This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qVPxuOKWX9A4eBCi9iz3FIFtFJc.cer File: qVPxuOKWX9A4eBCi9iz3FIFtFJc.cer (raw, json) Hash identifier: kgDdmVDfxop5SXMDDpmBlwkcWnTKpy10fexdWPuUO5I= Subject key identifier: A9:53:F1:B8:E2:96:5F:D0:38:78:10:A2:F6:2C:F7:14:81:6D:14:97 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B783432B93285C0BC36F4B80465F3681B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a6/4e3493-ce03-4d94-bdfd-ae8633c17b87/1/qVPxuOKWX9A4eBCi9iz3FIFtFJc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a6/4e3493-ce03-4d94-bdfd-ae8633c17b87/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:17:25 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 44970 IP: 195.137.253.0/24 IP: 2a14:2c00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:32:b9:32:85:c0:bc:36:f4:b8:04:65:f3:68:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:17:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a953f1b8e2965fd0387810a2f62cf714816d1497 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:cd:83:34:e8:e0:db:96:75:6f:8b:d8:e4:c2: 6b:60:7a:d9:52:e8:c8:94:17:ed:11:63:79:0c:ed: 92:47:e0:b8:9a:a3:da:c5:a6:d8:65:ba:4c:c3:61: 3c:e1:e9:cb:be:de:8a:09:84:18:dd:a1:58:91:fe: ba:22:90:b2:30:22:e4:56:77:73:92:c9:d9:fe:5e: e4:29:e5:9d:3e:33:b7:05:59:12:22:e2:5c:0c:e8: 1d:98:51:e7:86:09:24:01:21:44:6e:e1:f2:ea:9b: b7:ae:f3:34:10:4e:42:ca:b0:99:9f:c0:89:90:85: a5:21:3e:65:72:3c:58:69:e4:13:f4:a9:ac:15:7a: 51:19:24:be:ea:99:8e:61:75:7f:24:89:43:f7:9c: 67:69:71:df:dd:10:e5:9e:c6:81:dd:9b:ab:dc:97: 04:d1:f1:39:47:cd:d1:24:8a:62:82:a0:2b:9a:2b: 17:0f:f5:a7:24:e6:40:ef:dd:2b:02:52:31:61:aa: 24:0a:31:b9:c0:38:f0:d5:13:58:de:6a:0b:ce:73: dc:cc:95:ff:2e:56:66:6c:0b:94:55:bd:42:09:a5: b1:f7:99:2a:f5:36:93:9c:e7:86:7e:21:58:de:7b: 0b:57:9e:13:6a:00:f1:1b:b9:f7:b5:f6:de:99:b4: f1:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:53:F1:B8:E2:96:5F:D0:38:78:10:A2:F6:2C:F7:14:81:6D:14:97 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/4e3493-ce03-4d94-bdfd-ae8633c17b87/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/4e3493-ce03-4d94-bdfd-ae8633c17b87/1/qVPxuOKWX9A4eBCi9iz3FIFtFJc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.137.253.0/24 IPv6: 2a14:2c00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 44970 Signature Algorithm: sha256WithRSAEncryption ab:f7:16:a3:53:aa:6c:88:45:10:61:19:1a:5f:b7:4c:da:fb: 36:c6:75:be:86:45:10:c4:f2:c6:a1:ab:e8:4c:20:12:0e:b6: 74:1b:10:f8:6b:c4:ee:7b:d3:e4:45:38:bf:1f:ec:48:27:ac: 47:06:ea:63:79:cb:01:98:92:89:72:5a:f6:3e:d7:a6:ee:72: 5e:40:e1:d8:bd:fd:72:8d:ef:ac:77:39:5c:e9:a5:a0:a9:61: aa:2a:d4:f8:a6:05:24:55:c5:8f:e2:91:1d:f0:b0:67:b4:6b: a3:b9:0e:58:4a:ec:d3:56:dc:ba:8f:6a:22:bd:fa:55:ae:99: 12:d1:5c:c8:10:8d:3a:1d:6a:a3:30:1e:b7:58:2e:e0:51:24: 69:8f:2b:67:97:51:87:b0:96:1f:96:6d:77:7e:52:17:86:f5: 1c:55:9b:c0:85:2b:31:34:af:5f:59:d0:21:16:f0:e4:92:14: 6a:37:2e:b5:4a:e2:e5:de:da:ca:18:b9:de:b9:2f:65:bb:3d: f2:01:c8:4c:56:eb:0b:77:69:de:92:08:18:07:6d:01:bc:14: 5f:21:75:d6:27:e9:d9:77:bb:2b:8b:83:3f:a9:00:cb:35:c4: c5:b1:de:0a:10:54:de:af:a1:5e:6d:a3:df:cf:49:65:3c:ba: 85:bb:0d:99 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt4NDK5MoXAvDb0uARl82gbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxNzI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOTUzZjFiOGUyOTY1ZmQwMzg3ODEwYTJmNjJjZjcxNDgxNmQxNDk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq82DNOjg25Z1b4vY5MJrYHrZUujI lBftEWN5DO2SR+C4mqPaxabYZbpMw2E84enLvt6KCYQY3aFYkf66IpCyMCLkVndz ksnZ/l7kKeWdPjO3BVkSIuJcDOgdmFHnhgkkASFEbuHy6pu3rvM0EE5CyrCZn8CJ kIWlIT5lcjxYaeQT9KmsFXpRGSS+6pmOYXV/JIlD95xnaXHf3RDlnsaB3Zur3JcE 0fE5R83RJIpigqArmisXD/WnJOZA790rAlIxYaokCjG5wDjw1RNY3moLznPczJX/ LlZmbAuUVb1CCaWx95kq9TaTnOeGfiFY3nsLV54TagDxG7n3tfbembTxuwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFKlT8bjill/QOHgQovYs9xSBbRSXMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E2LzRlMzQ5 My1jZTAzLTRkOTQtYmRmZC1hZTg2MzNjMTdiODcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTYvNGUzNDkz LWNlMDMtNGQ5NC1iZGZkLWFlODYzM2MxN2I4Ny8xL3FWUHh1T0tXWDlBNGVCQ2k5 aXozRklGdEZKYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAw4n9MA0EAgACMAcDBQMqFCwAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwCvqjANBgkqhkiG9w0BAQsFAAOCAQEAq/cWo1OqbIhF EGEZGl+3TNr7NsZ1voZFEMTyxqGr6EwgEg62dBsQ+GvE7nvT5EU4vx/sSCesRwbq Y3nLAZiSiXJa9j7Xpu5yXkDh2L39co3vrHc5XOmloKlhqirU+KYFJFXFj+KRHfCw Z7Rro7kOWErs01bcuo9qIr36Va6ZEtFcyBCNOh1qozAet1gu4FEkaY8rZ5dRh7CW H5Ztd35SF4b1HFWbwIUrMTSvX1nQIRbw5JIUajcutUri5d7ayhi53rkvZbs98gHI TFbrC3dp3pIIGAdtAbwUXyF11ifp2Xe7K4uDP6kAyzXExbHeChBU3q+hXm2j389J ZTy6hbsNmQ== -----END CERTIFICATE-----Generated at Mon Feb 9 15:04:14 2026 by rpki-client