This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qERxpm95BxB-RTRxa_pCCNQGlp8.cer File: qERxpm95BxB-RTRxa_pCCNQGlp8.cer (raw, json) Hash identifier: Ebj2ylwG4F8jBqU8P/mPPdtSgcnGiFFbXGrAyYq7p1o= Subject key identifier: A8:44:71:A6:6F:79:07:10:7E:45:34:71:6B:FA:42:08:D4:06:96:9F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C7FD6EF966B174220EC5F49E9543246 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/28/85d097-0153-4902-af7a-b8c331a848aa/1/qERxpm95BxB-RTRxa_pCCNQGlp8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/28/85d097-0153-4902-af7a-b8c331a848aa/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:18:31 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 198153 IP: 79.98.64.0/21 IP: 185.197.0.0/22 IP: 2a03:ad80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:d6:ef:96:6b:17:42:20:ec:5f:49:e9:54:32:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a84471a66f7907107e4534716bfa4208d406969f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ab:58:eb:f5:f1:61:70:82:45:d8:59:f6:23: e7:07:df:b7:31:6a:32:6c:79:c4:81:9d:2f:6c:34: b9:2f:42:e1:58:ca:fe:8a:ae:6a:e7:82:b4:92:9d: 33:84:12:57:1a:d5:7e:83:21:e9:c0:d1:62:d3:c8: ef:33:49:0b:b3:69:38:11:46:9a:84:17:34:33:8c: 5e:2d:f7:1a:74:3c:fe:f0:6e:21:b5:dc:ca:65:40: 4c:8c:6a:53:87:90:c0:62:be:ec:e5:ca:fb:d0:2f: 70:02:eb:52:4f:2d:db:45:7b:a0:89:34:fa:1d:45: 3a:09:1e:40:29:09:5c:aa:af:74:62:a9:e5:06:9c: 45:57:77:1c:4b:89:cd:70:f3:9b:7f:50:01:9b:23: 01:02:55:41:9e:25:61:84:0b:50:02:e6:63:ba:70: 28:a0:67:5a:13:5f:f2:46:fb:9b:95:dc:52:ce:c2: 54:7c:34:2f:62:55:68:04:9a:1c:1a:0b:77:ab:21: ce:15:25:fc:2c:c7:84:e6:57:97:af:00:7f:d0:af: 87:31:9d:e0:20:66:87:71:99:6e:e6:dc:95:88:e1: c6:6d:65:9c:2e:90:af:b5:7a:d7:91:4f:5e:6c:0e: 03:2b:70:59:6b:71:f8:2b:db:ae:95:44:a2:9b:c3: 68:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:44:71:A6:6F:79:07:10:7E:45:34:71:6B:FA:42:08:D4:06:96:9F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/85d097-0153-4902-af7a-b8c331a848aa/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/85d097-0153-4902-af7a-b8c331a848aa/1/qERxpm95BxB-RTRxa_pCCNQGlp8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.98.64.0/21 185.197.0.0/22 IPv6: 2a03:ad80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 198153 Signature Algorithm: sha256WithRSAEncryption 77:02:de:45:41:53:28:62:b6:8a:f2:dd:fb:d3:dc:35:0b:7f: 84:68:ba:82:b3:68:77:f5:02:e4:04:b9:4b:8a:70:d7:01:c6: f9:c4:85:4b:40:2e:7f:57:c7:33:4b:10:ff:a2:20:22:de:b3: 90:dc:9c:29:1f:cc:e4:72:9b:e5:18:f2:5e:37:d0:5c:2a:93: ea:3f:c7:33:88:8d:2c:b3:ce:bc:f2:f8:8d:53:15:43:66:6b: 2f:c7:f2:94:0c:c2:fd:69:6f:29:60:c6:fb:3b:0d:b9:50:ec: f0:80:d4:f9:a1:70:ae:48:14:88:f9:c2:2a:33:c5:2b:9d:23: 6e:3e:76:af:fa:1b:f2:af:ed:ab:57:0c:92:a6:2c:5c:18:ab: 71:34:e0:a5:21:d3:df:9a:c3:08:1b:98:ee:22:e0:00:b6:6e: b5:e1:b9:72:71:3c:cf:36:96:84:1a:a1:1d:22:a9:d1:37:2b: b9:8b:43:cb:fd:0b:e1:69:48:bd:09:dc:28:f7:9e:ef:f2:fe: 58:dd:f1:48:72:e2:4d:c6:07:5a:52:2a:7a:d2:56:32:5a:89: e5:fb:37:50:4c:e6:d9:fc:01:cf:6b:8f:7c:0a:8f:63:f3:a7: f0:9e:d2:68:f8:f5:68:3e:ae:7b:95:da:23:f2:cc:44:b0:ae: e2:e4:ce:db -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt8f9bvlmsXQiDsX0npVDJGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhODQ0NzFhNjZmNzkwNzEwN2U0NTM0NzE2YmZhNDIwOGQ0MDY5NjlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzatY6/XxYXCCRdhZ9iPnB9+3MWoy bHnEgZ0vbDS5L0LhWMr+iq5q54K0kp0zhBJXGtV+gyHpwNFi08jvM0kLs2k4EUaa hBc0M4xeLfcadDz+8G4htdzKZUBMjGpTh5DAYr7s5cr70C9wAutSTy3bRXugiTT6 HUU6CR5AKQlcqq90YqnlBpxFV3ccS4nNcPObf1ABmyMBAlVBniVhhAtQAuZjunAo oGdaE1/yRvubldxSzsJUfDQvYlVoBJocGgt3qyHOFSX8LMeE5leXrwB/0K+HMZ3g IGaHcZlu5tyViOHGbWWcLpCvtXrXkU9ebA4DK3BZa3H4K9uulUSim8NokwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFKhEcaZveQcQfkU0cWv6QgjUBpafMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI4Lzg1ZDA5 Ny0wMTUzLTQ5MDItYWY3YS1iOGMzMzFhODQ4YWEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjgvODVkMDk3 LTAxNTMtNDkwMi1hZjdhLWI4YzMzMWE4NDhhYS8xL3FFUnhwbTk1QnhCLVJUUnhh X3BDQ05RR2xwOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQDT2JAAwQCucUAMA0EAgACMAcDBQMqA62AMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMGCTANBgkqhkiG9w0BAQsFAAOCAQEAdwLe RUFTKGK2ivLd+9PcNQt/hGi6grNod/UC5AS5S4pw1wHG+cSFS0Auf1fHM0sQ/6Ig It6zkNycKR/M5HKb5RjyXjfQXCqT6j/HM4iNLLPOvPL4jVMVQ2ZrL8fylAzC/Wlv KWDG+zsNuVDs8IDU+aFwrkgUiPnCKjPFK50jbj52r/ob8q/tq1cMkqYsXBircTTg pSHT35rDCBuY7iLgALZuteG5cnE8zzaWhBqhHSKp0TcruYtDy/0L4WlIvQncKPee 7/L+WN3xSHLiTcYHWlIqetJWMlqJ5fs3UEzm2fwBz2uPfAqPY/On8J7SaPj1aD6u e5XaI/LMRLCu4uTO2w== -----END CERTIFICATE-----Generated at Mon Feb 9 19:41:04 2026 by rpki-client