This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qT8yMceH9x3SSE7gAtpzpxdb0kk.cer File: qT8yMceH9x3SSE7gAtpzpxdb0kk.cer (raw, json) Hash identifier: 1R3zvoBEqtaj54/MgTyIYJMAdaAnrb5Xuh5DouZF0CQ= Subject key identifier: A9:3F:32:31:C7:87:F7:1D:D2:48:4E:E0:02:DA:73:A7:17:5B:D2:49 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B3541C682A420F30E25D5487AF194CC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:17:26 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 78.31.196.0/22 IP: 2a06:6880::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:41:c6:82:a4:20:f3:0e:25:d5:48:7a:f1:94:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:17:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a93f3231c787f71dd2484ee002da73a7175bd249 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:66:83:09:b3:43:4c:7f:60:0e:d2:07:77:2d: 80:87:ee:44:3e:06:61:70:4c:93:80:f7:20:58:bb: 99:9f:67:05:4a:3f:ed:16:cd:cb:5b:60:40:3d:45: b8:d2:b9:d3:a1:3b:bc:86:f6:f1:3e:c6:ed:0c:c7: 0b:82:f6:bc:48:33:4e:38:45:08:01:c4:83:12:d4: 95:e8:b6:8a:1d:92:fd:20:42:f2:cd:39:00:15:fe: f8:98:e0:4c:57:e9:19:22:43:16:59:a6:7f:1e:22: 24:b5:5c:34:a1:ad:bb:79:34:1d:e1:b2:cc:7a:da: 4e:d0:00:08:8e:f6:5b:a8:05:32:81:d6:7d:93:21: 03:57:b2:e9:58:fb:4b:02:f7:68:c3:b4:1c:27:34: b7:eb:87:b8:74:15:91:cb:cc:cb:5a:f3:bd:0f:e7: 87:69:53:28:89:3b:f6:ad:08:26:3f:a6:4c:80:fb: e7:14:29:3a:46:bf:33:8f:15:08:38:ed:d4:80:5d: 26:f9:62:bc:ad:3c:c8:b9:f2:37:b5:26:2f:e9:6a: 10:37:5d:e7:e3:73:ae:8a:58:7d:7f:89:bf:ac:45: ed:0f:c8:41:0a:13:7e:37:a2:c8:2a:ab:62:90:3a: 6f:22:b9:8f:d5:e5:5a:82:b9:bf:30:e6:21:73:84: 60:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:3F:32:31:C7:87:F7:1D:D2:48:4E:E0:02:DA:73:A7:17:5B:D2:49 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.31.196.0/22 IPv6: 2a06:6880::/29 Signature Algorithm: sha256WithRSAEncryption 0c:35:c3:63:2a:1a:5c:e1:84:b7:ba:82:93:9e:0f:93:96:f5: 9d:11:da:6f:ec:60:95:ae:6d:a9:ba:b1:e9:64:47:5a:24:f5: 2e:80:d3:23:5e:0f:28:30:e5:24:9f:48:4e:13:8b:11:d7:34: 25:6f:dc:05:bf:a9:0d:89:59:44:a8:79:b4:e5:e6:60:a1:0b: 67:d4:c5:21:f9:5d:2a:74:64:fc:bd:9c:80:58:45:3b:c4:8f: 32:a8:0e:7b:eb:b9:ec:26:fb:6a:78:c7:38:27:17:e1:ca:09: b2:d2:82:de:c0:ab:2f:7b:d5:2b:dd:cd:e2:fd:c8:6b:09:d6: c8:74:20:ff:39:41:aa:c8:49:54:67:34:00:bd:d3:cb:7a:54: 6e:34:e0:78:84:22:9f:d1:d2:6e:fa:34:96:57:37:6d:9a:7a: fc:df:f6:db:c7:4a:0e:7b:f9:df:d2:35:53:36:98:9b:76:34: 75:f6:55:4d:61:59:44:3a:cd:eb:eb:29:20:cb:2b:96:fa:d4: f8:8d:21:7c:29:73:62:9e:6a:53:73:95:a6:ac:c1:03:1a:c2: fc:ae:2c:7f:82:32:aa:73:d3:eb:d7:d2:93:44:96:64:84:b0: c8:1e:01:d9:32:55:1b:ab:98:a6:74:89:db:0a:58:d1:d9:aa: 7f:1b:45:fc -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt7NUHGgqQg8w4l1Uh68ZTMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxNzI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOTNmMzIzMWM3ODdmNzFkZDI0ODRlZTAwMmRhNzNhNzE3NWJkMjQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2aDCbNDTH9gDtIHdy2Ah+5EPgZh cEyTgPcgWLuZn2cFSj/tFs3LW2BAPUW40rnToTu8hvbxPsbtDMcLgva8SDNOOEUI AcSDEtSV6LaKHZL9IELyzTkAFf74mOBMV+kZIkMWWaZ/HiIktVw0oa27eTQd4bLM etpO0AAIjvZbqAUygdZ9kyEDV7LpWPtLAvdow7QcJzS364e4dBWRy8zLWvO9D+eH aVMoiTv2rQgmP6ZMgPvnFCk6Rr8zjxUIOO3UgF0m+WK8rTzIufI3tSYv6WoQN13n 43Ouilh9f4m/rEXtD8hBChN+N6LIKqtikDpvIrmP1eVagrm/MOYhc4Rg3QIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFKk/MjHHh/cd0khO4ALac6cXW9JJMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY2LzRkYzc5 NS04OTU2LTQ0MDgtYTVjYy1iNTRiY2FlMTdkNDAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjYvNGRjNzk1 LTg5NTYtNDQwOC1hNWNjLWI1NGJjYWUxN2Q0MC8xL3FUOHlNY2VIOXgzU1NFN2dB dHB6cHhkYjBray5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCTh/EMA0EAgACMAcDBQMqBmiAMA0GCSqGSIb3 DQEBCwUAA4IBAQAMNcNjKhpc4YS3uoKTng+TlvWdEdpv7GCVrm2purHpZEdaJPUu gNMjXg8oMOUkn0hOE4sR1zQlb9wFv6kNiVlEqHm05eZgoQtn1MUh+V0qdGT8vZyA WEU7xI8yqA5767nsJvtqeMc4Jxfhygmy0oLewKsve9Ur3c3i/chrCdbIdCD/OUGq yElUZzQAvdPLelRuNOB4hCKf0dJu+jSWVzdtmnr83/bbx0oOe/nf0jVTNpibdjR1 9lVNYVlEOs3r6ykgyyuW+tT4jSF8KXNinmpTc5WmrMEDGsL8rix/gjKqc9Pr19KT RJZkhLDIHgHZMlUbq5imdInbCljR2ap/G0X8 -----END CERTIFICATE-----Generated at Mon Feb 9 16:51:32 2026 by rpki-client