This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qag61DyItM5E6CDhFd6cU34qVKY.cer File: qag61DyItM5E6CDhFd6cU34qVKY.cer (raw, json) Hash identifier: FDdNK7cPPmzY3pn5nGqVH6+Nt1D9esK9s+kOVbU0OKM= Subject key identifier: A9:A8:3A:D4:3C:88:B4:CE:44:E8:20:E1:15:DE:9C:53:7E:2A:54:A6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7FF2A308C2E28E2DCB4B8E70AB257A94 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/83/eaf43a-1f11-48c8-9c80-18be5f464ed6/1/qag61DyItM5E6CDhFd6cU34qVKY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/83/eaf43a-1f11-48c8-9c80-18be5f464ed6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 18:22:46 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 41191 IP: 193.203.32.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:a3:08:c2:e2:8e:2d:cb:4b:8e:70:ab:25:7a:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 18:22:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a9a83ad43c88b4ce44e820e115de9c537e2a54a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:6c:55:36:11:c7:15:7a:c7:29:19:bf:f5:4e: e4:e8:34:9e:e1:b3:0f:ce:23:20:a6:20:47:89:31: 9b:a9:cb:92:51:dd:20:4b:e7:19:45:a9:04:38:ef: bf:56:ee:71:1e:5a:30:61:27:19:e8:b6:06:22:12: e2:d0:3b:b9:0c:ca:aa:62:af:3a:a1:bb:03:45:d9: 0c:44:00:8d:43:1b:6d:61:46:83:09:40:8f:40:b8: 2a:b8:cf:08:9c:3a:30:bd:1b:8b:82:53:fa:19:00: 74:b6:5c:d2:cc:94:3d:08:d5:0a:fe:db:b7:5c:60: d8:b4:d7:ee:22:18:14:a8:6b:23:b5:1b:3d:8b:33: 7f:bf:12:2c:d9:47:5c:26:9f:51:36:e4:c6:66:5c: 51:0b:e3:fb:2f:8e:71:05:bf:6d:32:5e:97:40:9f: df:48:8e:1d:1e:d7:a0:0c:a1:03:50:fa:a3:02:8e: 44:cc:80:db:c0:57:3e:f2:97:29:3a:19:7e:a8:e1: 26:17:82:a2:56:e8:c4:6e:a1:1a:6f:aa:d8:16:eb: ba:07:54:0a:e3:a5:ab:ab:bb:bd:a0:f8:d5:6c:3e: 6b:70:eb:d9:a9:71:69:99:46:29:2d:bb:7d:fd:07: 22:31:31:d4:26:5c:0c:b1:a9:a8:0b:df:78:b6:0e: b5:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:A8:3A:D4:3C:88:B4:CE:44:E8:20:E1:15:DE:9C:53:7E:2A:54:A6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/eaf43a-1f11-48c8-9c80-18be5f464ed6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/eaf43a-1f11-48c8-9c80-18be5f464ed6/1/qag61DyItM5E6CDhFd6cU34qVKY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.203.32.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 41191 Signature Algorithm: sha256WithRSAEncryption 9e:84:1e:16:1c:a0:92:be:c1:09:36:a0:ae:20:a2:1d:b2:14: a6:28:9d:72:c2:47:a8:72:cc:ab:07:6c:6d:c0:f9:69:bf:ef: 24:b0:7c:32:a7:91:ea:44:52:54:e5:b7:1e:94:2f:0d:2d:43: 6d:3f:09:93:da:11:ba:3b:d6:02:e4:56:20:f5:17:e0:5b:36: 9d:34:dc:02:05:54:2c:73:96:e1:05:9f:02:5c:5d:d2:65:ad: 0d:49:f5:e8:59:1b:84:02:1c:b2:d2:10:da:0e:4a:f1:4f:23: c6:01:6b:7c:93:24:04:9e:53:19:d5:a8:98:e3:a4:8a:a7:73: c6:6d:b0:97:5c:5c:53:9e:3b:13:7e:8d:61:8b:af:c3:7e:e6: 5e:d8:48:ba:71:70:87:88:4b:59:73:5d:6f:22:99:61:f6:68: 1c:55:38:21:79:ec:97:9f:70:c1:03:d8:95:d4:19:0c:cf:98: 9a:a2:22:1e:19:86:9e:6b:39:35:53:b7:a0:a9:87:9b:c1:8c: 2e:49:cc:53:e3:ea:e3:0a:c4:c2:25:e3:91:92:9b:e5:78:e2: cb:72:22:46:7c:e2:c3:e9:16:76:e6:83:69:16:98:7e:09:ed: 4f:08:45:72:62:b8:8d:20:61:75:41:0f:7e:25:0f:e9:f2:8b: 67:9e:47:35 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt/8qMIwuKOLctLjnCrJXqUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTgyMjQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOWE4M2FkNDNjODhiNGNlNDRlODIwZTExNWRlOWM1MzdlMmE1NGE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWxVNhHHFXrHKRm/9U7k6DSe4bMP ziMgpiBHiTGbqcuSUd0gS+cZRakEOO+/Vu5xHlowYScZ6LYGIhLi0Du5DMqqYq86 obsDRdkMRACNQxttYUaDCUCPQLgquM8InDowvRuLglP6GQB0tlzSzJQ9CNUK/tu3 XGDYtNfuIhgUqGsjtRs9izN/vxIs2UdcJp9RNuTGZlxRC+P7L45xBb9tMl6XQJ/f SI4dHtegDKEDUPqjAo5EzIDbwFc+8pcpOhl+qOEmF4KiVujEbqEab6rYFuu6B1QK 46Wrq7u9oPjVbD5rcOvZqXFpmUYpLbt9/QciMTHUJlwMsamoC994tg61zQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFKmoOtQ8iLTOROgg4RXenFN+KlSmMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgzL2VhZjQz YS0xZjExLTQ4YzgtOWM4MC0xOGJlNWY0NjRlZDYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODMvZWFmNDNh LTFmMTEtNDhjOC05YzgwLTE4YmU1ZjQ2NGVkNi8xL3FhZzYxRHlJdE01RTZDRGhG ZDZjVTM0cVZLWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCwcsgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwCg5zANBgkqhkiG9w0BAQsFAAOCAQEAnoQeFhygkr7BCTagriCiHbIUpiidcsJH qHLMqwdsbcD5ab/vJLB8MqeR6kRSVOW3HpQvDS1DbT8Jk9oRujvWAuRWIPUX4Fs2 nTTcAgVULHOW4QWfAlxd0mWtDUn16FkbhAIcstIQ2g5K8U8jxgFrfJMkBJ5TGdWo mOOkiqdzxm2wl1xcU547E36NYYuvw37mXthIunFwh4hLWXNdbyKZYfZoHFU4IXns l59wwQPYldQZDM+YmqIiHhmGnms5NVO3oKmHm8GMLknMU+Pq4wrEwiXjkZKb5Xji y3IiRnziw+kWduaDaRaYfgntTwhFcmK4jSBhdUEPfiUP6fKLZ55HNQ== -----END CERTIFICATE-----Generated at Mon Feb 9 19:42:42 2026 by rpki-client