This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.cer File: q7BgFm1kzq0OKVeX6NJ8VdiJi8I.cer (raw, json) Hash identifier: fPSr1+kw1x7rxNuoii09ribsMKSltNAnOCeS+MlCv0M= Subject key identifier: AB:B0:60:16:6D:64:CE:AD:0E:29:57:97:E8:D2:7C:55:D8:89:8B:C2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A31DC653A6D68BC405C6951318A8A9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1e/f288bd-10f5-47b3-b124-6b136494e3dc/1/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1e/f288bd-10f5-47b3-b124-6b136494e3dc/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:34 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 205390 IP: 185.220.0.0/22 IP: 2a0b:ecc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:1d:c6:53:a6:d6:8b:c4:05:c6:95:13:18:a8:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=abb060166d64cead0e295797e8d27c55d8898bc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:61:6e:70:9f:3f:11:82:b3:e2:be:ad:93:38: 1f:fa:79:13:28:58:3e:b4:c2:47:15:c4:53:09:35: 35:f6:71:18:cf:fa:ff:04:5e:58:b3:94:29:71:1a: 69:ad:8b:1d:63:72:c3:99:d4:cd:56:5e:58:41:d1: 2c:9b:2a:f1:e7:b6:39:72:2b:64:ea:65:d4:1c:02: ef:29:b3:2e:b8:ed:e8:73:dc:ff:98:81:d4:22:9c: b6:df:36:78:af:1c:0e:5a:04:e7:9b:20:b3:47:b4: e5:aa:9d:35:4e:af:50:07:83:59:ff:01:f1:77:98: 62:3c:ac:25:35:a8:0b:03:3d:bc:22:ab:d3:0c:63: a7:3d:83:98:4e:b3:cd:36:b7:34:23:19:51:ab:5b: bb:70:a0:08:6f:5e:7d:65:a3:f1:81:56:f7:48:48: 8b:ae:35:32:65:3a:08:87:dd:43:8b:2c:8b:b2:a4: a9:13:2e:c2:5f:5b:06:7e:ec:57:a7:89:8e:08:d0: 5d:f4:1c:e0:16:86:65:56:b3:95:21:cb:28:95:05: 93:ee:96:88:37:f3:1a:80:8e:ea:36:cd:da:68:97: 1a:1a:91:74:29:f7:6a:42:e0:df:ba:53:6d:98:f7: f6:b2:80:8c:cc:6c:76:80:d4:13:a4:57:8e:df:1d: a6:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:B0:60:16:6D:64:CE:AD:0E:29:57:97:E8:D2:7C:55:D8:89:8B:C2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f288bd-10f5-47b3-b124-6b136494e3dc/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f288bd-10f5-47b3-b124-6b136494e3dc/1/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.220.0.0/22 IPv6: 2a0b:ecc0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 205390 Signature Algorithm: sha256WithRSAEncryption 70:f6:8e:2c:33:79:ef:88:17:61:8e:0d:01:3c:f0:b4:03:1b: 02:72:ef:59:dd:1a:2d:69:75:d4:eb:9b:d7:6f:3e:a0:10:03: f4:43:ec:21:34:f2:84:ea:a5:87:31:31:d6:26:08:e7:81:46: a6:f8:a8:f0:0c:04:62:4a:eb:ac:80:99:10:24:68:e3:b7:91: 9a:44:d2:f3:6b:02:7a:50:9b:3a:65:40:eb:e5:7d:d1:40:2a: 67:a3:1f:c5:39:a7:2d:7c:9c:d8:89:8c:cc:4b:7a:f0:64:5a: 7e:09:66:34:af:6a:43:0d:3d:96:b0:e8:cd:0d:47:14:38:db: 7d:f7:85:37:e6:00:1b:a0:4e:bc:73:fc:f9:0e:8c:ec:29:3a: 38:c4:4a:8c:00:44:b8:e8:45:cf:62:ee:78:d0:be:df:cc:ee: eb:ab:52:98:11:2c:94:38:f6:30:2a:20:43:90:dd:23:55:b8: f3:24:7a:3e:fb:c6:35:e4:c7:da:50:17:3c:66:9f:84:0f:bb: 98:73:e7:7f:cc:11:1f:e2:3f:36:66:b4:d1:7a:26:57:fe:f1: 30:70:76:4b:b9:24:41:b9:1b:32:c7:af:1f:ee:6c:77:ad:33: 7f:17:86:6a:71:0e:cf:70:d7:e2:4c:3c:f8:f9:2f:64:92:c7: 4a:c8:b3:62 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt4ox3GU6bWi8QFxpUTGKipMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYmIwNjAxNjZkNjRjZWFkMGUyOTU3OTdlOGQyN2M1NWQ4ODk4YmMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGFucJ8/EYKz4r6tkzgf+nkTKFg+ tMJHFcRTCTU19nEYz/r/BF5Ys5QpcRpprYsdY3LDmdTNVl5YQdEsmyrx57Y5citk 6mXUHALvKbMuuO3oc9z/mIHUIpy23zZ4rxwOWgTnmyCzR7Tlqp01Tq9QB4NZ/wHx d5hiPKwlNagLAz28IqvTDGOnPYOYTrPNNrc0IxlRq1u7cKAIb159ZaPxgVb3SEiL rjUyZToIh91DiyyLsqSpEy7CX1sGfuxXp4mOCNBd9BzgFoZlVrOVIcsolQWT7paI N/MagI7qNs3aaJcaGpF0KfdqQuDfulNtmPf2soCMzGx2gNQTpFeO3x2m7QIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFKuwYBZtZM6tDilXl+jSfFXYiYvCMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFlL2YyODhi ZC0xMGY1LTQ3YjMtYjEyNC02YjEzNjQ5NGUzZGMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWUvZjI4OGJk LTEwZjUtNDdiMy1iMTI0LTZiMTM2NDk0ZTNkYy8xL3E3QmdGbTFrenEwT0tWZVg2 Tko4VmRpSmk4SS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCudwAMA0EAgACMAcDBQMqC+zAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMiTjANBgkqhkiG9w0BAQsFAAOCAQEAcPaOLDN574gX YY4NATzwtAMbAnLvWd0aLWl11Oub128+oBAD9EPsITTyhOqlhzEx1iYI54FGpvio 8AwEYkrrrICZECRo47eRmkTS82sCelCbOmVA6+V90UAqZ6MfxTmnLXyc2ImMzEt6 8GRafglmNK9qQw09lrDozQ1HFDjbffeFN+YAG6BOvHP8+Q6M7Ck6OMRKjABEuOhF z2LueNC+38zu66tSmBEslDj2MCogQ5DdI1W48yR6PvvGNeTH2lAXPGafhA+7mHPn f8wRH+I/Nma00XomV/7xMHB2S7kkQbkbMsevH+5sd60zfxeGanEOz3DX4kw8+Pkv ZJLHSsizYg== -----END CERTIFICATE-----Generated at Mon Feb 9 15:14:33 2026 by rpki-client