This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qH6n63punQ1JrAXyWjeT6mv5vNU.cer File: qH6n63punQ1JrAXyWjeT6mv5vNU.cer (raw, json) Hash identifier: +PXwZ4rWWA9A/DSosimPdDKyQguE7Yz0pnLPH0SKjfY= Subject key identifier: A8:7E:A7:EB:7A:6E:9D:0D:49:AC:05:F2:5A:37:93:EA:6B:F9:BC:D5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BD62EB9C1482AEDFEAD1A55FC11595808 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1b/61d272-adfc-48ef-b23b-b433230f46e2/1/qH6n63punQ1JrAXyWjeT6mv5vNU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1b/61d272-adfc-48ef-b23b-b433230f46e2/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Mon 19 Jan 2026 12:15:45 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 209224 IP: 91.198.67.0/24 IP: 185.164.84.0/22 IP: 193.111.169.0/24 IP: 2a09:7380::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d6:2e:b9:c1:48:2a:ed:fe:ad:1a:55:fc:11:59:58:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 19 12:15:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a87ea7eb7a6e9d0d49ac05f25a3793ea6bf9bcd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c8:b6:6f:d5:b1:ca:4b:66:7f:2c:64:f8:90: 7d:29:63:4b:dd:45:ac:9e:d9:b5:83:44:51:d6:67: fc:4b:63:6f:24:3f:33:08:40:0a:96:2a:7c:9e:af: ba:a6:73:3c:04:a2:b1:a9:c8:c7:19:56:69:a8:a8: ec:01:6b:2f:6f:3c:9e:7f:40:87:2e:84:94:45:66: ff:d2:3f:e0:7c:ab:c7:a7:7d:b7:1f:15:99:5a:04: 95:27:02:e5:ef:bc:66:5e:0d:9a:0e:ec:1d:62:02: 43:7f:f4:3e:da:07:62:d9:9a:36:f8:54:49:6e:e8: 6c:bb:ea:5a:ef:03:ac:22:ea:83:0c:47:02:9c:f7: 71:4e:42:e4:a8:e3:9b:25:44:6c:52:29:d3:f1:c5: 75:2f:61:2f:dd:7f:c4:9a:2f:da:05:e6:d5:bf:88: 0d:78:4a:c4:26:af:5f:97:f1:07:7a:35:9a:11:17: f9:ac:78:7d:61:fc:c8:fc:00:34:a9:5c:37:65:d0: e7:9b:c8:e9:df:cd:ef:2e:57:25:ff:d2:9f:1d:a8: d7:0c:24:63:b2:db:fb:80:ea:8c:8e:db:82:1e:e1: 61:52:0a:0f:29:7b:0b:9d:0c:7e:2a:61:be:b6:cc: f9:b7:7a:b6:8a:25:50:b0:7a:25:27:54:05:d5:14: 0f:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:7E:A7:EB:7A:6E:9D:0D:49:AC:05:F2:5A:37:93:EA:6B:F9:BC:D5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/61d272-adfc-48ef-b23b-b433230f46e2/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/61d272-adfc-48ef-b23b-b433230f46e2/1/qH6n63punQ1JrAXyWjeT6mv5vNU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.198.67.0/24 185.164.84.0/22 193.111.169.0/24 IPv6: 2a09:7380::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 209224 Signature Algorithm: sha256WithRSAEncryption 4c:d3:20:1f:4f:75:0f:31:d9:33:45:9a:c6:c5:82:c3:04:6a: 61:9b:92:6f:ea:d5:96:7f:17:fd:66:3a:68:ae:b9:b0:4b:2d: d1:87:0f:47:e3:c1:cb:14:c8:6e:0c:23:78:64:d2:b2:49:25: 5c:a7:88:03:57:15:2d:17:59:cc:6f:cf:f5:21:09:bd:1c:28: 26:50:b8:5e:b7:9f:2f:07:f0:c7:fd:42:74:6f:3b:68:57:e0: 69:ca:99:76:44:97:e3:2f:d0:d1:b3:13:20:07:93:ac:e2:89: 2b:e1:5b:c1:4b:6c:49:56:36:1b:ae:79:7b:b7:10:8d:25:26: 59:d6:05:f3:ec:8c:88:0d:e5:14:8b:09:e6:bb:21:13:8c:32: 21:f7:29:ad:dc:1b:37:40:e1:9e:c3:50:3e:5f:51:ac:69:b4: d8:62:19:c0:0c:3a:7d:66:86:aa:20:60:df:e7:66:8f:a3:24: 40:37:ce:c6:0e:f1:ae:55:56:3f:8d:2d:64:07:ae:57:1e:ce: 28:bd:42:2f:04:32:51:66:f9:d8:66:ff:2a:a7:e3:f1:e1:b2: 90:3a:8b:10:db:3e:b4:b3:04:00:06:ff:0e:df:2a:44:1f:4d: 1f:76:20:5b:47:b1:4c:41:f0:4b:83:77:39:95:0f:5c:dc:d4: 3a:6d:46:af -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISAZvWLrnBSCrt/q0aVfwRWVgIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTE5MTIxNTQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhODdlYTdlYjdhNmU5ZDBkNDlhYzA1ZjI1YTM3OTNlYTZiZjliY2Q1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApsi2b9Wxyktmfyxk+JB9KWNL3UWs ntm1g0RR1mf8S2NvJD8zCEAKlip8nq+6pnM8BKKxqcjHGVZpqKjsAWsvbzyef0CH LoSURWb/0j/gfKvHp323HxWZWgSVJwLl77xmXg2aDuwdYgJDf/Q+2gdi2Zo2+FRJ buhsu+pa7wOsIuqDDEcCnPdxTkLkqOObJURsUinT8cV1L2Ev3X/Emi/aBebVv4gN eErEJq9fl/EHejWaERf5rHh9YfzI/AA0qVw3ZdDnm8jp383vLlcl/9KfHajXDCRj stv7gOqMjtuCHuFhUgoPKXsLnQx+KmG+tsz5t3q2iiVQsHolJ1QF1RQP1QIDAQAB o4ICuzCCArcwHQYDVR0OBBYEFKh+p+t6bp0NSawF8lo3k+pr+bzVMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFiLzYxZDI3 Mi1hZGZjLTQ4ZWYtYjIzYi1iNDMzMjMwZjQ2ZTIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWIvNjFkMjcy LWFkZmMtNDhlZi1iMjNiLWI0MzMyMzBmNDZlMi8xL3FINm42M3B1blExSnJBWHlX amVUNm12NXZOVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQAW8ZDAwQCuaRUAwQAwW+pMA0EAgACMAcDBQMq CXOAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMxSDANBgkqhkiG9w0BAQsFAAOC AQEATNMgH091DzHZM0WaxsWCwwRqYZuSb+rVln8X/WY6aK65sEst0YcPR+PByxTI bgwjeGTSskklXKeIA1cVLRdZzG/P9SEJvRwoJlC4XrefLwfwx/1CdG87aFfgacqZ dkSX4y/Q0bMTIAeTrOKJK+FbwUtsSVY2G655e7cQjSUmWdYF8+yMiA3lFIsJ5rsh E4wyIfcprdwbN0DhnsNQPl9RrGm02GIZwAw6fWaGqiBg3+dmj6MkQDfOxg7xrlVW P40tZAeuVx7OKL1CLwQyUWb52Gb/Kqfj8eGykDqLENs+tLMEAAb/Dt8qRB9NH3Yg W0exTEHwS4N3OZUPXNzUOm1Grw== -----END CERTIFICATE-----Generated at Mon Feb 9 16:48:35 2026 by rpki-client