This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QzJPJRto_1Rj9rU1B_ZqSwNNwOU.cer
File:                     QzJPJRto_1Rj9rU1B_ZqSwNNwOU.cer (raw, json)
Hash identifier:          La+oDBvHjxPXSd7/Ujd8u/9YazwhHOcrh6HQbjaQ4as=
Subject key identifier:   43:32:4F:25:1B:68:FF:54:63:F6:B5:35:07:F6:6A:4B:03:4D:C0:E5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7C132AB48CDCC9DE0CD864B26959D076
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/8b/afead5-9373-485a-a93a-bc33a54898e0/1/QzJPJRto_1Rj9rU1B_ZqSwNNwOU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/8b/afead5-9373-485a-a93a-bc33a54898e0/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 02 Jan 2026 00:19:49 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 8607
                          AS: 8686
                          AS: 8689
                          AS: 9191
                          AS: 15727
                          AS: 16034
                          AS: 38973
                          AS: 43620
                          AS: 51901
                          AS: 57927
                          IP: 62.105.160.0/19
                          IP: 62.121.0.0/19
                          IP: 77.76.64.0/18
                          IP: 77.221.160.0/19
                          IP: 78.25.192.0/18
                          IP: 79.141.128.0/20
                          IP: 80.175.0.0/16
                          IP: 81.3.64.0/18
                          IP: 82.118.96.0/19
                          IP: 91.103.168.0/21
                          IP: 91.220.180.0/24
                          IP: 91.236.206.0/24
                          IP: 109.224.128.0/19
                          IP: 185.4.100.0/22
                          IP: 185.81.176.0/22
                          IP: 195.54.224.0/19
                          IP: 195.60.0.0/19
                          IP: 212.22.0.0/19
                          IP: 212.87.64.0/19
                          IP: 213.131.160.0/19
                          IP: 2001:1a20::/32
                          IP: 2001:40a0::/32
                          IP: 2a01:178::/32
                          IP: 2a02:c840::/29
                          IP: 2a03:8200::/32
                          IP: 2a05:7c80::/29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:13:2a:b4:8c:dc:c9:de:0c:d8:64:b2:69:59:d0:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 00:19:49 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=43324f251b68ff5463f6b53507f66a4b034dc0e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:9c:7e:1c:34:60:0c:6d:4b:73:65:c7:76:ca:
                    25:d4:42:d8:ae:aa:bd:b7:1c:fe:b2:c5:9a:12:7b:
                    50:71:a9:51:db:54:f7:7c:f0:3b:7a:b2:a1:5a:e3:
                    65:79:1a:99:73:e1:21:80:ca:0b:2d:99:ba:2c:f3:
                    bf:be:87:22:b0:b6:91:3d:44:d9:18:1f:01:16:50:
                    7b:81:a2:8e:14:db:31:3f:55:6d:3c:78:54:76:e2:
                    c8:5a:5e:6f:4e:48:4d:59:48:d7:75:d0:e1:35:4a:
                    b2:d6:d8:b3:7d:a7:c6:44:02:49:ff:63:75:af:fc:
                    56:5b:0f:70:a8:74:f9:79:69:84:eb:d3:8e:df:e9:
                    8d:75:95:b5:5a:06:ab:a5:d9:f6:f8:47:61:e7:7c:
                    17:43:a0:14:ce:84:a7:7f:20:d9:88:a2:db:e4:2f:
                    4e:21:52:21:dd:06:6d:7e:60:2f:8f:69:cd:93:56:
                    99:c9:54:19:ec:86:16:89:3d:7d:dd:58:6c:b5:d5:
                    3c:b1:5e:ab:7b:0d:0f:4f:40:72:fe:d1:1b:b5:ba:
                    b7:e6:49:86:c4:ed:67:26:eb:6f:ca:21:7d:67:7e:
                    77:b4:f7:db:96:d3:c5:6d:7b:e2:de:78:61:69:62:
                    7c:20:d2:dc:f6:3d:24:51:85:5c:b1:5f:e3:78:af:
                    05:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:32:4F:25:1B:68:FF:54:63:F6:B5:35:07:F6:6A:4B:03:4D:C0:E5
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/afead5-9373-485a-a93a-bc33a54898e0/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/afead5-9373-485a-a93a-bc33a54898e0/1/QzJPJRto_1Rj9rU1B_ZqSwNNwOU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.105.160.0/19
                  62.121.0.0/19
                  77.76.64.0/18
                  77.221.160.0/19
                  78.25.192.0/18
                  79.141.128.0/20
                  80.175.0.0/16
                  81.3.64.0/18
                  82.118.96.0/19
                  91.103.168.0/21
                  91.220.180.0/24
                  91.236.206.0/24
                  109.224.128.0/19
                  185.4.100.0/22
                  185.81.176.0/22
                  195.54.224.0/19
                  195.60.0.0/19
                  212.22.0.0/19
                  212.87.64.0/19
                  213.131.160.0/19
                IPv6:
                  2001:1a20::/32
                  2001:40a0::/32
                  2a01:178::/32
                  2a02:c840::/29
                  2a03:8200::/32
                  2a05:7c80::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  8607
                  8686
                  8689
                  9191
                  15727
                  16034
                  38973
                  43620
                  51901
                  57927

    Signature Algorithm: sha256WithRSAEncryption
         7c:e6:eb:ec:c1:11:6b:e9:a7:d6:45:91:6d:ac:8f:c0:cc:80:
         08:df:15:56:9b:df:31:65:82:e5:48:5a:ff:12:a1:53:7e:6f:
         62:8f:58:22:e0:c1:a8:e8:e2:c5:fb:b4:68:5a:09:66:e0:0a:
         bc:de:d6:89:f7:dc:89:66:41:aa:42:a8:2d:a1:66:34:80:bf:
         ec:b6:d2:b0:06:12:25:da:3a:bb:2a:12:70:81:a8:09:9e:6d:
         ca:53:45:98:bd:3d:1f:a8:60:49:43:fe:0c:d8:65:a4:5c:83:
         16:2c:f1:ee:d5:3e:ce:63:fb:1e:c0:1c:24:5a:cd:8f:1f:b3:
         0f:10:69:fa:ce:d2:0a:f9:58:ec:eb:e0:27:5b:76:ad:c6:00:
         0e:5c:a4:3a:36:09:1d:3e:9a:2d:0a:b6:4f:c8:c7:13:ca:20:
         c1:ab:11:af:ef:7b:19:e6:4a:23:47:0d:f1:8a:7c:77:78:bf:
         c3:8d:8d:28:f5:ec:a0:06:dd:67:da:11:92:a9:f0:2d:7e:11:
         29:98:b6:f9:20:3a:95:67:7d:83:fa:d8:73:e7:79:d5:21:70:
         1f:01:f2:a8:a7:97:2d:84:c3:8e:e8:57:74:7b:61:0b:85:3b:
         5d:5a:31:4c:fd:bd:d5:e4:39:57:c1:37:7c:c4:6f:ac:98:83:
         e7:a8:14:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----