This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qWpTYQ2O9mShJ1txquq7KFEEwk8.cer File: qWpTYQ2O9mShJ1txquq7KFEEwk8.cer (raw, json) Hash identifier: 0Bq3ryZhNvRrRf1MHl15f4xxVwe3p+9lVlLKxX9bR5c= Subject key identifier: A9:6A:53:61:0D:8E:F6:64:A1:27:5B:71:AA:EA:BB:28:51:04:C2:4F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B452E5FE74E5122A9A7F69BA10A3620CC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d6/5a017c-a3dc-44cf-b80e-a211175c05e0/1/qWpTYQ2O9mShJ1txquq7KFEEwk8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d6/5a017c-a3dc-44cf-b80e-a211175c05e0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Mon 22 Dec 2025 08:30:25 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: IP: 185.45.8.0/22 IP: 2a01:75e0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:2e:5f:e7:4e:51:22:a9:a7:f6:9b:a1:0a:36:20:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 22 08:30:25 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a96a53610d8ef664a1275b71aaeabb285104c24f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:a2:32:43:06:ba:ee:27:f5:93:47:f9:8c:a4: d7:6a:36:cf:cf:4d:d1:bd:55:52:de:37:81:03:04: 2b:bf:67:a0:87:4c:e3:a6:b9:1c:04:81:f7:4a:7c: b7:a8:0d:9c:14:df:8d:74:05:82:db:5a:bb:59:8f: 33:5b:13:28:cd:39:1c:bb:8b:93:35:c3:f5:e8:09: c5:62:0c:60:b1:dc:c9:ee:28:27:c0:dd:17:d4:04: 25:5b:5e:a8:94:a5:5c:92:78:c0:2a:0e:d8:e8:85: 89:ba:be:d4:8d:4f:c4:32:0a:fd:a2:ac:02:4c:a3: ba:da:6d:f8:a3:2c:ba:55:ba:16:b1:18:d3:0f:5d: a9:c1:99:83:94:4a:1d:0e:b0:c3:cf:af:dd:d8:ec: 38:d8:ea:ad:6a:62:ef:f3:26:a0:00:60:7d:0a:ec: 95:fe:eb:21:51:c6:c1:b3:15:76:3f:0c:b5:c7:c4: 9b:8b:67:ce:6a:bc:cb:a4:bf:12:6f:4f:1a:b3:78: 98:f8:f4:c7:5a:f4:29:95:51:74:f0:a7:49:dd:e0: 2a:e9:fa:40:04:e4:71:3a:08:40:71:f9:a2:95:dc: 27:35:f6:df:5f:de:04:11:a7:47:07:2b:a1:35:46: 90:12:67:b4:62:ae:ae:73:de:cd:f2:02:d7:08:b1: 94:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:6A:53:61:0D:8E:F6:64:A1:27:5B:71:AA:EA:BB:28:51:04:C2:4F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5a017c-a3dc-44cf-b80e-a211175c05e0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5a017c-a3dc-44cf-b80e-a211175c05e0/1/qWpTYQ2O9mShJ1txquq7KFEEwk8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.45.8.0/22 IPv6: 2a01:75e0::/32 Signature Algorithm: sha256WithRSAEncryption 71:8e:f8:6f:f5:7a:00:fd:33:07:7c:a2:13:61:48:bf:6a:1a: 01:18:60:ff:2a:ff:3e:15:cc:1e:f1:34:0b:88:92:df:9b:49: 45:31:9d:24:c9:aa:ea:96:9f:d6:94:64:d1:87:a4:c3:d6:b8: 87:8a:4d:71:cd:9e:60:c5:37:62:ae:13:5d:b5:ad:a8:aa:e4: cb:5b:6b:8f:8b:04:ba:8a:16:44:eb:48:2a:5a:99:ca:75:36: 64:1e:16:6c:49:8b:05:c2:4e:7a:a9:0f:0e:ef:c6:93:25:d4: 9e:87:70:5e:66:20:72:4e:12:31:b4:50:4c:52:9a:f3:1b:28: f3:5e:de:71:04:82:43:94:10:1c:4d:af:94:59:19:2a:79:48: 2b:93:43:18:62:35:56:51:2a:8d:b1:5b:cc:4b:cd:ca:b0:c3: 64:f7:7a:b2:c4:2d:f9:0f:ac:32:29:49:3f:e5:ab:ff:ce:4f: b2:88:91:16:24:8b:85:ca:05:65:37:cb:00:f5:75:fc:2e:7e: 24:22:8d:88:b5:1e:91:fc:6a:f8:bf:76:21:37:cf:94:ff:08: 24:ea:9d:8d:c8:1f:21:2f:97:e7:a5:3d:05:a7:cf:33:9e:44: ff:14:d3:af:5d:f6:89:b9:3a:20:6e:85:2a:25:55:03:3b:4a: af:2f:9d:66 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZtFLl/nTlEiqaf2m6EKNiDMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjIyMDgzMDI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOTZhNTM2MTBkOGVmNjY0YTEyNzViNzFhYWVhYmIyODUxMDRjMjRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnaIyQwa67if1k0f5jKTXajbPz03R vVVS3jeBAwQrv2egh0zjprkcBIH3Sny3qA2cFN+NdAWC21q7WY8zWxMozTkcu4uT NcP16AnFYgxgsdzJ7ignwN0X1AQlW16olKVcknjAKg7Y6IWJur7UjU/EMgr9oqwC TKO62m34oyy6VboWsRjTD12pwZmDlEodDrDDz6/d2Ow42OqtamLv8yagAGB9CuyV /ushUcbBsxV2Pwy1x8Sbi2fOarzLpL8Sb08as3iY+PTHWvQplVF08KdJ3eAq6fpA BORxOghAcfmildwnNfbfX94EEadHByuhNUaQEme0Yq6uc97N8gLXCLGU0wIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFKlqU2ENjvZkoSdbcarquyhRBMJPMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q2LzVhMDE3 Yy1hM2RjLTQ0Y2YtYjgwZS1hMjExMTc1YzA1ZTAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDYvNWEwMTdj LWEzZGMtNDRjZi1iODBlLWEyMTExNzVjMDVlMC8xL3FXcFRZUTJPOW1TaEoxdHhx dXE3S0ZFRXdrOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuS0IMA0EAgACMAcDBQAqAXXgMA0GCSqGSIb3 DQEBCwUAA4IBAQBxjvhv9XoA/TMHfKITYUi/ahoBGGD/Kv8+Fcwe8TQLiJLfm0lF MZ0kyarqlp/WlGTRh6TD1riHik1xzZ5gxTdirhNdta2oquTLW2uPiwS6ihZE60gq WpnKdTZkHhZsSYsFwk56qQ8O78aTJdSeh3BeZiByThIxtFBMUprzGyjzXt5xBIJD lBAcTa+UWRkqeUgrk0MYYjVWUSqNsVvMS83KsMNk93qyxC35D6wyKUk/5av/zk+y iJEWJIuFygVlN8sA9XX8Ln4kIo2ItR6R/Gr4v3YhN8+U/wgk6p2NyB8hL5fnpT0F p88znkT/FNOvXfaJuTogboUqJVUDO0qvL51m -----END CERTIFICATE-----Generated at Fri Dec 26 14:11:37 2025 by rpki-client