This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qd2fa2VJHZDE4Z6clgJSRmwsnRI.cer File: qd2fa2VJHZDE4Z6clgJSRmwsnRI.cer (raw, json) Hash identifier: RxPJwJ/xjD3ziQynnvGay3afzpnFsQl7Jzy62fwRjeU= Subject key identifier: A9:DD:9F:6B:65:49:1D:90:C4:E1:9E:9C:96:02:52:46:6C:2C:9D:12 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EAD61C29527A539AE6187CE1A40427 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/24db6e0e-696c-4f89-8d48-274559700af5/1/A9DD9F6B65491D90C4E19E9C960252466C2C9D12.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/24db6e0e-696c-4f89-8d48-274559700af5/1/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:17:40 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 215216 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:d6:1c:29:52:7a:53:9a:e6:18:7c:e1:a4:04:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a9dd9f6b65491d90c4e19e9c960252466c2c9d12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:61:36:d2:2e:c2:3d:3b:0a:2d:cd:f1:7d:fd: 61:61:21:0c:42:46:be:bd:20:a5:21:d2:0c:8d:c3: 86:e1:92:ec:e8:e9:8c:24:7b:ba:ab:83:6d:28:a2: b9:f2:32:45:e8:1a:c0:7f:41:ab:f6:90:7a:ec:92: 9c:2e:37:d0:bc:ac:29:5a:25:a4:fb:37:4a:25:d9: 22:5b:3d:3f:93:74:60:a6:86:71:3e:91:69:b1:37: 0c:27:7b:98:4e:0b:0d:fd:4c:d8:64:23:51:5f:ae: 0c:16:14:cf:62:6f:aa:1a:a5:87:d8:2d:71:ef:6f: 59:b2:10:b6:e1:9c:af:a8:13:5b:d8:dc:34:8f:86: cb:3d:52:52:8d:be:43:5b:1b:03:43:d0:dd:25:7d: a9:6b:68:8b:77:96:75:55:6d:4f:22:1d:44:52:4b: 63:82:b6:64:d4:3e:cc:b1:75:a8:6b:14:40:e1:fc: 37:c2:ad:19:de:08:00:40:bc:92:0e:8e:d0:e1:a3: f4:9d:75:d3:9a:b4:f6:e0:d4:7a:45:7a:e7:80:5b: bb:6d:77:1e:30:10:b9:38:71:38:05:31:b4:3a:36: 40:4f:e9:91:a6:58:d9:39:50:0b:05:94:e9:23:29: 1c:20:19:d5:3b:6e:ba:fb:3d:18:c1:d1:ce:db:25: d2:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:DD:9F:6B:65:49:1D:90:C4:E1:9E:9C:96:02:52:46:6C:2C:9D:12 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/24db6e0e-696c-4f89-8d48-274559700af5/1/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/24db6e0e-696c-4f89-8d48-274559700af5/1/A9DD9F6B65491D90C4E19E9C960252466C2C9D12.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 215216 Signature Algorithm: sha256WithRSAEncryption 4e:f6:a1:b5:69:52:4c:2a:89:f0:e1:06:b6:b3:dd:bd:48:04: e4:ac:c7:dc:74:b2:d4:68:17:99:05:58:c3:22:11:07:2d:8d: 39:62:eb:1f:ab:87:36:0a:24:49:11:31:ed:fc:9d:34:e7:6b: 41:a9:7a:d2:74:26:64:1b:cc:3b:ef:1d:62:17:cd:21:b5:40: 10:08:7f:99:e5:31:13:28:78:00:5b:ed:40:b2:e0:f4:06:ca: 6c:9d:8b:1e:50:8b:3f:47:17:de:24:16:e2:75:fd:ce:8a:e3: c2:e3:7e:b1:59:c6:13:cc:9c:8b:c1:6d:25:cb:b8:a7:ed:39: 41:af:d2:ca:f0:86:c6:2b:ed:d6:6e:12:0f:a4:e9:f6:13:e7: 1d:23:77:a3:1f:39:24:19:f2:30:17:de:3b:34:71:e7:41:34: 29:3b:14:ed:d1:7b:36:98:56:60:56:39:6e:4e:86:00:66:97: dc:ed:3b:d0:04:65:4d:89:b2:c3:f9:7f:4f:62:76:61:47:6a: 7a:ff:0e:40:4a:f2:c1:91:f2:76:1a:d7:11:80:93:bb:8e:43: 50:db:b5:7c:8b:75:8c:35:2f:20:1f:0a:0b:1a:f6:c7:9c:c3: 1e:53:19:69:7b:8c:1e:8e:b8:29:cc:12:0e:13:3c:af:e3:9a: 0f:ad:50:33 -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgISAZt26tYcKVJ6U5rmGHzhpAQnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOWRkOWY2YjY1NDkxZDkwYzRlMTllOWM5NjAyNTI0NjZjMmM5ZDEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGE20i7CPTsKLc3xff1hYSEMQka+ vSClIdIMjcOG4ZLs6OmMJHu6q4NtKKK58jJF6BrAf0Gr9pB67JKcLjfQvKwpWiWk +zdKJdkiWz0/k3RgpoZxPpFpsTcMJ3uYTgsN/UzYZCNRX64MFhTPYm+qGqWH2C1x 729ZshC24ZyvqBNb2Nw0j4bLPVJSjb5DWxsDQ9DdJX2pa2iLd5Z1VW1PIh1EUktj grZk1D7MsXWoaxRA4fw3wq0Z3ggAQLySDo7Q4aP0nXXTmrT24NR6RXrngFu7bXce MBC5OHE4BTG0OjZAT+mRpljZOVALBZTpIykcIBnVO266+z0YwdHO2yXS+wIDAQAB o4ICmzCCApcwHQYDVR0OBBYEFKndn2tlSR2QxOGenJYCUkZsLJ0SMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzI0ZGI2 ZTBlLTY5NmMtNGY4OS04ZDQ4LTI3NDU1OTcwMGFmNS8xLzCBiwYIKwYBBQUHMAqG f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMjRk YjZlMGUtNjk2Yy00Zjg5LThkNDgtMjc0NTU5NzAwYWY1LzEvQTlERDlGNkI2NTQ5 MUQ5MEM0RTE5RTlDOTYwMjUyNDY2QzJDOUQxMi5tZnQwPAYIKwYBBQUHMA2GMGh0 dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDSLAw DQYJKoZIhvcNAQELBQADggEBAE72obVpUkwqifDhBraz3b1IBOSsx9x0stRoF5kF WMMiEQctjTli6x+rhzYKJEkRMe38nTTna0GpetJ0JmQbzDvvHWIXzSG1QBAIf5nl MRMoeABb7UCy4PQGymydix5Qiz9HF94kFuJ1/c6K48LjfrFZxhPMnIvBbSXLuKft OUGv0srwhsYr7dZuEg+k6fYT5x0jd6MfOSQZ8jAX3js0cedBNCk7FO3RezaYVmBW OW5OhgBml9ztO9AEZU2JssP5f09idmFHanr/DkBK8sGR8nYa1xGAk7uOQ1DbtXyL dYw1LyAfCgsa9secwx5TGWl7jB6OuCnMEg4TPK/jmg+tUDM= -----END CERTIFICATE-----Generated at Mon Feb 9 15:06:07 2026 by rpki-client