This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qajkTlc8U8cZIxL8xyFQ0t43fW0.cer File: qajkTlc8U8cZIxL8xyFQ0t43fW0.cer (raw, json) Hash identifier: gxx/KBPhU5T8f4kDcmZurfBYK81PWm8KZJoTU9edhQM= Subject key identifier: A9:A8:E4:4E:57:3C:53:C7:19:23:12:FC:C7:21:50:D2:DE:37:7D:6D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CED743F85918F755030BF023A21DB99 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:15 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.198.174.0/24 IP: 185.15.56.0/22 IP: 185.71.138.0/24 IP: 2001:67c:930::/48 IP: 2a02:ec80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 07:52:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:74:3f:85:91:8f:75:50:30:bf:02:3a:21:db:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a9a8e44e573c53c7192312fcc72150d2de377d6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:fb:8b:40:9f:3a:35:be:38:f9:f4:11:6f:9b: 15:fa:88:33:c7:26:64:2c:49:1f:27:3b:e0:0e:e9: 01:e0:1a:86:60:09:21:28:b7:cc:b6:1a:e8:26:3a: c6:c2:79:4a:63:5c:3a:a6:40:29:c0:d7:51:20:97: 3f:eb:18:3a:8d:25:6b:f7:db:63:a1:7c:34:97:2b: bb:9c:2d:c2:26:85:29:0b:49:8f:60:48:ec:72:f8: 5c:df:94:c4:53:7d:84:11:1e:6b:6d:37:62:f2:65: 45:44:ce:8e:b0:b3:85:a8:1f:47:c8:0d:3a:b6:b5: d0:a8:24:f3:00:81:5b:61:3f:83:d2:2e:05:00:fb: 15:f1:2d:95:ae:6a:96:8c:6c:f5:56:01:7e:2f:f0: bd:52:2c:30:09:03:dc:e6:90:9d:3c:18:74:4b:6d: 1c:05:5d:d4:3e:a9:bb:25:5b:14:a0:a2:bc:55:00: 17:9c:01:d0:30:9a:1d:9f:83:a0:73:ae:74:0c:dc: b4:e0:45:9b:2a:61:a4:73:13:fb:10:9b:47:ce:77: 0e:09:ac:e4:d4:72:05:b4:9b:db:3f:f0:d1:63:c7: b0:c5:95:5d:5b:d0:10:bf:a3:bd:17:0d:b6:3e:28: a2:73:be:08:af:6c:d7:a9:c6:44:a2:3c:92:09:8f: 5c:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:A8:E4:4E:57:3C:53:C7:19:23:12:FC:C7:21:50:D2:DE:37:7D:6D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.198.174.0/24 185.15.56.0/22 185.71.138.0/24 IPv6: 2001:67c:930::/48 2a02:ec80::/29 Signature Algorithm: sha256WithRSAEncryption 4e:58:05:1f:18:22:28:ab:d7:79:7d:44:25:52:8c:bf:04:70: a8:ab:bf:4e:ff:05:f6:e4:af:ac:8b:18:2c:7d:7a:d0:92:cf: 2c:a9:03:16:db:c6:39:fc:79:bc:21:6f:01:aa:e8:ef:18:37: 80:c5:92:53:ec:20:4e:01:c7:4d:d3:06:fb:a6:1b:fd:aa:07: fd:cd:ed:d7:40:2c:77:27:48:68:e5:96:4b:cf:b4:cb:ec:e8: 21:59:21:9a:52:76:be:b5:b5:b3:8c:05:92:24:35:45:6b:c9: 4c:bb:55:ea:ce:38:42:fa:16:87:d0:b6:d3:8a:7b:c7:4c:59: 21:74:a4:79:18:c1:a0:ae:94:1c:4d:39:ab:9f:a5:12:fb:7a: fa:4f:2e:76:69:13:2a:2d:cd:40:48:bb:4f:c7:b8:a1:1a:44: 12:aa:fb:14:3d:00:a4:a6:ef:78:22:a8:d7:0f:99:26:55:d6: 11:df:d2:bc:8e:12:62:6f:4b:87:c1:c7:ba:ba:bc:67:74:ee: b3:82:ad:48:cd:91:ab:b1:a2:37:ee:19:b3:3c:28:ec:06:44: 64:ac:3c:eb:1f:52:8d:46:e3:9e:a0:d7:46:8a:27:2f:55:7d: e4:94:ce:0b:ae:ad:f1:fa:1a:6b:5b:c8:bf:43:54:94:1d:1a: 66:78:7b:cc -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgISAZt87XQ/hZGPdVAwvwI6IduZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOWE4ZTQ0ZTU3M2M1M2M3MTkyMzEyZmNjNzIxNTBkMmRlMzc3ZDZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPuLQJ86Nb44+fQRb5sV+ogzxyZk LEkfJzvgDukB4BqGYAkhKLfMthroJjrGwnlKY1w6pkApwNdRIJc/6xg6jSVr99tj oXw0lyu7nC3CJoUpC0mPYEjscvhc35TEU32EER5rbTdi8mVFRM6OsLOFqB9HyA06 trXQqCTzAIFbYT+D0i4FAPsV8S2VrmqWjGz1VgF+L/C9UiwwCQPc5pCdPBh0S20c BV3UPqm7JVsUoKK8VQAXnAHQMJodn4Ogc650DNy04EWbKmGkcxP7EJtHzncOCazk 1HIFtJvbP/DRY8ewxZVdW9AQv6O9Fw22Piiic74Ir2zXqcZEojySCY9ctQIDAQAB o4ICqDCCAqQwHQYDVR0OBBYEFKmo5E5XPFPHGSMS/MchUNLeN31tMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q3LzQ1MmRk NS1kMGU0LTRkNGItOGFlNi0xOTUxMzQ1Y2VhMzMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDcvNDUyZGQ1 LWQwZTQtNGQ0Yi04YWU2LTE5NTEzNDVjZWEzMy8xL3FhamtUbGM4VThjWkl4TDh4 eUZRMHQ0M2ZXMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEMGCCsGAQUF BwEHAQH/BDQwMjAYBAIAATASAwQAW8auAwQCuQ84AwQAuUeKMBYEAgACMBADBwAg AQZ8CTADBQMqAuyAMA0GCSqGSIb3DQEBCwUAA4IBAQBOWAUfGCIoq9d5fUQlUoy/ BHCoq79O/wX25K+sixgsfXrQks8sqQMW28Y5/Hm8IW8BqujvGDeAxZJT7CBOAcdN 0wb7phv9qgf9ze3XQCx3J0ho5ZZLz7TL7OghWSGaUna+tbWzjAWSJDVFa8lMu1Xq zjhC+haH0LbTinvHTFkhdKR5GMGgrpQcTTmrn6US+3r6Ty52aRMqLc1ASLtPx7ih GkQSqvsUPQCkpu94IqjXD5kmVdYR39K8jhJib0uHwce6urxndO6zgq1IzZGrsaI3 7hmzPCjsBkRkrDzrH1KNRuOeoNdGiicvVX3klM4Lrq3x+hprW8i/Q1SUHRpmeHvM -----END CERTIFICATE-----Generated at Sun Jan 11 15:55:27 2026 by rpki-client