This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QxHM0r0iVEq-WFp80_lJEeoMlCo.cer File: QxHM0r0iVEq-WFp80_lJEeoMlCo.cer (raw, json) Hash identifier: uYGCAzW/fE6vkK8iJJ8LpRpi6L23v46/oZ5DDMHHHyM= Subject key identifier: 43:11:CC:D2:BD:22:54:4A:BE:58:5A:7C:D3:F9:49:11:EA:0C:94:2A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C12A6D79FCB24A7A37321775DA62535 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c6/33d648-0610-4921-bd0f-d378baf6aa92/1/QxHM0r0iVEq-WFp80_lJEeoMlCo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c6/33d648-0610-4921-bd0f-d378baf6aa92/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:19:15 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 211534 IP: 185.253.11.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:a6:d7:9f:cb:24:a7:a3:73:21:77:5d:a6:25:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4311ccd2bd22544abe585a7cd3f94911ea0c942a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b8:87:a6:f9:d4:cb:77:7d:11:95:c6:56:65: 01:22:e9:d4:fe:f2:80:43:c7:ad:56:2b:4e:4c:f4: a6:54:46:dd:74:7f:eb:9c:33:92:e1:57:ac:b2:a3: dd:be:59:7b:6e:4e:16:84:5a:b2:4f:9c:16:7c:78: 92:c2:06:65:df:79:60:68:f2:aa:3e:d3:a6:5f:d1: 7c:ef:3d:dd:b8:a1:d4:7f:89:d3:7e:ea:5b:39:0c: df:a9:52:b7:cd:12:cf:6e:63:7c:93:28:da:72:45: e2:e3:4a:03:2e:6d:60:a7:eb:b4:9d:d2:38:81:a6: 90:88:72:91:d9:65:fd:86:ed:6f:c1:da:d5:b7:56: 80:78:81:5d:42:16:75:a7:46:28:33:e7:bb:7a:bd: 23:95:5f:bd:28:3d:71:97:4a:2a:0a:76:ef:bf:86: c4:74:a5:ce:a6:65:ea:b5:19:0e:d2:c3:ce:4c:df: 13:95:3c:67:33:65:3f:4a:14:3b:cc:24:01:ad:e2: 09:95:14:11:96:93:a5:89:a7:8b:e5:39:0f:c9:be: 04:dd:45:28:e4:e2:3f:ea:78:2a:76:76:ef:48:a5: 6b:1a:e4:3d:7e:a3:46:80:fb:04:94:3b:07:8a:6e: 6a:7f:a3:e1:0e:dc:72:de:f7:82:f9:e3:86:6e:77: b3:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:11:CC:D2:BD:22:54:4A:BE:58:5A:7C:D3:F9:49:11:EA:0C:94:2A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/33d648-0610-4921-bd0f-d378baf6aa92/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/33d648-0610-4921-bd0f-d378baf6aa92/1/QxHM0r0iVEq-WFp80_lJEeoMlCo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.253.11.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 211534 Signature Algorithm: sha256WithRSAEncryption 07:da:a1:4a:3a:21:0a:ea:18:b5:3b:83:ea:e3:95:a4:c9:c4: 1a:10:88:f6:83:5e:d6:e9:b9:87:e8:d3:93:49:ba:ce:a6:b3: e3:e0:8e:bc:43:8b:38:0f:fb:66:81:2f:7d:27:d8:39:1a:b0: 37:04:fd:46:ba:88:66:4b:52:73:e5:04:98:ff:f3:4c:b2:9a: f4:45:09:be:46:c9:8e:0c:73:d9:f2:0d:20:b1:1d:a4:c1:84: 6c:1c:c1:23:8b:84:d1:e0:8d:ec:15:ad:4a:5c:ce:9b:4a:cc: e8:0f:55:00:14:1c:cf:d7:7a:90:39:06:a3:c6:2f:a2:f5:04: 11:04:1a:94:b0:44:76:32:56:43:df:4b:9a:d9:6a:85:a0:09: b2:60:cd:f8:f2:0b:e4:d7:97:f0:3d:7c:41:22:08:92:70:30: b4:20:28:3d:f3:51:eb:01:35:fc:0e:b4:67:79:34:9e:a7:3e: 30:90:75:6f:62:ff:3e:90:97:66:0a:dc:17:71:49:78:6b:ff: 0b:a8:49:d8:f4:c0:b3:42:e4:82:70:1d:7f:dd:04:33:28:3d: de:eb:9a:19:fa:9a:90:ac:ca:64:37:9d:58:9c:8d:a2:ac:3f: 12:0f:05:a5:1f:94:8a:7f:e4:ca:45:57:b3:cc:4e:ec:07:d3: 99:4f:95:5b -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt8EqbXn8skp6NzIXddpiU1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MzExY2NkMmJkMjI1NDRhYmU1ODVhN2NkM2Y5NDkxMWVhMGM5NDJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLiHpvnUy3d9EZXGVmUBIunU/vKA Q8etVitOTPSmVEbddH/rnDOS4VessqPdvll7bk4WhFqyT5wWfHiSwgZl33lgaPKq PtOmX9F87z3duKHUf4nTfupbOQzfqVK3zRLPbmN8kyjackXi40oDLm1gp+u0ndI4 gaaQiHKR2WX9hu1vwdrVt1aAeIFdQhZ1p0YoM+e7er0jlV+9KD1xl0oqCnbvv4bE dKXOpmXqtRkO0sPOTN8TlTxnM2U/ShQ7zCQBreIJlRQRlpOliaeL5TkPyb4E3UUo 5OI/6ngqdnbvSKVrGuQ9fqNGgPsElDsHim5qf6PhDtxy3veC+eOGbnezHQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFEMRzNK9IlRKvlhafNP5SRHqDJQqMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M2LzMzZDY0 OC0wNjEwLTQ5MjEtYmQwZi1kMzc4YmFmNmFhOTIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzYvMzNkNjQ4 LTA2MTAtNDkyMS1iZDBmLWQzNzhiYWY2YWE5Mi8xL1F4SE0wcjBpVkVxLVdGcDgw X2xKRWVvTWxDby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAuf0LMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwM6TjANBgkqhkiG9w0BAQsFAAOCAQEAB9qhSjohCuoYtTuD6uOVpMnEGhCI9oNe 1um5h+jTk0m6zqaz4+COvEOLOA/7ZoEvfSfYORqwNwT9RrqIZktSc+UEmP/zTLKa 9EUJvkbJjgxz2fINILEdpMGEbBzBI4uE0eCN7BWtSlzOm0rM6A9VABQcz9d6kDkG o8YvovUEEQQalLBEdjJWQ99LmtlqhaAJsmDN+PIL5NeX8D18QSIIknAwtCAoPfNR 6wE1/A60Z3k0nqc+MJB1b2L/PpCXZgrcF3FJeGv/C6hJ2PTAs0LkgnAdf90EMyg9 3uuaGfqakKzKZDedWJyNoqw/Eg8FpR+Uin/kykVXs8xO7AfTmU+VWw== -----END CERTIFICATE-----Generated at Mon Feb 9 15:09:17 2026 by rpki-client