This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QrTHmiKj_ph-8xkIzUT_gemxrPQ.cer File: QrTHmiKj_ph-8xkIzUT_gemxrPQ.cer (raw, json) Hash identifier: XusZ9N0NUYKWUYX+YO6A/RJDNd09Gy97LhlBAwBa/B0= Subject key identifier: 42:B4:C7:9A:22:A3:FE:98:7E:F3:19:08:CD:44:FF:81:E9:B1:AC:F4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA4FA3D6C4C2A78DA99A8EB415FE3F4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6d/4b911c-3d4d-42d5-9234-f288137cb500/1/QrTHmiKj_ph-8xkIzUT_gemxrPQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6d/4b911c-3d4d-42d5-9234-f288137cb500/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:19:28 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 48293 IP: 91.194.246.0/23 IP: 91.212.217.0/24 IP: 94.228.192.0/20 IP: 185.108.20.0/22 IP: 2a06:4180::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:fa:3d:6c:4c:2a:78:da:99:a8:eb:41:5f:e3:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:19:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=42b4c79a22a3fe987ef31908cd44ff81e9b1acf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b6:28:92:ed:c7:71:54:3e:ef:44:5d:30:a9: ed:93:3f:c6:3e:f0:2b:97:46:65:51:7c:a1:59:17: e6:fc:b5:71:5d:d6:86:af:cc:4d:11:8d:93:73:b6: 6e:b0:5c:35:34:a4:61:7b:80:27:15:d9:05:cb:da: f2:1c:7a:84:20:15:18:1f:f9:28:23:92:e3:40:5b: 9b:57:62:b1:fe:2a:57:c6:1f:28:f0:6f:fd:17:97: 45:e1:54:cc:7b:b3:2a:bd:69:b6:dd:f2:35:8f:48: 60:62:8a:bc:60:75:54:75:36:a0:3a:e6:29:ef:7d: e1:39:81:2f:18:10:29:e9:c4:31:c1:79:6c:2f:99: 79:20:2a:6f:a2:18:78:7e:b6:47:fc:ed:c5:95:b9: 55:9f:d6:8a:e5:1b:e9:42:32:36:3a:c7:32:a6:2f: 81:b1:e8:4c:97:5a:ee:eb:95:3a:bb:e7:01:35:83: ba:48:a6:cf:4f:c0:da:b4:bc:18:b4:11:60:b9:92: af:bb:a3:d3:cd:a8:4e:aa:f2:d4:3f:62:db:9a:0e: c9:eb:56:3c:9e:b8:71:2d:c6:ff:05:6a:71:35:7f: cb:97:fe:5d:5f:9d:5b:74:8d:df:71:80:54:e1:bc: 8d:e2:0c:b1:0f:5e:45:71:4a:a6:b6:e2:1b:bf:77: a0:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:B4:C7:9A:22:A3:FE:98:7E:F3:19:08:CD:44:FF:81:E9:B1:AC:F4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/4b911c-3d4d-42d5-9234-f288137cb500/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/4b911c-3d4d-42d5-9234-f288137cb500/1/QrTHmiKj_ph-8xkIzUT_gemxrPQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.194.246.0/23 91.212.217.0/24 94.228.192.0/20 185.108.20.0/22 IPv6: 2a06:4180::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 48293 Signature Algorithm: sha256WithRSAEncryption 35:8b:4f:e0:c8:fd:3c:af:c9:d1:2d:ad:c0:c4:0b:ea:8a:79: d7:d2:7d:e4:67:7a:06:50:99:e5:bb:1f:7e:e0:2c:0b:f9:66: 0a:52:ee:e3:8d:c5:a5:b9:33:8d:a8:53:e4:a9:bf:e1:0b:d8: af:3b:82:bd:69:8c:b7:1e:e4:95:04:21:10:bf:09:2e:6e:4f: 36:ba:23:cd:8f:0e:06:aa:9e:21:78:ec:a7:ed:db:bf:6b:80: 30:ba:5b:fb:85:ff:8e:7f:77:d8:79:78:4f:e0:98:ed:0d:67: 29:2d:7a:9d:e1:3c:f9:a2:61:19:8d:6f:6d:39:7a:a3:d9:77: b2:47:89:d3:a2:f8:c0:4f:26:6b:58:9b:4d:0d:4a:1b:c5:ec: 10:8c:46:a9:b2:06:cb:86:1f:5f:c6:5b:2a:d4:17:0b:90:12: a2:1d:1e:54:b0:96:79:9f:38:5d:d5:9c:4c:72:2a:b3:20:81: 67:20:92:3e:82:bd:ea:ac:22:bc:60:c3:14:a0:b9:fa:b6:81: 7d:eb:c7:f8:3a:35:36:7d:15:76:32:b0:b7:66:3a:4f:0e:28: d3:5e:7a:21:8c:d8:23:04:27:0d:c6:fc:50:3a:aa:19:b8:2f: 1e:32:9a:0f:31:f0:4a:a9:15:4e:d1:83:04:62:b5:81:a9:5e: 50:90:c5:05 -----BEGIN CERTIFICATE----- MIIFtTCCBJ2gAwIBAgISAZt7pPo9bEwqeNqZqOtBX+P0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxOTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MmI0Yzc5YTIyYTNmZTk4N2VmMzE5MDhjZDQ0ZmY4MWU5YjFhY2Y0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7Yoku3HcVQ+70RdMKntkz/GPvAr l0ZlUXyhWRfm/LVxXdaGr8xNEY2Tc7ZusFw1NKRhe4AnFdkFy9ryHHqEIBUYH/ko I5LjQFubV2Kx/ipXxh8o8G/9F5dF4VTMe7MqvWm23fI1j0hgYoq8YHVUdTagOuYp 733hOYEvGBAp6cQxwXlsL5l5ICpvohh4frZH/O3FlblVn9aK5RvpQjI2Oscypi+B sehMl1ru65U6u+cBNYO6SKbPT8DatLwYtBFguZKvu6PTzahOqvLUP2Lbmg7J61Y8 nrhxLcb/BWpxNX/Ll/5dX51bdI3fcYBU4byN4gyxD15FcUqmtuIbv3egPwIDAQAB o4ICwTCCAr0wHQYDVR0OBBYEFEK0x5oio/6YfvMZCM1E/4Hpsaz0MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZkLzRiOTEx Yy0zZDRkLTQyZDUtOTIzNC1mMjg4MTM3Y2I1MDAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmQvNGI5MTFj LTNkNGQtNDJkNS05MjM0LWYyODgxMzdjYjUwMC8xL1FyVEhtaUtqX3BoLTh4a0l6 VVRfZ2VteHJQUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF BwEHAQH/BDEwLzAeBAIAATAYAwQBW8L2AwQAW9TZAwQEXuTAAwQCuWwUMA0EAgAC MAcDBQMqBkGAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwC8pTANBgkqhkiG9w0B AQsFAAOCAQEANYtP4Mj9PK/J0S2twMQL6op519J95Gd6BlCZ5bsffuAsC/lmClLu 443FpbkzjahT5Km/4QvYrzuCvWmMtx7klQQhEL8JLm5PNrojzY8OBqqeIXjsp+3b v2uAMLpb+4X/jn932Hl4T+CY7Q1nKS16neE8+aJhGY1vbTl6o9l3skeJ06L4wE8m a1ibTQ1KG8XsEIxGqbIGy4YfX8ZbKtQXC5ASoh0eVLCWeZ84XdWcTHIqsyCBZyCS PoK96qwivGDDFKC5+raBfevH+Do1Nn0VdjKwt2Y6Tw4o0156IYzYIwQnDcb8UDqq GbgvHjKaDzHwSqkVTtGDBGK1galeUJDFBQ== -----END CERTIFICATE-----Generated at Mon Feb 9 15:07:03 2026 by rpki-client