This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qbdbZNXaF9cLur2BGjmmAt2vljo.cer File: qbdbZNXaF9cLur2BGjmmAt2vljo.cer (raw, json) Hash identifier: sZBv/hZCSrZ2iBAZfW9RNpQOnusZ9yPjc4WQXUZmuOM= Subject key identifier: A9:B7:5B:64:D5:DA:17:D7:0B:BA:BD:81:1A:39:A6:02:DD:AF:96:3A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F834711F078DA2EA03BD5B0798F70CC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:21:08 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 33891 AS: 51191 AS: 201011 IP: 2.59.28.0/22 IP: 5.56.16.0/21 IP: 31.7.176.0/20 IP: 80.255.0.0/20 IP: 81.95.0.0/20 IP: 82.199.128.0/19 IP: 83.142.80.0/21 IP: 91.232.96.0/23 IP: 92.43.104.0/21 IP: 130.185.104.0/21 IP: 185.24.68.0/22 IP: 185.89.36.0/22 IP: 185.108.216.0/22 IP: 193.104.251.0/24 IP: 195.138.240.0/20 IP: 2a01:4a0::/29 IP: 2a06:4b00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:47:11:f0:78:da:2e:a0:3b:d5:b0:79:8f:70:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:21:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a9b75b64d5da17d70bbabd811a39a602ddaf963a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d3:ed:6a:1b:1a:26:82:2b:26:85:ac:cb:6d: 8a:d0:28:12:30:2a:86:c0:d2:95:64:28:79:5e:b7: 04:e6:6b:32:d7:e5:3e:56:38:5c:b9:73:39:06:ec: cc:cf:26:d0:a0:a3:d6:3c:20:dd:90:d0:36:74:20: b2:ab:05:9f:66:1f:ed:33:b2:41:e4:13:63:b1:d3: 2a:f6:4a:c8:3b:00:39:44:06:e2:e4:73:1b:ef:ea: c2:0a:8e:3b:e3:ad:ba:4d:4e:d9:ee:97:fb:ce:96: 93:84:ce:42:10:9d:60:0b:e9:55:b8:82:36:88:09: 18:de:43:c3:47:23:17:20:3e:22:2f:fc:02:89:e7: 52:75:1f:63:f2:03:4e:25:75:a3:42:1f:f5:82:c4: 0c:61:8b:dc:18:5b:f9:20:c7:5d:41:58:ef:7b:31: 82:95:a0:52:34:d4:6e:39:46:d7:71:06:5c:57:af: c7:8c:96:0c:2b:52:31:79:1d:b2:28:87:43:28:ee: 51:e8:89:80:b0:47:d0:15:cc:ae:56:41:3d:c4:01: d5:bb:83:f1:ca:15:39:a1:f1:bb:5b:04:db:a2:d8: 23:e6:69:e1:4e:0b:63:d6:b1:f7:b2:f5:54:06:0d: c2:e9:3e:48:54:d3:f8:82:1e:40:26:f9:f1:1b:62: c1:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:B7:5B:64:D5:DA:17:D7:0B:BA:BD:81:1A:39:A6:02:DD:AF:96:3A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.59.28.0/22 5.56.16.0/21 31.7.176.0/20 80.255.0.0/20 81.95.0.0/20 82.199.128.0/19 83.142.80.0/21 91.232.96.0/23 92.43.104.0/21 130.185.104.0/21 185.24.68.0/22 185.89.36.0/22 185.108.216.0/22 193.104.251.0/24 195.138.240.0/20 IPv6: 2a01:4a0::/29 2a06:4b00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 33891 51191 201011 Signature Algorithm: sha256WithRSAEncryption 11:5c:02:27:ab:7e:3e:99:4b:4f:68:06:c6:f8:d3:b5:f5:03: 73:2c:82:37:e0:24:43:d5:bc:08:f5:c8:2c:c8:bb:ac:1c:95: 98:d2:97:aa:2d:3b:5f:b2:d2:6f:32:bf:3c:fb:b0:17:6a:dd: 67:d4:0f:16:27:dd:09:78:53:19:3b:c2:e4:f4:4e:1d:0c:d8: 3b:d3:0b:96:30:13:98:9f:e9:ff:71:58:47:c9:cb:39:81:2d: 3f:07:07:33:b7:f9:3e:46:7b:7f:9a:03:0a:55:9f:3c:5c:c1: ff:84:0a:d0:09:60:72:f4:89:38:5b:fd:4f:f9:23:ff:ef:c5: 12:f5:ed:3c:d7:51:d7:dd:0f:c7:5d:ae:67:27:8c:1b:ef:ff: 4e:51:72:6d:c3:ad:ec:49:02:c8:5d:c0:95:97:e3:db:84:6c: 1a:d3:28:c6:a1:0d:02:c0:2c:f0:c5:0c:4f:0f:31:3f:77:9c: c0:3e:d2:5d:3f:bc:cf:df:52:39:57:b9:22:a2:03:26:9e:ef: b6:ed:9b:d7:84:b7:2f:f6:a1:2b:d0:7d:73:43:48:d8:2a:5f: 0f:69:4b:92:4d:a9:b1:61:f1:1d:04:7e:e7:35:88:6b:2c:2d: 0e:23:0a:35:e7:2f:a4:fe:b9:3c:47:b7:36:66:fc:8e:f9:ca: 96:ab:ad:0a -----BEGIN CERTIFICATE----- MIIGCTCCBPGgAwIBAgISAZt/g0cR8HjaLqA71bB5j3DMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOWI3NWI2NGQ1ZGExN2Q3MGJiYWJkODExYTM5YTYwMmRkYWY5NjNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptPtahsaJoIrJoWsy22K0CgSMCqG wNKVZCh5XrcE5msy1+U+VjhcuXM5BuzMzybQoKPWPCDdkNA2dCCyqwWfZh/tM7JB 5BNjsdMq9krIOwA5RAbi5HMb7+rCCo474626TU7Z7pf7zpaThM5CEJ1gC+lVuII2 iAkY3kPDRyMXID4iL/wCiedSdR9j8gNOJXWjQh/1gsQMYYvcGFv5IMddQVjvezGC laBSNNRuOUbXcQZcV6/HjJYMK1IxeR2yKIdDKO5R6ImAsEfQFcyuVkE9xAHVu4Px yhU5ofG7WwTbotgj5mnhTgtj1rH3svVUBg3C6T5IVNP4gh5AJvnxG2LB7QIDAQAB o4IDFTCCAxEwHQYDVR0OBBYEFKm3W2TV2hfXC7q9gRo5pgLdr5Y6MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI1L2RhODVl Ny1hNDUyLTRiMWQtYjVhZS05YjExODA0ZWNkMzkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjUvZGE4NWU3 LWE0NTItNGIxZC1iNWFlLTliMTE4MDRlY2QzOS8xL3FiZGJaTlhhRjljTHVyMkJH am1tQXQydmxqby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGJBggrBgEF BQcBBwEB/wR6MHgwYAQCAAEwWgMEAgI7HAMEAwU4EAMEBB8HsAMEBFD/AAMEBFFf AAMEBVLHgAMEA1OOUAMEAVvoYAMEA1wraAMEA4K5aAMEArkYRAMEArlZJAMEArls 2AMEAMFo+wMEBMOK8DAUBAIAAjAOAwUDKgEEoAMFAyoGSwAwJAYIKwYBBQUHAQgB Af8EFTAToBEwDwIDAIRjAgMAx/cCAwMRMzANBgkqhkiG9w0BAQsFAAOCAQEAEVwC J6t+PplLT2gGxvjTtfUDcyyCN+AkQ9W8CPXILMi7rByVmNKXqi07X7LSbzK/PPuw F2rdZ9QPFifdCXhTGTvC5PROHQzYO9MLljATmJ/p/3FYR8nLOYEtPwcHM7f5PkZ7 f5oDClWfPFzB/4QK0AlgcvSJOFv9T/kj/+/FEvXtPNdR190Px12uZyeMG+//TlFy bcOt7EkCyF3AlZfj24RsGtMoxqENAsAs8MUMTw8xP3ecwD7SXT+8z99SOVe5IqID Jp7vtu2b14S3L/ahK9B9c0NI2CpfD2lLkk2psWHxHQR+5zWIaywtDiMKNecvpP65 PEe3Nmb8jvnKlqutCg== -----END CERTIFICATE-----Generated at Mon Jan 26 12:33:20 2026 by rpki-client