This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/q4PmT3LdWIn7E9whjGg_bi-s9bI.cer File: q4PmT3LdWIn7E9whjGg_bi-s9bI.cer (raw, json) Hash identifier: Yuz0/jrBfAp+PHRS6TnWXwgXOzHG/8PgKObC0JzitW8= Subject key identifier: AB:83:E6:4F:72:DD:58:89:FB:13:DC:21:8C:68:3F:6E:2F:AC:F5:B2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019C3320C30EA0812D447BA2F61531805690 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/05/9d66fc-31d4-4ab1-8eae-541f48924952/1/q4PmT3LdWIn7E9whjGg_bi-s9bI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/05/9d66fc-31d4-4ab1-8eae-541f48924952/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 06 Feb 2026 13:25:11 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 58327 IP: 5.252.252.0/22 IP: 81.172.40.0/22 IP: 81.172.88.0/21 IP: 81.172.103.0 -- 81.172.111.255 IP: 81.172.120.0/21 IP: 89.150.32.0/24 IP: 89.150.37.0/24 IP: 89.150.39.0/24 IP: 89.150.42.0/24 IP: 94.101.124.0/22 IP: 176.120.168.0/21 IP: 185.74.193.0 -- 185.74.195.255 IP: 185.194.25.0/24 IP: 185.221.191.0/24 IP: 185.224.93.0 -- 185.224.95.255 IP: 185.226.228.0/24 IP: 185.230.144.0/24 IP: 185.232.135.0/24 IP: 185.239.4.0/22 IP: 188.212.32.0/23 IP: 193.242.188.0/23 IP: 2a09:4e40::/29 IP: 2a0c:4580::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:33:20:c3:0e:a0:81:2d:44:7b:a2:f6:15:31:80:56:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Feb 6 13:25:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ab83e64f72dd5889fb13dc218c683f6e2facf5b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:8c:c5:e5:6b:c0:d5:3f:1d:4e:f1:69:94:57: f3:df:46:7c:04:bc:a0:77:b7:f1:0f:9d:be:cc:ad: 2a:4f:45:65:8f:f9:76:7e:eb:d5:e2:df:24:e9:93: f1:e9:7f:1c:04:c0:cc:9a:de:e5:c8:cf:bd:1a:17: 3b:83:81:17:53:ec:ea:bb:ba:85:81:66:15:a9:af: e4:35:54:ea:36:04:09:df:76:12:68:48:a5:b5:cc: f5:c6:f5:d6:97:bc:40:58:d6:c6:3e:61:fc:3d:42: 42:b5:fb:38:33:75:55:5a:c7:43:cd:23:51:67:aa: b4:c8:14:16:47:da:55:2a:bb:31:c4:3a:fc:b1:78: 3a:80:02:d1:d5:87:6d:8f:70:77:10:bc:63:80:e5: 2a:9f:61:1a:08:ce:f7:82:7e:b0:45:19:1a:48:84: 08:85:f3:1f:96:cb:d0:da:8c:f5:14:d2:08:d6:b1: 5d:74:d8:8a:48:2e:41:6f:4f:90:04:3e:d2:37:ee: 21:d6:17:da:e0:07:e3:dd:53:7c:7b:cd:e9:c4:f5: 44:10:89:ef:a3:22:cf:10:34:4a:32:d5:10:a9:2a: 0c:56:ee:95:0e:8e:e6:45:a8:d2:47:bf:9f:c9:eb: af:cb:27:c5:44:95:ba:6b:63:67:e7:a6:5c:08:73: ab:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:83:E6:4F:72:DD:58:89:FB:13:DC:21:8C:68:3F:6E:2F:AC:F5:B2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9d66fc-31d4-4ab1-8eae-541f48924952/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9d66fc-31d4-4ab1-8eae-541f48924952/1/q4PmT3LdWIn7E9whjGg_bi-s9bI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.252.252.0/22 81.172.40.0/22 81.172.88.0/21 81.172.103.0-81.172.111.255 81.172.120.0/21 89.150.32.0/24 89.150.37.0/24 89.150.39.0/24 89.150.42.0/24 94.101.124.0/22 176.120.168.0/21 185.74.193.0-185.74.195.255 185.194.25.0/24 185.221.191.0/24 185.224.93.0-185.224.95.255 185.226.228.0/24 185.230.144.0/24 185.232.135.0/24 185.239.4.0/22 188.212.32.0/23 193.242.188.0/23 IPv6: 2a09:4e40::/29 2a0c:4580::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 58327 Signature Algorithm: sha256WithRSAEncryption 2f:04:8e:16:b8:92:16:b5:8f:0c:8d:f4:ec:f3:ed:76:04:b3: 0a:0b:90:67:11:cc:1c:5c:40:84:0c:15:eb:76:e9:fc:35:66: a3:a0:9b:4a:31:41:cd:8b:b8:52:04:a2:a0:ed:4a:38:8e:8e: c8:b9:a2:38:44:f1:22:6d:23:e3:f5:82:ed:c4:ec:4c:ef:da: a2:43:c6:96:07:16:31:d2:88:a1:a4:4f:82:36:9a:7f:fb:9b: 86:a3:7f:a0:70:b0:65:ae:3a:11:dd:77:43:c0:50:3e:24:99: f4:16:5e:20:48:e1:9a:df:43:bc:18:f7:e5:cf:70:94:50:21: 99:50:c9:e1:da:78:3d:36:e4:4e:88:56:5e:8f:ef:e7:6e:ce: c4:9a:a4:93:12:f0:89:03:94:2d:da:bb:59:0c:d4:2c:67:ab: cf:f2:ac:d2:d8:b9:13:d4:12:f8:18:a2:cb:d5:3b:dc:92:57: 8e:f8:e8:ff:d0:b6:6b:3f:c5:02:dc:b2:18:33:9b:cb:87:2e: 00:24:b1:71:8a:3e:c3:e8:a5:fa:7a:d8:28:64:ec:b4:f7:19: 83:73:15:cc:1a:5a:e0:74:6e:b9:7f:94:80:4a:c9:a4:16:7f: af:05:a9:53:6e:13:06:7c:b0:bf:b4:33:7c:79:bd:24:62:b5: 2f:24:7a:9a -----BEGIN CERTIFICATE----- MIIGPzCCBSegAwIBAgISAZwzIMMOoIEtRHui9hUxgFaQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMjA2MTMyNTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYjgzZTY0ZjcyZGQ1ODg5ZmIxM2RjMjE4YzY4M2Y2ZTJmYWNmNWIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7YzF5WvA1T8dTvFplFfz30Z8BLyg d7fxD52+zK0qT0Vlj/l2fuvV4t8k6ZPx6X8cBMDMmt7lyM+9Ghc7g4EXU+zqu7qF gWYVqa/kNVTqNgQJ33YSaEiltcz1xvXWl7xAWNbGPmH8PUJCtfs4M3VVWsdDzSNR Z6q0yBQWR9pVKrsxxDr8sXg6gALR1Ydtj3B3ELxjgOUqn2EaCM73gn6wRRkaSIQI hfMflsvQ2oz1FNII1rFddNiKSC5Bb0+QBD7SN+4h1hfa4Afj3VN8e83pxPVEEInv oyLPEDRKMtUQqSoMVu6VDo7mRajSR7+fyeuvyyfFRJW6a2Nn56ZcCHOrLwIDAQAB o4IDSzCCA0cwHQYDVR0OBBYEFKuD5k9y3ViJ+xPcIYxoP24vrPWyMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA1LzlkNjZm Yy0zMWQ0LTRhYjEtOGVhZS01NDFmNDg5MjQ5NTIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDUvOWQ2NmZj LTMxZDQtNGFiMS04ZWFlLTU0MWY0ODkyNDk1Mi8xL3E0UG1UM0xkV0luN0U5d2hq R2dfYmktczliSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIHJBggrBgEF BQcBBwEB/wSBuTCBtjCBnQQCAAEwgZYDBAIF/PwDBAJRrCgDBANRrFgwDAMEAFGs ZwMEBFGsYAMEA1GseAMEAFmWIAMEAFmWJQMEAFmWJwMEAFmWKgMEAl5lfAMEA7B4 qDAMAwQAuUrBAwQCuUrAAwQAucIZAwQAud2/MAwDBAC54F0DBAW54EADBAC54uQD BAC55pADBAC56IcDBAK57wQDBAG81CADBAHB8rwwFAQCAAIwDgMFAyoJTkADBQMq DEWAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDj1zANBgkqhkiG9w0BAQsFAAOC AQEALwSOFriSFrWPDI307PPtdgSzCguQZxHMHFxAhAwV63bp/DVmo6CbSjFBzYu4 UgSioO1KOI6OyLmiOETxIm0j4/WC7cTsTO/aokPGlgcWMdKIoaRPgjaaf/ubhqN/ oHCwZa46Ed13Q8BQPiSZ9BZeIEjhmt9DvBj35c9wlFAhmVDJ4dp4PTbkTohWXo/v 527OxJqkkxLwiQOULdq7WQzULGerz/Ks0ti5E9QS+Biiy9U73JJXjvjo/9C2az/F AtyyGDOby4cuACSxcYo+w+il+nrYKGTstPcZg3MVzBpa4HRuuX+UgErJpBZ/rwWp U24TBnywv7QzfHm9JGK1LyR6mg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:43:37 2026 by rpki-client