This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/q3ukNXZmdmStbymmZicOM1eDbxo.cer File: q3ukNXZmdmStbymmZicOM1eDbxo.cer (raw, json) Hash identifier: wio15LoY0RYd+PMNhls63I50my5lOwrKuzAKkE5381s= Subject key identifier: AB:7B:A4:35:76:66:76:64:AD:6F:29:A6:66:27:0E:33:57:83:6F:1A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C80C097A91D10083648D1FD0AAD849F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/53/0e1f91-c3ed-435d-a45f-23ac758048ec/1/q3ukNXZmdmStbymmZicOM1eDbxo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/53/0e1f91-c3ed-435d-a45f-23ac758048ec/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:19:31 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 60216 AS: 199472 IP: 176.121.16.0/21 IP: 2001:67c:fb0::/48 IP: 2001:67c:18d0::/48 IP: 2001:67c:1bc0::/48 IP: 2001:67c:2390::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:c0:97:a9:1d:10:08:36:48:d1:fd:0a:ad:84:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:19:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ab7ba43576667664ad6f29a666270e3357836f1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:eb:e7:ae:db:e8:31:02:83:d8:da:0f:6a:3c: db:32:89:66:c9:7c:d9:9a:58:e5:a3:b4:22:56:76: 67:be:4a:1c:a3:51:c6:aa:65:82:30:78:19:8f:39: 69:c2:ea:db:91:dc:e7:36:69:e5:4a:ff:e5:2a:db: ba:d1:b6:c5:5f:b3:52:3a:ba:64:02:9f:7c:db:e1: ad:dd:f1:15:e2:6f:5f:8a:8e:54:83:1a:8e:da:2d: 3f:58:a4:fd:da:7c:33:b1:8f:b0:b2:bf:b7:c1:db: e5:5a:4c:10:4f:bb:25:ee:e9:df:5d:c2:22:4c:3c: d8:d3:d7:ca:b5:f5:cf:4f:76:dd:98:e9:f7:eb:28: 28:fd:b7:8a:ed:64:b8:05:6b:68:33:cd:b1:9b:2e: cd:05:35:44:63:d2:85:13:8f:5f:6c:b0:17:67:db: 49:75:5b:20:a9:a6:8e:38:af:f9:88:68:cf:e9:13: 24:82:b7:2c:1f:5b:b4:ee:d8:63:d6:c0:e9:20:c8: d8:93:68:fe:ac:2d:26:12:e5:07:ed:b1:71:ce:b1: 2f:06:c5:6f:3d:d5:a9:89:d0:70:f4:5d:e5:69:c3: 2a:b5:d0:70:ba:35:04:9d:e7:72:26:29:a3:8a:d7: ce:d0:3c:47:07:c9:ee:6e:a0:6f:58:55:ca:24:42: 09:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:7B:A4:35:76:66:76:64:AD:6F:29:A6:66:27:0E:33:57:83:6F:1A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/0e1f91-c3ed-435d-a45f-23ac758048ec/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/0e1f91-c3ed-435d-a45f-23ac758048ec/1/q3ukNXZmdmStbymmZicOM1eDbxo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.121.16.0/21 IPv6: 2001:67c:fb0::/48 2001:67c:18d0::/48 2001:67c:1bc0::/48 2001:67c:2390::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 60216 199472 Signature Algorithm: sha256WithRSAEncryption 18:d1:9a:43:93:c9:98:36:40:08:8b:a9:38:4e:f0:af:68:c6: 58:13:18:bb:c6:9d:9b:35:39:d6:27:e1:8c:2f:68:4d:04:15: 29:13:22:58:38:3a:83:3b:7e:6a:73:d2:c7:09:2e:6e:78:1a: 7c:c9:41:a8:84:90:c6:09:35:7c:54:ee:0a:0a:6d:d6:7e:ec: b6:67:a9:b2:a7:86:15:63:30:73:50:f5:68:3d:31:33:16:f2: 36:b2:b3:a6:28:52:de:3e:f0:6c:61:51:7d:62:61:16:49:e3: 6a:82:83:6d:d9:32:0c:fa:11:99:ec:b2:f1:e3:37:6a:cd:3b: 64:55:79:81:d7:f0:37:01:61:2f:ac:56:3b:94:0c:04:3d:a4: 8d:eb:5e:34:55:26:f0:5d:4a:94:ef:17:6b:17:f4:15:02:a5: d1:ca:2a:ec:78:94:7e:e4:b4:ea:46:c8:ee:d9:35:ff:5c:a8: a0:9a:8d:c6:8c:bd:98:10:27:a5:1f:7f:82:1f:59:d0:09:73: 1c:e3:34:54:1c:41:c8:e1:6a:0e:bc:de:c5:db:38:56:51:c8: 2f:9e:59:ec:90:6a:a5:bc:9e:a2:f2:4c:4d:93:7b:e5:94:bf: c5:f8:7f:7f:4e:46:75:fd:f5:dd:04:8d:77:9e:cf:db:3d:e2: dd:ff:23:2c -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgISAZt8gMCXqR0QCDZI0f0KrYSfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxOTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYjdiYTQzNTc2NjY3NjY0YWQ2ZjI5YTY2NjI3MGUzMzU3ODM2ZjFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjOvnrtvoMQKD2NoPajzbMolmyXzZ mljlo7QiVnZnvkoco1HGqmWCMHgZjzlpwurbkdznNmnlSv/lKtu60bbFX7NSOrpk Ap982+Gt3fEV4m9fio5UgxqO2i0/WKT92nwzsY+wsr+3wdvlWkwQT7sl7unfXcIi TDzY09fKtfXPT3bdmOn36ygo/beK7WS4BWtoM82xmy7NBTVEY9KFE49fbLAXZ9tJ dVsgqaaOOK/5iGjP6RMkgrcsH1u07thj1sDpIMjYk2j+rC0mEuUH7bFxzrEvBsVv PdWpidBw9F3lacMqtdBwujUEnedyJimjitfO0DxHB8nubqBvWFXKJEIJjwIDAQAB o4IC0TCCAs0wHQYDVR0OBBYEFKt7pDV2ZnZkrW8ppmYnDjNXg28aMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUzLzBlMWY5 MS1jM2VkLTQzNWQtYTQ1Zi0yM2FjNzU4MDQ4ZWMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTMvMGUxZjkx LWMzZWQtNDM1ZC1hNDVmLTIzYWM3NTgwNDhlYy8xL3EzdWtOWFptZG1TdGJ5bW1a aWNPTTFlRGJ4by5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEsGCCsGAQUF BwEHAQH/BDwwOjAMBAIAATAGAwQDsHkQMCoEAgACMCQDBwAgAQZ8D7ADBwAgAQZ8 GNADBwAgAQZ8G8ADBwAgAQZ8I5AwHwYIKwYBBQUHAQgBAf8EEDAOoAwwCgIDAOs4 AgMDCzAwDQYJKoZIhvcNAQELBQADggEBABjRmkOTyZg2QAiLqThO8K9oxlgTGLvG nZs1OdYn4YwvaE0EFSkTIlg4OoM7fmpz0scJLm54GnzJQaiEkMYJNXxU7goKbdZ+ 7LZnqbKnhhVjMHNQ9Wg9MTMW8jays6YoUt4+8GxhUX1iYRZJ42qCg23ZMgz6EZns svHjN2rNO2RVeYHX8DcBYS+sVjuUDAQ9pI3rXjRVJvBdSpTvF2sX9BUCpdHKKux4 lH7ktOpGyO7ZNf9cqKCajcaMvZgQJ6Uff4IfWdAJcxzjNFQcQcjhag683sXbOFZR yC+eWeyQaqW8nqLyTE2Te+WUv8X4f39ORnX99d0EjXeez9s94t3/Iyw= -----END CERTIFICATE-----Generated at Mon Feb 9 18:25:48 2026 by rpki-client