This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.cer File: qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.cer (raw, json) Hash identifier: rMxMKu0SWPJhJAxifm4bCbWa9jGbW4dYaTgJzqqdQIc= Subject key identifier: A8:6E:25:7C:32:D9:DB:B8:19:D5:17:D5:50:54:F7:67:D7:16:1D:2C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A2AFA2AD01BB8EEC7C0E466CF5DD26 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d8/596fd5-6e44-486e-82c2-487f034c4727/1/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d8/596fd5-6e44-486e-82c2-487f034c4727/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:06 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 57381 IP: 193.150.22.0/23 IP: 2001:67c:24e4::/48 IP: 2001:67c:2a00::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:af:a2:ad:01:bb:8e:ec:7c:0e:46:6c:f5:dd:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a86e257c32d9dbb819d517d55054f767d7161d2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:05:b9:30:07:50:a5:1d:f2:6e:b8:02:b1:f2: 89:99:71:9d:55:5e:46:1e:04:08:51:6f:37:a0:89: be:ed:62:e2:d1:0e:d9:7e:f7:a2:9c:70:69:c2:be: ce:82:ea:4a:82:ab:aa:c7:a0:db:2a:72:23:01:a9: 65:ce:43:80:16:fb:dc:a2:fa:23:96:bd:a5:87:00: bf:0e:d0:d3:d7:f4:3c:94:4f:ae:95:0c:b3:38:9f: 21:16:e4:28:4a:cc:1f:20:a8:d4:e3:ae:b1:2f:79: 9f:cb:f6:47:98:fa:70:b8:be:40:e1:a6:ce:6f:d5: 89:84:0e:ef:33:c7:43:2b:44:90:f7:0b:a4:91:11: cd:9f:37:b7:48:85:ab:ef:e3:7f:06:0d:bc:cd:c4: 50:ed:6b:f8:e0:f1:f1:d8:da:d2:59:be:96:46:3e: fa:2d:5f:21:da:4c:53:a0:d2:fb:49:78:26:e4:8b: 39:69:a8:d2:65:c3:a9:e4:db:0b:64:3b:16:65:22: 09:83:aa:59:63:b2:00:a5:4a:c7:73:1d:5d:3e:62: d0:9b:6e:fc:f1:47:47:82:fd:3d:be:69:e4:76:28: 20:cd:b4:83:00:43:1c:1a:42:b4:4c:38:7c:46:ef: 55:f0:fb:0f:e5:73:5d:d3:61:a0:ca:f0:b0:56:96: 91:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:6E:25:7C:32:D9:DB:B8:19:D5:17:D5:50:54:F7:67:D7:16:1D:2C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/596fd5-6e44-486e-82c2-487f034c4727/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/596fd5-6e44-486e-82c2-487f034c4727/1/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.150.22.0/23 IPv6: 2001:67c:24e4::/48 2001:67c:2a00::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 57381 Signature Algorithm: sha256WithRSAEncryption 45:23:cd:c3:c8:e7:81:54:19:fb:ab:c2:68:aa:f8:cc:78:3d: 57:e3:44:d1:d2:da:23:46:7a:55:70:b0:91:d3:71:76:92:a0: 3e:39:de:b7:8f:1e:41:32:d1:67:89:ca:c1:06:39:8c:0e:1a: b5:07:73:06:1f:77:3d:ab:52:73:0f:38:46:bc:43:8a:f7:f6: 8b:ef:d1:26:f4:83:92:c7:d6:91:35:44:f2:d9:21:dc:67:11: cd:84:66:19:6a:40:db:68:3b:90:4b:cc:35:67:38:3b:58:de: ca:87:53:1b:0e:17:60:56:c7:d8:3b:83:67:6a:97:74:07:fb: f1:49:2e:74:fc:38:ba:d3:57:55:16:0a:09:9a:11:58:12:ab: 94:c8:21:2f:27:c5:f6:a5:4e:e8:2e:86:cc:b8:b3:34:03:d3: c6:44:d4:5b:c1:fd:b1:d7:21:8b:1a:14:51:c4:9b:ec:45:4a: 20:eb:ce:6c:cf:18:d3:61:6d:b0:ba:01:3d:a8:46:8f:ca:66: c4:51:a9:b2:a7:3d:10:af:d1:11:ab:55:5e:6a:ee:b1:28:af: 10:a9:ce:cd:2f:b1:76:d2:31:de:5b:b3:b6:25:95:75:30:ee: a9:e5:b3:29:3a:70:27:a1:05:20:54:44:60:9a:cb:ac:7e:8d: 81:89:ff:e1 -----BEGIN CERTIFICATE----- MIIFrjCCBJagAwIBAgISAZt4oq+irQG7jux8DkZs9d0mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhODZlMjU3YzMyZDlkYmI4MTlkNTE3ZDU1MDU0Zjc2N2Q3MTYxZDJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgW5MAdQpR3ybrgCsfKJmXGdVV5G HgQIUW83oIm+7WLi0Q7ZfveinHBpwr7OgupKgquqx6DbKnIjAallzkOAFvvcovoj lr2lhwC/DtDT1/Q8lE+ulQyzOJ8hFuQoSswfIKjU466xL3mfy/ZHmPpwuL5A4abO b9WJhA7vM8dDK0SQ9wukkRHNnze3SIWr7+N/Bg28zcRQ7Wv44PHx2NrSWb6WRj76 LV8h2kxToNL7SXgm5Is5aajSZcOp5NsLZDsWZSIJg6pZY7IApUrHcx1dPmLQm278 8UdHgv09vmnkdiggzbSDAEMcGkK0TDh8Ru9V8PsP5XNd02GgyvCwVpaRHwIDAQAB o4ICujCCArYwHQYDVR0OBBYEFKhuJXwy2du4GdUX1VBU92fXFh0sMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q4LzU5NmZk NS02ZTQ0LTQ4NmUtODJjMi00ODdmMDM0YzQ3MjcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDgvNTk2ZmQ1 LTZlNDQtNDg2ZS04MmMyLTQ4N2YwMzRjNDcyNy8xL3FHNGxmRExaMjdnWjFSZlZV RlQzWjljV0hTdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDkGCCsGAQUF BwEHAQH/BCowKDAMBAIAATAGAwQBwZYWMBgEAgACMBIDBwAgAQZ8JOQDBwAgAQZ8 KgAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAOAlMA0GCSqGSIb3DQEBCwUAA4IB AQBFI83DyOeBVBn7q8JoqvjMeD1X40TR0tojRnpVcLCR03F2kqA+Od63jx5BMtFn icrBBjmMDhq1B3MGH3c9q1JzDzhGvEOK9/aL79Em9IOSx9aRNUTy2SHcZxHNhGYZ akDbaDuQS8w1Zzg7WN7Kh1MbDhdgVsfYO4Nnapd0B/vxSS50/Di601dVFgoJmhFY EquUyCEvJ8X2pU7oLobMuLM0A9PGRNRbwf2x1yGLGhRRxJvsRUog685szxjTYW2w ugE9qEaPymbEUamypz0Qr9ERq1Veau6xKK8Qqc7NL7F20jHeW7O2JZV1MO6p5bMp OnAnoQUgVERgmsusfo2Bif/h -----END CERTIFICATE-----Generated at Mon Feb 9 16:50:34 2026 by rpki-client