This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.cer File: dQC7VYLnTWHpDIAoO6m5i6Zc0tw.cer (raw, json) Hash identifier: bdnQaiRykBQSugm9vRKh6WeMzPxHzDAFfddmIEy9Z6A= Subject key identifier: 75:00:BB:55:82:E7:4D:61:E9:0C:80:28:3B:A9:B9:8B:A6:5C:D2:DC Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA46CAC0D4AAD879752ECC675C316A3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/11/163bb5-f8b1-4cb4-bd48-bb3d4930e459/1/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/11/163bb5-f8b1-4cb4-bd48-bb3d4930e459/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:17:43 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 215629 IP: 2001:67c:da0::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:6c:ac:0d:4a:ad:87:97:52:ec:c6:75:c3:16:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7500bb5582e74d61e90c80283ba9b98ba65cd2dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:96:49:52:6a:7d:13:f9:b4:86:a6:0b:84:77: aa:39:8e:72:ac:12:bd:05:97:9b:89:79:25:19:b4: 14:14:88:8d:4f:eb:68:f9:69:57:e0:87:9b:28:45: a1:ad:87:4d:28:ca:fb:5d:18:38:3f:d1:2c:0d:62: 45:b9:09:74:fc:c3:49:05:ca:3a:e7:28:5c:cc:3b: d0:3b:5a:62:de:f2:27:1f:59:72:08:3d:77:f7:ec: a6:67:8c:e8:52:e0:ac:e4:15:f7:de:4c:32:b1:11: 2b:93:2a:21:0e:dd:3d:da:0f:6f:8d:b3:f6:8b:1a: 68:0b:b0:12:8e:04:2c:3c:41:72:fa:02:e6:b7:0f: 6b:e2:b5:b3:60:c7:9c:0c:81:f0:ac:06:e0:f0:38: df:c8:17:32:f7:88:0e:68:11:81:06:c7:09:73:72: ea:5b:c9:22:71:f9:8b:82:80:fc:5f:10:82:18:21: 35:4a:2f:80:27:4f:40:16:80:d7:e9:19:e5:3a:42: 87:ba:5a:69:ae:32:ab:a5:c0:3e:d1:7e:0f:19:f2: d7:3f:d9:96:5f:2e:20:5b:b0:6d:84:02:84:38:08: 78:cc:2f:0a:90:da:a6:f2:b2:0c:5c:43:15:e6:6a: 1e:91:21:7b:58:b7:64:5e:2e:01:a9:08:f8:67:bc: 34:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:00:BB:55:82:E7:4D:61:E9:0C:80:28:3B:A9:B9:8B:A6:5C:D2:DC X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/163bb5-f8b1-4cb4-bd48-bb3d4930e459/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/163bb5-f8b1-4cb4-bd48-bb3d4930e459/1/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:da0::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 215629 Signature Algorithm: sha256WithRSAEncryption a2:e5:f1:f6:16:50:bb:52:6f:33:53:32:b0:50:e9:23:ec:8d: 2c:2e:96:fe:de:9d:bb:c7:a0:ec:87:bf:7a:59:dd:29:6f:83: 0d:19:76:2c:86:c2:15:ca:0e:80:12:da:eb:34:fc:d2:27:70: bd:d5:8a:a5:1c:3f:84:91:fa:67:e7:1f:5c:f8:3d:46:49:76: 81:ed:0f:4e:ba:56:1a:15:b4:47:8f:84:de:75:e9:d5:c7:fa: 57:98:40:42:28:5e:23:23:08:96:ad:ae:d0:4a:9c:f4:96:e3: 53:b3:4f:49:22:6b:7c:91:b3:9f:96:4a:13:1b:e0:8b:ec:6e: 44:84:fd:72:a6:3a:a5:86:b9:0a:35:e7:a2:6b:fe:f3:43:f3: dc:b6:7f:a6:06:14:be:41:92:fc:61:42:24:fb:8e:cf:5f:ed: 99:f6:84:75:7c:17:83:b2:63:01:9e:6c:95:f0:38:80:08:59: 66:96:25:51:02:31:fb:d4:6b:81:a9:db:48:08:50:63:e6:f0: ec:99:42:2e:0b:38:c4:4a:5f:da:d9:59:a3:59:9f:b6:ce:10: c7:fe:c8:9e:ad:31:7d:13:53:39:63:0e:25:d8:52:ed:25:3c: dc:c4:04:c5:be:95:d9:77:98:ce:c6:58:0c:34:c5:fa:b0:44: ba:d5:27:db -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZt+pGysDUqth5dS7MZ1wxajMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NTAwYmI1NTgyZTc0ZDYxZTkwYzgwMjgzYmE5Yjk4YmE2NWNkMmRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ZZJUmp9E/m0hqYLhHeqOY5yrBK9 BZebiXklGbQUFIiNT+to+WlX4IebKEWhrYdNKMr7XRg4P9EsDWJFuQl0/MNJBco6 5yhczDvQO1pi3vInH1lyCD139+ymZ4zoUuCs5BX33kwysRErkyohDt092g9vjbP2 ixpoC7ASjgQsPEFy+gLmtw9r4rWzYMecDIHwrAbg8DjfyBcy94gOaBGBBscJc3Lq W8kicfmLgoD8XxCCGCE1Si+AJ09AFoDX6RnlOkKHulpprjKrpcA+0X4PGfLXP9mW Xy4gW7BthAKEOAh4zC8KkNqm8rIMXEMV5moekSF7WLdkXi4BqQj4Z7w0owIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFHUAu1WC501h6QyAKDupuYumXNLcMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzExLzE2M2Ji NS1mOGIxLTRjYjQtYmQ0OC1iYjNkNDkzMGU0NTkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTEvMTYzYmI1 LWY4YjEtNGNiNC1iZDQ4LWJiM2Q0OTMwZTQ1OS8xL2RRQzdWWUxuVFdIcERJQW9P Nm01aTZaYzB0dy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfA2gMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwNKTTANBgkqhkiG9w0BAQsFAAOCAQEAouXx9hZQu1JvM1MysFDpI+yNLC6W /t6du8eg7Ie/elndKW+DDRl2LIbCFcoOgBLa6zT80idwvdWKpRw/hJH6Z+cfXPg9 Rkl2ge0PTrpWGhW0R4+E3nXp1cf6V5hAQiheIyMIlq2u0Eqc9JbjU7NPSSJrfJGz n5ZKExvgi+xuRIT9cqY6pYa5CjXnomv+80Pz3LZ/pgYUvkGS/GFCJPuOz1/tmfaE dXwXg7JjAZ5slfA4gAhZZpYlUQIx+9RrganbSAhQY+bw7JlCLgs4xEpf2tlZo1mf ts4Qx/7Inq0xfRNTOWMOJdhS7SU83MQExb6V2XeYzsZYDDTF+rBEutUn2w== -----END CERTIFICATE-----Generated at Mon Feb 9 16:50:55 2026 by rpki-client