This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qYz7m19EX9L2zPoXnDfFNEmyrwY.cer File: qYz7m19EX9L2zPoXnDfFNEmyrwY.cer (raw, json) Hash identifier: onoGsPa6/S0uPIJSKy6ufcCDRzbBMpbnwmHCbdaOOYk= Subject key identifier: A9:8C:FB:9B:5F:44:5F:D2:F6:CC:FA:17:9C:37:C5:34:49:B2:AF:06 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB6E466288BCEDB30F9F4DD28DCC6C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3b/df8551-3f9f-44b2-b7e4-886593f7dce0/1/qYz7m19EX9L2zPoXnDfFNEmyrwY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3b/df8551-3f9f-44b2-b7e4-886593f7dce0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:19 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 48091 AS: 210498 IP: 185.140.236.0/22 IP: 195.93.216.0/23 IP: 2001:67c:256c::/48 IP: 2a05:37c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:6e:46:62:88:bc:ed:b3:0f:9f:4d:d2:8d:cc:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a98cfb9b5f445fd2f6ccfa179c37c53449b2af06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:89:d9:c2:b9:13:89:de:00:cf:a0:a0:63:64: 2a:9c:86:eb:12:8e:a8:ab:3f:d8:fd:b8:2f:2c:a6: c8:a7:0b:17:76:b2:06:d8:38:0f:9f:8c:9a:56:07: 1f:21:52:cb:2f:2b:f2:ec:df:3f:59:c0:7b:f9:3e: e3:1e:46:52:4f:81:85:47:8f:74:75:4d:3f:e9:fd: ed:89:42:cc:d7:b2:f7:99:59:6a:51:a3:25:54:f1: 75:1f:eb:65:44:12:59:6e:84:7d:f2:f1:d7:21:77: b0:24:cf:ea:e9:97:6d:9e:ff:09:2a:e9:e0:62:a2: ce:77:f6:19:58:c9:25:ce:5d:54:06:4c:01:07:ff: d0:d0:7d:46:1e:92:b9:44:a2:9f:3f:d1:c7:6a:76: c4:95:b8:fa:c4:5b:a1:08:77:db:5a:3d:bb:07:9f: a8:eb:55:1a:62:df:b3:50:cc:29:f1:25:e0:c7:17: e0:d0:aa:48:62:29:b9:94:87:54:83:06:f0:2b:e9: b8:41:d2:d4:4c:04:91:6f:bb:02:a5:3d:18:9d:c7: 5a:92:89:1a:31:15:bc:6b:fd:07:50:54:99:a2:4e: 20:4a:ba:26:ee:58:aa:11:c8:10:1a:68:3c:b1:24: 76:c1:6c:3e:2c:87:c6:1d:d2:e3:dc:16:9c:be:be: 75:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:8C:FB:9B:5F:44:5F:D2:F6:CC:FA:17:9C:37:C5:34:49:B2:AF:06 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/df8551-3f9f-44b2-b7e4-886593f7dce0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/df8551-3f9f-44b2-b7e4-886593f7dce0/1/qYz7m19EX9L2zPoXnDfFNEmyrwY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.140.236.0/22 195.93.216.0/23 IPv6: 2001:67c:256c::/48 2a05:37c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 48091 210498 Signature Algorithm: sha256WithRSAEncryption 9f:1a:b6:f4:c5:28:cc:0a:af:9f:44:3b:e9:31:75:d9:fc:b3: 96:91:c2:7f:07:90:f3:7b:8e:e3:bd:17:5f:f4:e3:71:bb:21: 29:16:4c:30:dc:16:1c:ac:f0:5f:a2:67:ab:50:25:fb:95:19: e9:94:9a:ac:75:5f:74:87:5b:d6:2a:7e:1f:e6:85:64:d3:58: 62:a4:af:e4:ce:c8:ff:50:c3:1a:50:d6:8e:92:a6:71:1b:8a: 75:84:4b:18:07:76:70:ce:26:74:4c:14:a2:f4:67:38:7a:5f: 72:59:2e:de:a3:a1:23:75:d0:28:fb:e6:49:bb:30:c5:4a:fd: b9:c8:fc:7f:f7:b1:f3:fc:bf:dd:c6:a5:8b:bc:31:73:b9:91: 4f:c3:9c:bd:e3:bb:62:5b:be:b1:84:d1:57:89:d1:e9:2f:08: cf:2c:bf:c6:9c:67:de:6a:cf:33:a3:f0:25:85:6d:7c:f4:1b: 41:5c:b0:27:06:29:fa:bd:1b:08:73:6b:bb:42:2f:e2:54:e1: a1:be:9b:57:be:09:f9:4e:49:1d:c1:be:ed:79:94:ff:90:36: da:7a:40:4e:9b:04:99:83:3f:4b:0c:39:c4:d9:72:c4:2c:6c: af:73:0d:92:91:ac:61:34:23:33:1f:19:ef:49:ff:2a:0c:b6: 39:90:6c:a9 -----BEGIN CERTIFICATE----- MIIFtzCCBJ+gAwIBAgISAZt2625GYoi87bMPn03SjcxsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOThjZmI5YjVmNDQ1ZmQyZjZjY2ZhMTc5YzM3YzUzNDQ5YjJhZjA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4nZwrkTid4Az6CgY2QqnIbrEo6o qz/Y/bgvLKbIpwsXdrIG2DgPn4yaVgcfIVLLLyvy7N8/WcB7+T7jHkZST4GFR490 dU0/6f3tiULM17L3mVlqUaMlVPF1H+tlRBJZboR98vHXIXewJM/q6Zdtnv8JKung YqLOd/YZWMklzl1UBkwBB//Q0H1GHpK5RKKfP9HHanbElbj6xFuhCHfbWj27B5+o 61UaYt+zUMwp8SXgxxfg0KpIYim5lIdUgwbwK+m4QdLUTASRb7sCpT0Yncdakoka MRW8a/0HUFSZok4gSrom7liqEcgQGmg8sSR2wWw+LIfGHdLj3Bacvr511wIDAQAB o4ICwzCCAr8wHQYDVR0OBBYEFKmM+5tfRF/S9sz6F5w3xTRJsq8GMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNiL2RmODU1 MS0zZjlmLTQ0YjItYjdlNC04ODY1OTNmN2RjZTAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2IvZGY4NTUx LTNmOWYtNDRiMi1iN2U0LTg4NjU5M2Y3ZGNlMC8xL3FZejdtMTlFWDlMMnpQb1hu RGZGTkVteXJ3WS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMD0GCCsGAQUF BwEHAQH/BC4wLDASBAIAATAMAwQCuYzsAwQBw13YMBYEAgACMBADBwAgAQZ8JWwD BQMqBTfAMB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwC72wIDAzZCMA0GCSqGSIb3 DQEBCwUAA4IBAQCfGrb0xSjMCq+fRDvpMXXZ/LOWkcJ/B5Dze47jvRdf9ONxuyEp Fkww3BYcrPBfomerUCX7lRnplJqsdV90h1vWKn4f5oVk01hipK/kzsj/UMMaUNaO kqZxG4p1hEsYB3ZwziZ0TBSi9Gc4el9yWS7eo6EjddAo++ZJuzDFSv25yPx/97Hz /L/dxqWLvDFzuZFPw5y947tiW76xhNFXidHpLwjPLL/GnGfeas8zo/AlhW189BtB XLAnBin6vRsIc2u7Qi/iVOGhvptXvgn5Tkkdwb7teZT/kDbaekBOmwSZgz9LDDnE 2XLELGyvcw2SkaxhNCMzHxnvSf8qDLY5kGyp -----END CERTIFICATE-----Generated at Mon Feb 9 19:51:40 2026 by rpki-client