This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/q838GnxSDPjRdykgjoXosZfErf8.cer File: q838GnxSDPjRdykgjoXosZfErf8.cer (raw, json) Hash identifier: uxbHBv5UJ9g3UilENUge72nHaI/aRo7lTfeKeed+CQg= Subject key identifier: AB:CD:FC:1A:7C:52:0C:F8:D1:77:29:20:8E:85:E8:B1:97:C4:AD:FF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C7F7F145D82E09F2D50036DCDB89B83 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:18:09 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.44.176.0/23 IP: 209.127.220.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:7f:14:5d:82:e0:9f:2d:50:03:6d:cd:b8:9b:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=abcdfc1a7c520cf8d17729208e85e8b197c4adff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a8:13:ae:8b:02:c8:c3:81:6d:7e:61:1a:30: e9:a9:ba:58:d3:b9:49:03:b2:2d:e8:52:e9:9c:4f: 6e:8b:84:04:ad:2d:c9:6d:5f:7a:45:f6:54:ee:2b: 22:c6:15:ca:c9:f4:46:94:f4:9c:45:11:d1:fc:b2: 24:3f:b6:84:a7:30:b8:17:a8:cb:d5:6c:38:22:06: 0e:5c:a8:7f:b8:30:25:fe:ba:7f:0a:ea:f2:ce:f1: cd:ba:f5:ad:e5:f2:9e:bc:56:0a:93:9e:0c:c1:44: fa:a2:5b:ec:d9:12:db:15:90:f2:b7:4e:ea:74:53: 50:b5:57:4a:2f:7c:8f:97:be:17:1c:ab:ac:cb:21: 45:9c:5e:5f:05:1a:f1:72:b3:80:ad:ac:a5:aa:a4: 5d:77:a0:64:21:51:31:72:e0:74:8a:4b:73:c3:46: 88:0a:7f:00:c4:7f:fd:ee:26:4d:88:ea:15:13:62: 63:8f:f8:70:92:62:c2:98:3b:18:61:12:f1:45:62: d4:3d:91:92:22:bb:90:a6:3a:6e:fa:9a:66:af:b8: 38:b2:57:89:c5:a9:5f:67:59:57:06:41:58:98:c9: 18:1f:83:15:d2:a4:d5:09:4f:03:68:6c:6d:73:4c: 2a:56:9a:b0:5f:b0:6b:f0:63:62:d9:0e:60:81:b9: 91:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:CD:FC:1A:7C:52:0C:F8:D1:77:29:20:8E:85:E8:B1:97:C4:AD:FF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.44.176.0/23 209.127.220.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:41:16:8f:57:b2:09:36:61:91:99:7a:8f:22:eb:2b:92:12: f8:86:ca:64:40:a0:f1:33:ef:bd:53:c1:d5:c4:76:bf:53:a9: 64:6e:14:15:84:0c:2b:94:87:84:49:57:fe:55:b8:a3:58:91: f9:45:16:18:9d:10:91:61:62:1b:05:28:41:6a:b0:d8:e2:19: 10:a5:35:d8:63:49:17:e6:5a:37:28:27:8e:8f:ec:36:18:10: cb:a1:af:75:e8:28:f5:ff:53:2b:04:73:df:a5:25:a2:d4:de: 2f:cc:10:36:77:0f:45:0f:7f:c9:c1:78:92:95:60:15:45:a1: 25:79:10:cf:41:e0:4e:08:d0:03:0e:60:d5:f8:32:37:4d:a2: 64:a4:9b:34:d9:db:fe:62:5e:cb:f4:69:27:a3:cd:2d:7c:4e: 46:98:95:d7:66:c8:5f:8a:fc:84:54:b8:89:63:ab:c5:ab:b5: 9b:29:a7:0d:b0:14:37:ff:a4:54:6d:da:71:3a:71:7a:aa:37: 0a:16:9f:c4:68:8c:a8:30:f6:ba:9a:08:63:2e:0d:33:22:b2: d3:3d:0e:60:df:0d:09:69:b7:85:90:4a:ba:3e:dd:a0:e5:5a: 67:f5:d5:5d:3a:83:86:7f:67:d8:c6:fb:8a:35:6d:9c:da:a7: b7:09:30:63 -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgISAZt8f38UXYLgny1QA23NuJuDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYmNkZmMxYTdjNTIwY2Y4ZDE3NzI5MjA4ZTg1ZThiMTk3YzRhZGZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6gTrosCyMOBbX5hGjDpqbpY07lJ A7It6FLpnE9ui4QErS3JbV96RfZU7isixhXKyfRGlPScRRHR/LIkP7aEpzC4F6jL 1Ww4IgYOXKh/uDAl/rp/CuryzvHNuvWt5fKevFYKk54MwUT6olvs2RLbFZDyt07q dFNQtVdKL3yPl74XHKusyyFFnF5fBRrxcrOAraylqqRdd6BkIVExcuB0iktzw0aI Cn8AxH/97iZNiOoVE2Jjj/hwkmLCmDsYYRLxRWLUPZGSIruQpjpu+ppmr7g4sleJ xalfZ1lXBkFYmMkYH4MV0qTVCU8DaGxtc0wqVpqwX7Br8GNi2Q5ggbmRPwIDAQAB o4ICijCCAoYwHQYDVR0OBBYEFKvN/Bp8Ugz40XcpII6F6LGXxK3/MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M4L2U1MTI0 Zi0xMzY5LTQ5MDEtOWY1Ni0yYmI4MmE4MzdiN2IvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzgvZTUxMjRm LTEzNjktNDkwMS05ZjU2LTJiYjgyYTgzN2I3Yi8xL3E4MzhHbnhTRFBqUmR5a2dq b1hvc1pmRXJmOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQBuSywAwQA0X/cMA0GCSqGSIb3DQEBCwUAA4IB AQBMQRaPV7IJNmGRmXqPIusrkhL4hspkQKDxM++9U8HVxHa/U6lkbhQVhAwrlIeE SVf+VbijWJH5RRYYnRCRYWIbBShBarDY4hkQpTXYY0kX5lo3KCeOj+w2GBDLoa91 6Cj1/1MrBHPfpSWi1N4vzBA2dw9FD3/JwXiSlWAVRaEleRDPQeBOCNADDmDV+DI3 TaJkpJs02dv+Yl7L9Gkno80tfE5GmJXXZshfivyEVLiJY6vFq7WbKacNsBQ3/6RU bdpxOnF6qjcKFp/EaIyoMPa6mghjLg0zIrLTPQ5g3w0JabeFkEq6Pt2g5Vpn9dVd OoOGf2fYxvuKNW2c2qe3CTBj -----END CERTIFICATE-----Generated at Fri Jan 9 01:10:33 2026 by rpki-client