This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qYI63d9sNfBbfByuB5BL_58vass.cer File: qYI63d9sNfBbfByuB5BL_58vass.cer (raw, json) Hash identifier: pmRqztRMD2jH0X6pgBtIWVaxh+fH1cvsXO2Nxbf4vY4= Subject key identifier: A9:82:3A:DD:DF:6C:35:F0:5B:7C:1C:AE:07:90:4B:FF:9F:2F:6A:CB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7759580A51FCA62FE052C286617022C5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/21/34fd08-ce76-4bc3-87c0-36d4d7f07c8a/1/qYI63d9sNfBbfByuB5BL_58vass.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/21/34fd08-ce76-4bc3-87c0-36d4d7f07c8a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:18:22 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 49850 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:58:0a:51:fc:a6:2f:e0:52:c2:86:61:70:22:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a9823adddf6c35f05b7c1cae07904bff9f2f6acb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:83:6c:60:a8:e5:a5:e1:15:17:08:46:48:80: ce:60:fd:57:54:85:70:34:53:d8:d4:64:eb:14:53: 37:80:c2:83:18:9c:59:5c:2a:c2:14:b7:8a:89:6b: 7a:45:39:78:67:13:43:f8:bb:c7:e1:3d:e1:07:4e: 18:35:ac:2a:34:0e:f1:78:8c:8d:78:26:01:5c:b1: 47:eb:23:c0:db:62:9e:d5:8d:bf:4a:99:6d:0d:c0: f4:b4:fe:92:6c:52:5b:e5:1e:26:05:1c:74:18:93: 4e:07:ea:7b:bb:47:d7:18:bd:04:f9:db:75:6e:c9: aa:b8:ad:ce:27:0b:72:6d:ef:41:f9:92:10:f4:cf: fd:ff:78:8b:90:a6:1f:06:84:84:7b:d9:50:33:26: 77:e7:29:f3:95:95:77:15:5a:ee:6c:47:f6:f1:59: e8:c5:d8:05:84:8c:33:61:3d:1b:b6:cb:0a:b8:56: eb:20:9c:da:21:2c:df:51:d4:ac:1c:33:17:d7:19: e3:b1:79:13:d2:c5:68:b4:e2:cd:66:ca:5d:0d:a4: ff:92:11:b2:15:88:67:f9:8a:65:92:b6:60:d0:77: a9:54:33:cf:dc:01:78:6a:5d:4d:85:b0:2b:10:07: 6f:d8:31:b5:91:4e:8d:3c:cd:22:6e:1e:30:a7:f5: c7:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:82:3A:DD:DF:6C:35:F0:5B:7C:1C:AE:07:90:4B:FF:9F:2F:6A:CB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/34fd08-ce76-4bc3-87c0-36d4d7f07c8a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/34fd08-ce76-4bc3-87c0-36d4d7f07c8a/1/qYI63d9sNfBbfByuB5BL_58vass.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 49850 Signature Algorithm: sha256WithRSAEncryption 2f:4b:b6:4b:24:e2:27:cc:22:e1:7a:c0:3f:c9:97:07:97:ab: d0:3c:c6:bd:f5:d4:aa:fb:4e:33:73:bb:a2:c1:04:60:e4:4d: 99:e4:b1:b6:9c:d7:67:0b:d1:d0:41:29:df:7e:2a:c2:6e:91: 13:80:e2:8a:64:c6:83:8b:c9:5b:62:8c:41:77:56:49:99:da: 35:7e:14:6b:5f:03:b5:35:d1:65:f4:29:d6:12:27:7d:54:81: 09:9e:59:fc:69:d3:ba:fa:46:e5:55:12:23:c3:57:f3:6f:50: 11:6a:db:0e:95:1a:78:7d:fd:97:b5:30:e9:ae:4a:e2:16:47: ba:d3:4a:24:4d:5b:66:63:9b:7c:a1:e9:34:4e:61:40:8e:f4: 02:4b:b3:68:c1:fa:e3:42:28:fd:bb:b6:77:94:23:97:5a:35: 9d:82:57:ca:dc:11:ae:84:97:3a:8a:d7:a8:f7:ad:77:4e:05: 8a:14:74:f8:0a:66:3b:50:3c:c3:e6:02:26:96:c2:e2:92:9b: 91:8e:69:df:9a:d2:78:47:0e:73:61:2b:2b:4f:27:be:48:bc: 58:9b:e4:f9:61:a4:c0:3d:25:be:b0:8b:87:ff:8a:f0:63:2e: 2c:61:4d:c7:b4:bb:d3:b8:31:e3:42:e0:5a:2f:dc:57:db:1c: 28:5d:00:4c -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt3WVgKUfymL+BSwoZhcCLFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOTgyM2FkZGRmNmMzNWYwNWI3YzFjYWUwNzkwNGJmZjlmMmY2YWNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYNsYKjlpeEVFwhGSIDOYP1XVIVw NFPY1GTrFFM3gMKDGJxZXCrCFLeKiWt6RTl4ZxND+LvH4T3hB04YNawqNA7xeIyN eCYBXLFH6yPA22Ke1Y2/SpltDcD0tP6SbFJb5R4mBRx0GJNOB+p7u0fXGL0E+dt1 bsmquK3OJwtybe9B+ZIQ9M/9/3iLkKYfBoSEe9lQMyZ35ynzlZV3FVrubEf28Vno xdgFhIwzYT0btssKuFbrIJzaISzfUdSsHDMX1xnjsXkT0sVotOLNZspdDaT/khGy FYhn+YplkrZg0HepVDPP3AF4al1NhbArEAdv2DG1kU6NPM0ibh4wp/XHuQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFKmCOt3fbDXwW3wcrgeQS/+fL2rLMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzIxLzM0ZmQw OC1jZTc2LTRiYzMtODdjMC0zNmQ0ZDdmMDdjOGEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjEvMzRmZDA4 LWNlNzYtNGJjMy04N2MwLTM2ZDRkN2YwN2M4YS8xL3FZSTYzZDlzTmZCYmZCeXVC NUJMXzU4dmFzcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDCujANBgkqhkiG9w0BAQsFAAOCAQEAL0u2SyTiJ8wi 4XrAP8mXB5er0DzGvfXUqvtOM3O7osEEYORNmeSxtpzXZwvR0EEp334qwm6RE4Di imTGg4vJW2KMQXdWSZnaNX4Ua18DtTXRZfQp1hInfVSBCZ5Z/GnTuvpG5VUSI8NX 829QEWrbDpUaeH39l7Uw6a5K4hZHutNKJE1bZmObfKHpNE5hQI70AkuzaMH640Io /bu2d5Qjl1o1nYJXytwRroSXOorXqPetd04FihR0+ApmO1A8w+YCJpbC4pKbkY5p 35rSeEcOc2ErK08nvki8WJvk+WGkwD0lvrCLh/+K8GMuLGFNx7S707gx40LgWi/c V9scKF0ATA== -----END CERTIFICATE-----Generated at Mon Feb 9 20:50:04 2026 by rpki-client