This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kq8Dyi32Qjt30O83N7D0eRqgNaM.cer File: kq8Dyi32Qjt30O83N7D0eRqgNaM.cer (raw, json) Hash identifier: phNrLXCxmERx2jxMOl6RwTs10UDPJFsO4u5do+x+nF0= Subject key identifier: 92:AF:03:CA:2D:F6:42:3B:77:D0:EF:37:37:B0:F4:79:1A:A0:35:A3 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C75A63FA3295B6FBA700B24EB14ACC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:18:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 42156 AS: 42282 AS: 50470 IP: 23.249.162.0/24 IP: 45.83.172.0/22 IP: 45.143.60.0/22 IP: 69.48.159.0/24 IP: 185.161.188.0/24 IP: 185.251.180.0/24 IP: 2a0e:8480::/29 IP: 2a0e:e2c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:5a:63:fa:32:95:b6:fb:a7:00:b2:4e:b1:4a:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=92af03ca2df6423b77d0ef3737b0f4791aa035a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a1:40:7b:7a:4f:b5:16:10:bc:ca:ce:c0:00: ac:c7:67:9a:87:6c:3d:0d:87:34:9b:3e:60:a9:e8: 7a:9e:41:89:ab:14:2f:94:c9:44:4e:bd:c3:79:6b: 47:79:8c:18:1e:9e:b7:63:c6:d8:58:ef:26:3c:2a: 1f:6e:b8:ab:a8:b6:fe:fe:1e:fe:59:87:de:d9:86: db:35:a4:ca:09:b5:2e:30:d5:21:7d:7a:ee:a3:90: 76:40:71:c3:8d:41:66:9c:6a:37:79:6e:e9:9b:b1: a3:de:23:a5:d7:2e:44:3b:63:fc:84:8b:fe:30:b2: e5:6c:3a:28:f6:82:49:58:f0:29:7b:ce:41:5a:ba: d6:fd:d7:d8:71:2e:5b:ee:fe:16:59:57:01:78:41: 5e:40:72:80:a3:6d:91:c3:b7:56:26:ac:c8:16:81: 6f:9b:c0:ba:c7:a0:75:b3:39:c4:a7:d9:a8:4d:78: 8b:73:dd:ba:1c:30:ef:c9:58:c3:72:e3:1e:26:d1: 53:70:96:22:8d:e5:a3:f7:d9:a4:5b:c3:35:cb:53: 5c:0b:5a:3d:6b:a5:29:5f:cc:af:ca:da:2b:14:47: b7:30:b6:db:71:83:9d:3c:e1:eb:fe:f3:b2:d3:90: 71:99:46:45:1b:db:b8:c3:c6:1f:ad:af:5b:50:da: 57:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:AF:03:CA:2D:F6:42:3B:77:D0:EF:37:37:B0:F4:79:1A:A0:35:A3 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.249.162.0/24 45.83.172.0/22 45.143.60.0/22 69.48.159.0/24 185.161.188.0/24 185.251.180.0/24 IPv6: 2a0e:8480::/29 2a0e:e2c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 42156 42282 50470 Signature Algorithm: sha256WithRSAEncryption 2d:42:15:8b:05:a6:28:89:c4:07:0e:e8:4d:1d:4c:b7:df:2b: 14:b4:3f:16:8b:eb:d8:8a:df:f1:4d:23:34:77:74:35:27:28: d6:d5:5e:bd:04:75:68:b2:be:e1:c8:30:c2:f3:af:3b:68:3d: 17:76:38:3c:52:28:fe:df:2a:b1:c0:52:5f:09:f1:ca:48:85: 53:51:eb:24:ea:88:95:85:a7:2b:cf:1b:d3:fe:27:77:6b:78: a6:f4:39:a3:bb:40:55:38:48:40:63:4a:1a:cc:40:b1:6c:41: ce:59:50:7f:05:1f:36:47:5d:2e:f6:b3:b2:9c:9f:13:f0:47: cf:be:83:58:e8:b3:49:74:53:a3:4e:fe:1e:1f:28:c4:ee:27: 48:24:91:f1:ba:75:9c:b4:e1:fb:cd:ed:b6:09:05:b6:bc:b8: 7a:ac:96:0c:59:b0:73:4f:8a:02:09:14:b0:e8:25:dd:d3:b0: 58:51:6b:35:50:7c:2b:a1:f7:ac:61:f7:ea:34:45:14:92:a0: f9:ba:97:46:41:2a:57:16:57:86:59:29:88:10:15:b4:86:14: 0e:e2:7c:b6:1b:a2:49:08:99:5a:6b:7b:1d:89:94:01:9f:53: 70:34:16:36:37:e6:98:b2:e4:e3:c8:16:2f:4e:04:79:d6:3b: 0e:b6:b1:d2 -----BEGIN CERTIFICATE----- MIIF0jCCBLqgAwIBAgISAZt3x1pj+jKVtvunALJOsUrMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MmFmMDNjYTJkZjY0MjNiNzdkMGVmMzczN2IwZjQ3OTFhYTAzNWEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6FAe3pPtRYQvMrOwACsx2eah2w9 DYc0mz5gqeh6nkGJqxQvlMlETr3DeWtHeYwYHp63Y8bYWO8mPCofbrirqLb+/h7+ WYfe2YbbNaTKCbUuMNUhfXruo5B2QHHDjUFmnGo3eW7pm7Gj3iOl1y5EO2P8hIv+ MLLlbDoo9oJJWPApe85BWrrW/dfYcS5b7v4WWVcBeEFeQHKAo22Rw7dWJqzIFoFv m8C6x6B1sznEp9moTXiLc926HDDvyVjDcuMeJtFTcJYijeWj99mkW8M1y1NcC1o9 a6UpX8yvytorFEe3MLbbcYOdPOHr/vOy05BxmUZFG9u4w8Yfra9bUNpXNQIDAQAB o4IC3jCCAtowHQYDVR0OBBYEFJKvA8ot9kI7d9DvNzew9HkaoDWjMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YxLzk4MjJi Yy0xNTkzLTQ5OGMtOGY2YS03MDNiNmI3MGE3ZWMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjEvOTgyMmJj LTE1OTMtNDk4Yy04ZjZhLTcwM2I2YjcwYTdlYy8xL2txOER5aTMyUWp0MzBPODNO N0QwZVJxZ05hTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFMGCCsGAQUF BwEHAQH/BEQwQjAqBAIAATAkAwQAF/miAwQCLVOsAwQCLY88AwQARTCfAwQAuaG8 AwQAufu0MBQEAgACMA4DBQMqDoSAAwUDKg7iwDAkBggrBgEFBQcBCAEB/wQVMBOg ETAPAgMApKwCAwClKgIDAMUmMA0GCSqGSIb3DQEBCwUAA4IBAQAtQhWLBaYoicQH DuhNHUy33ysUtD8Wi+vYit/xTSM0d3Q1JyjW1V69BHVosr7hyDDC8687aD0Xdjg8 Uij+3yqxwFJfCfHKSIVTUesk6oiVhacrzxvT/id3a3im9Dmju0BVOEhAY0oazECx bEHOWVB/BR82R10u9rOynJ8T8EfPvoNY6LNJdFOjTv4eHyjE7idIJJHxunWctOH7 ze22CQW2vLh6rJYMWbBzT4oCCRSw6CXd07BYUWs1UHwrofesYffqNEUUkqD5updG QSpXFleGWSmIEBW0hhQO4ny2G6JJCJlaa3sdiZQBn1NwNBY2N+aYsuTjyBYvTgR5 1jsOtrHS -----END CERTIFICATE-----Generated at Tue Jan 27 12:49:02 2026 by rpki-client