This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/q5udbmrCgujBAADMPbxK3z_gH-I.cer File: q5udbmrCgujBAADMPbxK3z_gH-I.cer (raw, json) Hash identifier: woaFnlflvNQqVIyYwYz+ZNYd2pMEaU1ZZAZ5BJzdxgs= Subject key identifier: AB:9B:9D:6E:6A:C2:82:E8:C1:00:00:CC:3D:BC:4A:DF:3F:E0:1F:E2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA542D68239BBFD970D0C54D40CAD3E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/15/87f491-95c9-4f41-b48e-1cec1a0ee98b/1/q5udbmrCgujBAADMPbxK3z_gH-I.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/15/87f491-95c9-4f41-b48e-1cec1a0ee98b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:18:38 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 207278 IP: 2001:678:cd0::/48 IP: 2001:678:cd4::/48 IP: 2001:678:cd8::/48 IP: 2001:67c:15c0::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:42:d6:82:39:bb:fd:97:0d:0c:54:d4:0c:ad:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ab9b9d6e6ac282e8c10000cc3dbc4adf3fe01fe2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:77:5a:3a:ea:c0:e9:03:22:7d:c4:03:99:65: ea:27:fd:c3:fc:40:c6:fc:ef:a0:aa:43:57:f4:f3: 81:4c:5f:13:f0:ca:e9:9f:19:a2:05:60:d0:75:c9: c2:8f:1a:a1:ea:ec:47:26:12:3e:5d:e3:e1:c9:4f: 27:e9:dc:3f:70:e0:2d:92:0d:ce:fe:24:04:1e:88: a1:42:21:ba:86:f1:e5:d1:69:13:de:a8:5d:c2:1e: ff:f5:f0:4c:a0:7b:0f:4b:55:b3:f4:32:10:3d:8d: fe:a9:d9:d2:77:a3:b8:d7:e0:25:9a:69:43:b2:07: 9f:f5:34:cf:d3:32:87:ef:c4:f4:76:db:9c:4d:79: 32:0b:e7:bd:ec:64:4b:39:40:86:f6:6d:fa:4e:e7: b3:b5:28:24:55:bf:d7:99:40:21:47:2e:bc:46:54: c8:3d:9d:18:e9:65:d6:30:1c:de:71:f5:e3:a0:fb: d0:0b:d0:09:95:a0:16:10:07:f0:36:6e:b2:c9:87: 31:55:41:69:a7:f7:f3:13:99:e4:67:7c:6c:a5:df: 21:a3:af:21:88:6a:82:00:0b:67:d4:91:16:34:0d: de:84:87:41:53:f1:d5:7b:97:b5:94:84:77:c2:05: b5:1a:a8:1e:19:ab:51:d3:f0:7c:28:5a:37:e0:86: 00:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:9B:9D:6E:6A:C2:82:E8:C1:00:00:CC:3D:BC:4A:DF:3F:E0:1F:E2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/87f491-95c9-4f41-b48e-1cec1a0ee98b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/87f491-95c9-4f41-b48e-1cec1a0ee98b/1/q5udbmrCgujBAADMPbxK3z_gH-I.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:cd0::/48 2001:678:cd4::/48 2001:678:cd8::/48 2001:67c:15c0::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 207278 Signature Algorithm: sha256WithRSAEncryption 99:50:7a:93:20:4f:0c:09:49:79:04:35:90:fc:fb:b4:a8:c6: 27:77:a6:d3:2f:80:7d:7c:76:3c:51:e3:58:d9:f2:a0:e4:cb: 06:f0:09:8a:30:5c:d8:e0:64:c1:7d:1e:96:f4:d0:f4:88:af: 14:61:47:55:8b:07:ec:b7:b1:cb:19:8b:92:87:22:23:83:02: 9d:e1:19:37:9f:80:a5:86:b1:74:39:fc:79:ac:4f:22:4c:e0: 79:55:19:1e:36:a9:84:8a:d3:71:ae:01:e2:48:44:2e:63:ca: 85:88:6d:c3:8a:e5:bc:50:95:6f:17:6b:ec:3f:98:67:99:2d: e9:0d:aa:be:a1:76:ff:30:b2:0b:aa:b7:90:00:25:02:f5:f6: b2:d7:4c:2e:83:0d:d3:6c:a7:7c:37:b3:67:0e:fd:19:e7:bf: 1a:3b:7d:9e:fe:a0:28:18:b5:14:90:db:da:16:42:fd:48:f5: 1f:06:fa:52:86:e5:96:14:74:c5:e6:e3:54:bd:44:9c:43:15: 37:21:a1:43:3e:59:25:cc:bb:3e:9e:d7:f9:9a:26:ea:c7:54: 3f:11:c7:6e:7f:c0:8d:27:35:34:ef:33:8f:d4:3e:e5:f1:c9: 81:b9:b6:9c:3f:45:ca:a0:a5:a3:bd:f2:9b:b0:ce:6b:1f:6d: b2:9d:3f:60 -----BEGIN CERTIFICATE----- MIIFsjCCBJqgAwIBAgISAZt+pULWgjm7/ZcNDFTUDK0+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYjliOWQ2ZTZhYzI4MmU4YzEwMDAwY2MzZGJjNGFkZjNmZTAxZmUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3daOurA6QMifcQDmWXqJ/3D/EDG /O+gqkNX9POBTF8T8MrpnxmiBWDQdcnCjxqh6uxHJhI+XePhyU8n6dw/cOAtkg3O /iQEHoihQiG6hvHl0WkT3qhdwh7/9fBMoHsPS1Wz9DIQPY3+qdnSd6O41+AlmmlD sgef9TTP0zKH78T0dtucTXkyC+e97GRLOUCG9m36TueztSgkVb/XmUAhRy68RlTI PZ0Y6WXWMBzecfXjoPvQC9AJlaAWEAfwNm6yyYcxVUFpp/fzE5nkZ3xspd8ho68h iGqCAAtn1JEWNA3ehIdBU/HVe5e1lIR3wgW1GqgeGatR0/B8KFo34IYAQQIDAQAB o4ICvjCCArowHQYDVR0OBBYEFKubnW5qwoLowQAAzD28St8/4B/iMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE1Lzg3ZjQ5 MS05NWM5LTRmNDEtYjQ4ZS0xY2VjMWEwZWU5OGIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTUvODdmNDkx LTk1YzktNGY0MS1iNDhlLTFjZWMxYTBlZTk4Yi8xL3E1dWRibXJDZ3VqQkFBRE1Q YnhLM3pfZ0gtSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMD0GCCsGAQUF BwEHAQH/BC4wLDAqBAIAAjAkAwcAIAEGeAzQAwcAIAEGeAzUAwcAIAEGeAzYAwcA IAEGfBXAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMprjANBgkqhkiG9w0BAQsF AAOCAQEAmVB6kyBPDAlJeQQ1kPz7tKjGJ3em0y+AfXx2PFHjWNnyoOTLBvAJijBc 2OBkwX0elvTQ9IivFGFHVYsH7LexyxmLkociI4MCneEZN5+ApYaxdDn8eaxPIkzg eVUZHjaphIrTca4B4khELmPKhYhtw4rlvFCVbxdr7D+YZ5kt6Q2qvqF2/zCyC6q3 kAAlAvX2stdMLoMN02ynfDezZw79Gee/Gjt9nv6gKBi1FJDb2hZC/Uj1Hwb6Uobl lhR0xebjVL1EnEMVNyGhQz5ZJcy7Pp7X+Zom6sdUPxHHbn/AjSc1NO8zj9Q+5fHJ gbm2nD9FyqClo73ym7DOax9tsp0/YA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:47:12 2026 by rpki-client