This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qCP-ba2K1P2u5t1pg8HlXN6EgqI.cer File: qCP-ba2K1P2u5t1pg8HlXN6EgqI.cer (raw, json) Hash identifier: +cWXslLa+YWsCqsZ1C2iTwG8UAeXl3NcQdrnqr2b+Yo= Subject key identifier: A8:23:FE:6D:AD:8A:D4:FD:AE:E6:DD:69:83:C1:E5:5C:DE:84:82:A2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CECD1D40A93A5A988E46F22C443A528 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/qCP-ba2K1P2u5t1pg8HlXN6EgqI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:17:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 209620 IP: 193.58.88.0/22 IP: 194.55.240.0/22 IP: 2a0c:94c0::/29 IP: 2a0c:cbc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:d1:d4:0a:93:a5:a9:88:e4:6f:22:c4:43:a5:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a823fe6dad8ad4fdaee6dd6983c1e55cde8482a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:21:ed:f3:ae:0c:e4:12:02:87:62:4e:ed:6e: 68:90:4c:0a:b8:17:11:3f:e0:a9:52:8f:5a:49:aa: b8:4a:fb:85:49:c5:06:38:e7:29:22:0e:70:7a:41: 7e:58:54:7d:84:fc:ee:41:c8:40:79:20:fa:c8:d5: 8d:dd:7b:3d:82:a2:88:1a:89:ac:1e:4d:a8:f8:3e: cf:f1:00:fa:61:65:3e:80:73:5a:4e:f5:0b:32:95: 8e:1b:df:97:ee:23:8b:3d:8d:67:ea:ca:23:1c:3f: e8:b2:df:1d:8b:93:3a:e9:5a:59:01:31:41:11:27: b0:b6:69:d6:58:6c:75:5f:13:1a:3b:84:b6:6a:b2: ba:7d:b3:83:b2:7a:fa:8d:f0:21:58:db:4e:19:23: ba:7b:bc:46:08:b6:c0:67:64:e1:73:94:b5:44:3c: 6c:b4:b6:b2:f4:eb:45:40:f1:39:5d:52:cc:26:cf: b7:33:69:4f:68:9a:6e:e1:a1:9a:3f:61:d0:ef:46: 7d:b0:5e:1a:40:4b:64:88:83:3d:59:75:f2:07:f3: 47:99:ec:23:a8:bc:0e:42:e6:9a:48:42:6c:11:3a: 63:42:ad:4b:90:11:57:7c:73:64:74:b2:76:d2:0f: 07:77:da:41:53:24:d6:0c:8e:f9:36:c6:98:39:b6: 05:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:23:FE:6D:AD:8A:D4:FD:AE:E6:DD:69:83:C1:E5:5C:DE:84:82:A2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/qCP-ba2K1P2u5t1pg8HlXN6EgqI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.58.88.0/22 194.55.240.0/22 IPv6: 2a0c:94c0::/29 2a0c:cbc0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 209620 Signature Algorithm: sha256WithRSAEncryption 18:7d:e9:58:f4:e8:11:45:23:00:9a:b0:a2:2a:73:e0:af:48: f0:81:28:e7:80:dc:9d:15:7b:dc:28:38:de:16:e6:68:f5:d0: 01:b2:3e:a3:dc:95:0a:2e:f8:f9:c8:cb:c4:97:d2:f8:7b:49: 9c:22:94:36:c3:5c:5a:13:89:0b:34:a2:2d:2e:68:1e:91:4e: e9:06:d4:0c:ea:ee:88:4f:04:12:b8:d4:6c:c6:18:51:89:53: 40:8b:a3:3a:eb:ef:ac:46:50:36:e5:51:60:70:b0:6b:38:95: 61:74:d5:fd:29:fa:43:cd:6a:ff:6f:d6:97:4c:15:11:ce:78: 8b:b9:f4:92:b9:b4:10:08:0b:9e:fb:13:1e:31:e4:9d:99:b4: 12:5f:39:61:b2:cc:f6:6d:cd:5a:0f:21:84:a5:08:14:56:e2: 37:70:ca:29:48:19:c6:b2:f4:6d:ba:f1:d1:42:0a:36:53:dd: fd:ca:ab:bb:de:be:af:04:d0:cc:40:49:c2:5c:e7:9c:bd:7a: fc:10:62:c0:cb:c2:13:dc:37:81:23:aa:51:c7:c5:af:b5:e0: 84:40:e7:9b:d8:57:a2:ae:fa:ab:36:78:1a:4f:08:be:87:d5: da:d9:45:ba:ff:df:4b:e3:ae:bd:e3:e1:3b:08:35:0e:b6:26: db:aa:50:71 -----BEGIN CERTIFICATE----- MIIFsDCCBJigAwIBAgISAZt87NHUCpOlqYjkbyLEQ6UoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhODIzZmU2ZGFkOGFkNGZkYWVlNmRkNjk4M2MxZTU1Y2RlODQ4MmEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCHt864M5BICh2JO7W5okEwKuBcR P+CpUo9aSaq4SvuFScUGOOcpIg5wekF+WFR9hPzuQchAeSD6yNWN3Xs9gqKIGoms Hk2o+D7P8QD6YWU+gHNaTvULMpWOG9+X7iOLPY1n6sojHD/ost8di5M66VpZATFB ESewtmnWWGx1XxMaO4S2arK6fbODsnr6jfAhWNtOGSO6e7xGCLbAZ2Thc5S1RDxs tLay9OtFQPE5XVLMJs+3M2lPaJpu4aGaP2HQ70Z9sF4aQEtkiIM9WXXyB/NHmewj qLwOQuaaSEJsETpjQq1LkBFXfHNkdLJ20g8Hd9pBUyTWDI75NsaYObYFQQIDAQAB o4ICvDCCArgwHQYDVR0OBBYEFKgj/m2titT9rubdaYPB5VzehIKiMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM2LzAzODU2 MC0yNmQ2LTQ1NWQtYThmNC05YmZkZjIyNTEyNjcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzYvMDM4NTYw LTI2ZDYtNDU1ZC1hOGY0LTliZmRmMjI1MTI2Ny8xL3FDUC1iYTJLMVAydTV0MXBn OEhsWE42RWdxSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDsGCCsGAQUF BwEHAQH/BCwwKjASBAIAATAMAwQCwTpYAwQCwjfwMBQEAgACMA4DBQMqDJTAAwUD KgzLwDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDMtQwDQYJKoZIhvcNAQELBQAD ggEBABh96Vj06BFFIwCasKIqc+CvSPCBKOeA3J0Ve9woON4W5mj10AGyPqPclQou +PnIy8SX0vh7SZwilDbDXFoTiQs0oi0uaB6RTukG1Azq7ohPBBK41GzGGFGJU0CL ozrr76xGUDblUWBwsGs4lWF01f0p+kPNav9v1pdMFRHOeIu59JK5tBAIC577Ex4x 5J2ZtBJfOWGyzPZtzVoPIYSlCBRW4jdwyilIGcay9G268dFCCjZT3f3Kq7vevq8E 0MxAScJc55y9evwQYsDLwhPcN4EjqlHHxa+14IRA55vYV6Ku+qs2eBpPCL6H1drZ Rbr/30vjrr3j4TsINQ62JtuqUHE= -----END CERTIFICATE-----Generated at Mon Feb 9 19:51:01 2026 by rpki-client