This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cqoC9FuXkwx6RtDvGKkcCq-JkvI.cer File: cqoC9FuXkwx6RtDvGKkcCq-JkvI.cer (raw, json) Hash identifier: 0NPZ3CvpkVCsl3wBd0Lyth65DusWwYxk9H7QS+lsUT0= Subject key identifier: 72:AA:02:F4:5B:97:93:0C:7A:46:D0:EF:18:A9:1C:0A:AF:89:92:F2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA42243AFC6E388B6C5539DBBC1F290 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/cqoC9FuXkwx6RtDvGKkcCq-JkvI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:18:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.212.10.0/24 IP: 2a10:c600::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:22:43:af:c6:e3:88:b6:c5:53:9d:bb:c1:f2:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=72aa02f45b97930c7a46d0ef18a91c0aaf8992f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:7d:40:fb:49:e2:e3:3c:89:2f:d6:9f:79:b1: 43:7b:3b:61:b6:73:ed:0d:33:6c:7f:0c:a6:4c:e5: d9:6d:de:0b:b7:c8:9d:af:4e:9b:3d:e0:ae:5a:70: 59:2c:b3:a2:e1:d4:29:6b:82:14:91:e7:7d:b5:26: 60:3f:e4:5f:5b:12:6b:4f:a3:68:c7:8c:5d:e8:77: f6:0a:b3:25:af:9a:3d:98:ba:dd:18:c6:d4:17:06: 1a:21:b3:91:c8:69:d3:a7:1e:86:bd:b3:e4:4a:35: 0f:28:ca:eb:e6:d9:70:7e:6f:e4:d8:49:28:8b:41: 6b:83:b0:b3:f9:fb:ee:ee:75:68:d2:80:72:67:6e: 5e:32:3d:be:92:d2:bc:8e:76:87:0e:12:97:0b:bc: a2:b0:67:06:2f:ee:a0:e2:bf:e6:47:be:a1:e1:85: e8:3d:6b:83:d7:82:57:1f:68:48:a0:1e:cb:94:11: 34:3d:6b:56:bb:1b:62:c1:27:ab:01:0f:d9:9b:52: 5d:51:ce:e1:44:13:2a:a9:bc:34:f1:c8:60:10:b3: 5c:60:02:5b:40:94:7e:8a:42:dd:c6:16:5b:81:1b: cd:e5:b7:cc:99:c7:1a:60:08:dd:aa:35:d4:ba:d7: b0:92:87:01:c3:a9:75:be:45:4d:18:b6:eb:7f:09: 6b:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:AA:02:F4:5B:97:93:0C:7A:46:D0:EF:18:A9:1C:0A:AF:89:92:F2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/cqoC9FuXkwx6RtDvGKkcCq-JkvI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.212.10.0/24 IPv6: 2a10:c600::/29 Signature Algorithm: sha256WithRSAEncryption 8f:03:51:75:21:17:10:e6:85:5a:50:e6:67:a5:65:d8:fe:f1: 5a:ed:06:70:c8:67:58:fd:99:2c:35:7c:4b:64:87:5f:2c:24: 52:99:64:33:e2:8c:ca:a6:16:3c:83:eb:ec:c7:7d:de:ed:f3: 52:98:c9:01:44:49:41:75:ae:ef:f3:6b:99:f9:c1:f0:2c:95: 16:90:6c:f6:26:c1:bf:57:c4:14:4a:d3:6f:29:f5:81:96:f7: 0a:4a:33:20:4b:ec:44:6c:f9:da:be:55:7e:dc:4d:15:dc:49: e3:06:44:c7:f7:9a:f8:a7:c6:84:8a:3a:d1:2b:b0:fa:d3:e5: dd:60:b2:01:e9:58:8d:f5:55:02:03:9f:d1:25:20:43:10:e9: 30:b6:dc:6b:69:f3:a9:55:6f:03:33:be:ac:cf:49:46:6e:89: 42:6c:05:fd:c3:80:ae:13:32:eb:be:43:d8:f0:eb:cc:f3:2a: ca:85:dc:b2:67:fa:b2:e0:00:e3:f7:62:70:d6:b0:93:e7:a3: a0:5f:04:15:e1:8a:57:5b:61:b5:34:21:cb:08:a0:b4:ff:65: 53:0e:de:65:7f:90:8b:1e:34:12:c8:b0:bf:92:04:93:56:0e: d0:27:e4:b9:df:93:30:63:5b:e2:f2:d7:79:8f:b8:8b:2b:de: 70:21:9e:8f -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt7pCJDr8bjiLbFU527wfKQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MmFhMDJmNDViOTc5MzBjN2E0NmQwZWYxOGE5MWMwYWFmODk5MmYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg31A+0ni4zyJL9afebFDezthtnPt DTNsfwymTOXZbd4Lt8idr06bPeCuWnBZLLOi4dQpa4IUked9tSZgP+RfWxJrT6No x4xd6Hf2CrMlr5o9mLrdGMbUFwYaIbORyGnTpx6GvbPkSjUPKMrr5tlwfm/k2Eko i0Frg7Cz+fvu7nVo0oByZ25eMj2+ktK8jnaHDhKXC7yisGcGL+6g4r/mR76h4YXo PWuD14JXH2hIoB7LlBE0PWtWuxtiwSerAQ/Zm1JdUc7hRBMqqbw08chgELNcYAJb QJR+ikLdxhZbgRvN5bfMmccaYAjdqjXUutewkocBw6l1vkVNGLbrfwlrOwIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFHKqAvRbl5MMekbQ7xipHAqviZLyMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q0LzYwMzQ0 NC00YTBkLTRjNTItYmVmNy1kNzliMGVjNzhlOTcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDQvNjAzNDQ0 LTRhMGQtNGM1Mi1iZWY3LWQ3OWIwZWM3OGU5Ny8xL2Nxb0M5RnVYa3d4NlJ0RHZH S2tjQ3EtSmt2SS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAW9QKMA0EAgACMAcDBQMqEMYAMA0GCSqGSIb3 DQEBCwUAA4IBAQCPA1F1IRcQ5oVaUOZnpWXY/vFa7QZwyGdY/ZksNXxLZIdfLCRS mWQz4ozKphY8g+vsx33e7fNSmMkBRElBda7v82uZ+cHwLJUWkGz2JsG/V8QUStNv KfWBlvcKSjMgS+xEbPnavlV+3E0V3EnjBkTH95r4p8aEijrRK7D60+XdYLIB6ViN 9VUCA5/RJSBDEOkwttxrafOpVW8DM76sz0lGbolCbAX9w4CuEzLrvkPY8OvM8yrK hdyyZ/qy4ADj92Jw1rCT56OgXwQV4YpXW2G1NCHLCKC0/2VTDt5lf5CLHjQSyLC/ kgSTVg7QJ+S535MwY1vi8td5j7iLK95wIZ6P -----END CERTIFICATE-----Generated at Mon Feb 9 21:04:11 2026 by rpki-client