This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.cer File: qN_wH1bjQZ0Ce-dZHO72KFHOD2s.cer (raw, json) Hash identifier: QwvFgMLQTXJzQByCGQYxVAdVem1fGoxJWTmEZH8sbm4= Subject key identifier: A8:DF:F0:1F:56:E3:41:9D:02:7B:E7:59:1C:EE:F6:28:51:CE:0F:6B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5B33623B0A12D91DA92DBC770AC8F6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:18:07 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 51956 AS: 198549 IP: 92.53.232.0/21 IP: 185.144.132.0/22 IP: 185.201.172.0/22 IP: 2a00:b8c0::/32 IP: 2a0c:5b40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:33:62:3b:0a:12:d9:1d:a9:2d:bc:77:0a:c8:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a8dff01f56e3419d027be7591ceef62851ce0f6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a0:61:55:87:80:63:78:12:be:a3:59:bf:37: 9c:65:b3:f3:c0:22:cf:45:d1:92:9d:3e:95:b8:85: 61:b2:8e:66:2a:a1:52:46:64:38:77:e9:56:29:76: f4:f8:58:7a:1e:3e:91:68:7a:8c:f5:f5:aa:6e:59: b7:fa:03:24:4d:67:bf:de:69:a1:f8:d9:d4:36:10: f9:47:b1:94:84:86:d6:24:15:00:fc:d1:91:5e:27: cd:18:6c:4a:c0:ee:dc:d1:88:a7:d6:ba:3d:4e:77: 17:c5:32:c8:37:4b:9f:99:d5:71:f0:7b:ef:47:5f: d3:61:69:fc:26:72:b4:dd:e4:7e:9d:58:03:01:03: 87:b7:79:eb:2f:31:46:c7:5c:86:cb:88:0b:fe:15: 5d:55:56:08:6e:53:02:3b:80:93:41:a7:b2:f8:24: 0a:f9:7e:6b:1b:08:d8:67:0f:a8:a2:60:57:e6:e0: 62:99:8e:31:65:aa:2b:13:38:32:5e:f8:ef:a1:3e: ce:b3:2a:85:76:fe:66:79:0d:45:b3:00:f9:7e:0c: cb:22:42:7b:d0:87:fa:d7:ca:3c:88:7b:39:8f:a3: 9d:7b:ef:27:4d:95:2b:b8:17:b1:0e:26:b7:fa:ba: 36:60:ca:44:78:63:47:2f:a0:34:ff:76:eb:e5:c8: ba:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:DF:F0:1F:56:E3:41:9D:02:7B:E7:59:1C:EE:F6:28:51:CE:0F:6B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.53.232.0/21 185.144.132.0/22 185.201.172.0/22 IPv6: 2a00:b8c0::/32 2a0c:5b40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 51956 198549 Signature Algorithm: sha256WithRSAEncryption a9:f2:a6:87:1e:57:a4:39:b0:81:b2:b4:92:60:77:49:87:02: 4d:77:34:4f:24:a4:98:d7:9c:01:a6:65:99:ce:0c:f3:62:7b: f7:b6:6d:d6:1c:6e:b0:35:71:9b:2c:36:2b:09:58:ca:3b:22: b2:f7:8b:aa:c0:1b:cd:b6:eb:0d:fa:ec:74:86:af:41:09:c8: 8f:17:0d:4f:1d:07:ac:80:71:53:d3:68:e5:50:00:44:bc:7b: 6b:28:7c:29:bf:47:07:6b:30:f6:77:a8:16:57:d0:3e:4f:cd: 5a:af:12:3c:30:89:54:96:cc:42:23:f6:50:13:ce:28:62:5c: ae:4c:68:31:8c:f7:04:31:c6:d0:77:99:52:b1:4e:d7:05:2a: a0:d8:e4:a1:3c:7a:a5:c8:67:ea:bf:b5:6f:e0:7f:29:c9:d3: b0:5a:27:f8:d3:28:6f:b2:7e:c4:50:b4:72:6b:8d:7a:3b:23: e1:98:d6:52:ba:49:39:5d:a2:2f:de:85:2d:6c:40:d9:10:91: ba:11:8d:e8:f8:27:f7:9e:ed:9f:e4:bb:39:fd:d2:a3:cd:1d: c6:1d:dc:c0:f0:e2:18:ac:da:be:27:95:12:fa:72:84:fd:7f: 62:59:46:46:44:5d:75:35:86:88:d4:8f:59:62:f4:ff:e2:9d: f7:3c:a4:cc -----BEGIN CERTIFICATE----- MIIFuzCCBKOgAwIBAgISAZt9WzNiOwoS2R2pLbx3Csj2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOGRmZjAxZjU2ZTM0MTlkMDI3YmU3NTkxY2VlZjYyODUxY2UwZjZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6BhVYeAY3gSvqNZvzecZbPzwCLP RdGSnT6VuIVhso5mKqFSRmQ4d+lWKXb0+Fh6Hj6RaHqM9fWqblm3+gMkTWe/3mmh +NnUNhD5R7GUhIbWJBUA/NGRXifNGGxKwO7c0Yin1ro9TncXxTLIN0ufmdVx8Hvv R1/TYWn8JnK03eR+nVgDAQOHt3nrLzFGx1yGy4gL/hVdVVYIblMCO4CTQaey+CQK +X5rGwjYZw+oomBX5uBimY4xZaorEzgyXvjvoT7OsyqFdv5meQ1FswD5fgzLIkJ7 0If618o8iHs5j6Ode+8nTZUruBexDia3+ro2YMpEeGNHL6A0/3br5ci6JQIDAQAB o4ICxzCCAsMwHQYDVR0OBBYEFKjf8B9W40GdAnvnWRzu9ihRzg9rMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE5LzQ3MzM2 Ni03MDJkLTQ3M2YtYmZiZS04ODJjNDQ4ZTJlZjYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTkvNDczMzY2 LTcwMmQtNDczZi1iZmJlLTg4MmM0NDhlMmVmNi8xL3FOX3dIMWJqUVowQ2UtZFpI TzcyS0ZIT0Qycy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEEGCCsGAQUF BwEHAQH/BDIwMDAYBAIAATASAwQDXDXoAwQCuZCEAwQCucmsMBQEAgACMA4DBQAq ALjAAwUDKgxbQDAfBggrBgEFBQcBCAEB/wQQMA6gDDAKAgMAyvQCAwMHlTANBgkq hkiG9w0BAQsFAAOCAQEAqfKmhx5XpDmwgbK0kmB3SYcCTXc0TySkmNecAaZlmc4M 82J797Zt1hxusDVxmyw2KwlYyjsisveLqsAbzbbrDfrsdIavQQnIjxcNTx0HrIBx U9No5VAARLx7ayh8Kb9HB2sw9neoFlfQPk/NWq8SPDCJVJbMQiP2UBPOKGJcrkxo MYz3BDHG0HeZUrFO1wUqoNjkoTx6pchn6r+1b+B/KcnTsFon+NMob7J+xFC0cmuN ejsj4ZjWUrpJOV2iL96FLWxA2RCRuhGN6Pgn957tn+S7Of3So80dxh3cwPDiGKza vieVEvpyhP1/YllGRkRddTWGiNSPWWL0/+Kd9zykzA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:43:12 2026 by rpki-client