This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qKt9aNaaUqpQx5mZC5IYQZwUeTU.cer File: qKt9aNaaUqpQx5mZC5IYQZwUeTU.cer (raw, json) Hash identifier: 9I4dm+FJBje7U3d5akaulkgxkV3jgHxXsFR/idfuHDs= Subject key identifier: A8:AB:7D:68:D6:9A:52:AA:50:C7:99:99:0B:92:18:41:9C:14:79:35 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C70388E1EE43195B7C787F78A8310F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6f/4ec725-4d8d-4311-934f-3880552a5439/1/qKt9aNaaUqpQx5mZC5IYQZwUeTU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6f/4ec725-4d8d-4311-934f-3880552a5439/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:18:09 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 211676 IP: 185.244.224.0/24 IP: 2a10:9dc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:03:88:e1:ee:43:19:5b:7c:78:7f:78:a8:31:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a8ab7d68d69a52aa50c799990b9218419c147935 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:4e:6a:92:b8:ae:f8:08:8a:31:46:e0:77:42: ee:5b:82:c2:4d:ad:04:a9:6f:8f:d0:0a:35:e7:a4: 3a:79:96:75:22:85:fe:f6:bd:7c:2a:4d:ab:8c:ef: 12:8c:a3:f4:5d:5d:35:46:64:cc:61:8a:b3:2e:a5: 6b:c0:9a:4d:7c:3f:5c:63:91:9e:9a:33:b7:52:02: 88:a8:86:0c:b3:dc:66:de:d2:23:f9:a5:04:d7:a6: 4a:c4:b2:1e:b4:51:46:76:f8:f6:26:bd:70:41:63: 0f:1c:d0:d9:ea:4c:c9:34:07:80:c6:2a:10:e1:d0: 54:16:6e:a0:bd:6f:60:6a:72:b4:e3:0d:fb:2b:25: d1:84:c2:f9:55:2c:3e:c7:9a:50:20:19:4a:95:95: a8:64:3f:c2:4a:bd:d7:b5:04:d2:26:c9:ad:7d:0d: d7:8c:33:27:c5:39:37:b9:53:e3:0c:a8:09:ca:4b: fc:73:5a:76:8d:5f:e6:5b:cd:fb:da:cd:2e:8f:c4: 0c:be:8e:62:e2:15:84:6f:7d:91:1a:88:75:d9:b5: 3a:b1:f8:e2:78:5d:ad:43:25:7d:22:d7:02:cd:f5: 75:51:a8:a0:38:88:a8:5c:f1:b3:fc:f9:a6:62:d3: 4d:01:b9:2a:a7:18:38:0e:19:57:18:16:63:97:96: e7:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:AB:7D:68:D6:9A:52:AA:50:C7:99:99:0B:92:18:41:9C:14:79:35 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4ec725-4d8d-4311-934f-3880552a5439/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4ec725-4d8d-4311-934f-3880552a5439/1/qKt9aNaaUqpQx5mZC5IYQZwUeTU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.244.224.0/24 IPv6: 2a10:9dc0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 211676 Signature Algorithm: sha256WithRSAEncryption 12:58:e3:8c:70:66:f1:61:31:de:58:28:83:83:49:8a:f2:97: b0:71:17:2d:12:0b:3d:c3:26:8a:c8:59:32:47:23:ad:dd:d0: ca:1c:e1:c0:ba:39:bd:92:7b:7d:83:e9:55:2b:06:44:85:a4: fd:f0:18:6f:c6:01:37:c2:1b:a4:1f:b4:d6:9b:c2:ba:f7:fa: de:cc:01:c1:b7:af:35:6c:d8:8f:88:18:68:01:a0:e2:a2:99: 2e:e9:06:21:7e:59:6e:07:af:f5:7a:be:81:00:93:25:31:f2: dc:86:96:04:1a:65:33:87:9f:d1:57:59:46:30:78:4b:36:93: 10:1c:c2:b4:e4:33:5c:23:9c:59:60:f7:ed:39:d9:69:b5:39: 89:33:13:e8:1e:b7:e3:b1:ef:54:3f:db:c3:4f:8a:6d:97:33: c3:c5:e3:b2:6e:bf:c9:c3:ed:fa:e6:7d:55:8c:fe:0d:da:9a: 5a:da:70:f3:52:e3:29:9e:bd:93:e9:6f:02:c4:f0:76:4e:7e: c1:47:85:67:f2:55:89:07:61:05:b4:d0:2f:d5:49:93:ff:14: fc:f2:01:b0:e7:da:6c:e2:d4:db:2f:7f:db:a5:51:67:97:9d: a3:23:a4:cc:8c:42:4e:cf:80:1b:03:05:c5:e3:d2:7d:b8:36: 71:5a:0b:dd -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt3xwOI4e5DGVt8eH94qDEPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOGFiN2Q2OGQ2OWE1MmFhNTBjNzk5OTkwYjkyMTg0MTljMTQ3OTM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs05qkriu+AiKMUbgd0LuW4LCTa0E qW+P0Ao156Q6eZZ1IoX+9r18Kk2rjO8SjKP0XV01RmTMYYqzLqVrwJpNfD9cY5Ge mjO3UgKIqIYMs9xm3tIj+aUE16ZKxLIetFFGdvj2Jr1wQWMPHNDZ6kzJNAeAxioQ 4dBUFm6gvW9ganK04w37KyXRhML5VSw+x5pQIBlKlZWoZD/CSr3XtQTSJsmtfQ3X jDMnxTk3uVPjDKgJykv8c1p2jV/mW8372s0uj8QMvo5i4hWEb32RGoh12bU6sfji eF2tQyV9ItcCzfV1UaigOIioXPGz/PmmYtNNAbkqpxg4DhlXGBZjl5bnswIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFKirfWjWmlKqUMeZmQuSGEGcFHk1MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZmLzRlYzcy NS00ZDhkLTQzMTEtOTM0Zi0zODgwNTUyYTU0MzkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmYvNGVjNzI1 LTRkOGQtNDMxMS05MzRmLTM4ODA1NTJhNTQzOS8xL3FLdDlhTmFhVXFwUXg1bVpD NUlZUVp3VWVUVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAufTgMA0EAgACMAcDBQMqEJ3AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM63DANBgkqhkiG9w0BAQsFAAOCAQEAEljjjHBm8WEx 3lgog4NJivKXsHEXLRILPcMmishZMkcjrd3QyhzhwLo5vZJ7fYPpVSsGRIWk/fAY b8YBN8IbpB+01pvCuvf63swBwbevNWzYj4gYaAGg4qKZLukGIX5Zbgev9Xq+gQCT JTHy3IaWBBplM4ef0VdZRjB4SzaTEBzCtOQzXCOcWWD37TnZabU5iTMT6B6347Hv VD/bw0+KbZczw8Xjsm6/ycPt+uZ9VYz+DdqaWtpw81LjKZ69k+lvAsTwdk5+wUeF Z/JViQdhBbTQL9VJk/8U/PIBsOfabOLU2y9/26VRZ5edoyOkzIxCTs+AGwMFxePS fbg2cVoL3Q== -----END CERTIFICATE-----Generated at Mon Feb 9 15:11:40 2026 by rpki-client