This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qQ_wEQVOz-aKitx94mit5sCCdxE.cer File: qQ_wEQVOz-aKitx94mit5sCCdxE.cer (raw, json) Hash identifier: KR17XVhGwuFAciu2qxfifAHfNt4gZ6RLZjAkzz9kq8g= Subject key identifier: A9:0F:F0:11:05:4E:CF:E6:8A:8A:DC:7D:E2:68:AD:E6:C0:82:77:11 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BFF13A3FD9E7C303736CA72F44A272A8A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d7/ba73a2-f0e6-476f-8133-e99277037a43/1/qQ_wEQVOz-aKitx94mit5sCCdxE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d7/ba73a2-f0e6-476f-8133-e99277037a43/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Tue 27 Jan 2026 10:50:35 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 12580 AS: 15478 IP: 83.175.160.0/23 IP: 83.175.163.0/24 IP: 83.175.174.0/23 IP: 109.232.243.0/24 IP: 109.232.246.0/24 IP: 2a02:5c00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ff:13:a3:fd:9e:7c:30:37:36:ca:72:f4:4a:27:2a:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 27 10:50:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a90ff011054ecfe68a8adc7de268ade6c0827711 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c7:d2:90:d5:84:7e:67:80:31:87:bf:ad:07: 74:5b:57:a4:b6:4c:5e:48:0e:67:dc:a8:64:9a:27: 9b:44:8a:f1:4c:3c:f6:0d:fe:e0:da:f7:dc:d9:2e: 16:59:a7:c9:f5:22:d0:07:a6:39:31:80:86:b4:91: 71:cf:a1:42:ec:e2:a3:3b:95:1f:60:16:17:c0:8b: 34:73:5f:33:51:b4:dc:69:b4:97:a1:86:d3:16:25: 01:a7:c7:20:03:ab:8a:f4:be:a0:37:2c:be:6d:47: f5:d2:82:c4:d8:62:9e:36:4e:85:c9:a2:00:87:0e: 86:72:87:38:d0:de:14:ee:69:8a:ff:57:4d:74:f6: df:74:b7:28:02:24:ab:d3:f2:27:ca:9d:4c:8f:9e: 56:6a:51:a2:ba:e8:22:e0:05:9d:a1:33:1c:11:38: 68:a6:e7:5d:cf:af:0d:5c:23:16:a7:cf:11:66:e7: 7f:d6:15:83:3d:cf:64:10:f0:13:65:85:d9:88:d0: b2:b6:71:3c:81:9d:61:9b:08:25:3f:a1:4c:e4:18: 8d:2b:73:f9:ad:74:46:2c:f7:a4:5f:d9:35:9c:25: d1:4e:11:71:17:0d:db:1f:e9:66:fd:57:c3:5b:2e: d9:e9:aa:f9:db:dc:dc:87:01:08:01:78:2c:56:d4: 2a:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:0F:F0:11:05:4E:CF:E6:8A:8A:DC:7D:E2:68:AD:E6:C0:82:77:11 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/ba73a2-f0e6-476f-8133-e99277037a43/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/ba73a2-f0e6-476f-8133-e99277037a43/1/qQ_wEQVOz-aKitx94mit5sCCdxE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.175.160.0/23 83.175.163.0/24 83.175.174.0/23 109.232.243.0/24 109.232.246.0/24 IPv6: 2a02:5c00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 12580 15478 Signature Algorithm: sha256WithRSAEncryption 5d:64:a3:7f:ab:e0:08:33:70:49:a8:e9:0c:86:20:9a:57:9f: c5:75:e0:35:46:d3:9d:59:74:52:6c:0c:71:e2:e9:df:2c:d8: a7:e9:58:9e:6a:b0:f2:09:d4:9d:db:bd:26:e7:41:6a:66:56: a3:d7:db:2f:e6:8d:ec:a0:69:30:6e:51:9a:1f:f9:73:b7:56: 5d:37:3c:3c:bf:b6:e0:2f:c3:ef:9f:a3:09:3e:62:5c:35:d4: 6c:63:e6:20:30:f4:d9:62:2e:20:f3:bc:75:7a:09:ac:25:ea: 5b:be:63:33:4d:9f:2c:29:1c:a3:e5:ee:d6:30:c4:cd:c8:53: 90:70:b0:05:50:45:b7:ed:25:b6:aa:58:06:4a:3e:1a:dd:5a: 7b:7a:83:21:b6:bf:ef:ae:df:49:e7:3a:6d:de:28:0a:61:ac: 08:36:b0:00:e3:6e:c4:a1:4d:94:78:35:f4:a5:53:b4:20:ce: 46:0e:19:ae:48:bc:17:ea:eb:10:ae:95:2c:62:7a:7b:d7:2b: 8c:7d:8b:dd:c6:0d:c4:70:37:6f:f1:a1:2c:73:4b:d0:d0:50: 3a:be:1c:14:d0:72:b2:7d:46:66:9a:2f:81:27:88:2f:58:cc: d5:ee:10:1a:de:3d:75:05:85:02:02:c0:04:ed:19:9c:f5:f8: ce:07:bb:68 -----BEGIN CERTIFICATE----- MIIFvjCCBKagAwIBAgISAZv/E6P9nnwwNzbKcvRKJyqKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTI3MTA1MDM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOTBmZjAxMTA1NGVjZmU2OGE4YWRjN2RlMjY4YWRlNmMwODI3NzExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMfSkNWEfmeAMYe/rQd0W1ektkxe SA5n3KhkmiebRIrxTDz2Df7g2vfc2S4WWafJ9SLQB6Y5MYCGtJFxz6FC7OKjO5Uf YBYXwIs0c18zUbTcabSXoYbTFiUBp8cgA6uK9L6gNyy+bUf10oLE2GKeNk6FyaIA hw6Gcoc40N4U7mmK/1dNdPbfdLcoAiSr0/Inyp1Mj55WalGiuugi4AWdoTMcETho puddz68NXCMWp88RZud/1hWDPc9kEPATZYXZiNCytnE8gZ1hmwglP6FM5BiNK3P5 rXRGLPekX9k1nCXRThFxFw3bH+lm/VfDWy7Z6ar529zchwEIAXgsVtQqdQIDAQAB o4ICyjCCAsYwHQYDVR0OBBYEFKkP8BEFTs/miorcfeJorebAgncRMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q3L2JhNzNh Mi1mMGU2LTQ3NmYtODEzMy1lOTkyNzcwMzdhNDMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDcvYmE3M2Ey LWYwZTYtNDc2Zi04MTMzLWU5OTI3NzAzN2E0My8xL3FRX3dFUVZPei1hS2l0eDk0 bWl0NXNDQ2R4RS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUF BwEHAQH/BDcwNTAkBAIAATAeAwQBU6+gAwQAU6+jAwQBU6+uAwQAbejzAwQAbej2 MA0EAgACMAcDBQMqAlwAMB0GCCsGAQUFBwEIAQH/BA4wDKAKMAgCAjEkAgI8djAN BgkqhkiG9w0BAQsFAAOCAQEAXWSjf6vgCDNwSajpDIYgmlefxXXgNUbTnVl0UmwM ceLp3yzYp+lYnmqw8gnUndu9JudBamZWo9fbL+aN7KBpMG5Rmh/5c7dWXTc8PL+2 4C/D75+jCT5iXDXUbGPmIDD02WIuIPO8dXoJrCXqW75jM02fLCkco+Xu1jDEzchT kHCwBVBFt+0ltqpYBko+Gt1ae3qDIba/767fSec6bd4oCmGsCDawAONuxKFNlHg1 9KVTtCDORg4Zrki8F+rrEK6VLGJ6e9crjH2L3cYNxHA3b/GhLHNL0NBQOr4cFNBy sn1GZpovgSeIL1jM1e4QGt49dQWFAgLABO0ZnPX4zge7aA== -----END CERTIFICATE-----Generated at Mon Feb 9 15:07:03 2026 by rpki-client