This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QuqR6DrqCmR9qCxcE4Zs37aJORc.cer File: QuqR6DrqCmR9qCxcE4Zs37aJORc.cer (raw, json) Hash identifier: 1526n09IDt4WsINrVH4drC/MIxXMamMlshzwZftKopU= Subject key identifier: 42:EA:91:E8:3A:EA:0A:64:7D:A8:2C:5C:13:86:6C:DF:B6:89:39:17 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B3711594DEA73CDEC756DDE878DF02B6C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/1/42EA91E83AEA0A647DA82C5C13866CDFB6893917.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/1/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Fri 19 Dec 2025 14:44:02 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 214344 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:11:59:4d:ea:73:cd:ec:75:6d:de:87:8d:f0:2b:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 19 14:44:02 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=42ea91e83aea0a647da82c5c13866cdfb6893917 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:1e:22:4c:57:32:a1:4e:38:3c:e5:97:76:7b: 23:2f:0c:77:6e:bf:5e:c2:30:02:c7:ed:90:a4:1e: 3c:4d:42:cd:9d:c2:05:e6:33:47:f1:1a:37:3e:14: be:2d:08:4b:95:3c:ee:b0:ff:1c:b4:80:be:49:69: 72:27:50:a4:41:5c:15:db:61:82:88:cd:03:53:e8: 5b:d6:bd:18:c3:4f:46:9e:65:12:10:ca:25:1e:c9: 6c:6b:d0:bb:00:03:f0:5b:d6:44:2f:38:56:9b:01: 8d:0b:5e:83:41:2c:8e:21:79:3a:f2:32:59:0a:c0: 71:9e:0b:ba:25:5f:43:9c:a0:b3:5f:ec:68:f6:2a: fc:96:79:03:aa:96:b0:1d:84:ff:58:f4:d9:83:53: 0c:4e:dc:75:f9:2b:7c:32:35:0a:b3:4a:3f:98:bd: 98:10:9e:3c:c4:71:59:fa:d8:de:9b:b7:a2:be:09: 11:eb:2a:f0:80:46:ae:ac:2e:5e:b9:e6:a8:5e:1a: 09:7d:40:dc:b7:ca:db:25:75:26:de:6f:a5:56:96: f5:1c:5c:58:80:53:bb:ce:ed:59:10:78:ba:2f:f7: 1c:02:36:05:e0:32:e0:f8:bd:7a:67:89:aa:7d:1b: 71:25:9c:87:01:9f:56:d2:3f:5b:b0:03:b6:0d:9d: 30:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:EA:91:E8:3A:EA:0A:64:7D:A8:2C:5C:13:86:6C:DF:B6:89:39:17 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/1/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/1/42EA91E83AEA0A647DA82C5C13866CDFB6893917.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 214344 Signature Algorithm: sha256WithRSAEncryption 7e:16:a9:2a:4a:96:3f:e4:95:25:ae:b9:a7:d2:b2:89:b9:aa: de:2d:d8:3a:da:0b:f0:8e:d9:40:4a:ee:01:f2:84:e0:9f:0b: 68:ae:0e:7b:8f:89:b4:ca:57:8a:d9:48:e4:a2:a7:56:90:e8: ea:87:12:79:03:d0:7f:44:29:6e:71:c2:68:35:12:3d:e6:2a: 93:bb:3a:2b:c6:82:a3:2f:36:03:ab:55:2e:4c:77:ae:86:45: 78:c4:93:58:a4:c1:0b:0a:c5:47:51:f8:18:5b:d5:0e:0a:03: 39:a9:39:34:65:53:6c:b1:5f:1c:ba:b5:a6:9c:57:1e:aa:df: 1e:79:98:9e:09:80:53:c0:2a:77:76:7a:9a:d7:35:de:a3:7b: e6:11:30:65:a1:bc:d6:b3:dc:35:71:1f:12:68:c1:91:6b:d7: ac:e8:11:57:c1:4d:6d:d8:db:35:40:ef:e8:5c:6b:02:7c:2a: 3b:8f:d8:ab:14:d9:54:ee:53:1d:fd:ac:01:dc:df:a8:44:57: 06:6e:6d:93:32:5c:d0:cc:fa:58:77:62:3a:55:02:dc:71:0b: b9:03:c8:c9:03:5c:2d:e0:9b:0e:6e:91:f5:9e:73:78:5f:b0: 75:82:e6:4d:6e:4c:74:a4:6d:da:35:91:ce:ea:0d:ae:da:ea: 52:ca:4d:52 -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgISAZs3EVlN6nPN7HVt3oeN8CtsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjE5MTQ0NDAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MmVhOTFlODNhZWEwYTY0N2RhODJjNWMxMzg2NmNkZmI2ODkzOTE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0B4iTFcyoU44POWXdnsjLwx3br9e wjACx+2QpB48TULNncIF5jNH8Ro3PhS+LQhLlTzusP8ctIC+SWlyJ1CkQVwV22GC iM0DU+hb1r0Yw09GnmUSEMolHslsa9C7AAPwW9ZELzhWmwGNC16DQSyOIXk68jJZ CsBxngu6JV9DnKCzX+xo9ir8lnkDqpawHYT/WPTZg1MMTtx1+St8MjUKs0o/mL2Y EJ48xHFZ+tjem7eivgkR6yrwgEaurC5eueaoXhoJfUDct8rbJXUm3m+lVpb1HFxY gFO7zu1ZEHi6L/ccAjYF4DLg+L16Z4mqfRtxJZyHAZ9W0j9bsAO2DZ0w+wIDAQAB o4ICmzCCApcwHQYDVR0OBBYEFELqkeg66gpkfagsXBOGbN+2iTkXMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5NzE4 ZjA4LWJiMzktNGEwOS1hNGMwLTFmNDAyNDhhNmQxNS8xLzCBiwYIKwYBBQUHMAqG f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDk3 MThmMDgtYmIzOS00YTA5LWE0YzAtMWY0MDI0OGE2ZDE1LzEvNDJFQTkxRTgzQUVB MEE2NDdEQTgyQzVDMTM4NjZDREZCNjg5MzkxNy5tZnQwPAYIKwYBBQUHMA2GMGh0 dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDRUgw DQYJKoZIhvcNAQELBQADggEBAH4WqSpKlj/klSWuuafSsom5qt4t2DraC/CO2UBK 7gHyhOCfC2iuDnuPibTKV4rZSOSip1aQ6OqHEnkD0H9EKW5xwmg1Ej3mKpO7OivG gqMvNgOrVS5Md66GRXjEk1ikwQsKxUdR+Bhb1Q4KAzmpOTRlU2yxXxy6taacVx6q 3x55mJ4JgFPAKnd2eprXNd6je+YRMGWhvNaz3DVxHxJowZFr16zoEVfBTW3Y2zVA 7+hcawJ8KjuP2KsU2VTuUx39rAHc36hEVwZubZMyXNDM+lh3YjpVAtxxC7kDyMkD XC3gmw5ukfWec3hfsHWC5k1uTHSkbdo1kc7qDa7a6lLKTVI= -----END CERTIFICATE-----Generated at Fri Dec 26 14:09:23 2025 by rpki-client