This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qX7j7USz26i4PY6heZrA5YPWQUw.cer File: qX7j7USz26i4PY6heZrA5YPWQUw.cer (raw, json) Hash identifier: +tlXVbDY8s2ZS4K5ZoEq0iqSQT2qvXcEjlE8iMLVFGA= Subject key identifier: A9:7E:E3:ED:44:B3:DB:A8:B8:3D:8E:A1:79:9A:C0:E5:83:D6:41:4C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7758B82D70A54342FC2672E7D8D4D8E6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/eb/6b4c6c-49ee-4c5f-87f3-70e35b0f015b/1/qX7j7USz26i4PY6heZrA5YPWQUw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/eb/6b4c6c-49ee-4c5f-87f3-70e35b0f015b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:17:41 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 51652 IP: 91.219.144.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:b8:2d:70:a5:43:42:fc:26:72:e7:d8:d4:d8:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a97ee3ed44b3dba8b83d8ea1799ac0e583d6414c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:d6:84:14:24:43:48:e6:26:1f:ec:08:57:e2: 13:86:8d:8c:6c:d4:85:76:f8:55:f7:aa:49:79:71: 8d:9c:5e:b6:c7:79:7c:20:ef:45:8e:23:e3:4e:a2: 69:cc:98:3d:84:75:38:6f:12:a0:88:52:3b:ff:b9: 54:24:fa:db:9d:75:b0:e3:7e:48:3c:28:9d:d2:48: e6:83:d8:c3:ff:a2:5e:22:26:94:20:16:53:bc:79: 77:da:b6:5a:b2:a9:c7:63:46:8d:55:03:7a:69:ae: d9:4e:4a:07:1f:20:e5:0b:0a:98:06:b4:87:ab:a2: a6:4e:c0:cb:56:48:9e:1d:f6:af:ee:ab:f6:ab:df: eb:c8:98:a4:b4:1d:04:cd:b1:4c:40:92:a8:6e:60: ac:e8:b2:49:b8:3c:a0:f3:19:b9:d4:ff:04:ec:a2: 45:ff:6c:ec:97:bc:ac:8a:cf:f4:89:f0:83:4e:22: 44:77:37:e6:df:09:25:f7:db:41:96:2a:8d:a9:d4: 2f:44:aa:7f:99:e5:7e:cc:6d:57:f4:b0:4f:71:20: af:33:23:08:b8:11:fe:5f:14:f9:50:29:c6:5d:51: 58:e3:63:ff:e0:03:70:af:94:02:8c:53:a6:57:ba: c3:01:79:d1:00:a2:5e:06:69:f5:bd:55:94:2c:2e: c0:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:7E:E3:ED:44:B3:DB:A8:B8:3D:8E:A1:79:9A:C0:E5:83:D6:41:4C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6b4c6c-49ee-4c5f-87f3-70e35b0f015b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6b4c6c-49ee-4c5f-87f3-70e35b0f015b/1/qX7j7USz26i4PY6heZrA5YPWQUw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.219.144.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 51652 Signature Algorithm: sha256WithRSAEncryption 00:fb:fa:1b:38:04:f4:45:8b:76:92:84:37:4f:7f:ea:53:84: af:72:ad:25:ca:9f:c5:62:e5:81:e9:5e:12:76:ad:8f:bd:a2: 09:8f:ca:7a:6d:b1:3a:db:31:6f:de:48:6d:8d:ae:6b:1c:2c: c3:8a:8b:99:6d:c2:20:3f:97:b7:a7:77:f4:a9:03:3a:d7:2a: 10:4a:47:24:db:94:ba:bf:bf:b0:8f:5c:d3:b8:46:0b:cc:96: ba:d1:45:e7:9f:17:1c:d5:eb:c5:90:62:2b:a5:73:16:8a:2d: 14:67:45:98:ce:dd:b4:d7:44:ef:32:cd:25:d4:4c:c9:72:79: 0d:5f:99:bb:d2:a4:e3:08:de:36:3f:ff:97:9e:26:2f:f1:df: 92:52:4e:7e:8e:06:3f:73:84:e3:2e:64:01:5b:05:5f:52:cc: c5:ef:35:61:4a:14:76:bb:72:da:62:66:6d:ab:7b:da:44:3d: 02:70:52:b2:e7:25:c9:08:05:9d:ee:10:e2:b7:ea:af:e4:9f: 1e:8f:5f:bf:4f:8f:23:53:0a:01:ca:da:af:aa:f2:40:67:b6: b0:39:8c:a8:20:7b:ce:7f:5e:23:14:8a:2f:bb:ca:9d:62:e5: 57:fb:c1:d9:c2:d4:cf:23:db:c4:2e:6d:53:d6:11:03:aa:69: f5:54:19:21 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt3WLgtcKVDQvwmcufY1NjmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOTdlZTNlZDQ0YjNkYmE4YjgzZDhlYTE3OTlhYzBlNTgzZDY0MTRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndaEFCRDSOYmH+wIV+ITho2MbNSF dvhV96pJeXGNnF62x3l8IO9FjiPjTqJpzJg9hHU4bxKgiFI7/7lUJPrbnXWw435I PCid0kjmg9jD/6JeIiaUIBZTvHl32rZasqnHY0aNVQN6aa7ZTkoHHyDlCwqYBrSH q6KmTsDLVkieHfav7qv2q9/ryJiktB0EzbFMQJKobmCs6LJJuDyg8xm51P8E7KJF /2zsl7ysis/0ifCDTiJEdzfm3wkl99tBliqNqdQvRKp/meV+zG1X9LBPcSCvMyMI uBH+XxT5UCnGXVFY42P/4ANwr5QCjFOmV7rDAXnRAKJeBmn1vVWULC7APQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFKl+4+1Es9uouD2OoXmawOWD1kFMMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ViLzZiNGM2 Yy00OWVlLTRjNWYtODdmMy03MGUzNWIwZjAxNWIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIvNmI0YzZj LTQ5ZWUtNGM1Zi04N2YzLTcwZTM1YjBmMDE1Yi8xL3FYN2o3VVN6MjZpNFBZNmhl WnJBNVlQV1FVdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCW9uQMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDJxDANBgkqhkiG9w0BAQsFAAOCAQEAAPv6GzgE9EWLdpKEN09/6lOEr3KtJcqf xWLlgeleEnatj72iCY/Kem2xOtsxb95IbY2uaxwsw4qLmW3CID+Xt6d39KkDOtcq EEpHJNuUur+/sI9c07hGC8yWutFF558XHNXrxZBiK6VzFootFGdFmM7dtNdE7zLN JdRMyXJ5DV+Zu9Kk4wjeNj//l54mL/HfklJOfo4GP3OE4y5kAVsFX1LMxe81YUoU drty2mJmbat72kQ9AnBSsuclyQgFne4Q4rfqr+SfHo9fv0+PI1MKAcrar6ryQGe2 sDmMqCB7zn9eIxSKL7vKnWLlV/vB2cLUzyPbxC5tU9YRA6pp9VQZIQ== -----END CERTIFICATE-----Generated at Mon Feb 9 15:09:36 2026 by rpki-client