This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qF7VXxRNceZz5j9LdnDEE0TAlYA.cer File: qF7VXxRNceZz5j9LdnDEE0TAlYA.cer (raw, json) Hash identifier: Zyw/zBjaeGYmxUsg41jjA7+G5tHgSNNVaYbBXt2JlKQ= Subject key identifier: A8:5E:D5:5F:14:4D:71:E6:73:E6:3F:4B:76:70:C4:13:44:C0:95:80 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A26E62C639FDE9CE1DD5AE3A95616B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/04/749d77-e995-489a-87e0-d00a13aae540/1/qF7VXxRNceZz5j9LdnDEE0TAlYA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/04/749d77-e995-489a-87e0-d00a13aae540/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:17:49 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 199113 IP: 91.242.56.0/21 IP: 176.123.223.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:6e:62:c6:39:fd:e9:ce:1d:d5:ae:3a:95:61:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a85ed55f144d71e673e63f4b7670c41344c09580 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:fa:21:1c:02:99:45:09:6f:1d:bf:b5:87:38: e0:c0:78:51:87:8b:b3:a9:33:33:c6:de:a2:7a:35: 3a:f5:0b:09:bc:43:c0:81:99:b2:d7:a1:ed:eb:be: 2f:a3:24:2b:de:46:70:8e:27:d3:b3:0a:09:72:75: a0:85:57:f4:fd:0a:af:70:d9:1a:bf:67:65:33:43: 92:cf:be:5c:a4:7f:08:f0:d7:6f:c5:e1:b1:b1:31: ef:5d:f6:0d:68:26:8d:f7:b9:8b:56:30:32:85:30: a2:55:79:b1:68:de:dc:f8:aa:a5:1a:d1:4c:fb:17: b6:05:d9:e3:f3:64:16:a3:f6:fa:af:50:2b:a9:ea: a1:49:b8:67:2d:f4:57:6c:29:59:26:f1:c0:86:b0: f3:57:9a:42:92:1c:1d:e5:19:96:08:a1:85:01:48: f7:ed:20:0f:63:7e:06:55:01:71:c3:24:71:5a:a3: 4f:85:e4:79:6c:c5:eb:1e:74:f2:6b:02:f8:e6:2a: 49:f1:a4:c8:c7:67:5f:2b:28:da:10:02:57:87:00: e3:fd:8f:d4:4e:4c:50:45:a0:9c:98:68:17:a7:1e: d5:25:d5:ab:87:a2:6d:a4:ee:0e:bf:e7:cd:d7:2c: 1d:a7:32:8e:d3:2e:d4:99:ec:e8:b9:d5:45:32:60: 25:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:5E:D5:5F:14:4D:71:E6:73:E6:3F:4B:76:70:C4:13:44:C0:95:80 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/749d77-e995-489a-87e0-d00a13aae540/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/749d77-e995-489a-87e0-d00a13aae540/1/qF7VXxRNceZz5j9LdnDEE0TAlYA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.242.56.0/21 176.123.223.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 199113 Signature Algorithm: sha256WithRSAEncryption 5d:e5:af:00:2b:1e:51:ce:6f:08:d6:0c:2e:0f:cb:c2:14:dc: 5d:84:2f:75:b0:93:40:f9:2a:a6:4c:b8:1a:3b:97:da:42:df: a5:03:03:3a:6e:13:e1:ce:23:11:b6:a1:72:f7:45:11:30:ef: ed:2f:5b:eb:9b:f7:46:73:fe:95:7a:e9:08:20:a8:5f:3e:b2: 51:be:08:24:e3:61:21:a0:6b:e1:80:92:b0:42:ce:12:af:e1: d0:15:a7:8f:f6:50:19:1d:88:09:10:77:0e:9d:2c:0b:9e:06: 1a:0c:f7:13:f9:c5:6c:02:91:e1:ff:f6:3d:60:fc:c9:f4:f2: cd:03:b7:c5:2d:18:12:87:2e:98:14:92:be:07:19:7b:a5:52: e3:a6:ae:72:8a:73:5e:d1:67:84:7c:28:32:31:b0:43:40:d7: 39:aa:5f:69:e2:a8:cb:b0:e6:fb:98:17:41:86:3a:97:0d:b3: c9:e8:3c:75:69:de:22:52:12:66:18:f2:04:0b:24:ee:d2:0c: e4:fe:40:33:5d:83:2b:04:ae:fd:af:50:df:d3:67:ee:36:67: 39:8e:96:5b:f1:a2:85:1b:cd:df:11:e2:b4:a8:7a:21:0d:86: 8d:3c:66:b3:ac:76:d6:cb:43:f8:f5:56:2a:f8:3e:48:ee:69: 71:28:ed:28 -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZt4om5ixjn96c4d1a46lWFrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhODVlZDU1ZjE0NGQ3MWU2NzNlNjNmNGI3NjcwYzQxMzQ0YzA5NTgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofohHAKZRQlvHb+1hzjgwHhRh4uz qTMzxt6iejU69QsJvEPAgZmy16Ht674voyQr3kZwjifTswoJcnWghVf0/QqvcNka v2dlM0OSz75cpH8I8NdvxeGxsTHvXfYNaCaN97mLVjAyhTCiVXmxaN7c+KqlGtFM +xe2Bdnj82QWo/b6r1ArqeqhSbhnLfRXbClZJvHAhrDzV5pCkhwd5RmWCKGFAUj3 7SAPY34GVQFxwyRxWqNPheR5bMXrHnTyawL45ipJ8aTIx2dfKyjaEAJXhwDj/Y/U TkxQRaCcmGgXpx7VJdWrh6JtpO4Ov+fN1ywdpzKO0y7UmezoudVFMmAlNQIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFKhe1V8UTXHmc+Y/S3ZwxBNEwJWAMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA0Lzc0OWQ3 Ny1lOTk1LTQ4OWEtODdlMC1kMDBhMTNhYWU1NDAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDQvNzQ5ZDc3 LWU5OTUtNDg5YS04N2UwLWQwMGExM2FhZTU0MC8xL3FGN1ZYeFJOY2VaejVqOUxk bkRFRTBUQWxZQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQDW/I4AwQAsHvfMBoGCCsGAQUFBwEIAQH/BAsw CaAHMAUCAwMJyTANBgkqhkiG9w0BAQsFAAOCAQEAXeWvACseUc5vCNYMLg/LwhTc XYQvdbCTQPkqpky4GjuX2kLfpQMDOm4T4c4jEbahcvdFETDv7S9b65v3RnP+lXrp CCCoXz6yUb4IJONhIaBr4YCSsELOEq/h0BWnj/ZQGR2ICRB3Dp0sC54GGgz3E/nF bAKR4f/2PWD8yfTyzQO3xS0YEocumBSSvgcZe6VS46aucopzXtFnhHwoMjGwQ0DX OapfaeKoy7Dm+5gXQYY6lw2zyeg8dWneIlISZhjyBAsk7tIM5P5AM12DKwSu/a9Q 39Nn7jZnOY6WW/GihRvN3xHitKh6IQ2GjTxms6x21stD+PVWKvg+SO5pcSjtKA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:49:07 2026 by rpki-client