This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qcGHvHqeiFM1p-ubCkOP6BHAOEc.cer File: qcGHvHqeiFM1p-ubCkOP6BHAOEc.cer (raw, json) Hash identifier: axOXYAZplL0sTgR2sqxEhpu4Rgf0QldUTbNpbpeYXkM= Subject key identifier: A9:C1:87:BC:7A:9E:88:53:35:A7:EB:9B:0A:43:8F:E8:11:C0:38:47 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA507F57DFCB5CBFFAC0CA34740D3FF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8f/1b814a-d388-4c64-8302-370d1fd4254b/1/qcGHvHqeiFM1p-ubCkOP6BHAOEc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8f/1b814a-d388-4c64-8302-370d1fd4254b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:18:23 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 51979 IP: 91.222.88.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:07:f5:7d:fc:b5:cb:ff:ac:0c:a3:47:40:d3:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a9c187bc7a9e885335a7eb9b0a438fe811c03847 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:04:19:11:90:0b:7b:bd:5a:ba:77:ef:39:ad: c3:b9:57:be:ee:18:f2:51:61:54:f6:ac:67:c3:e5: 31:69:c9:7d:00:98:a0:81:af:2f:3e:1c:4a:2e:58: f0:3c:ce:05:31:2c:44:64:f3:f6:ef:48:2b:6f:91: 1c:fe:ac:c9:fe:ad:b8:47:f3:c1:56:6a:f5:ba:20: 48:8c:c9:f7:b3:a9:56:17:13:d6:8f:ea:5b:9b:2a: 31:ae:6d:12:91:9b:80:48:b8:68:22:74:50:85:10: 64:70:2c:ba:bc:75:ac:f6:8e:0f:bc:24:ca:09:cc: 2a:16:ef:c7:61:33:49:83:48:21:9a:5a:4f:7e:3d: 61:6e:15:22:54:b5:1f:b5:6c:48:86:42:d1:6c:a6: f7:eb:0e:1d:e6:ca:04:27:67:e1:9b:cb:76:26:3f: 71:28:31:b1:58:eb:aa:19:fe:8d:29:7b:e3:43:49: 69:05:96:23:dc:ee:c0:29:f8:e6:b9:12:aa:02:3a: 43:55:54:7d:93:9b:cb:a6:62:45:9e:66:35:ec:4b: db:84:6a:4e:a1:06:3f:ef:70:7c:6c:8c:29:90:67: b0:f3:a5:ce:b4:0e:9d:e8:2e:92:3f:4d:b3:98:a4: e8:7a:5f:15:be:9c:33:94:76:38:e5:c2:47:6d:42: 4b:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:C1:87:BC:7A:9E:88:53:35:A7:EB:9B:0A:43:8F:E8:11:C0:38:47 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/1b814a-d388-4c64-8302-370d1fd4254b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/1b814a-d388-4c64-8302-370d1fd4254b/1/qcGHvHqeiFM1p-ubCkOP6BHAOEc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.222.88.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 51979 Signature Algorithm: sha256WithRSAEncryption 6d:cd:e1:22:84:7d:cd:5f:da:b8:2f:57:df:c0:b5:cd:bc:b1: 83:48:26:06:21:e6:7b:58:e5:d5:48:cc:bb:01:4d:95:66:10: b8:24:42:e2:e7:80:fa:26:e8:be:21:c1:fc:3b:7f:c5:02:ea: ae:c1:98:10:e7:fb:a2:ad:69:d0:2d:94:05:ea:7a:8d:0c:98: 1e:f0:a9:1e:ce:3e:be:4f:20:a1:3a:04:35:79:aa:b0:9a:29: 6d:82:71:89:a9:f5:26:9e:7b:df:50:08:f4:1e:d8:70:42:69: 40:03:80:f7:40:b2:42:47:40:4c:1f:a4:09:c7:a5:2c:cc:f0: 2c:dc:d1:9b:37:9f:8d:a9:52:2e:a9:fe:fe:0b:24:2c:b4:af: 10:61:4c:9f:14:4a:38:8c:ad:42:24:9f:bb:5f:15:94:46:df: e9:2b:0a:02:28:b0:91:b5:c6:79:f9:7c:6a:4e:b6:e7:4a:f1: 72:40:6d:1a:06:79:40:7e:ee:42:13:a3:3b:d7:e4:df:af:56: 78:e3:4a:d0:1c:db:ab:42:21:06:c9:41:4d:b3:18:55:ef:37: c8:d0:e9:47:42:fc:f9:be:86:6d:92:91:4a:9c:47:4c:d4:ba: be:78:1c:a9:d0:7e:97:75:a5:a3:6a:45:a2:5c:14:7f:68:19: 76:46:06:15 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt+pQf1ffy1y/+sDKNHQNP/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOWMxODdiYzdhOWU4ODUzMzVhN2ViOWIwYTQzOGZlODExYzAzODQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2wQZEZALe71aunfvOa3DuVe+7hjy UWFU9qxnw+Uxacl9AJigga8vPhxKLljwPM4FMSxEZPP270grb5Ec/qzJ/q24R/PB Vmr1uiBIjMn3s6lWFxPWj+pbmyoxrm0SkZuASLhoInRQhRBkcCy6vHWs9o4PvCTK CcwqFu/HYTNJg0ghmlpPfj1hbhUiVLUftWxIhkLRbKb36w4d5soEJ2fhm8t2Jj9x KDGxWOuqGf6NKXvjQ0lpBZYj3O7AKfjmuRKqAjpDVVR9k5vLpmJFnmY17EvbhGpO oQY/73B8bIwpkGew86XOtA6d6C6SP02zmKToel8VvpwzlHY45cJHbUJLcQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFKnBh7x6nohTNafrmwpDj+gRwDhHMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhmLzFiODE0 YS1kMzg4LTRjNjQtODMwMi0zNzBkMWZkNDI1NGIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGYvMWI4MTRh LWQzODgtNGM2NC04MzAyLTM3MGQxZmQ0MjU0Yi8xL3FjR0h2SHFlaUZNMXAtdWJD a09QNkJIQU9FYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCW95YMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDLCzANBgkqhkiG9w0BAQsFAAOCAQEAbc3hIoR9zV/auC9X38C1zbyxg0gmBiHm e1jl1UjMuwFNlWYQuCRC4ueA+iboviHB/Dt/xQLqrsGYEOf7oq1p0C2UBep6jQyY HvCpHs4+vk8goToENXmqsJopbYJxian1Jp5731AI9B7YcEJpQAOA90CyQkdATB+k CcelLMzwLNzRmzefjalSLqn+/gskLLSvEGFMnxRKOIytQiSfu18VlEbf6SsKAiiw kbXGefl8ak6250rxckBtGgZ5QH7uQhOjO9fk369WeONK0Bzbq0IhBslBTbMYVe83 yNDpR0L8+b6GbZKRSpxHTNS6vngcqdB+l3Wlo2pFolwUf2gZdkYGFQ== -----END CERTIFICATE-----Generated at Mon Feb 9 20:55:27 2026 by rpki-client