This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qOUUizmbU7pS_Wjqvb32rZnMcfQ.cer File: qOUUizmbU7pS_Wjqvb32rZnMcfQ.cer (raw, json) Hash identifier: g7g8VkdD4+Clu0xbbWQkyloxeJqEEyGIx/Oa0FPrP2E= Subject key identifier: A8:E5:14:8B:39:9B:53:BA:52:FD:68:EA:BD:BD:F6:AD:99:CC:71:F4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E383D7037F99AE06C5F328357232FDA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4b/a32b1c-f841-4f5a-9ce4-e734993f11ac/1/qOUUizmbU7pS_Wjqvb32rZnMcfQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4b/a32b1c-f841-4f5a-9ce4-e734993f11ac/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.37.102.0/24 IP: 2a14:5a80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:3d:70:37:f9:9a:e0:6c:5f:32:83:57:23:2f:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a8e5148b399b53ba52fd68eabdbdf6ad99cc71f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c8:00:a6:38:0a:4f:aa:9a:5f:63:31:0f:1f: 8e:43:04:73:75:0a:0a:af:8b:a2:99:5e:02:ff:2f: 9a:ae:4d:f4:79:d5:9c:c2:c1:31:5f:a2:d4:b8:5b: 0a:09:3d:c9:ae:24:4a:86:83:53:f4:76:dd:a8:ff: d5:bb:02:38:2b:05:8a:59:1e:57:1f:1d:8b:e2:be: 6b:98:ab:52:25:58:6b:4c:fb:42:df:58:9f:5f:4a: 63:b6:7e:53:04:ff:81:2e:41:62:c1:42:c2:fd:ce: dc:bc:d6:de:bf:dc:5a:09:87:bb:4c:da:29:23:c0: d3:93:4d:61:07:52:75:63:71:1c:57:45:f7:1c:6a: 21:de:4e:6a:ba:a8:ea:11:dd:4b:ec:54:c3:35:9a: 40:d1:b1:79:a4:78:89:5f:cb:5c:37:cf:ef:84:57: 3b:df:19:f3:cf:8b:49:a2:ea:cd:a8:7c:05:c5:1c: c2:97:42:6c:2c:8e:39:9d:ca:09:31:43:77:a0:0d: ef:67:20:4c:4d:ee:0d:ce:3f:19:8f:a9:6c:da:c1: 34:e5:6e:48:9d:67:69:74:0a:4b:ac:aa:c7:db:49: 1f:d3:e5:5c:29:df:38:50:b7:fb:30:90:55:fa:43: 58:74:e7:14:c0:7b:23:44:ef:1e:fd:ff:df:31:34: 3e:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:E5:14:8B:39:9B:53:BA:52:FD:68:EA:BD:BD:F6:AD:99:CC:71:F4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a32b1c-f841-4f5a-9ce4-e734993f11ac/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a32b1c-f841-4f5a-9ce4-e734993f11ac/1/qOUUizmbU7pS_Wjqvb32rZnMcfQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.37.102.0/24 IPv6: 2a14:5a80::/29 Signature Algorithm: sha256WithRSAEncryption 9d:e0:c8:9e:c3:f5:0c:08:cc:a8:6c:d4:41:d0:73:49:89:39: b8:83:0f:6a:2c:cd:ca:b0:4b:59:58:4c:be:46:01:6b:84:ff: b2:bf:fe:66:3c:82:8e:4c:5e:bb:6b:42:d8:5c:da:c8:69:c6: 4c:be:e3:f5:35:d4:42:85:eb:a3:0d:50:47:9a:40:1c:e2:1b: 68:68:09:f3:e1:05:98:4e:2a:f8:f6:b8:64:40:de:f8:e1:ed: b9:aa:9d:a4:23:7a:10:c8:0c:b5:a7:f9:d2:41:df:0b:ed:f1: b3:90:8b:86:3b:89:61:0b:da:cb:a7:5f:7e:50:19:d5:9c:56: 78:98:e9:f0:a4:03:03:3b:d1:94:78:89:56:f8:1c:4e:5d:7f: 21:9e:85:cb:50:da:42:7e:d8:8c:a9:7f:80:fa:fe:d9:81:e0: fb:59:fe:07:5f:f6:13:95:3f:77:7b:c2:7b:d4:e3:9d:c5:cd: 46:fa:e9:70:82:d3:59:2f:29:02:e1:c3:e0:82:84:fc:7d:e9: 94:5b:4e:79:ed:da:87:8d:ac:31:54:78:ae:2c:81:51:a3:d2: 20:b5:cc:b7:07:09:7c:f4:92:43:a3:66:18:05:d1:16:54:6b: 05:25:9b:e8:1b:12:50:b1:25:87:ed:75:b5:06:6a:c5:0f:23: 4a:a5:bf:8f -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt+OD1wN/ma4GxfMoNXIy/aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOGU1MTQ4YjM5OWI1M2JhNTJmZDY4ZWFiZGJkZjZhZDk5Y2M3MWY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMgApjgKT6qaX2MxDx+OQwRzdQoK r4uimV4C/y+ark30edWcwsExX6LUuFsKCT3JriRKhoNT9HbdqP/VuwI4KwWKWR5X Hx2L4r5rmKtSJVhrTPtC31ifX0pjtn5TBP+BLkFiwULC/c7cvNbev9xaCYe7TNop I8DTk01hB1J1Y3EcV0X3HGoh3k5quqjqEd1L7FTDNZpA0bF5pHiJX8tcN8/vhFc7 3xnzz4tJourNqHwFxRzCl0JsLI45ncoJMUN3oA3vZyBMTe4Nzj8Zj6ls2sE05W5I nWdpdApLrKrH20kf0+VcKd84ULf7MJBV+kNYdOcUwHsjRO8e/f/fMTQ+5wIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFKjlFIs5m1O6Uv1o6r299q2ZzHH0MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRiL2EzMmIx Yy1mODQxLTRmNWEtOWNlNC1lNzM0OTkzZjExYWMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGIvYTMyYjFj LWY4NDEtNGY1YS05Y2U0LWU3MzQ5OTNmMTFhYy8xL3FPVVVpem1iVTdwU19XanF2 YjMyclpuTWNmUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAuSVmMA0EAgACMAcDBQMqFFqAMA0GCSqGSIb3 DQEBCwUAA4IBAQCd4Miew/UMCMyobNRB0HNJiTm4gw9qLM3KsEtZWEy+RgFrhP+y v/5mPIKOTF67a0LYXNrIacZMvuP1NdRCheujDVBHmkAc4htoaAnz4QWYTir49rhk QN744e25qp2kI3oQyAy1p/nSQd8L7fGzkIuGO4lhC9rLp19+UBnVnFZ4mOnwpAMD O9GUeIlW+BxOXX8hnoXLUNpCftiMqX+A+v7ZgeD7Wf4HX/YTlT93e8J71OOdxc1G +ulwgtNZLykC4cPggoT8femUW0557dqHjawxVHiuLIFRo9Igtcy3Bwl89JJDo2YY BdEWVGsFJZvoGxJQsSWH7XW1BmrFDyNKpb+P -----END CERTIFICATE-----Generated at Mon Feb 9 22:40:13 2026 by rpki-client