This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/q9h7vvWUNUayqD0x7CuZrYg9Udc.cer File: q9h7vvWUNUayqD0x7CuZrYg9Udc.cer (raw, json) Hash identifier: elzX6CJ9aFoXM1ck7d6CfQIUHWz89qy7GZkAghptXpg= Subject key identifier: AB:D8:7B:BE:F5:94:35:46:B2:A8:3D:31:EC:2B:99:AD:88:3D:51:D7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C8009A3723790432F9326EB02B2431E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:18:44 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 202278 IP: 80.75.214.0/24 IP: 104.167.18.0/24 IP: 2a13:5680::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 15:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:09:a3:72:37:90:43:2f:93:26:eb:02:b2:43:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=abd87bbef5943546b2a83d31ec2b99ad883d51d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:1d:3d:15:db:a1:89:6a:43:fd:7a:6d:41:b7: 59:c1:e0:e6:53:0e:2a:53:09:18:25:67:61:df:01: c0:a5:3d:30:5e:ae:ec:c2:2d:e7:a6:02:e9:fe:c9: bf:b7:91:bf:5a:d4:54:74:ce:fd:ad:ae:0b:77:ac: e1:13:51:82:d8:5b:1f:b0:ac:f8:7d:59:4c:5b:de: 98:ba:79:70:ea:f2:c4:b6:d4:7b:fa:20:b5:ac:90: 35:14:94:d8:03:be:8f:f5:62:19:98:44:08:e8:34: 2d:bf:74:2a:97:6b:6e:f1:92:44:d7:ed:47:ae:0a: 5f:71:35:00:35:00:8a:5a:7a:37:dd:8e:79:e3:46: 79:7c:90:2b:6a:c0:6f:5d:a5:a8:7b:2a:62:7c:40: e7:70:ec:1e:42:43:14:0c:59:e0:af:36:a2:df:69: 7d:4d:94:0b:7d:4d:66:aa:57:4e:6f:4c:36:4d:ba: f9:49:97:3a:7a:84:c4:0a:3d:7d:1f:7f:09:dc:02: 64:e1:f2:d2:e3:2c:d6:b6:fa:6a:aa:83:37:bc:7a: 9f:9c:a2:bf:2d:3d:7e:4e:6e:0e:b8:cd:6e:e6:71: bb:f3:1a:41:d4:81:ff:5e:d7:bd:af:75:40:0e:b8: ff:58:29:d2:15:28:a3:ac:a3:44:e3:90:6f:02:a5: 09:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:D8:7B:BE:F5:94:35:46:B2:A8:3D:31:EC:2B:99:AD:88:3D:51:D7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.75.214.0/24 104.167.18.0/24 IPv6: 2a13:5680::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 202278 Signature Algorithm: sha256WithRSAEncryption b0:2b:d2:9e:9d:9b:3f:6a:16:cc:96:05:60:2d:d5:f6:7f:57: 57:75:15:e7:42:d6:54:a0:c3:ac:8e:30:19:db:94:fa:5a:cf: 65:63:e1:ee:1d:01:f0:94:10:ae:8d:af:ef:39:fa:c1:93:7a: db:13:4f:8e:39:40:eb:2f:73:dc:67:4b:ff:11:3c:7d:4f:12: 9d:1b:62:10:ba:08:39:07:62:58:dd:0c:eb:5a:76:9a:37:f7: 40:54:e3:95:48:68:40:e0:02:e2:d6:55:75:ea:9a:cd:61:50: 2a:f3:0d:69:8b:0d:bc:8f:95:03:30:90:2b:de:9d:08:d4:47: e1:fd:d1:08:5a:3b:f0:4c:b2:1e:b0:56:a6:b8:25:ae:77:3f: e6:49:45:74:12:96:97:af:f0:bd:d6:b8:46:b4:36:e1:94:98: 89:4a:93:f0:9b:46:9f:aa:22:f7:73:fe:cb:42:56:cc:39:92: 15:22:d8:75:51:f3:8e:f8:13:1b:aa:80:9b:81:a6:8d:06:58: 2a:bc:6f:b4:79:a9:48:56:e1:8f:0c:82:4e:91:0e:db:aa:63: 57:7e:25:5e:e9:44:a0:c0:12:b1:10:a7:92:c0:01:a5:c5:02: 77:9c:75:10:ee:46:a3:43:f9:e8:7e:42:f6:8e:e0:53:49:42: b1:ed:e6:cc -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt8gAmjcjeQQy+TJusCskMeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYmQ4N2JiZWY1OTQzNTQ2YjJhODNkMzFlYzJiOTlhZDg4M2Q1MWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsh09FduhiWpD/XptQbdZweDmUw4q UwkYJWdh3wHApT0wXq7swi3npgLp/sm/t5G/WtRUdM79ra4Ld6zhE1GC2FsfsKz4 fVlMW96Yunlw6vLEttR7+iC1rJA1FJTYA76P9WIZmEQI6DQtv3Qql2tu8ZJE1+1H rgpfcTUANQCKWno33Y5540Z5fJArasBvXaWoeypifEDncOweQkMUDFngrzai32l9 TZQLfU1mqldOb0w2Tbr5SZc6eoTECj19H38J3AJk4fLS4yzWtvpqqoM3vHqfnKK/ LT1+Tm4OuM1u5nG78xpB1IH/Xte9r3VADrj/WCnSFSijrKNE45BvAqUJqQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFKvYe771lDVGsqg9Mewrma2IPVHXMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NkLzhhZDJl MC1lM2YwLTRhYmUtYmNiNi0yZjVjNzRjNjlhZTEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2QvOGFkMmUw LWUzZjAtNGFiZS1iY2I2LTJmNWM3NGM2OWFlMS8xL3E5aDd2dldVTlVheXFEMHg3 Q3VacllnOVVkYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQAUEvWAwQAaKcSMA0EAgACMAcDBQMqE1aAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMWJjANBgkqhkiG9w0BAQsFAAOCAQEAsCvS np2bP2oWzJYFYC3V9n9XV3UV50LWVKDDrI4wGduU+lrPZWPh7h0B8JQQro2v7zn6 wZN62xNPjjlA6y9z3GdL/xE8fU8SnRtiELoIOQdiWN0M61p2mjf3QFTjlUhoQOAC 4tZVdeqazWFQKvMNaYsNvI+VAzCQK96dCNRH4f3RCFo78EyyHrBWprglrnc/5klF dBKWl6/wvda4RrQ24ZSYiUqT8JtGn6oi93P+y0JWzDmSFSLYdVHzjvgTG6qAm4Gm jQZYKrxvtHmpSFbhjwyCTpEO26pjV34lXulEoMASsRCnksABpcUCd5x1EO5Go0P5 6H5C9o7gU0lCse3mzA== -----END CERTIFICATE-----Generated at Wed Jan 21 23:40:12 2026 by rpki-client