This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qUjQEe24zTPmZ2eIDKSrMGHZxSM.cer File: qUjQEe24zTPmZ2eIDKSrMGHZxSM.cer (raw, json) Hash identifier: IZLYB3pdwXxEK/jZT6AWwFkFgS0ShCxET+k2WyxXI44= Subject key identifier: A9:48:D0:11:ED:B8:CD:33:E6:67:67:88:0C:A4:AB:30:61:D9:C5:23 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E37DFD612BF73FE82D370DEE82F1595 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/08/9eb3eb-5109-4798-8828-3d549fbb837f/1/qUjQEe24zTPmZ2eIDKSrMGHZxSM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/08/9eb3eb-5109-4798-8828-3d549fbb837f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:09 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.3.132.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:df:d6:12:bf:73:fe:82:d3:70:de:e8:2f:15:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a948d011edb8cd33e66767880ca4ab3061d9c523 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:de:c6:48:e9:22:c9:fc:d1:72:d9:5a:81:22: 99:bd:5a:dd:f5:cc:84:8b:dc:81:05:e1:06:0b:4f: 42:ae:80:47:e8:0b:0a:b3:5f:1a:cf:d7:9e:b1:3c: 14:a5:4c:14:66:31:e1:74:ca:e5:78:8f:21:5d:3b: ac:b9:99:66:ea:c8:3e:31:86:cf:8a:19:2f:8a:ae: 9d:03:17:bd:48:0e:fa:04:3b:7b:ac:c3:7e:7a:2b: 5a:f3:b9:24:64:f7:9d:6d:2e:16:43:67:a0:18:b3: cf:ad:8b:51:b9:ff:3f:72:1b:d3:e6:dd:78:af:4a: 9a:4d:d5:4f:0a:e5:14:c0:be:3f:7b:83:f5:70:a0: 7a:86:93:ac:15:60:d7:0f:91:b3:85:b3:bf:b2:f8: 34:b7:9d:e4:00:f3:c5:32:15:95:b3:63:02:4b:91: 26:70:a5:cc:49:2d:0d:ac:06:8f:8e:43:46:dc:4a: 93:b2:d7:4b:e6:40:dc:20:65:e6:4a:6f:39:1f:7c: 76:a5:b1:d7:34:94:26:c5:ee:b0:e0:4c:b2:0f:30: 9b:df:8a:a8:90:30:ef:98:64:cc:69:00:14:03:1f: c1:f4:4e:03:16:ab:4a:38:a4:8f:cc:a8:6e:87:b2: 8d:6d:ad:48:85:53:fb:c6:3e:e4:7c:b6:c3:1a:5f: a4:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:48:D0:11:ED:B8:CD:33:E6:67:67:88:0C:A4:AB:30:61:D9:C5:23 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9eb3eb-5109-4798-8828-3d549fbb837f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9eb3eb-5109-4798-8828-3d549fbb837f/1/qUjQEe24zTPmZ2eIDKSrMGHZxSM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.3.132.0/24 Signature Algorithm: sha256WithRSAEncryption 34:53:e9:de:d1:13:54:0f:c7:63:8a:57:3c:f3:dc:5f:75:ac: c0:5c:38:5a:92:a4:1c:c0:59:22:50:1c:f2:e3:be:f5:5c:b8: 24:59:3f:c5:96:c2:51:eb:89:87:17:26:eb:f0:c7:00:aa:7a: 4a:4b:03:b4:db:55:f8:ce:b6:ec:66:46:73:61:ae:0d:f4:85: 2c:79:b5:83:12:57:48:20:d7:76:36:76:80:85:f2:38:12:4a: ce:47:9c:ef:ee:8c:6e:15:fc:a5:cd:b8:e3:85:98:8a:9b:ab: c7:56:32:50:12:5e:14:b7:cf:9d:f4:82:6e:60:c0:50:4a:5f: 33:ac:f4:71:cf:71:5e:93:34:67:83:3f:da:23:bb:09:83:07: 80:9d:37:57:4e:cd:6b:7a:9f:a4:cd:31:52:a7:59:f4:cc:97: f7:61:19:f1:17:f3:09:c9:e1:ae:98:00:a8:f9:38:93:7c:b2: 9f:b4:6e:d3:fd:b0:c4:0f:5b:d1:82:a7:8b:b2:f2:ea:1b:0e: 71:3e:7d:db:57:23:55:b7:ea:99:da:f5:df:da:78:eb:26:0e: f9:c3:8c:31:1d:9d:78:1f:72:0e:1d:ed:ff:b7:68:19:9e:2b: f2:d8:24:f6:e1:6d:62:e2:e8:62:21:35:a5:8d:2e:ba:ba:a9: 7a:43:14:6a -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt+N9/WEr9z/oLTcN7oLxWVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOTQ4ZDAxMWVkYjhjZDMzZTY2NzY3ODgwY2E0YWIzMDYxZDljNTIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3d7GSOkiyfzRctlagSKZvVrd9cyE i9yBBeEGC09CroBH6AsKs18az9eesTwUpUwUZjHhdMrleI8hXTusuZlm6sg+MYbP ihkviq6dAxe9SA76BDt7rMN+eita87kkZPedbS4WQ2egGLPPrYtRuf8/chvT5t14 r0qaTdVPCuUUwL4/e4P1cKB6hpOsFWDXD5GzhbO/svg0t53kAPPFMhWVs2MCS5Em cKXMSS0NrAaPjkNG3EqTstdL5kDcIGXmSm85H3x2pbHXNJQmxe6w4EyyDzCb34qo kDDvmGTMaQAUAx/B9E4DFqtKOKSPzKhuh7KNba1IhVP7xj7kfLbDGl+kDQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFKlI0BHtuM0z5mdniAykqzBh2cUjMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA4LzllYjNl Yi01MTA5LTQ3OTgtODgyOC0zZDU0OWZiYjgzN2YvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDgvOWViM2Vi LTUxMDktNDc5OC04ODI4LTNkNTQ5ZmJiODM3Zi8xL3FValFFZTI0elRQbVoyZUlE S1NyTUdIWnhTTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwQOEMA0GCSqGSIb3DQEBCwUAA4IBAQA0U+ne 0RNUD8djilc889xfdazAXDhakqQcwFkiUBzy4771XLgkWT/FlsJR64mHFybr8McA qnpKSwO021X4zrbsZkZzYa4N9IUsebWDEldIINd2NnaAhfI4EkrOR5zv7oxuFfyl zbjjhZiKm6vHVjJQEl4Ut8+d9IJuYMBQSl8zrPRxz3FekzRngz/aI7sJgweAnTdX Ts1rep+kzTFSp1n0zJf3YRnxF/MJyeGumACo+TiTfLKftG7T/bDED1vRgqeLsvLq Gw5xPn3bVyNVt+qZ2vXf2njrJg75w4wxHZ14H3IOHe3/t2gZnivy2CT24W1i4uhi ITWljS66uql6QxRq -----END CERTIFICATE-----Generated at Mon Feb 9 20:50:05 2026 by rpki-client