This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.cer File: Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.cer (raw, json) Hash identifier: hObq599cC6TAelbkVBFTyRFmyxBVhCP23dgUrgn/DmU= Subject key identifier: 43:0E:40:26:CA:96:4C:F3:51:29:40:B2:6B:11:E6:48:71:C4:79:44 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F158F6B7D7E201FBFF859A2833B5E6C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:18 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 194.8.75.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:8f:6b:7d:7e:20:1f:bf:f8:59:a2:83:3b:5e:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=430e4026ca964cf3512940b26b11e64871c47944 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d9:ce:30:17:0c:f9:25:02:88:56:73:f9:b5: 52:5a:63:8d:32:a5:61:da:4b:82:8e:e6:6f:1c:96: a7:b7:47:6e:7b:aa:d3:9a:09:81:1a:13:41:4a:73: 02:f0:e6:19:8b:1e:91:ee:07:86:c6:73:81:4e:50: ae:87:0d:1a:d5:9d:65:25:6f:f5:25:57:95:59:11: 13:83:bd:ba:73:30:3e:4f:2c:ed:33:bf:64:5c:ad: d4:ab:65:da:af:05:db:dc:8d:4f:ab:49:9a:2f:24: f4:4d:cb:8b:cc:eb:90:ff:17:6f:59:48:13:01:b6: bd:a5:4b:56:5e:de:7c:b8:a3:6d:9b:91:96:78:0f: 09:f3:11:a4:83:d2:06:04:ad:7a:63:64:97:7c:53: 10:a4:96:21:2d:49:30:55:ca:b1:58:de:88:79:36: 78:89:c6:0b:9f:7e:36:fc:36:15:24:34:42:10:ef: ae:da:8a:41:a6:e6:da:cd:47:54:cb:91:98:e0:c5: 89:d8:b4:8d:96:6c:49:d6:15:11:07:41:1a:cf:eb: ea:ff:c0:83:bd:64:72:88:55:19:f6:c6:76:46:ee: 78:0e:f4:d4:22:44:70:39:52:ea:9c:d2:82:0e:55: 89:31:34:d3:08:34:f0:14:38:d7:20:9f:4b:af:38: 1f:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:0E:40:26:CA:96:4C:F3:51:29:40:B2:6B:11:E6:48:71:C4:79:44 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.8.75.0/24 Signature Algorithm: sha256WithRSAEncryption 30:86:cc:bf:b8:25:ac:a0:70:70:50:6a:ab:59:ff:0f:ca:ed: c2:21:a2:35:3e:2c:4a:45:bd:bd:91:13:c7:c7:8a:f7:01:0f: dd:66:fc:b6:e1:aa:fd:d7:75:dc:9a:ae:db:b9:9f:b6:9b:25: 35:9c:84:4f:ab:b6:7c:b3:22:e5:de:70:e5:3e:52:2b:6d:92: 26:a8:b9:01:5b:45:8b:68:3e:83:48:30:ba:0e:c8:52:44:b2: 1c:4d:ee:0e:94:86:0e:ef:60:53:1e:57:3e:84:8a:70:c7:7c: eb:ae:49:18:eb:dc:24:00:ea:58:c4:2a:3b:26:a5:f8:12:d3: 67:1f:9f:3e:b9:81:d7:54:bf:e9:2f:d4:cd:e6:92:fc:1f:ec: af:34:bf:c0:ef:d9:dc:9d:eb:9b:2f:26:f5:99:29:1e:ee:eb: 16:15:f1:8d:9d:db:ad:50:7e:3a:95:6e:ff:33:27:14:77:76: e2:22:91:f8:ed:7d:e8:dd:c4:d5:12:56:62:0f:18:95:19:8b: c4:05:8a:49:af:a1:d0:eb:1f:f8:e0:36:b4:f0:48:c9:24:c3: eb:12:84:3f:98:e5:03:23:86:1b:49:08:b1:f3:ce:1e:3b:42: 87:c0:5a:cc:2a:34:5d:ce:c6:4a:d8:4b:82:9c:66:0e:32:15: e5:66:20:fd -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt/FY9rfX4gH7/4WaKDO15sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MzBlNDAyNmNhOTY0Y2YzNTEyOTQwYjI2YjExZTY0ODcxYzQ3OTQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodnOMBcM+SUCiFZz+bVSWmONMqVh 2kuCjuZvHJant0due6rTmgmBGhNBSnMC8OYZix6R7geGxnOBTlCuhw0a1Z1lJW/1 JVeVWRETg726czA+TyztM79kXK3Uq2XarwXb3I1Pq0maLyT0TcuLzOuQ/xdvWUgT Aba9pUtWXt58uKNtm5GWeA8J8xGkg9IGBK16Y2SXfFMQpJYhLUkwVcqxWN6IeTZ4 icYLn342/DYVJDRCEO+u2opBpubazUdUy5GY4MWJ2LSNlmxJ1hURB0Eaz+vq/8CD vWRyiFUZ9sZ2Ru54DvTUIkRwOVLqnNKCDlWJMTTTCDTwFDjXIJ9Lrzgf1QIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFEMOQCbKlkzzUSlAsmsR5khxxHlEMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA1LzEzMjQx MC00ODM5LTQxNzQtOGRlMi0xMTEzYWU1NjMzNjkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDUvMTMyNDEw LTQ4MzktNDE3NC04ZGUyLTExMTNhZTU2MzM2OS8xL1F3NUFKc3FXVFBOUktVQ3lh eEhtU0hIRWVVUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwghLMA0GCSqGSIb3DQEBCwUAA4IBAQAwhsy/ uCWsoHBwUGqrWf8Pyu3CIaI1PixKRb29kRPHx4r3AQ/dZvy24ar913Xcmq7buZ+2 myU1nIRPq7Z8syLl3nDlPlIrbZImqLkBW0WLaD6DSDC6DshSRLIcTe4OlIYO72BT Hlc+hIpwx3zrrkkY69wkAOpYxCo7JqX4EtNnH58+uYHXVL/pL9TN5pL8H+yvNL/A 79ncneubLyb1mSke7usWFfGNndutUH46lW7/MycUd3biIpH47X3o3cTVElZiDxiV GYvEBYpJr6HQ6x/44Da08EjJJMPrEoQ/mOUDI4YbSQix884eO0KHwFrMKjRdzsZK 2EuCnGYOMhXlZiD9 -----END CERTIFICATE-----Generated at Mon Feb 9 16:52:31 2026 by rpki-client