This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qXeCDqYbEbWzhZq0pLx-wKe3OIw.cer File: qXeCDqYbEbWzhZq0pLx-wKe3OIw.cer (raw, json) Hash identifier: BqWmPy7YDAF21mDirJ7mLHFwAEg2Y8yoYrI1sHSLUM8= Subject key identifier: A9:77:82:0E:A6:1B:11:B5:B3:85:9A:B4:A4:BC:7E:C0:A7:B7:38:8C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA69CE997B0A571B68A777E5824BF3B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:20:07 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 45007 IP: 77.220.196.0/22 IP: 185.230.4.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:9c:e9:97:b0:a5:71:b6:8a:77:7e:58:24:bf:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:20:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a977820ea61b11b5b3859ab4a4bc7ec0a7b7388c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e4:c9:2b:97:14:35:6b:30:36:5d:dd:5e:b6: 6c:e4:6f:bd:c6:89:3d:33:43:d4:a8:88:8f:d7:fb: a4:d2:17:8e:a2:9f:20:7c:b3:28:cc:c5:38:f9:25: c3:76:51:43:07:35:8d:09:f0:4f:e6:7b:de:c4:a9: 4d:eb:ba:30:a4:6b:16:6c:f8:1f:57:fe:e5:19:bb: b0:ad:1c:ed:43:0d:a7:bd:19:e0:75:dd:fd:98:43: ed:41:78:34:df:9c:1f:36:a0:cb:02:28:61:fc:3e: c6:8c:8c:08:29:e4:a9:4d:c5:5d:b0:35:e6:c2:82: f3:2c:3b:bb:e1:ce:59:4f:d8:69:7b:dd:62:4f:a9: 09:2f:ff:0f:b0:c5:b1:75:66:0a:aa:c1:9b:80:8b: 00:8a:31:ea:44:67:50:4e:53:ad:eb:32:8c:c8:0e: 85:f1:d1:21:d9:09:0e:fb:96:e3:50:d2:7a:9a:de: 9f:b8:a2:1a:43:24:76:5b:4d:3a:29:b7:e5:53:86: 80:ff:2e:de:37:09:41:e9:6e:23:c3:4c:5f:49:4e: c6:87:40:b9:80:e4:0e:cb:d4:51:f5:4a:20:bb:61: 31:39:82:ea:49:4e:fc:73:3b:8c:3c:e3:97:58:c3: 83:80:04:53:d5:a0:8a:d1:f5:ed:6e:b5:3d:de:27: 72:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:77:82:0E:A6:1B:11:B5:B3:85:9A:B4:A4:BC:7E:C0:A7:B7:38:8C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.220.196.0/22 185.230.4.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 45007 Signature Algorithm: sha256WithRSAEncryption 82:3c:6c:c8:a7:3a:09:a6:48:78:46:f2:e1:c1:60:47:17:6e: c2:91:98:f8:ab:db:89:0d:15:62:38:c3:e8:80:2b:f2:7f:1e: e8:e0:96:a7:51:3c:03:9b:73:e0:0a:e1:fc:0a:f6:d4:21:0e: e3:5b:a8:05:b3:36:6c:1f:5f:2d:10:eb:fd:53:2b:fe:28:aa: 3d:db:2b:6c:44:79:9c:7c:de:a6:d1:15:20:86:d7:57:36:fa: e3:cc:f8:b7:08:64:83:a3:12:19:07:8b:c1:5a:83:5b:fc:b2: d2:dc:6f:04:50:9c:a8:76:cf:a3:6e:22:b9:31:9d:5e:2d:39: 82:57:87:7c:83:ee:10:68:1d:5b:6a:8a:4a:d6:ef:ac:12:c5: e4:44:80:e8:c6:b7:8c:b2:7e:a5:bc:87:ea:be:fd:be:0a:65: 30:5c:60:28:3e:d7:c4:c2:a7:6f:e3:9f:5c:cf:d5:01:78:da: fe:ad:ee:d5:21:a7:59:e9:13:e1:31:11:a9:a2:2d:d3:2c:57: 51:65:35:ad:93:1a:d2:5a:30:5f:aa:11:0d:70:34:af:8b:cb: c9:4b:ac:0b:62:0d:f8:05:83:84:b8:a8:d5:84:51:9f:ae:02: c6:3e:b3:2a:b2:4a:17:e5:b4:83:e9:40:f1:b1:3f:2c:b6:3f: 43:d7:4d:2f -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZt+ppzpl7ClcbaKd35YJL87MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIyMDA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOTc3ODIwZWE2MWIxMWI1YjM4NTlhYjRhNGJjN2VjMGE3YjczODhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+TJK5cUNWswNl3dXrZs5G+9xok9 M0PUqIiP1/uk0heOop8gfLMozMU4+SXDdlFDBzWNCfBP5nvexKlN67owpGsWbPgf V/7lGbuwrRztQw2nvRngdd39mEPtQXg035wfNqDLAihh/D7GjIwIKeSpTcVdsDXm woLzLDu74c5ZT9hpe91iT6kJL/8PsMWxdWYKqsGbgIsAijHqRGdQTlOt6zKMyA6F 8dEh2QkO+5bjUNJ6mt6fuKIaQyR2W006KbflU4aA/y7eNwlB6W4jw0xfSU7Gh0C5 gOQOy9RR9Uogu2ExOYLqSU78czuMPOOXWMODgART1aCK0fXtbrU93idyZQIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFKl3gg6mGxG1s4WatKS8fsCntziMMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ1L2FmOGU5 ZC02YzY1LTQxZmQtYTc1NS1iMThkNzZiMDEyZTcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDUvYWY4ZTlk LTZjNjUtNDFmZC1hNzU1LWIxOGQ3NmIwMTJlNy8xL3FYZUNEcVliRWJXemhacTBw THgtd0tlM09Jdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQCTdzEAwQCueYEMBoGCCsGAQUFBwEIAQH/BAsw CaAHMAUCAwCvzzANBgkqhkiG9w0BAQsFAAOCAQEAgjxsyKc6CaZIeEby4cFgRxdu wpGY+KvbiQ0VYjjD6IAr8n8e6OCWp1E8A5tz4Arh/Ar21CEO41uoBbM2bB9fLRDr /VMr/iiqPdsrbER5nHzeptEVIIbXVzb648z4twhkg6MSGQeLwVqDW/yy0txvBFCc qHbPo24iuTGdXi05gleHfIPuEGgdW2qKStbvrBLF5ESA6Ma3jLJ+pbyH6r79vgpl MFxgKD7XxMKnb+OfXM/VAXja/q3u1SGnWekT4TERqaIt0yxXUWU1rZMa0lowX6oR DXA0r4vLyUusC2IN+AWDhLio1YRRn64Cxj6zKrJKF+W0g+lA8bE/LLY/Q9dNLw== -----END CERTIFICATE-----Generated at Mon Feb 9 15:10:44 2026 by rpki-client