This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/q2hOUOM_OgAVyPiZyIvLE3vPtfk.cer File: q2hOUOM_OgAVyPiZyIvLE3vPtfk.cer (raw, json) Hash identifier: ipAJhDj2h/EJiLjgHxsY7jbypIi/DmpiEFQgXmvDF1E= Subject key identifier: AB:68:4E:50:E3:3F:3A:00:15:C8:F8:99:C8:8B:CB:13:7B:CF:B5:F9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB956368EEEB8AE6C0AC6C5211645F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7d/9472a6-d022-43ce-b362-80e5d53edb41/1/q2hOUOM_OgAVyPiZyIvLE3vPtfk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7d/9472a6-d022-43ce-b362-80e5d53edb41/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:29 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 176.119.152.0/22 IP: 212.32.24.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:95:63:68:ee:eb:8a:e6:c0:ac:6c:52:11:64:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ab684e50e33f3a0015c8f899c88bcb137bcfb5f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:99:ac:78:2b:70:59:fc:62:16:7a:3a:1b:e5: 78:51:b6:df:1e:f7:24:44:82:b9:ee:cf:f6:1a:89: 29:99:34:14:b0:04:d3:e9:a5:37:fe:64:13:7e:7d: b4:60:2b:1d:0d:5d:40:a9:7f:fa:5a:6d:4f:77:96: 94:15:bb:a7:2c:0a:23:bf:16:46:e8:5f:61:3f:92: 0d:d4:6a:88:41:0a:c7:d3:55:44:bb:16:bb:2e:1f: 11:27:2f:be:a4:f1:e9:02:76:a1:54:9e:ac:20:59: 43:b2:05:ff:a5:27:ea:12:bd:75:50:10:2b:15:58: 7a:6d:17:d3:88:5b:45:db:ea:3e:06:12:12:e4:71: d4:56:fb:f7:4f:2b:09:fb:60:6c:aa:b4:14:26:7b: c2:f1:92:d4:9f:8b:37:90:92:5e:94:63:d4:78:48: d4:37:97:39:fc:e3:57:81:7b:8c:46:cf:ac:44:fe: d4:f5:e8:e2:a6:21:ec:da:7b:55:3c:15:6a:d4:41: 61:8e:96:af:05:00:f9:0e:06:23:d8:c4:ae:43:ce: 34:49:2c:36:76:7e:89:92:a3:69:ac:85:31:2b:50: c3:9a:eb:5f:fd:bb:2c:b4:d3:df:a0:90:ec:61:a0: 8d:9c:7c:c7:55:b2:be:4c:4e:cb:35:4a:71:4d:cc: 2d:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:68:4E:50:E3:3F:3A:00:15:C8:F8:99:C8:8B:CB:13:7B:CF:B5:F9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/9472a6-d022-43ce-b362-80e5d53edb41/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/9472a6-d022-43ce-b362-80e5d53edb41/1/q2hOUOM_OgAVyPiZyIvLE3vPtfk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.119.152.0/22 212.32.24.0/22 Signature Algorithm: sha256WithRSAEncryption 19:8a:fe:d2:07:6a:7f:a8:0e:ee:20:5e:3d:b1:45:51:5d:ae: 45:1f:67:df:78:74:89:c3:e8:50:53:37:1f:a6:89:f7:49:61: 57:7f:29:f7:04:50:25:ab:ac:a2:f7:b0:ee:6e:7a:17:10:0b: 63:69:08:2f:6e:41:48:ce:d2:e0:9d:f6:1a:56:bd:c4:36:a9: f7:76:fa:3b:59:54:c2:b0:f9:f7:af:6b:f1:a9:ff:3c:a9:a0: 77:7b:b3:25:c8:c6:3c:1a:6d:58:93:dc:96:88:42:d4:36:12: 9f:5a:92:40:cd:a1:7f:60:76:86:a2:7c:16:f8:56:fb:b3:92: 71:f4:8e:ba:08:da:af:89:23:63:41:d5:26:5c:49:90:e8:fe: 61:5a:ca:8a:c1:94:ed:9f:53:e6:72:c9:8a:9f:9e:39:c8:87: 09:68:39:34:f1:ad:ff:03:6a:06:dd:14:29:95:45:50:28:1b: c1:3a:a1:6c:3b:03:2b:c3:72:a1:bb:a8:da:c7:17:ac:4c:eb: 34:08:dc:44:c1:df:ff:a8:30:4c:b2:e6:05:72:c4:6b:87:d1: c8:18:d3:87:c0:0a:e2:39:fa:a0:8e:fd:c3:1d:e7:90:10:57: 11:81:33:5f:5a:cb:18:e2:f7:34:d1:1f:a7:de:15:bd:52:7a: 54:d8:41:ef -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgISAZt265VjaO7riubArGxSEWRfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYjY4NGU1MGUzM2YzYTAwMTVjOGY4OTljODhiY2IxMzdiY2ZiNWY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5mseCtwWfxiFno6G+V4UbbfHvck RIK57s/2GokpmTQUsATT6aU3/mQTfn20YCsdDV1AqX/6Wm1Pd5aUFbunLAojvxZG 6F9hP5IN1GqIQQrH01VEuxa7Lh8RJy++pPHpAnahVJ6sIFlDsgX/pSfqEr11UBAr FVh6bRfTiFtF2+o+BhIS5HHUVvv3TysJ+2BsqrQUJnvC8ZLUn4s3kJJelGPUeEjU N5c5/ONXgXuMRs+sRP7U9ejipiHs2ntVPBVq1EFhjpavBQD5DgYj2MSuQ840SSw2 dn6JkqNprIUxK1DDmutf/bsstNPfoJDsYaCNnHzHVbK+TE7LNUpxTcwtXwIDAQAB o4ICijCCAoYwHQYDVR0OBBYEFKtoTlDjPzoAFcj4mciLyxN7z7X5MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdkLzk0NzJh Ni1kMDIyLTQzY2UtYjM2Mi04MGU1ZDUzZWRiNDEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2QvOTQ3MmE2 LWQwMjItNDNjZS1iMzYyLTgwZTVkNTNlZGI0MS8xL3EyaE9VT01fT2dBVnlQaVp5 SXZMRTN2UHRmay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQCsHeYAwQC1CAYMA0GCSqGSIb3DQEBCwUAA4IB AQAZiv7SB2p/qA7uIF49sUVRXa5FH2ffeHSJw+hQUzcfpon3SWFXfyn3BFAlq6yi 97DubnoXEAtjaQgvbkFIztLgnfYaVr3ENqn3dvo7WVTCsPn3r2vxqf88qaB3e7Ml yMY8Gm1Yk9yWiELUNhKfWpJAzaF/YHaGonwW+Fb7s5Jx9I66CNqviSNjQdUmXEmQ 6P5hWsqKwZTtn1PmcsmKn545yIcJaDk08a3/A2oG3RQplUVQKBvBOqFsOwMrw3Kh u6jaxxesTOs0CNxEwd//qDBMsuYFcsRrh9HIGNOHwAriOfqgjv3DHeeQEFcRgTNf WssY4vc00R+n3hW9UnpU2EHv -----END CERTIFICATE-----Generated at Mon Jan 26 15:03:39 2026 by rpki-client