This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_QV2-GPffjIbHKUFDOLC3S_K2wk.cer File: _QV2-GPffjIbHKUFDOLC3S_K2wk.cer (raw, json) Hash identifier: FJMMOz46RBsXc+gZaGVVaxMz7gyU+QpiYPA3CkG2sL4= Subject key identifier: FD:05:76:F8:63:DF:7E:32:1B:1C:A5:05:0C:E2:C2:DD:2F:CA:DB:09 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B783547CB2C3943FD00D15E7C9046D24E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/23/cf36e2-bc7f-425d-a821-4016f6b445a0/1/_QV2-GPffjIbHKUFDOLC3S_K2wk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/23/cf36e2-bc7f-425d-a821-4016f6b445a0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:36 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.242.123.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:47:cb:2c:39:43:fd:00:d1:5e:7c:90:46:d2:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fd0576f863df7e321b1ca5050ce2c2dd2fcadb09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:39:8e:59:49:95:65:10:a7:a5:f1:d7:1c:a1: 53:74:da:79:7b:c7:e5:d5:12:f2:fe:63:2e:f5:1a: a4:01:4e:50:54:25:1c:f1:27:2f:4e:56:45:11:ca: 54:3d:9c:bd:9b:22:93:50:6f:96:95:cc:82:f8:a2: c3:23:68:4c:fa:88:13:d7:dd:bf:1e:2d:64:1e:f1: e4:cd:f3:39:1f:19:bc:64:9a:be:e0:ed:ad:1e:ef: 26:34:90:6c:11:a6:41:40:4a:04:ef:10:de:4e:92: 1e:a0:b9:d3:9f:75:63:3d:85:6c:d5:55:7a:d7:36: 85:04:d1:59:f5:1f:25:4a:e3:e6:e2:84:e6:a7:f6: 05:36:bb:3a:1c:bc:6a:e5:35:db:de:4b:c3:ac:22: 1e:40:5f:19:a0:7b:43:df:cb:22:ce:09:25:03:73: 32:f1:7d:3d:5e:4a:dc:b2:0e:32:29:7e:a2:7f:2b: 32:f6:21:f3:2b:69:38:d1:1a:1a:90:c5:e7:16:cf: 5e:bd:c3:73:17:fd:4c:b2:c0:60:76:13:31:d7:61: b1:a6:2a:9d:7b:e3:13:0f:8c:13:e7:65:80:3f:2f: 62:e8:39:96:c7:56:c9:f4:d6:e8:2c:40:fe:24:d4: 5e:e7:65:5e:76:13:99:c7:95:32:cb:1b:d8:37:bb: 08:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:05:76:F8:63:DF:7E:32:1B:1C:A5:05:0C:E2:C2:DD:2F:CA:DB:09 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/cf36e2-bc7f-425d-a821-4016f6b445a0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/cf36e2-bc7f-425d-a821-4016f6b445a0/1/_QV2-GPffjIbHKUFDOLC3S_K2wk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.242.123.0/24 Signature Algorithm: sha256WithRSAEncryption 29:3a:39:80:6c:2c:d7:1e:63:38:78:aa:08:46:f1:43:86:0a: a5:30:f5:3e:c2:7f:57:45:45:f0:49:99:ab:ba:b8:a7:88:00: 84:42:89:87:02:31:78:c5:0e:be:5c:00:a0:57:15:8e:e3:44: 9b:92:2d:e2:ed:61:cb:dc:90:f7:7a:7d:b5:26:1d:2e:33:1d: 5e:ab:73:fd:6b:29:0f:f0:26:4e:a7:b4:56:10:76:fd:42:44: 32:7b:4f:4b:80:c8:af:52:d6:f3:5c:b2:bb:27:f4:48:32:98: a0:cf:cf:f1:9d:75:48:40:7f:7b:f9:7e:eb:8f:b2:d0:af:29: 13:4f:96:a6:47:eb:3b:e0:56:a3:93:1f:f7:71:5b:4e:70:95: 31:fa:32:2f:9f:2b:9c:62:43:82:0e:a9:14:80:c4:bf:ee:e2: ee:c2:8c:4f:a7:ef:6c:db:11:e8:62:13:2a:79:6a:1c:ef:81: 24:61:fe:4f:3b:ea:a0:fb:2a:21:22:6a:c3:9e:f7:67:d3:83: 3b:26:a9:13:c7:14:9b:93:aa:5b:2d:57:c7:d9:bd:f6:69:d0: b1:47:3f:af:63:be:bf:85:cf:7f:59:0c:b8:68:46:5d:c4:df: 6c:db:8e:87:21:fd:ce:20:07:e0:ef:43:65:e1:11:8b:ec:53: 75:30:e3:38 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt4NUfLLDlD/QDRXnyQRtJOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZDA1NzZmODYzZGY3ZTMyMWIxY2E1MDUwY2UyYzJkZDJmY2FkYjA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTmOWUmVZRCnpfHXHKFTdNp5e8fl 1RLy/mMu9RqkAU5QVCUc8ScvTlZFEcpUPZy9myKTUG+WlcyC+KLDI2hM+ogT192/ Hi1kHvHkzfM5Hxm8ZJq+4O2tHu8mNJBsEaZBQEoE7xDeTpIeoLnTn3VjPYVs1VV6 1zaFBNFZ9R8lSuPm4oTmp/YFNrs6HLxq5TXb3kvDrCIeQF8ZoHtD38sizgklA3My 8X09Xkrcsg4yKX6ifysy9iHzK2k40RoakMXnFs9evcNzF/1MssBgdhMx12Gxpiqd e+MTD4wT52WAPy9i6DmWx1bJ9NboLED+JNRe52VedhOZx5UyyxvYN7sIAwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFP0Fdvhj334yGxylBQziwt0vytsJMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzIzL2NmMzZl Mi1iYzdmLTQyNWQtYTgyMS00MDE2ZjZiNDQ1YTAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjMvY2YzNmUy LWJjN2YtNDI1ZC1hODIxLTQwMTZmNmI0NDVhMC8xL19RVjItR1BmZmpJYkhLVUZE T0xDM1NfSzJ3ay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwfJ7MA0GCSqGSIb3DQEBCwUAA4IBAQApOjmA bCzXHmM4eKoIRvFDhgqlMPU+wn9XRUXwSZmruriniACEQomHAjF4xQ6+XACgVxWO 40Sbki3i7WHL3JD3en21Jh0uMx1eq3P9aykP8CZOp7RWEHb9QkQye09LgMivUtbz XLK7J/RIMpigz8/xnXVIQH97+X7rj7LQrykTT5amR+s74Fajkx/3cVtOcJUx+jIv nyucYkOCDqkUgMS/7uLuwoxPp+9s2xHoYhMqeWoc74EkYf5PO+qg+yohImrDnvdn 04M7JqkTxxSbk6pbLVfH2b32adCxRz+vY76/hc9/WQy4aEZdxN9s246HIf3OIAfg 70Nl4RGL7FN1MOM4 -----END CERTIFICATE-----Generated at Mon Feb 9 19:41:35 2026 by rpki-client