This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pqiLCIfDLeWWb4H_kV1rX_MVMt0.cer File: pqiLCIfDLeWWb4H_kV1rX_MVMt0.cer (raw, json) Hash identifier: Q2/aViCBnYHU2SlP4nM49C6P0ib/IpSeu35k/sAFIPY= Subject key identifier: A6:A8:8B:08:87:C3:2D:E5:96:6F:81:FF:91:5D:6B:5F:F3:15:32:DD Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F83B381FC5EF98C6501EBF54C6EE824 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/32/98c609-07fa-4e2b-b476-6a29bc9f8a78/1/pqiLCIfDLeWWb4H_kV1rX_MVMt0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/32/98c609-07fa-4e2b-b476-6a29bc9f8a78/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:21:36 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 206730 IP: 185.166.48.0/22 IP: 2a0a:8a00::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:b3:81:fc:5e:f9:8c:65:01:eb:f5:4c:6e:e8:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:21:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a6a88b0887c32de5966f81ff915d6b5ff31532dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:88:d7:be:14:8b:d8:93:1a:69:c3:6a:48:89: 84:9e:23:7c:9f:00:c8:ef:cb:98:72:da:21:4c:66: d4:86:f3:31:02:cd:75:27:82:0b:91:20:d5:ab:2a: 6b:ed:b0:93:f1:ac:c4:8d:8d:5d:25:ce:82:97:79: 71:0b:8e:3b:ec:8a:d1:44:5e:75:e7:2b:b4:8d:3a: f9:07:90:ac:43:99:a6:a1:2c:b4:be:b2:c5:f9:ee: c6:24:94:6f:1f:43:e8:f2:80:86:5c:be:e2:96:59: 34:c1:ce:87:d7:14:fb:e9:15:20:9e:56:98:bd:6a: c9:6c:92:56:b3:df:6e:e0:ae:5a:21:2e:cc:5d:2b: 0e:5b:2e:1e:ac:13:2f:e8:77:3a:f3:a5:3e:fd:64: 5b:e1:c3:04:07:e3:78:97:d6:31:66:79:be:d3:b0: 9b:b4:b0:9b:f7:bf:e4:12:5a:e8:18:f8:bc:00:f0: 65:a2:f5:31:5b:05:59:a0:f0:ba:af:99:18:89:d2: 54:17:d5:93:0b:49:16:54:45:fb:a0:65:68:12:2e: 38:68:d5:bc:f8:f7:73:3f:b6:9f:bf:64:02:6b:72: e5:fb:51:04:4a:68:5b:23:24:91:20:e8:95:76:e6: 63:4b:46:90:3d:f2:45:b3:bf:07:e0:2f:b0:8e:f0: be:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:A8:8B:08:87:C3:2D:E5:96:6F:81:FF:91:5D:6B:5F:F3:15:32:DD X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/98c609-07fa-4e2b-b476-6a29bc9f8a78/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/98c609-07fa-4e2b-b476-6a29bc9f8a78/1/pqiLCIfDLeWWb4H_kV1rX_MVMt0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.166.48.0/22 IPv6: 2a0a:8a00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 206730 Signature Algorithm: sha256WithRSAEncryption a3:46:63:42:f7:4b:81:d6:3c:84:04:6b:7c:91:bb:c5:6b:bc: 15:ef:0a:86:44:7b:1c:35:29:8a:d6:8e:be:42:8a:19:c6:ae: db:a6:21:eb:64:cf:b2:b5:49:87:11:f6:30:0d:a9:33:d3:d4: 7a:de:ad:89:84:b2:0d:ca:d5:f1:fa:fe:c7:6b:64:e8:cb:9e: bd:fa:3f:1d:35:8d:2f:7a:ae:b1:67:a8:90:ab:40:6a:9c:9e: f1:ff:95:b0:c9:af:8f:29:7a:cb:7b:57:99:7a:ec:64:01:d4: 1c:75:61:eb:fb:f4:e7:5e:7e:7b:3c:da:e8:d6:3e:a1:1c:ae: fb:c1:12:3c:79:0b:c3:0c:af:0e:56:95:f5:02:17:0e:bb:9a: 83:bd:21:43:62:54:b9:38:df:ff:9c:2c:44:c3:d8:2d:1a:fa: ae:50:08:d9:42:2b:55:a1:e6:14:61:48:8a:d6:22:f1:d4:6f: 64:02:5a:09:07:92:fe:ec:85:11:61:3c:6f:d4:aa:51:5b:4c: 16:1b:c1:ab:9c:fa:e8:61:f5:8b:54:29:d5:b5:33:ef:0b:ae: d8:2d:5d:34:71:98:1a:56:8f:3d:ad:31:9a:9e:10:01:5d:0b: 81:e0:96:74:b5:ba:be:2b:e7:cd:b0:d2:a1:4a:7e:ef:7f:84: ee:21:11:9e -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt/g7OB/F75jGUB6/VMbugkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNmE4OGIwODg3YzMyZGU1OTY2ZjgxZmY5MTVkNmI1ZmYzMTUzMmRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIjXvhSL2JMaacNqSImEniN8nwDI 78uYctohTGbUhvMxAs11J4ILkSDVqypr7bCT8azEjY1dJc6Cl3lxC4477IrRRF51 5yu0jTr5B5CsQ5mmoSy0vrLF+e7GJJRvH0Po8oCGXL7illk0wc6H1xT76RUgnlaY vWrJbJJWs99u4K5aIS7MXSsOWy4erBMv6Hc686U+/WRb4cMEB+N4l9YxZnm+07Cb tLCb97/kElroGPi8APBlovUxWwVZoPC6r5kYidJUF9WTC0kWVEX7oGVoEi44aNW8 +PdzP7afv2QCa3Ll+1EESmhbIySRIOiVduZjS0aQPfJFs78H4C+wjvC+1wIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFKaoiwiHwy3llm+B/5Fda1/zFTLdMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMyLzk4YzYw OS0wN2ZhLTRlMmItYjQ3Ni02YTI5YmM5ZjhhNzgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzIvOThjNjA5 LTA3ZmEtNGUyYi1iNDc2LTZhMjliYzlmOGE3OC8xL3BxaUxDSWZETGVXV2I0SF9r VjFyWF9NVk10MC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuaYwMA0EAgACMAcDBQAqCooAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMnijANBgkqhkiG9w0BAQsFAAOCAQEAo0ZjQvdLgdY8 hARrfJG7xWu8Fe8KhkR7HDUpitaOvkKKGcau26Yh62TPsrVJhxH2MA2pM9PUet6t iYSyDcrV8fr+x2tk6Muevfo/HTWNL3qusWeokKtAapye8f+VsMmvjyl6y3tXmXrs ZAHUHHVh6/v0515+ezza6NY+oRyu+8ESPHkLwwyvDlaV9QIXDruag70hQ2JUuTjf /5wsRMPYLRr6rlAI2UIrVaHmFGFIitYi8dRvZAJaCQeS/uyFEWE8b9SqUVtMFhvB q5z66GH1i1Qp1bUz7wuu2C1dNHGYGlaPPa0xmp4QAV0LgeCWdLW6vivnzbDSoUp+ 73+E7iERng== -----END CERTIFICATE-----Generated at Mon Feb 9 20:50:38 2026 by rpki-client