This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qLMQBN8TWqGouUMDPbFGkbEaY90.cer File: qLMQBN8TWqGouUMDPbFGkbEaY90.cer (raw, json) Hash identifier: /nFWPTV2O1uOglcAfJXaaiulHzG+t0ssMPTQqLGkMao= Subject key identifier: A8:B3:10:04:DF:13:5A:A1:A8:B9:43:03:3D:B1:46:91:B1:1A:63:DD Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B36B6BC900DDD3A5DFEC16F8331A8C4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/qLMQBN8TWqGouUMDPbFGkbEaY90.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:19:01 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 3242 AS: 31617 IP: 45.66.100.0/22 IP: 45.92.148.0/22 IP: 62.192.148.0/22 IP: 91.241.86.0/23 IP: 151.1.0.0 -- 151.2.15.255 IP: 151.2.20.0 -- 151.2.63.255 IP: 151.2.96.0/20 IP: 185.186.92.0/22 IP: 185.252.52.0/22 IP: 192.166.252.0/24 IP: 192.172.232.0/24 IP: 192.188.248.0/24 IP: 192.207.14.0/24 IP: 193.23.114.0/24 IP: 194.143.142.0/23 IP: 195.88.230.0/23 IP: 195.88.234.0/23 IP: 217.26.180.0/22 IP: 2a01:65c0::/32 IP: 2a09:6740::/29 IP: 2a0b:7380::/29 IP: 2a0c:2140::/29 IP: 2a0d:9b40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:b6:bc:90:0d:dd:3a:5d:fe:c1:6f:83:31:a8:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a8b31004df135aa1a8b943033db14691b11a63dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c0:85:2a:10:3f:ba:8a:10:62:12:e3:c0:db: df:9e:28:6a:04:e7:1c:2d:8a:c7:34:16:66:90:94: 88:bf:8a:36:52:a9:38:b1:54:ac:0a:83:de:b4:31: 31:6b:c9:62:79:db:9c:21:f7:7d:63:1a:15:be:da: 72:5e:96:d5:b3:c2:c9:84:20:83:6c:56:4d:f3:0d: 41:68:e7:0b:84:4b:6b:b3:2f:25:70:e1:f1:6a:dc: 4e:37:c5:92:ee:96:71:17:3b:92:0f:96:b4:ba:99: e2:e5:1d:8d:cc:18:87:be:82:6f:e4:30:1b:35:b8: 76:a1:a8:db:df:dd:b8:fd:20:40:0c:54:a5:46:68: af:b2:19:57:78:d5:a0:af:ea:4f:8a:93:a2:29:40: c0:a1:69:8f:4c:80:a3:cb:f5:1b:e5:ff:fc:e8:03: 7b:3b:42:68:73:40:41:1e:fd:63:bb:34:84:4a:6c: 39:a5:8d:f2:86:b2:40:0e:eb:c3:fb:b2:03:e3:06: 26:76:37:58:8a:d9:60:5a:8f:6b:f8:61:e4:83:8f: 83:64:f4:62:c0:e8:b8:b3:a6:dc:99:db:1b:2d:75: 6e:47:de:66:2f:04:47:7c:9c:c7:da:9a:ca:8b:eb: e5:6f:36:a8:f7:0c:6c:9b:18:de:4b:f9:d9:74:c3: 30:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:B3:10:04:DF:13:5A:A1:A8:B9:43:03:3D:B1:46:91:B1:1A:63:DD X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/qLMQBN8TWqGouUMDPbFGkbEaY90.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.66.100.0/22 45.92.148.0/22 62.192.148.0/22 91.241.86.0/23 151.1.0.0-151.2.15.255 151.2.20.0-151.2.63.255 151.2.96.0/20 185.186.92.0/22 185.252.52.0/22 192.166.252.0/24 192.172.232.0/24 192.188.248.0/24 192.207.14.0/24 193.23.114.0/24 194.143.142.0/23 195.88.230.0/23 195.88.234.0/23 217.26.180.0/22 IPv6: 2a01:65c0::/32 2a09:6740::/29 2a0b:7380::/29 2a0c:2140::/29 2a0d:9b40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 3242 31617 Signature Algorithm: sha256WithRSAEncryption 32:a1:40:96:3f:7b:e2:3d:6e:e2:10:3e:af:fe:32:64:b3:47: 00:7a:3a:94:2e:cc:5f:8c:78:33:a5:3c:6a:ee:0c:d2:32:04: 75:13:02:ad:5a:71:21:e3:ef:ae:f3:d5:f3:3f:b6:c1:7e:02: a3:be:e4:70:22:58:d3:3a:50:95:02:0e:5d:a2:d0:6f:2f:8f: 37:12:88:61:71:fd:40:b1:4d:42:9e:a0:81:b7:f1:96:76:a4: 81:3e:96:68:7a:1b:1e:85:1e:2f:59:d6:28:30:94:f4:33:2b: 17:cb:71:fd:14:72:4a:5a:e1:c3:29:a0:15:0a:0b:db:f6:85: d6:3d:b2:41:3f:a3:e7:5f:1e:0a:a0:8e:33:a0:ad:ea:5b:99: f9:3f:e5:48:14:18:25:97:a9:4c:f1:3b:c3:fc:d8:d3:59:02: 76:dd:67:ab:82:e1:79:59:59:a6:fb:c7:0e:58:93:66:2e:a6: 72:3d:58:c2:64:57:85:a0:d9:ed:47:72:3b:cc:dc:cc:aa:ba: 31:f5:89:e9:bb:0c:5f:09:28:a8:5d:30:6f:ff:cd:30:ae:0a: 94:a5:19:52:58:55:24:8b:41:a1:48:ca:87:51:f0:74:e2:25: 04:a9:8c:9a:ec:70:3a:f1:c1:87:4d:74:4c:90:59:90:11:8d: 08:15:41:de -----BEGIN CERTIFICATE----- MIIGOzCCBSOgAwIBAgISAZt7Nra8kA3dOl3+wW+DMajEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOGIzMTAwNGRmMTM1YWExYThiOTQzMDMzZGIxNDY5MWIxMWE2M2RkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMCFKhA/uooQYhLjwNvfnihqBOcc LYrHNBZmkJSIv4o2Uqk4sVSsCoPetDExa8lieducIfd9YxoVvtpyXpbVs8LJhCCD bFZN8w1BaOcLhEtrsy8lcOHxatxON8WS7pZxFzuSD5a0upni5R2NzBiHvoJv5DAb Nbh2oajb3924/SBADFSlRmivshlXeNWgr+pPipOiKUDAoWmPTICjy/Ub5f/86AN7 O0Joc0BBHv1juzSESmw5pY3yhrJADuvD+7ID4wYmdjdYitlgWo9r+GHkg4+DZPRi wOi4s6bcmdsbLXVuR95mLwRHfJzH2prKi+vlbzao9wxsmxjeS/nZdMMwywIDAQAB o4IDRzCCA0MwHQYDVR0OBBYEFKizEATfE1qhqLlDAz2xRpGxGmPdMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFlLzVlMjNh ZS02MzM4LTQ4ZGQtYTMwNC1jMmE0M2IwODBkNmYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWUvNWUyM2Fl LTYzMzgtNDhkZC1hMzA0LWMyYTQzYjA4MGQ2Zi8xL3FMTVFCTjhUV3FHb3VVTURQ YkZHa2JFYVk5MC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIHCBggrBgEF BQcBBwEB/wSBsjCBrzCBgQQCAAEwewMEAi1CZAMEAi1clAMEAj7AlAMEAVvxVjAL AwMAlwEDBASXAgAwDAMEApcCFAMEBpcCAAMEBJcCYAMEArm6XAMEArn8NAMEAMCm /AMEAMCs6AMEAMC8+AMEAMDPDgMEAMEXcgMEAcKPjgMEAcNY5gMEAcNY6gMEAtka tDApBAIAAjAjAwUAKgFlwAMFAyoJZ0ADBQMqC3OAAwUDKgwhQAMFAyoNm0AwHQYI KwYBBQUHAQgBAf8EDjAMoAowCAICDKoCAnuBMA0GCSqGSIb3DQEBCwUAA4IBAQAy oUCWP3viPW7iED6v/jJks0cAejqULsxfjHgzpTxq7gzSMgR1EwKtWnEh4++u89Xz P7bBfgKjvuRwIljTOlCVAg5dotBvL483Eohhcf1AsU1CnqCBt/GWdqSBPpZoehse hR4vWdYoMJT0MysXy3H9FHJKWuHDKaAVCgvb9oXWPbJBP6PnXx4KoI4zoK3qW5n5 P+VIFBgll6lM8TvD/NjTWQJ23WerguF5WVmm+8cOWJNmLqZyPVjCZFeFoNntR3I7 zNzMqrox9YnpuwxfCSioXTBv/80wrgqUpRlSWFUki0GhSMqHUfB04iUEqYya7HA6 8cGHTXRMkFmQEY0IFUHe -----END CERTIFICATE-----Generated at Mon Feb 9 18:25:58 2026 by rpki-client