This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qLPrRDwGo9zAiOLKoFzgnPjU56Y.cer File: qLPrRDwGo9zAiOLKoFzgnPjU56Y.cer (raw, json) Hash identifier: pLdlh1zndPDHpPDJyOlEiWqO4j9Jer1uk0xOhqntquc= Subject key identifier: A8:B3:EB:44:3C:06:A3:DC:C0:88:E2:CA:A0:5C:E0:9C:F8:D4:E7:A6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B4D156288A83330513C4ED174BA62 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8e/6bda82-a2e1-45c9-a181-313de4892b8d/1/qLPrRDwGo9zAiOLKoFzgnPjU56Y.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8e/6bda82-a2e1-45c9-a181-313de4892b8d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:22 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 211494 IP: 185.93.7.0/24 IP: 185.235.143.0/24 IP: 194.56.212.0/24 IP: 2a0d:a180::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:4d:15:62:88:a8:33:30:51:3c:4e:d1:74:ba:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a8b3eb443c06a3dcc088e2caa05ce09cf8d4e7a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:90:5a:61:9b:cb:b0:8a:b9:2a:4e:f7:26:2c: 4d:54:a7:b4:8b:7f:d2:b5:d1:21:3d:f3:75:65:af: 3e:9c:c5:c8:4c:d1:db:e1:b2:c5:39:f7:f1:fd:71: 3d:92:9c:63:80:bd:ea:de:13:66:bf:44:5b:e1:d8: 3f:d9:d0:23:7a:1a:c3:8f:f2:6d:5b:dc:b7:54:a0: c4:94:26:52:b1:19:13:60:73:0b:fc:e7:59:67:09: 5d:38:35:a3:5f:bf:60:bc:3b:d4:49:45:14:3d:c9: 6b:4c:1d:73:1d:7a:c0:f1:06:f1:35:c6:a6:4c:6d: f5:14:20:99:21:a8:27:e9:d9:6d:f5:81:2a:28:25: c4:c0:65:81:f4:6c:0e:a6:52:14:3b:b9:5d:50:90: 5e:81:d3:62:17:a0:41:10:27:48:72:51:43:76:bd: 26:b9:6a:a4:c7:eb:1e:51:98:1f:5f:fb:97:3e:33: 2e:c1:31:04:05:bf:de:16:2f:0c:87:87:96:20:4f: 4c:1b:1e:54:41:d3:25:2c:f3:1d:5f:d9:55:9e:ba: 45:d8:3c:64:cb:f4:bd:59:00:e5:5a:d7:4b:e6:10: de:5e:3f:be:91:8f:7f:7e:3f:92:d8:9d:c3:ff:ac: e6:73:ff:1f:f5:5b:62:2a:5d:87:fd:71:6a:06:97: bc:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:B3:EB:44:3C:06:A3:DC:C0:88:E2:CA:A0:5C:E0:9C:F8:D4:E7:A6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6bda82-a2e1-45c9-a181-313de4892b8d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6bda82-a2e1-45c9-a181-313de4892b8d/1/qLPrRDwGo9zAiOLKoFzgnPjU56Y.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.93.7.0/24 185.235.143.0/24 194.56.212.0/24 IPv6: 2a0d:a180::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 211494 Signature Algorithm: sha256WithRSAEncryption 25:d8:d7:19:db:7f:dd:a5:b0:9d:d8:db:c5:16:22:bb:0b:0b: 0f:6e:c5:12:ea:37:2b:e3:2c:ba:84:07:0f:a6:da:3a:2c:77: 7b:cf:11:26:95:0d:2a:be:65:14:48:8e:96:1c:30:aa:6a:ed: ee:4c:f8:33:da:a8:12:ba:21:dc:7e:bf:ee:ab:1f:4a:cb:ee: bb:51:a2:85:d9:5b:08:fd:1c:eb:b5:fe:7f:f5:15:40:76:53: c8:27:4b:cb:55:5f:f3:25:51:db:7b:6e:8c:30:a7:a6:50:36: f6:e2:02:2a:4a:c3:3d:80:0d:28:21:fe:5d:2a:c9:8a:00:78: c2:a9:90:ed:69:21:82:ef:db:3b:2e:fd:25:b6:d7:a0:aa:cc: 36:8a:cc:49:80:0e:65:65:a4:c3:59:f7:b2:d3:29:fb:7e:42: ba:1c:58:5f:52:4b:0b:bd:b9:26:7a:19:4e:2a:ad:8f:25:fc: 85:35:25:d0:87:ce:af:77:3b:fa:13:65:20:15:73:1a:05:83: f2:3b:60:3d:b1:f4:0b:cd:a3:15:04:d9:69:96:94:d1:8f:44: 34:8c:3e:32:8b:02:77:a3:19:ad:fc:33:24:f4:79:92:96:f8: 4f:95:d7:9c:f4:96:c3:56:f3:c8:10:87:f4:e3:83:2b:a9:ad: 84:c1:47:0a -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISAZt6W00VYoioMzBRPE7RdLpiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOGIzZWI0NDNjMDZhM2RjYzA4OGUyY2FhMDVjZTA5Y2Y4ZDRlN2E2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJBaYZvLsIq5Kk73JixNVKe0i3/S tdEhPfN1Za8+nMXITNHb4bLFOffx/XE9kpxjgL3q3hNmv0Rb4dg/2dAjehrDj/Jt W9y3VKDElCZSsRkTYHML/OdZZwldODWjX79gvDvUSUUUPclrTB1zHXrA8QbxNcam TG31FCCZIagn6dlt9YEqKCXEwGWB9GwOplIUO7ldUJBegdNiF6BBECdIclFDdr0m uWqkx+seUZgfX/uXPjMuwTEEBb/eFi8Mh4eWIE9MGx5UQdMlLPMdX9lVnrpF2Dxk y/S9WQDlWtdL5hDeXj++kY9/fj+S2J3D/6zmc/8f9VtiKl2H/XFqBpe8GwIDAQAB o4ICuzCCArcwHQYDVR0OBBYEFKiz60Q8BqPcwIjiyqBc4Jz41OemMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhlLzZiZGE4 Mi1hMmUxLTQ1YzktYTE4MS0zMTNkZTQ4OTJiOGQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGUvNmJkYTgy LWEyZTEtNDVjOS1hMTgxLTMxM2RlNDg5MmI4ZC8xL3FMUHJSRHdHbzl6QWlPTEtv RnpnblBqVTU2WS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQAuV0HAwQAueuPAwQAwjjUMA0EAgACMAcDBQAq DaGAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwM6JjANBgkqhkiG9w0BAQsFAAOC AQEAJdjXGdt/3aWwndjbxRYiuwsLD27FEuo3K+MsuoQHD6baOix3e88RJpUNKr5l FEiOlhwwqmrt7kz4M9qoEroh3H6/7qsfSsvuu1GihdlbCP0c67X+f/UVQHZTyCdL y1Vf8yVR23tujDCnplA29uICKkrDPYANKCH+XSrJigB4wqmQ7Wkhgu/bOy79JbbX oKrMNorMSYAOZWWkw1n3stMp+35CuhxYX1JLC725JnoZTiqtjyX8hTUl0IfOr3c7 +hNlIBVzGgWD8jtgPbH0C82jFQTZaZaU0Y9ENIw+MosCd6MZrfwzJPR5kpb4T5XX nPSWw1bzyBCH9OODK6mthMFHCg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:50:51 2026 by rpki-client