This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.cer File: Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.cer (raw, json) Hash identifier: 4j+wc9b+fdITsPmOtyMnlt2uMpvNj/CQXQwqpeMBPB8= Subject key identifier: 42:DE:27:FA:88:79:05:E0:C9:C1:F5:3F:67:F2:3F:29:6D:04:5F:0E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C747E88AEF92B6811723C142F6E26F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/15/aa4cc4-5537-4aeb-9fed-d29b7d478631/1/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/15/aa4cc4-5537-4aeb-9fed-d29b7d478631/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:18:27 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 49129 IP: 31.192.0.0/18 IP: 77.242.48.0/20 IP: 80.77.48.0/20 IP: 178.236.48.0/20 IP: 185.110.164.0/22 IP: 2a05:d5c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:47:e8:8a:ef:92:b6:81:17:23:c1:42:f6:e2:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=42de27fa887905e0c9c1f53f67f23f296d045f0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:f6:1e:df:26:e0:e5:c8:34:8f:c4:fa:e6:df: 17:3b:b1:b1:8c:c1:33:f9:66:c8:38:a2:c2:27:c3: a1:fd:85:5f:3e:d2:f9:53:ef:a5:3d:bd:60:1a:b0: 3e:35:11:63:c6:c3:e0:a8:e5:6b:26:c2:78:42:75: 76:9a:cf:de:78:a9:d3:ca:4e:8d:72:fa:d1:b3:01: 65:5c:58:fc:b6:72:c2:1d:b5:22:39:a2:66:59:1e: 73:38:b1:a0:e0:8a:75:fc:dc:ff:0d:65:43:8f:a6: 30:bb:c9:b7:de:4f:db:51:a0:ea:7d:e4:8e:fa:11: 2b:d4:3a:f3:15:14:d6:28:56:aa:e8:64:d3:71:55: b8:0d:b8:b9:c6:db:da:68:09:2e:af:27:68:4c:e5: c2:7e:de:2b:39:48:6a:ca:de:99:1e:0d:75:fe:d1: b1:8e:d4:54:f6:e3:c4:f5:25:96:75:e0:6e:03:b8: a6:c0:a1:bf:cd:59:bc:98:e9:0f:ea:da:2d:09:6b: f0:c9:93:70:68:7b:36:cd:7e:7c:0e:39:4d:b9:0e: 90:71:46:5b:c2:b0:67:8a:aa:a5:a5:57:ac:19:78: 58:d3:ba:2b:fe:8a:25:d4:46:a8:1a:20:f7:3a:9b: 58:8a:cb:4a:b5:b6:1e:d5:92:6d:d9:f8:35:be:9b: 64:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:DE:27:FA:88:79:05:E0:C9:C1:F5:3F:67:F2:3F:29:6D:04:5F:0E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/aa4cc4-5537-4aeb-9fed-d29b7d478631/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/aa4cc4-5537-4aeb-9fed-d29b7d478631/1/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.192.0.0/18 77.242.48.0/20 80.77.48.0/20 178.236.48.0/20 185.110.164.0/22 IPv6: 2a05:d5c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 49129 Signature Algorithm: sha256WithRSAEncryption 94:83:8c:15:33:b1:f7:27:dd:a4:e4:d0:96:33:e3:f8:10:ce: b7:0d:81:80:92:ea:13:46:fb:a2:d1:e6:a7:cb:4b:60:05:ee: 4b:d1:24:56:0d:87:73:11:c0:11:3f:30:56:f2:5d:bb:1b:ec: ba:eb:84:8b:11:09:76:b4:eb:52:bf:33:bb:92:51:d0:5f:39: 36:f5:11:93:0c:f1:01:99:e7:06:4f:88:ca:c2:30:6e:ad:d9: ab:46:81:25:36:5a:d4:ff:b1:b7:85:41:33:54:6c:a9:0d:ab: 20:fb:a3:24:7e:48:eb:29:fa:75:32:62:ce:eb:fc:be:ba:86: 6f:98:a3:52:5d:9b:ee:1c:76:01:af:79:16:8b:30:db:7e:d2: 90:44:20:f2:99:70:6c:23:fe:aa:fa:e3:02:2c:4e:3b:5b:31: 55:07:dd:f9:33:2a:0c:05:97:07:84:3f:99:8e:57:ca:23:c7: 7f:1b:b5:1e:c8:db:52:08:70:c4:89:9e:25:35:08:28:31:d3: c8:10:1e:dc:19:46:b1:1c:7e:fd:5f:56:66:ce:80:e6:84:7d: 6c:f8:0e:20:ff:01:94:6a:ce:ba:35:57:09:e7:0d:12:ac:cd: 7c:ae:44:6d:af:0a:92:5d:48:c6:5f:d1:c6:21:bb:a9:0c:76: b2:4f:9d:64 -----BEGIN CERTIFICATE----- MIIFuzCCBKOgAwIBAgISAZt3x0foiu+StoEXI8FC9uJvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MmRlMjdmYTg4NzkwNWUwYzljMWY1M2Y2N2YyM2YyOTZkMDQ1ZjBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1fYe3ybg5cg0j8T65t8XO7GxjMEz +WbIOKLCJ8Oh/YVfPtL5U++lPb1gGrA+NRFjxsPgqOVrJsJ4QnV2ms/eeKnTyk6N cvrRswFlXFj8tnLCHbUiOaJmWR5zOLGg4Ip1/Nz/DWVDj6Ywu8m33k/bUaDqfeSO +hEr1DrzFRTWKFaq6GTTcVW4Dbi5xtvaaAkurydoTOXCft4rOUhqyt6ZHg11/tGx jtRU9uPE9SWWdeBuA7imwKG/zVm8mOkP6totCWvwyZNwaHs2zX58DjlNuQ6QcUZb wrBniqqlpVesGXhY07or/ool1EaoGiD3OptYistKtbYe1ZJt2fg1vptkvQIDAQAB o4ICxzCCAsMwHQYDVR0OBBYEFELeJ/qIeQXgycH1P2fyPyltBF8OMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE1L2FhNGNj NC01NTM3LTRhZWItOWZlZC1kMjliN2Q0Nzg2MzEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTUvYWE0Y2M0 LTU1MzctNGFlYi05ZmVkLWQyOWI3ZDQ3ODYzMS8xL1F0NG4tb2g1QmVESndmVV9a X0lfS1cwRVh3NC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUF BwEHAQH/BDcwNTAkBAIAATAeAwQGH8AAAwQETfIwAwQEUE0wAwQEsuwwAwQCuW6k MA0EAgACMAcDBQMqBdXAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwC/6TANBgkq hkiG9w0BAQsFAAOCAQEAlIOMFTOx9yfdpOTQljPj+BDOtw2BgJLqE0b7otHmp8tL YAXuS9EkVg2HcxHAET8wVvJduxvsuuuEixEJdrTrUr8zu5JR0F85NvURkwzxAZnn Bk+IysIwbq3Zq0aBJTZa1P+xt4VBM1RsqQ2rIPujJH5I6yn6dTJizuv8vrqGb5ij Ul2b7hx2Aa95Fosw237SkEQg8plwbCP+qvrjAixOO1sxVQfd+TMqDAWXB4Q/mY5X yiPHfxu1HsjbUghwxImeJTUIKDHTyBAe3BlGsRx+/V9WZs6A5oR9bPgOIP8BlGrO ujVXCecNEqzNfK5Eba8Kkl1Ixl/RxiG7qQx2sk+dZA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:26:21 2026 by rpki-client