This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qEOOrPTQZOh6drtGLTtLLMOFikw.cer File: qEOOrPTQZOh6drtGLTtLLMOFikw.cer (raw, json) Hash identifier: Q2wV+YFt+K6UAoGtdMV3u/uXnfwpM+1/M3auxgpkGZU= Subject key identifier: A8:43:8E:AC:F4:D0:64:E8:7A:76:BB:46:2D:3B:4B:2C:C3:85:8A:4C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5A65E6E02BC295356A1B06558CE107 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:18:23 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 57457 IP: 91.232.64.0 -- 91.232.69.255 IP: 185.210.200.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:65:e6:e0:2b:c2:95:35:6a:1b:06:55:8c:e1:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a8438eacf4d064e87a76bb462d3b4b2cc3858a4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:17:27:1d:28:51:3a:60:d6:a4:a4:f0:4b:ea: 02:66:2f:72:31:8b:84:cc:7d:ef:5f:4e:d8:db:fe: 89:59:e6:e8:07:e8:69:8e:ad:a8:40:f0:fb:95:19: 88:66:33:62:5d:a2:ed:4f:fb:4c:a0:ac:86:a7:33: 50:be:d8:d2:cc:2e:2d:da:ed:cf:a7:75:d9:4e:32: 1c:7e:0e:c2:f9:1e:0e:7e:34:01:27:56:48:6b:df: 12:76:17:ce:b3:c4:ad:3b:77:fb:4f:f0:8c:f3:a1: d7:a1:41:72:13:07:89:6d:74:a6:85:36:df:04:1c: 5b:93:70:7b:61:11:a8:9c:76:66:5f:ba:40:92:87: 4b:6a:5e:ef:a0:11:2a:e6:f2:bc:1a:4a:6b:b8:09: bd:f8:e8:6f:df:f8:f7:a4:78:3e:65:61:cd:72:dc: a3:fd:fa:81:29:33:93:73:c4:8a:c0:0d:0d:59:83: 44:57:ca:a8:86:7d:7c:39:40:74:37:c1:87:8b:f9: c9:08:ef:c7:4e:9a:23:ca:5d:3c:9e:69:09:de:49: f6:02:c3:b5:4e:4c:21:56:d4:a6:66:48:5c:36:dd: b8:9f:5e:a0:30:fb:c8:b1:9f:22:fb:a2:1d:35:45: 17:b4:39:c1:54:74:c8:d5:ad:c4:e7:c6:40:d9:eb: 49:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:43:8E:AC:F4:D0:64:E8:7A:76:BB:46:2D:3B:4B:2C:C3:85:8A:4C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.232.64.0-91.232.69.255 185.210.200.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 57457 Signature Algorithm: sha256WithRSAEncryption 21:4a:29:27:6b:e9:c7:5c:06:d3:65:1f:33:f5:aa:f4:2a:7e: 45:2f:47:47:1e:f5:a1:88:22:ae:c2:8d:ce:33:ad:09:25:f7: f9:82:fa:af:b8:2d:3c:cf:39:1b:31:f8:73:a7:8f:9c:51:d1: a6:c3:8d:60:1c:57:89:72:7c:e9:94:3e:03:07:cc:8b:c2:0a: 14:8d:ba:b4:76:b2:04:81:57:27:ac:53:13:c9:76:55:4d:1f: a6:7f:43:dc:bd:14:33:38:2a:f5:76:b0:ca:65:ff:0b:70:47: f4:a7:4b:c9:8a:ae:bd:e3:e1:c5:8b:7d:99:29:16:14:e1:5c: 49:b4:7e:87:72:80:28:68:f4:4a:b2:4e:47:77:f3:4b:15:6e: b3:6d:d2:21:d7:0d:b5:37:b5:d9:a9:fb:ae:57:d5:0e:56:51: d1:62:d7:9e:60:83:d0:4f:fd:d3:5b:1b:dc:7a:6a:cc:c0:12: 19:4b:17:96:d1:ca:3e:06:da:bb:9c:dd:11:28:5b:65:cd:cb: c7:70:05:5a:42:9d:d3:27:aa:d8:7f:56:8c:53:c9:7d:df:23: 51:49:30:3d:fc:d4:89:81:0b:94:b5:2e:13:70:06:44:c7:da: 05:65:5e:c0:cd:79:5c:31:c0:be:3c:b4:d7:4b:73:55:ef:8d: ea:67:1b:10 -----BEGIN CERTIFICATE----- MIIFojCCBIqgAwIBAgISAZt6WmXm4CvClTVqGwZVjOEHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhODQzOGVhY2Y0ZDA2NGU4N2E3NmJiNDYyZDNiNGIyY2MzODU4YTRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6hcnHShROmDWpKTwS+oCZi9yMYuE zH3vX07Y2/6JWeboB+hpjq2oQPD7lRmIZjNiXaLtT/tMoKyGpzNQvtjSzC4t2u3P p3XZTjIcfg7C+R4OfjQBJ1ZIa98SdhfOs8StO3f7T/CM86HXoUFyEweJbXSmhTbf BBxbk3B7YRGonHZmX7pAkodLal7voBEq5vK8GkpruAm9+Ohv3/j3pHg+ZWHNctyj /fqBKTOTc8SKwA0NWYNEV8qohn18OUB0N8GHi/nJCO/HTpojyl08nmkJ3kn2AsO1 TkwhVtSmZkhcNt24n16gMPvIsZ8i+6IdNUUXtDnBVHTI1a3E58ZA2etJ/wIDAQAB o4ICrjCCAqowHQYDVR0OBBYEFKhDjqz00GToena7Ri07SyzDhYpMMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2MxLzhlMTEy Mi04Y2I5LTQ4NzItODgxMS0xYzI4MDA4MzFjNjQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzEvOGUxMTIy LThjYjktNDg3Mi04ODExLTFjMjgwMDgzMWM2NC8xL3FFT09yUFRRWk9oNmRydEdM VHRMTE1PRmlrdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC0GCCsGAQUF BwEHAQH/BB4wHDAaBAIAATAUMAwDBAZb6EADBAFb6EQDBAK50sgwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDAOBxMA0GCSqGSIb3DQEBCwUAA4IBAQAhSikna+nHXAbT ZR8z9ar0Kn5FL0dHHvWhiCKuwo3OM60JJff5gvqvuC08zzkbMfhzp4+cUdGmw41g HFeJcnzplD4DB8yLwgoUjbq0drIEgVcnrFMTyXZVTR+mf0PcvRQzOCr1drDKZf8L cEf0p0vJiq694+HFi32ZKRYU4VxJtH6HcoAoaPRKsk5Hd/NLFW6zbdIh1w21N7XZ qfuuV9UOVlHRYteeYIPQT/3TWxvcemrMwBIZSxeW0co+Btq7nN0RKFtlzcvHcAVa Qp3TJ6rYf1aMU8l93yNRSTA9/NSJgQuUtS4TcAZEx9oFZV7AzXlcMcC+PLTXS3NV 743qZxsQ -----END CERTIFICATE-----Generated at Mon Feb 9 16:50:16 2026 by rpki-client