This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pqSmiq_slSLanKyAC0MkzNfWxaU.cer File: pqSmiq_slSLanKyAC0MkzNfWxaU.cer (raw, json) Hash identifier: Jm4VjwXvsZoUnQt5JKbG5zzbMJQ1Ni/lRhVpeH7Hr/0= Subject key identifier: A6:A4:A6:8A:AF:EC:95:22:DA:9C:AC:80:0B:43:24:CC:D7:D6:C5:A5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B35C224482DC6B62A597179A3283C5F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d4/9e9b17-ed83-4272-bfbe-e9301afc384f/1/pqSmiq_slSLanKyAC0MkzNfWxaU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d4/9e9b17-ed83-4272-bfbe-e9301afc384f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:17:59 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 89.107.184.0/21 IP: 185.18.92.0/22 IP: 2a01:50c0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:c2:24:48:2d:c6:b6:2a:59:71:79:a3:28:3c:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a6a4a68aafec9522da9cac800b4324ccd7d6c5a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:23:9f:62:38:2c:4a:d2:8a:a7:4f:1c:32:c3: 22:33:6f:15:36:44:ba:e8:ae:8b:ce:98:f1:51:59: b9:50:af:a6:02:fe:9e:55:e3:d7:b7:5a:62:30:fd: 0a:bb:48:42:7f:b2:14:6e:63:41:16:7b:fa:04:39: f2:eb:62:79:78:f7:19:99:b8:6f:24:d5:6e:e2:c8: 3c:6b:f5:96:be:81:e0:1c:85:43:79:29:92:35:3d: 6b:be:2f:3f:e4:87:3a:5d:c2:6b:e0:7d:99:14:2e: f3:41:47:e9:e5:5e:88:e6:85:e8:2c:0f:68:b9:dc: 30:91:f1:8c:90:cc:5b:3a:2c:db:b6:6a:68:0c:09: 1c:56:8c:7e:85:e9:ce:fe:8f:f2:40:db:59:a1:f0: 02:b8:07:0a:5d:1a:44:c8:5d:ac:f5:f4:cd:fd:92: 69:35:0b:92:6c:9c:2d:ea:62:2f:3c:03:aa:a5:17: 63:8d:51:fb:d6:e0:ec:95:84:d0:b7:98:18:8a:37: 5d:4e:cb:88:45:98:bf:b5:bf:93:7a:13:fa:2f:4f: 26:b9:c9:33:c3:e4:02:fb:32:4e:b9:bb:de:b9:56: f9:0b:8b:35:00:37:07:ed:7e:6c:e3:b9:a0:ed:a2: af:5a:48:80:dd:22:48:40:9f:06:0b:2d:ca:91:c0: 47:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:A4:A6:8A:AF:EC:95:22:DA:9C:AC:80:0B:43:24:CC:D7:D6:C5:A5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9e9b17-ed83-4272-bfbe-e9301afc384f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9e9b17-ed83-4272-bfbe-e9301afc384f/1/pqSmiq_slSLanKyAC0MkzNfWxaU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.107.184.0/21 185.18.92.0/22 IPv6: 2a01:50c0::/32 Signature Algorithm: sha256WithRSAEncryption 56:16:e2:4b:1b:8d:b2:f5:18:dc:f0:79:9f:bc:8e:f9:6b:e1: 6e:7e:7f:fd:61:ec:28:7a:46:ad:6f:a2:6c:ab:70:5f:89:70: 1d:44:c8:d9:ee:2f:61:02:30:0c:5b:31:2c:13:01:a2:47:38: 9e:fe:c6:df:c7:83:ff:87:b5:c7:57:3b:44:c2:65:d7:91:d4: c5:f9:35:94:94:51:d4:7a:5b:a9:c9:25:08:0e:14:69:21:57: 0b:19:58:91:90:4e:d5:db:c8:28:66:16:bd:23:de:cc:e6:5f: e8:87:3f:bd:08:24:ff:1d:cc:0e:9e:95:79:d9:ff:d6:6e:80: be:11:8e:9e:8a:02:24:3e:47:e0:33:bc:11:c2:37:9d:22:37: 93:53:e1:54:b1:73:05:d2:93:d6:9f:37:36:e2:3c:51:78:c4: dd:bf:af:f4:7d:7e:a0:78:a3:3e:b4:2f:6b:ed:85:6e:f3:e6: a4:09:b2:45:68:1d:f1:36:4e:c2:b0:e4:b0:60:9b:fb:c6:2d: 68:9f:76:80:bc:08:af:01:56:75:da:0f:6b:22:51:4e:fb:ff: e5:ae:f3:6c:5e:ae:10:e2:91:98:05:49:df:03:05:db:a4:62: 2a:ac:16:64:91:6d:a8:59:1d:9e:77:51:9b:b5:fa:d3:d7:91: ea:7e:be:3d -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgISAZt7NcIkSC3GtipZcXmjKDxfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNmE0YTY4YWFmZWM5NTIyZGE5Y2FjODAwYjQzMjRjY2Q3ZDZjNWE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlyOfYjgsStKKp08cMsMiM28VNkS6 6K6LzpjxUVm5UK+mAv6eVePXt1piMP0Ku0hCf7IUbmNBFnv6BDny62J5ePcZmbhv JNVu4sg8a/WWvoHgHIVDeSmSNT1rvi8/5Ic6XcJr4H2ZFC7zQUfp5V6I5oXoLA9o udwwkfGMkMxbOizbtmpoDAkcVox+henO/o/yQNtZofACuAcKXRpEyF2s9fTN/ZJp NQuSbJwt6mIvPAOqpRdjjVH71uDslYTQt5gYijddTsuIRZi/tb+TehP6L08muckz w+QC+zJOubveuVb5C4s1ADcH7X5s47mg7aKvWkiA3SJIQJ8GCy3KkcBHBwIDAQAB o4ICmTCCApUwHQYDVR0OBBYEFKakpoqv7JUi2pysgAtDJMzX1sWlMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q0LzllOWIx Ny1lZDgzLTQyNzItYmZiZS1lOTMwMWFmYzM4NGYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDQvOWU5YjE3 LWVkODMtNDI3Mi1iZmJlLWU5MzAxYWZjMzg0Zi8xL3BxU21pcV9zbFNMYW5LeUFD ME1rek5mV3hhVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQDWWu4AwQCuRJcMA0EAgACMAcDBQAqAVDAMA0G CSqGSIb3DQEBCwUAA4IBAQBWFuJLG42y9Rjc8HmfvI75a+Fufn/9Yewoekatb6Js q3BfiXAdRMjZ7i9hAjAMWzEsEwGiRzie/sbfx4P/h7XHVztEwmXXkdTF+TWUlFHU elupySUIDhRpIVcLGViRkE7V28goZha9I97M5l/ohz+9CCT/HcwOnpV52f/WboC+ EY6eigIkPkfgM7wRwjedIjeTU+FUsXMF0pPWnzc24jxReMTdv6/0fX6geKM+tC9r 7YVu8+akCbJFaB3xNk7CsOSwYJv7xi1on3aAvAivAVZ12g9rIlFO+//lrvNsXq4Q 4pGYBUnfAwXbpGIqrBZkkW2oWR2ed1GbtfrT15Hqfr49 -----END CERTIFICATE-----Generated at Mon Jan 26 22:28:35 2026 by rpki-client