This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.cer File: qNUsyHBgaj8_MsD_-Xz2kx-mXKM.cer (raw, json) Hash identifier: O16YzG+YlRn3mWjQHSs7M4ybmpEXEVYEuzA5Y/YVqKA= Subject key identifier: A8:D5:2C:C8:70:60:6A:3F:3F:32:C0:FF:F9:7C:F6:93:1F:A6:5C:A3 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A36EF69A91672F426F14733B377D2D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/32/fe131d-aa10-4c6b-8128-f55bc8af1506/1/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/32/fe131d-aa10-4c6b-8128-f55bc8af1506/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:55 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 57091 AS: 211246 IP: 89.22.224.0/20 IP: 185.185.120.0/22 IP: 185.232.235.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:6e:f6:9a:91:67:2f:42:6f:14:73:3b:37:7d:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a8d52cc870606a3f3f32c0fff97cf6931fa65ca3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ef:2e:85:b5:c7:4c:05:27:1d:f4:c8:c1:34: 73:c6:df:2e:80:c5:61:36:06:4c:f2:41:81:90:b4: 69:99:0a:a3:da:01:f1:e9:e7:d8:6f:9a:33:e9:f7: 70:93:61:6f:b0:b1:e5:92:a1:b9:0e:a1:e4:d0:5e: f9:e6:c2:be:5c:f4:f5:ec:cc:de:ee:79:62:e0:99: 4a:c0:d8:ab:9a:4d:a8:ae:42:77:db:d0:68:80:fa: 70:e7:f3:b8:9c:e7:92:b1:6d:22:1e:47:8c:17:2a: e8:3d:06:00:b3:16:f4:98:87:79:cd:36:cf:03:80: d8:ec:7d:77:b5:a6:8b:3e:f0:6f:c2:28:6e:14:7f: d4:7a:f7:82:81:d4:03:73:f1:de:84:46:2a:e9:15: 94:70:68:c8:a1:e8:ba:1a:a3:2b:5a:96:c7:d1:d5: f6:23:be:82:0d:58:6f:0d:fe:23:69:50:0f:da:a3: 96:e0:c3:bb:6e:50:d0:6c:b4:cd:81:17:78:24:f7: 51:b5:08:11:60:96:ac:11:2b:6b:2d:42:fc:d6:3a: a0:74:99:16:6f:ab:cf:62:a3:8c:49:6a:23:75:98: 7e:c5:07:7c:11:48:dd:0c:d0:85:28:5e:7f:78:75: 09:2c:56:48:db:90:8f:ea:8b:9d:0d:4b:35:63:b3: dc:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:D5:2C:C8:70:60:6A:3F:3F:32:C0:FF:F9:7C:F6:93:1F:A6:5C:A3 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fe131d-aa10-4c6b-8128-f55bc8af1506/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fe131d-aa10-4c6b-8128-f55bc8af1506/1/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.22.224.0/20 185.185.120.0/22 185.232.235.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 57091 211246 Signature Algorithm: sha256WithRSAEncryption 52:01:41:8a:d7:7f:1a:18:ef:33:ec:33:e9:a2:7a:31:48:29: d9:63:b2:d0:e3:8b:e3:0b:4f:83:6c:5f:da:40:3a:ed:b4:b4: c6:60:4f:d2:5c:80:ca:f4:e2:eb:0d:f6:6f:df:ab:37:ee:7a: 89:41:6a:dc:97:59:ce:ba:cd:6d:4b:a2:e4:84:06:92:13:f8: 4e:7c:3c:98:81:7a:e8:e1:32:24:00:14:2f:81:4f:45:62:fe: 05:1e:98:4e:b2:93:bc:67:22:a5:c6:22:4d:0a:1f:ac:ac:6c: 4a:f1:4d:90:a4:53:99:6b:32:0d:5a:8d:9c:39:aa:d4:a5:13: 65:94:8c:ae:f9:5f:e6:ff:22:95:b5:7c:c3:d2:01:59:18:ba: 1d:14:ee:04:1d:a8:05:8b:0c:58:04:85:00:63:21:7f:08:98: 90:f8:a1:9c:9f:a0:57:a8:24:d7:6b:4d:e2:a0:dd:45:17:92: ed:e0:ca:44:17:0d:8c:9d:4e:66:90:c7:c3:f2:9c:c5:ba:81: 50:66:cf:0f:01:4f:8f:14:c6:0f:ae:55:38:4a:81:5a:e9:13: 7f:7e:cd:25:dc:72:b3:ca:d3:8a:69:7d:fd:82:a6:19:99:20: 42:eb:5e:08:07:33:64:10:8c:20:02:5f:bb:4c:40:7c:b2:73: 94:d7:c8:db -----BEGIN CERTIFICATE----- MIIFpTCCBI2gAwIBAgISAZt4o272mpFnL0JvFHM7N30tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOGQ1MmNjODcwNjA2YTNmM2YzMmMwZmZmOTdjZjY5MzFmYTY1Y2EzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2+8uhbXHTAUnHfTIwTRzxt8ugMVh NgZM8kGBkLRpmQqj2gHx6efYb5oz6fdwk2FvsLHlkqG5DqHk0F755sK+XPT17Mze 7nli4JlKwNirmk2orkJ329BogPpw5/O4nOeSsW0iHkeMFyroPQYAsxb0mId5zTbP A4DY7H13taaLPvBvwihuFH/UeveCgdQDc/HehEYq6RWUcGjIoei6GqMrWpbH0dX2 I76CDVhvDf4jaVAP2qOW4MO7blDQbLTNgRd4JPdRtQgRYJasEStrLUL81jqgdJkW b6vPYqOMSWojdZh+xQd8EUjdDNCFKF5/eHUJLFZI25CP6oudDUs1Y7PcCQIDAQAB o4ICsTCCAq0wHQYDVR0OBBYEFKjVLMhwYGo/PzLA//l89pMfplyjMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMyL2ZlMTMx ZC1hYTEwLTRjNmItODEyOC1mNTViYzhhZjE1MDYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzIvZmUxMzFk LWFhMTAtNGM2Yi04MTI4LWY1NWJjOGFmMTUwNi8xL3FOVXN5SEJnYWo4X01zRF8t WHoya3gtbVhLTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUF BwEHAQH/BBwwGjAYBAIAATASAwQEWRbgAwQCubl4AwQAuejrMB8GCCsGAQUFBwEI AQH/BBAwDqAMMAoCAwDfAwIDAzkuMA0GCSqGSIb3DQEBCwUAA4IBAQBSAUGK138a GO8z7DPponoxSCnZY7LQ44vjC0+DbF/aQDrttLTGYE/SXIDK9OLrDfZv36s37nqJ QWrcl1nOus1tS6LkhAaSE/hOfDyYgXro4TIkABQvgU9FYv4FHphOspO8ZyKlxiJN Ch+srGxK8U2QpFOZazINWo2cOarUpRNllIyu+V/m/yKVtXzD0gFZGLodFO4EHagF iwxYBIUAYyF/CJiQ+KGcn6BXqCTXa03ioN1FF5Lt4MpEFw2MnU5mkMfD8pzFuoFQ Zs8PAU+PFMYPrlU4SoFa6RN/fs0l3HKzytOKaX39gqYZmSBC614IBzNkEIwgAl+7 TEB8snOU18jb -----END CERTIFICATE-----Generated at Mon Feb 9 21:04:23 2026 by rpki-client