOZLpe6vc44nSjgdSTx2w0FdYxxtnkJyyp93DK88zUO7KWuWZRL/MG1J07KAm 17pwxvhyZJowhxrvB5zQP+1/BcmvLBVOP7QRYgDlMBFhEvWlo7MKpWDxs39U5ZkC GU835BDCKAoW2xQNyQc2wirxO5lfXfb1/XSg1N6lHp6OblKdwrlQyGN8dwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFEKv1WDVEwd+M5+r/gzNqQlAvdgUMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YxLzU0OWI4 Yi02NDk0LTRhOTItYTk0ZS1jZjhjZTIyYzNhZjcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjEvNTQ5Yjhi LTY0OTQtNGE5Mi1hOTRlLWNmOGNlMjJjM2FmNy8xL1FxX1ZZTlVUQjM0em42di1E TTJwQ1VDOTJCUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW+a9MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMFRjANBgkqhkiG9w0BAQsFAAOCAQEAC0LxFX5F1deri2fEsefeFj5gw55HNjtQ P+pXYITnf+hTCTZ2pvC9cp0spQ4D72F/JFtUkukAjzrN2/1HJtqSgh6yk8xNn4ut aFXSu+1RZeOY0b1ssWSzYWZqDRf+SMYp1ZIxx7ahZ6e3HsgZ2bRLqRZ5TvbYVkJl aX9Ps3SA7+rS4oaMRz2A+RaYAlkEkNxTbwfoUS4pHsW+K6tF0MdDtwPkZoZwJtq1 4VvLyiB9m9WP1zsMGIQjvFn3KM9KU3WHG6sxojiYkCxTqRvk+JvfeIzr2AK/p7pg GEvas17XGCf/mdJXcDJszbKbdnvwVgH0rIpOPxRtqOI/bqIKcy5Wdw== -----END CERTIFICATE-----Generated at Mon Feb 9 15:05:47 2026 by rpki-client