This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WqTlcQpGU2vvKvNr9j8ZQLw3vUI.cer File: WqTlcQpGU2vvKvNr9j8ZQLw3vUI.cer (raw, json) Hash identifier: SynBclHl3DDVicP9pqBUsSYH9zUmO8kfpo5njhCTucI= Subject key identifier: 5A:A4:E5:71:0A:46:53:6B:EF:2A:F3:6B:F6:3F:19:40:BC:37:BD:42 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A2209AF3E7674736988EA7DAF5379A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e9/1dd81c-665e-4b76-91fb-44dc52a19ce5/1/WqTlcQpGU2vvKvNr9j8ZQLw3vUI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e9/1dd81c-665e-4b76-91fb-44dc52a19ce5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:17:29 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 198606 IP: 91.237.96.0/24 IP: 2001:67c:28c0::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:20:9a:f3:e7:67:47:36:98:8e:a7:da:f5:37:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5aa4e5710a46536bef2af36bf63f1940bc37bd42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:3c:0f:5c:43:e9:2b:c1:b2:25:c6:0f:17:4b: b5:6e:ed:8f:a8:ae:72:6e:0c:f8:ac:62:23:9a:da: f5:8d:56:b0:96:58:ae:01:fa:cc:69:a9:2b:78:ec: 75:76:f0:f0:e7:ab:05:0e:22:66:9c:23:be:56:56: 7a:8c:73:61:e3:94:e0:c9:7e:0e:ac:db:ea:f8:30: 69:80:b7:0d:23:73:17:9b:8c:fc:11:df:9c:00:23: b5:56:05:41:1d:e6:01:db:28:b0:2c:02:85:be:9a: 43:c6:2c:39:c5:45:f7:de:6d:0b:40:5c:3b:9e:43: 82:83:f8:86:18:30:af:dd:99:8f:50:01:aa:f3:4a: a4:e4:85:71:32:23:c0:19:a3:fb:44:fe:c3:c6:06: a0:6d:00:ba:3c:7c:b9:cb:7b:25:69:7b:c8:fe:37: eb:29:7e:01:66:94:3b:87:76:b4:4b:93:93:c0:95: d3:45:38:02:03:5b:f9:c6:e3:c7:f3:84:b0:e0:80: 8b:20:a7:ee:e9:1d:40:a9:12:17:08:7f:ba:38:8d: 96:e4:dd:48:00:54:6f:45:fd:53:2c:1f:d0:84:fa: 9b:e4:ef:2d:d1:fd:64:50:d4:3a:27:18:5d:c9:02: cf:4e:98:1b:e9:a3:25:41:eb:7e:cd:81:46:4f:44: 99:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:A4:E5:71:0A:46:53:6B:EF:2A:F3:6B:F6:3F:19:40:BC:37:BD:42 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/1dd81c-665e-4b76-91fb-44dc52a19ce5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/1dd81c-665e-4b76-91fb-44dc52a19ce5/1/WqTlcQpGU2vvKvNr9j8ZQLw3vUI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.237.96.0/24 IPv6: 2001:67c:28c0::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 198606 Signature Algorithm: sha256WithRSAEncryption a5:0a:d6:29:e2:f7:66:fb:6d:03:a0:92:77:9b:e2:f6:4a:5b: 77:d2:4f:91:e3:8f:c6:d4:92:00:96:33:57:99:6c:23:85:c1: 57:74:ba:c2:bd:45:4e:ae:f4:1c:31:60:b2:41:72:18:64:d2: 68:b1:59:70:5c:b2:89:a7:30:d4:45:f9:d2:67:eb:08:73:a4: 14:e3:09:f9:3a:4e:f9:de:a7:5a:cb:69:17:71:9f:89:30:24: c4:7e:48:6b:40:fc:d1:c6:67:b0:bf:ad:f3:74:dd:b8:d6:fe: c6:f1:90:49:b3:74:b2:49:fc:a5:60:29:59:91:af:b5:ad:47: c8:62:c8:9b:09:33:e9:9c:a7:d4:62:bb:11:0f:fc:41:1a:4f: 50:58:df:12:2f:e7:a2:c5:f1:28:e5:74:a4:91:d7:80:69:5a: 47:ea:7e:7a:78:e9:a5:22:b1:f1:4d:cd:6e:d1:d0:02:22:3e: ba:b6:ff:13:21:f0:d8:27:44:b4:14:85:66:14:8f:70:37:a0: bc:7f:e8:3e:16:f3:8f:f0:dc:7e:9b:73:a3:33:f4:ce:8d:ce: a8:64:f9:a0:d9:c7:a3:53:18:ea:9c:f4:e8:c2:9b:1c:23:e8: 67:56:4f:cf:a0:42:b2:9b:f5:8b:c4:ca:29:73:4a:90:d3:47: 06:fc:34:ef -----BEGIN CERTIFICATE----- MIIFpTCCBI2gAwIBAgISAZt4oiCa8+dnRzaYjqfa9TeaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YWE0ZTU3MTBhNDY1MzZiZWYyYWYzNmJmNjNmMTk0MGJjMzdiZDQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjwPXEPpK8GyJcYPF0u1bu2PqK5y bgz4rGIjmtr1jVawlliuAfrMaakreOx1dvDw56sFDiJmnCO+VlZ6jHNh45TgyX4O rNvq+DBpgLcNI3MXm4z8Ed+cACO1VgVBHeYB2yiwLAKFvppDxiw5xUX33m0LQFw7 nkOCg/iGGDCv3ZmPUAGq80qk5IVxMiPAGaP7RP7DxgagbQC6PHy5y3slaXvI/jfr KX4BZpQ7h3a0S5OTwJXTRTgCA1v5xuPH84Sw4ICLIKfu6R1AqRIXCH+6OI2W5N1I AFRvRf1TLB/QhPqb5O8t0f1kUNQ6JxhdyQLPTpgb6aMlQet+zYFGT0SZdwIDAQAB o4ICsTCCAq0wHQYDVR0OBBYEFFqk5XEKRlNr7yrza/Y/GUC8N71CMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U5LzFkZDgx Yy02NjVlLTRiNzYtOTFmYi00NGRjNTJhMTljZTUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTkvMWRkODFj LTY2NWUtNGI3Ni05MWZiLTQ0ZGM1MmExOWNlNS8xL1dxVGxjUXBHVTJ2dkt2TnI5 ajhaUUx3M3ZVSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQAW+1gMA8EAgACMAkDBwAgAQZ8KMAwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDAwfOMA0GCSqGSIb3DQEBCwUAA4IBAQClCtYp4vdm +20DoJJ3m+L2Slt30k+R44/G1JIAljNXmWwjhcFXdLrCvUVOrvQcMWCyQXIYZNJo sVlwXLKJpzDURfnSZ+sIc6QU4wn5Ok753qday2kXcZ+JMCTEfkhrQPzRxmewv63z dN241v7G8ZBJs3SySfylYClZka+1rUfIYsibCTPpnKfUYrsRD/xBGk9QWN8SL+ei xfEo5XSkkdeAaVpH6n56eOmlIrHxTc1u0dACIj66tv8TIfDYJ0S0FIVmFI9wN6C8 f+g+FvOP8Nx+m3OjM/TOjc6oZPmg2cejUxjqnPTowpscI+hnVk/PoEKym/WLxMop c0qQ00cG/DTv -----END CERTIFICATE-----Generated at Mon Feb 9 16:49:46 2026 by rpki-client