This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Qy7-FuxsAP1FtdkY2bFyrNCljZY.cer File: Qy7-FuxsAP1FtdkY2bFyrNCljZY.cer (raw, json) Hash identifier: eclejIWvq67QHfh4a2oh1oWQzHECPFMdfBztm4Irs8s= Subject key identifier: 43:2E:FE:16:EC:6C:00:FD:45:B5:D9:18:D9:B1:72:AC:D0:A5:8D:96 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA431CA947DAC47721FC9BDF61157B3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/Qy7-FuxsAP1FtdkY2bFyrNCljZY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:17:28 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 39498 AS: 47675 IP: 146.19.127.0/24 IP: 185.122.244.0/22 IP: 2a0d:6700::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:31:ca:94:7d:ac:47:72:1f:c9:bd:f6:11:57:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=432efe16ec6c00fd45b5d918d9b172acd0a58d96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:ca:dc:53:7f:70:f5:a3:09:6e:45:f6:b2:c4: f0:c8:6a:fd:6f:11:d0:d1:27:58:2b:97:f2:c9:04: 16:e2:e9:d3:a0:5b:8d:d3:a2:5c:4b:ab:16:3e:a7: 4b:fa:51:5b:4b:54:91:d4:41:0f:b0:1e:40:ee:c2: d3:6d:09:65:ec:97:b3:a7:5e:5b:d5:2f:78:42:fb: 20:23:25:a8:b4:9e:2a:90:99:3f:79:2e:3a:6f:cd: 9d:84:5c:ec:ca:4d:97:44:84:6a:4b:8a:a9:97:4d: 57:2f:03:01:fd:64:ad:09:ae:e6:a1:56:66:e0:d0: e8:5e:3f:43:6b:b6:46:c1:ff:98:d7:e1:5c:c9:69: a3:0c:39:63:ba:d3:c5:f0:77:7f:36:d7:68:d6:3e: 1a:43:97:85:0a:7f:94:22:e9:0f:67:87:a2:78:2b: 06:38:90:0d:64:69:de:48:cf:81:16:69:59:5b:c0: c5:6a:01:96:9c:6d:ca:64:9a:ef:4b:ed:54:78:a5: b6:7b:b8:fe:69:f5:dc:56:37:4a:e8:a3:ba:bc:61: ff:c6:9f:37:9e:03:8f:6d:c3:2e:75:2a:3d:f4:e5: 2f:8a:60:09:a0:4f:5c:d1:39:e6:3f:91:25:10:e3: 03:78:8b:d6:42:91:1a:67:da:12:c0:f0:7c:2f:f0: fc:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:2E:FE:16:EC:6C:00:FD:45:B5:D9:18:D9:B1:72:AC:D0:A5:8D:96 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/Qy7-FuxsAP1FtdkY2bFyrNCljZY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.19.127.0/24 185.122.244.0/22 IPv6: 2a0d:6700::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 39498 47675 Signature Algorithm: sha256WithRSAEncryption 0f:c3:f8:a0:f8:d0:dc:ae:4e:9b:43:72:b0:42:b0:30:4a:48: 8d:4b:24:5e:68:05:dd:12:6c:97:e4:86:f1:8f:ae:eb:f5:7b: fa:90:e2:8d:77:a9:d6:88:f7:84:b4:74:e2:b6:1e:a9:53:10: c6:7c:bc:8b:54:f3:db:b8:29:06:94:74:ff:e0:b3:ca:8f:95: 22:37:5e:a9:c0:fd:10:75:96:d0:6d:be:d0:28:08:51:1a:66: ba:76:14:52:5a:25:c7:0b:db:b0:ae:08:db:7c:2e:14:b6:ee: 49:a0:b3:0d:5a:df:8a:72:c7:88:be:d5:c1:d0:b5:9d:65:4e: 6c:19:55:0d:ff:49:b7:f9:52:62:35:52:0e:c8:56:34:d7:96: 65:30:09:08:6c:6e:41:00:b0:90:f6:5c:ba:09:b2:33:66:d8: 7f:2d:ac:8b:ec:68:d1:1a:ef:5d:08:af:ed:ad:54:71:ac:1f: f8:80:23:52:c3:9d:c9:c0:88:7d:7e:9c:6d:d0:4f:79:f6:cb: 51:2f:36:00:72:87:cc:7f:cb:cc:37:b3:15:b6:90:e3:b2:12: 82:cf:5c:8c:aa:7a:1c:9e:93:c3:c9:dd:04:f1:fc:82:39:11: 31:e6:d3:a0:00:44:40:58:7e:4a:52:bc:7e:fb:df:a8:62:c2: 64:52:18:87 -----BEGIN CERTIFICATE----- MIIFrjCCBJagAwIBAgISAZt+pDHKlH2sR3Ifyb32EVezMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MzJlZmUxNmVjNmMwMGZkNDViNWQ5MThkOWIxNzJhY2QwYTU4ZDk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcrcU39w9aMJbkX2ssTwyGr9bxHQ 0SdYK5fyyQQW4unToFuN06JcS6sWPqdL+lFbS1SR1EEPsB5A7sLTbQll7Jezp15b 1S94QvsgIyWotJ4qkJk/eS46b82dhFzsyk2XRIRqS4qpl01XLwMB/WStCa7moVZm 4NDoXj9Da7ZGwf+Y1+FcyWmjDDljutPF8Hd/Ntdo1j4aQ5eFCn+UIukPZ4eieCsG OJANZGneSM+BFmlZW8DFagGWnG3KZJrvS+1UeKW2e7j+afXcVjdK6KO6vGH/xp83 ngOPbcMudSo99OUvimAJoE9c0TnmP5ElEOMDeIvWQpEaZ9oSwPB8L/D8bwIDAQAB o4ICujCCArYwHQYDVR0OBBYEFEMu/hbsbAD9RbXZGNmxcqzQpY2WMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhjLzI1YjQ3 ZS00MDc5LTRmMjEtOTExYi1mMzg5YTUyNjlmYjIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGMvMjViNDdl LTQwNzktNGYyMS05MTFiLWYzODlhNTI2OWZiMi8xL1F5Ny1GdXhzQVAxRnRka1ky YkZ5ck5DbGpaWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQAkhN/AwQCuXr0MA0EAgACMAcDBQMqDWcAMB8G CCsGAQUFBwEIAQH/BBAwDqAMMAoCAwCaSgIDALo7MA0GCSqGSIb3DQEBCwUAA4IB AQAPw/ig+NDcrk6bQ3KwQrAwSkiNSyReaAXdEmyX5Ibxj67r9Xv6kOKNd6nWiPeE tHTith6pUxDGfLyLVPPbuCkGlHT/4LPKj5UiN16pwP0QdZbQbb7QKAhRGma6dhRS WiXHC9uwrgjbfC4Utu5JoLMNWt+KcseIvtXB0LWdZU5sGVUN/0m3+VJiNVIOyFY0 15ZlMAkIbG5BALCQ9ly6CbIzZth/LayL7GjRGu9dCK/trVRxrB/4gCNSw53JwIh9 fpxt0E959stRLzYAcofMf8vMN7MVtpDjshKCz1yMqnocnpPDyd0E8fyCOREx5tOg AERAWH5KUrx++9+oYsJkUhiH -----END CERTIFICATE-----Generated at Mon Feb 9 18:25:12 2026 by rpki-client