This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qKp6dXaxsilZDAkP01bDgt_zFbc.cer File: qKp6dXaxsilZDAkP01bDgt_zFbc.cer (raw, json) Hash identifier: zBoxn9n1RA/ZkbIhqDUqf3So8kqfHTQvkvfIedAJT50= Subject key identifier: A8:AA:7A:75:76:B1:B2:29:59:0C:09:0F:D3:56:C3:82:DF:F3:15:B7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7911236CE0A93231AF4227856E50E95D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/57/e5edb3-0ea8-4422-b175-f75345848e3f/1/qKp6dXaxsilZDAkP01bDgt_zFbc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/57/e5edb3-0ea8-4422-b175-f75345848e3f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:44 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 208072 IP: 91.221.240.0/23 IP: 91.224.20.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:23:6c:e0:a9:32:31:af:42:27:85:6e:50:e9:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a8aa7a7576b1b229590c090fd356c382dff315b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:71:83:79:5d:90:bc:6c:75:1d:92:69:cc:a2: 85:d8:f2:79:9e:98:6a:0e:30:20:7d:e3:d3:28:b8: 0d:0c:58:55:d9:1f:54:cb:39:86:ba:11:07:a8:5e: 88:15:15:f3:7b:70:fc:ad:80:55:65:f6:5c:5e:58: a3:9d:98:8d:ad:78:e4:7f:c5:d2:84:82:0a:9a:09: 7f:71:84:1c:4e:34:cb:d5:e2:47:a6:e5:e7:69:97: 03:38:c1:fb:77:d7:96:8d:54:24:00:4f:92:3f:82: 66:79:a9:83:68:ca:c5:bc:bf:b5:1c:b3:38:8c:a6: 02:c0:81:a5:f1:65:d7:4c:0a:40:77:3c:b4:32:6c: a5:1a:ce:1f:0c:c7:05:0c:26:74:5e:21:a1:cc:1d: d3:ee:2d:1c:af:8e:b1:c7:5d:0f:17:28:8b:b6:c1: 0e:15:89:ba:ed:3e:1c:38:2d:51:96:cf:38:04:30: 9c:ab:6d:73:c9:a9:07:57:91:6c:00:81:f8:22:6d: bd:1f:25:98:41:19:3f:fb:7a:9f:50:60:1f:9b:61: 6b:c7:cd:48:1f:e4:ec:5b:17:74:21:d6:ca:cb:56: 16:a1:ed:c1:29:de:b7:ce:1d:1c:3b:5e:48:44:e5: 65:9f:2d:3c:7b:ea:e7:b8:52:54:c4:3c:04:97:b2: 52:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:AA:7A:75:76:B1:B2:29:59:0C:09:0F:D3:56:C3:82:DF:F3:15:B7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e5edb3-0ea8-4422-b175-f75345848e3f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e5edb3-0ea8-4422-b175-f75345848e3f/1/qKp6dXaxsilZDAkP01bDgt_zFbc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.221.240.0/23 91.224.20.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 208072 Signature Algorithm: sha256WithRSAEncryption 21:18:5d:bb:f3:ee:f0:e2:9d:b5:35:cd:8f:a6:b6:1c:d3:10: 52:ff:47:e9:87:a2:90:64:6b:28:62:e9:9c:47:ef:16:a8:b4: 91:b9:63:f2:74:d2:01:56:cf:c9:cf:1c:e0:df:d2:0e:5b:95: 39:fa:db:92:e4:8b:38:7f:f7:63:d5:df:50:12:af:ac:6e:39: 03:39:31:af:fc:78:5a:6c:a0:24:3c:d1:b1:34:7c:06:d9:58: 5b:0c:3c:e9:97:7f:c7:3a:95:a6:7e:af:e8:4f:85:28:5a:21: 21:c1:2d:ce:5c:17:87:13:08:cf:fc:9a:65:cb:3c:4f:7a:37: 38:18:c9:ca:db:7f:8b:fd:c1:73:95:66:32:af:de:04:53:01: b7:03:d4:1c:d9:56:c0:36:3a:74:87:86:7e:6f:ef:98:ac:57: 56:92:f5:0a:bd:33:0f:20:d3:d7:f9:1d:f5:4e:7a:e6:cc:12: 75:44:f0:e5:4e:df:6f:9c:a1:6f:b5:1c:6e:bb:99:c2:41:04: 83:98:cc:2c:20:98:12:7e:ff:cd:dd:f9:93:04:72:1b:cd:0e: c8:90:10:fb:75:f9:6c:a3:d1:91:4b:54:18:f0:ab:24:a0:8f: 27:0a:4e:92:4c:a6:30:87:aa:65:45:10:1a:c7:4a:80:db:f9: d0:4f:d9:0e -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZt5ESNs4KkyMa9CJ4VuUOldMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOGFhN2E3NTc2YjFiMjI5NTkwYzA5MGZkMzU2YzM4MmRmZjMxNWI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnGDeV2QvGx1HZJpzKKF2PJ5nphq DjAgfePTKLgNDFhV2R9UyzmGuhEHqF6IFRXze3D8rYBVZfZcXlijnZiNrXjkf8XS hIIKmgl/cYQcTjTL1eJHpuXnaZcDOMH7d9eWjVQkAE+SP4JmeamDaMrFvL+1HLM4 jKYCwIGl8WXXTApAdzy0MmylGs4fDMcFDCZ0XiGhzB3T7i0cr46xx10PFyiLtsEO FYm67T4cOC1Rls84BDCcq21zyakHV5FsAIH4Im29HyWYQRk/+3qfUGAfm2Frx81I H+TsWxd0IdbKy1YWoe3BKd63zh0cO15IROVlny08e+rnuFJUxDwEl7JS0QIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFKiqenV2sbIpWQwJD9NWw4Lf8xW3MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU3L2U1ZWRi My0wZWE4LTQ0MjItYjE3NS1mNzUzNDU4NDhlM2YvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTcvZTVlZGIz LTBlYTgtNDQyMi1iMTc1LWY3NTM0NTg0OGUzZi8xL3FLcDZkWGF4c2lsWkRBa1Aw MWJEZ3RfekZiYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQBW93wAwQBW+AUMBoGCCsGAQUFBwEIAQH/BAsw CaAHMAUCAwMsyDANBgkqhkiG9w0BAQsFAAOCAQEAIRhdu/Pu8OKdtTXNj6a2HNMQ Uv9H6YeikGRrKGLpnEfvFqi0kblj8nTSAVbPyc8c4N/SDluVOfrbkuSLOH/3Y9Xf UBKvrG45Azkxr/x4WmygJDzRsTR8BtlYWww86Zd/xzqVpn6v6E+FKFohIcEtzlwX hxMIz/yaZcs8T3o3OBjJytt/i/3Bc5VmMq/eBFMBtwPUHNlWwDY6dIeGfm/vmKxX VpL1Cr0zDyDT1/kd9U565swSdUTw5U7fb5yhb7UcbruZwkEEg5jMLCCYEn7/zd35 kwRyG80OyJAQ+3X5bKPRkUtUGPCrJKCPJwpOkkymMIeqZUUQGsdKgNv50E/ZDg== -----END CERTIFICATE-----Generated at Mon Feb 9 15:05:32 2026 by rpki-client