This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Rqs7-DYmXyqrj5Gb6M-263R-X3g.cer File: Rqs7-DYmXyqrj5Gb6M-263R-X3g.cer (raw, json) Hash identifier: 236gcgM4IT9zsc5AClS52QMLAkvQp6MxK+8LMrLO8ts= Subject key identifier: 46:AB:3B:F8:36:26:5F:2A:AB:8F:91:9B:E8:CF:B6:EB:74:7E:5F:78 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB51A387A2031F8AC7E88DD24EF9D8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/32/af7274-cce4-42a6-9343-3d286e8651fc/1/Rqs7-DYmXyqrj5Gb6M-263R-X3g.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/32/af7274-cce4-42a6-9343-3d286e8651fc/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:11 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 197803 IP: 31.22.64.0/21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:51:a3:87:a2:03:1f:8a:c7:e8:8d:d2:4e:f9:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=46ab3bf836265f2aab8f919be8cfb6eb747e5f78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:06:64:f6:8f:53:c5:63:fe:6f:14:4c:1d:26: 8e:c6:eb:fa:34:71:dd:c0:35:2e:10:f6:32:bd:f1: 6d:8b:b0:3e:df:5f:de:aa:1f:c7:67:7f:15:4a:68: ca:af:74:fd:dd:eb:02:ff:90:b2:dd:4c:de:6f:8a: 57:98:d6:10:da:13:2a:d8:6a:33:f4:3d:8e:be:08: d3:38:da:a5:6c:d7:ff:40:9e:21:22:4d:06:9b:8b: 6f:6f:32:06:7c:db:a5:a3:8e:e7:ac:a6:de:ca:23: 2f:29:ab:8a:be:4b:6e:9b:5a:6e:3a:ef:47:d0:46: 9f:62:14:09:6b:24:68:d1:8f:d8:50:55:46:05:c0: 96:28:fb:78:83:90:9d:a1:3a:f6:06:b0:08:86:40: 81:5c:1d:39:12:74:9e:94:0d:bd:04:16:8b:5e:ae: 7e:86:07:c6:55:86:6a:9d:dd:04:f0:bf:1b:b8:9c: 78:f7:3a:e6:7c:70:18:4d:24:a4:76:00:c1:18:e6: 7f:f3:5e:2c:7a:53:83:9f:66:4c:48:e5:d5:35:9b: a3:5d:a1:0f:1b:77:f7:19:d6:51:a6:1f:d9:31:c8: 36:04:b9:66:59:8e:99:1b:a7:d4:2b:9e:b6:3d:32: 67:0f:06:97:36:d2:39:fe:0a:b1:a1:60:c6:a2:d2: ea:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:AB:3B:F8:36:26:5F:2A:AB:8F:91:9B:E8:CF:B6:EB:74:7E:5F:78 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/af7274-cce4-42a6-9343-3d286e8651fc/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/af7274-cce4-42a6-9343-3d286e8651fc/1/Rqs7-DYmXyqrj5Gb6M-263R-X3g.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.22.64.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 197803 Signature Algorithm: sha256WithRSAEncryption 9b:9e:db:3d:d9:96:42:cc:37:1f:37:ba:74:e9:dd:4c:ab:c0: b4:c5:ed:8b:a2:4c:dc:1e:5f:cd:7d:24:1e:ef:66:09:b8:47: 8f:77:44:15:bc:33:ac:8b:5c:93:78:72:70:d7:6d:d8:7c:16: fc:98:06:f0:30:b6:8b:ed:c5:99:e9:1c:c4:54:a3:93:41:58: bb:7c:38:15:a5:fd:8a:a0:4f:28:35:6b:4b:59:d6:22:14:7d: ec:35:ad:0d:f6:c4:e5:93:e8:21:f0:9c:f5:03:1a:1b:06:61: 3c:19:ea:af:7c:24:c3:ef:34:7c:b6:b6:b6:91:60:8f:23:7c: 13:9d:fc:8c:38:5e:bb:eb:f7:68:23:73:17:f5:ef:55:66:95: 42:3f:51:e8:b8:1d:d6:b3:63:85:5d:6e:c0:19:70:31:25:ef: fd:16:16:c5:ee:cd:5a:96:fe:cc:7e:32:e1:76:1f:00:7f:52: 2f:9a:6d:60:4b:a7:65:d2:4b:f2:5a:43:24:d9:ef:a4:e3:3c: a1:c8:13:fc:17:4d:0a:8d:71:81:79:e6:67:79:0b:7b:84:9e: f9:91:27:c8:3e:61:b7:19:70:dd:c3:bf:08:56:fe:1c:b4:01: 65:c0:68:b6:9d:3a:ac:50:cb:2a:1b:31:d2:4f:4f:64:d2:8a: c5:0a:21:79 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt261Gjh6IDH4rH6I3STvnYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NmFiM2JmODM2MjY1ZjJhYWI4ZjkxOWJlOGNmYjZlYjc0N2U1Zjc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQZk9o9TxWP+bxRMHSaOxuv6NHHd wDUuEPYyvfFti7A+31/eqh/HZ38VSmjKr3T93esC/5Cy3Uzeb4pXmNYQ2hMq2Goz 9D2OvgjTONqlbNf/QJ4hIk0Gm4tvbzIGfNulo47nrKbeyiMvKauKvktum1puOu9H 0EafYhQJayRo0Y/YUFVGBcCWKPt4g5CdoTr2BrAIhkCBXB05EnSelA29BBaLXq5+ hgfGVYZqnd0E8L8buJx49zrmfHAYTSSkdgDBGOZ/814selODn2ZMSOXVNZujXaEP G3f3GdZRph/ZMcg2BLlmWY6ZG6fUK562PTJnDwaXNtI5/gqxoWDGotLqoQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFEarO/g2Jl8qq4+Rm+jPtut0fl94MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMyL2FmNzI3 NC1jY2U0LTQyYTYtOTM0My0zZDI4NmU4NjUxZmMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzIvYWY3Mjc0 LWNjZTQtNDJhNi05MzQzLTNkMjg2ZTg2NTFmYy8xL1JxczctRFltWHlxcmo1R2I2 TS0yNjNSLVgzZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQDHxZAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMEqzANBgkqhkiG9w0BAQsFAAOCAQEAm57bPdmWQsw3Hze6dOndTKvAtMXti6JM 3B5fzX0kHu9mCbhHj3dEFbwzrItck3hycNdt2HwW/JgG8DC2i+3FmekcxFSjk0FY u3w4FaX9iqBPKDVrS1nWIhR97DWtDfbE5ZPoIfCc9QMaGwZhPBnqr3wkw+80fLa2 tpFgjyN8E538jDheu+v3aCNzF/XvVWaVQj9R6Lgd1rNjhV1uwBlwMSXv/RYWxe7N Wpb+zH4y4XYfAH9SL5ptYEunZdJL8lpDJNnvpOM8ocgT/BdNCo1xgXnmZ3kLe4Se +ZEnyD5htxlw3cO/CFb+HLQBZcBotp06rFDLKhsx0k9PZNKKxQoheQ== -----END CERTIFICATE-----Generated at Mon Feb 9 15:11:43 2026 by rpki-client