This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/q29qNuwpYNTQXz2dyxh7m5BOpZs.cer File: q29qNuwpYNTQXz2dyxh7m5BOpZs.cer (raw, json) Hash identifier: sEOjCyl2BfPdKuGf7NKHov4tEIjlnLrtIL7m6Gd/TuQ= Subject key identifier: AB:6F:6A:36:EC:29:60:D4:D0:5F:3D:9D:CB:18:7B:9B:90:4E:A5:9B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C6C1E907B5FD00462825D8220B4E5F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:17:53 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 197882 AS: 212376 IP: 31.25.136.0/21 IP: 130.255.92.0/22 IP: 159.255.160.0/21 IP: 185.14.248.0/22 IP: 185.101.236.0/22 IP: 185.184.196.0/22 IP: 185.212.33.0/24 IP: 2a03:bcc0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:c1:e9:07:b5:fd:00:46:28:25:d8:22:0b:4e:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ab6f6a36ec2960d4d05f3d9dcb187b9b904ea59b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:71:af:5f:13:f3:c3:1c:39:56:9c:b2:8d:56: 71:ed:e6:63:5f:d5:73:58:49:bc:b2:1b:eb:76:d4: 64:27:44:2f:71:a5:35:42:cd:35:54:76:fd:13:0a: 30:05:aa:1b:3f:2e:8d:5d:08:54:e4:6e:c2:9b:ff: b1:5f:66:cf:10:25:20:04:ec:34:d2:6c:b1:08:ca: 37:53:17:fd:b8:17:d9:5b:36:02:c2:7f:e7:e3:34: a9:c7:2c:41:5d:c6:b7:55:65:1e:07:68:82:92:ba: 6a:6e:59:69:d6:f5:5a:67:63:2d:4e:72:79:d0:5c: ab:bd:52:14:36:ab:b9:62:4c:c1:5f:7e:ca:ad:44: 9d:66:81:15:3f:e6:5a:34:f2:e2:35:9a:cb:b7:44: 2a:cd:dc:1f:e5:83:df:b3:f2:d7:01:a7:c2:29:71: 61:09:ed:ba:a3:1a:b3:3d:4b:6d:c2:06:43:de:2a: f7:a2:2e:25:c2:50:23:39:55:cf:ed:cb:7a:07:cd: 0d:88:d1:92:d3:fc:ae:06:3a:81:5c:48:69:61:cc: 2b:ae:69:49:17:a9:22:b8:33:3e:8f:8d:ae:e7:04: 9e:4b:f1:83:a4:1d:ef:b3:50:25:91:6d:1a:d9:19: 20:8d:cc:a5:fa:e9:55:88:7a:ce:8d:2e:d2:bf:dc: 89:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:6F:6A:36:EC:29:60:D4:D0:5F:3D:9D:CB:18:7B:9B:90:4E:A5:9B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.25.136.0/21 130.255.92.0/22 159.255.160.0/21 185.14.248.0/22 185.101.236.0/22 185.184.196.0/22 185.212.33.0/24 IPv6: 2a03:bcc0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 197882 212376 Signature Algorithm: sha256WithRSAEncryption 01:3f:82:bd:da:a8:58:29:c1:be:32:af:66:70:98:48:6a:12: 62:a6:ab:86:73:cd:25:b4:a0:8d:34:81:58:c0:da:3c:6c:22: 13:ca:b5:34:77:f0:10:e7:28:d3:88:d8:60:56:79:c2:21:99: 96:57:90:be:29:f3:da:45:00:99:16:ab:df:f6:12:5d:de:01: d1:d4:2f:1d:19:04:0e:15:09:a0:47:ee:21:93:4b:97:6a:33: 14:15:64:04:54:ec:3e:3b:13:d4:77:ee:af:a5:8a:5d:ff:17: 25:03:13:2f:52:26:84:2d:80:df:1a:94:9d:d4:f5:42:a2:a2: 00:9f:ab:72:9e:39:fe:eb:ed:ce:ff:95:a7:3a:d6:42:41:39: fd:9b:87:e4:79:28:57:69:25:bd:59:dd:81:73:e4:2f:07:21: 97:6f:ac:04:04:f1:4d:4f:d8:65:c2:ef:07:91:34:fb:84:02: be:b8:98:da:23:de:13:7b:0d:ac:b0:a6:b4:ea:fb:99:c2:07: 72:27:c1:7b:8d:07:d8:78:17:4e:1e:09:f9:9e:31:87:4c:43: 8d:07:97:76:5f:8d:25:60:71:da:9c:ec:14:fc:ff:6a:14:ad: b4:3e:5c:b4:61:0b:01:0c:ea:61:46:d9:39:20:42:32:64:64: 28:cd:37:7c -----BEGIN CERTIFICATE----- MIIFzDCCBLSgAwIBAgISAZt3xsHpB7X9AEYoJdgiC05fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYjZmNmEzNmVjMjk2MGQ0ZDA1ZjNkOWRjYjE4N2I5YjkwNGVhNTliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnGvXxPzwxw5VpyyjVZx7eZjX9Vz WEm8shvrdtRkJ0QvcaU1Qs01VHb9EwowBaobPy6NXQhU5G7Cm/+xX2bPECUgBOw0 0myxCMo3Uxf9uBfZWzYCwn/n4zSpxyxBXca3VWUeB2iCkrpqbllp1vVaZ2MtTnJ5 0FyrvVIUNqu5YkzBX37KrUSdZoEVP+ZaNPLiNZrLt0Qqzdwf5YPfs/LXAafCKXFh Ce26oxqzPUttwgZD3ir3oi4lwlAjOVXP7ct6B80NiNGS0/yuBjqBXEhpYcwrrmlJ F6kiuDM+j42u5wSeS/GDpB3vs1AlkW0a2Rkgjcyl+ulViHrOjS7Sv9yJSwIDAQAB o4IC2DCCAtQwHQYDVR0OBBYEFKtvajbsKWDU0F89ncsYe5uQTqWbMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJjLzRkOWJh ZC1kMmFjLTQxNzktODk0NS05NGJiODNhMjAwMjkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmMvNGQ5YmFk LWQyYWMtNDE3OS04OTQ1LTk0YmI4M2EyMDAyOS8xL3EyOXFOdXdwWU5UUVh6MmR5 eGg3bTVCT3Bacy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFIGCCsGAQUF BwEHAQH/BEMwQTAwBAIAATAqAwQDHxmIAwQCgv9cAwQDn/+gAwQCuQ74AwQCuWXs AwQCubjEAwQAudQhMA0EAgACMAcDBQAqA7zAMB8GCCsGAQUFBwEIAQH/BBAwDqAM MAoCAwME+gIDAz2YMA0GCSqGSIb3DQEBCwUAA4IBAQABP4K92qhYKcG+Mq9mcJhI ahJipquGc80ltKCNNIFYwNo8bCITyrU0d/AQ5yjTiNhgVnnCIZmWV5C+KfPaRQCZ Fqvf9hJd3gHR1C8dGQQOFQmgR+4hk0uXajMUFWQEVOw+OxPUd+6vpYpd/xclAxMv UiaELYDfGpSd1PVCoqIAn6tynjn+6+3O/5WnOtZCQTn9m4fkeShXaSW9Wd2Bc+Qv ByGXb6wEBPFNT9hlwu8HkTT7hAK+uJjaI94Tew2ssKa06vuZwgdyJ8F7jQfYeBdO Hgn5njGHTEONB5d2X40lYHHanOwU/P9qFK20Ply0YQsBDOphRtk5IEIyZGQozTd8 -----END CERTIFICATE-----Generated at Mon Feb 9 16:53:25 2026 by rpki-client