This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qdM_4RuZSVFsHx3YFOJOR0U6npY.cer File: qdM_4RuZSVFsHx3YFOJOR0U6npY.cer (raw, json) Hash identifier: 13Ng0PAkZKwAhDKhGxqKmKq+P+Y8zNhTSPn6kr15lxM= Subject key identifier: A9:D3:3F:E1:1B:99:49:51:6C:1F:1D:D8:14:E2:4E:47:45:3A:9E:96 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F84198B427095404B1EECCDB2B79F91 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/da/56cf38-d7ab-40c3-9f09-6802083de211/1/qdM_4RuZSVFsHx3YFOJOR0U6npY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/da/56cf38-d7ab-40c3-9f09-6802083de211/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:22:02 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 31104 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:19:8b:42:70:95:40:4b:1e:ec:cd:b2:b7:9f:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:22:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a9d33fe11b9949516c1f1dd814e24e47453a9e96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:b8:bf:9e:27:33:36:e3:d1:91:6a:d9:ce:14: 3d:21:32:49:dc:43:d5:55:5f:d8:33:cc:71:ea:bd: 0b:98:0e:02:fc:e8:ef:68:85:f3:5c:45:40:50:45: 74:31:59:09:54:5c:ad:5c:49:0f:6c:01:11:46:f7: 39:c9:5d:8e:46:e0:77:9c:50:a4:1a:aa:60:38:74: 31:c0:ed:aa:3b:5b:18:22:a3:c4:c3:ed:c5:41:aa: 3b:2b:86:e1:a5:bd:91:b5:11:16:b9:74:57:03:d5: 57:84:8a:87:5c:52:fc:b9:f5:b9:f8:a7:44:4b:fb: de:8b:e3:60:fe:05:5e:2d:ae:64:e1:ce:bd:fa:f1: fd:06:c7:b5:59:9b:7f:ed:70:80:56:40:4f:5c:09: 30:bc:10:e5:1d:fa:59:dd:79:8d:30:e8:3f:90:17: a1:cf:45:85:0f:2b:10:77:c4:5d:d8:e0:df:eb:c1: c9:68:00:a7:58:89:f9:63:13:5c:da:d6:99:f1:45: 58:fa:5e:90:15:0b:99:da:a0:42:75:f1:fb:94:af: d3:42:13:a2:f0:43:a3:23:7c:4d:07:1a:2e:43:88: e7:39:01:e2:24:59:d8:31:2a:08:29:ae:a4:e3:b0: cb:23:78:78:3f:fb:ea:e1:4c:7c:f1:c3:76:16:ad: ae:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:D3:3F:E1:1B:99:49:51:6C:1F:1D:D8:14:E2:4E:47:45:3A:9E:96 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/56cf38-d7ab-40c3-9f09-6802083de211/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/56cf38-d7ab-40c3-9f09-6802083de211/1/qdM_4RuZSVFsHx3YFOJOR0U6npY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 31104 Signature Algorithm: sha256WithRSAEncryption 75:76:40:1a:57:dd:14:4a:ff:60:67:e7:4e:7c:27:16:29:83: d3:5f:22:0c:be:69:8f:0a:98:8c:66:34:8b:a1:e9:53:b7:93: 18:77:bc:3e:01:0f:48:cb:8d:e0:88:76:f2:d3:22:29:bd:ba: f3:24:19:eb:8b:10:b4:97:82:ad:37:8c:c6:db:07:2f:9e:d1: df:40:7b:6d:4d:dd:63:9c:93:4d:5a:de:99:2a:20:79:4e:ec: 5f:56:54:69:fa:0e:06:59:d3:12:ad:94:36:17:89:cd:ca:97: e7:c4:45:2a:bd:73:2a:ba:70:02:34:4b:86:6b:63:74:7e:4d: ff:c4:96:60:1d:34:7d:69:d8:f6:1b:a2:95:91:39:d6:50:da: 4d:43:cb:5d:d4:50:78:56:ac:24:d2:e6:10:12:a6:b9:68:1d: 29:87:47:38:a1:f3:c4:c0:7d:79:4e:b0:16:e7:23:08:6d:7e: 90:37:0e:ea:c1:a0:8f:83:d5:63:4d:64:63:0d:7f:51:a7:0c: 13:0b:b7:26:8a:e1:34:d6:47:19:9c:79:3a:31:36:d9:83:33: 92:86:0f:cf:bb:01:8a:86:af:99:ac:7c:4b:f1:97:be:55:ed: e1:0b:1d:e8:a4:fc:1a:43:1e:d4:3f:68:86:26:b5:5f:98:91: 1c:88:bc:4b -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgISAZt/hBmLQnCVQEse7M2yt5+RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMjAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOWQzM2ZlMTFiOTk0OTUxNmMxZjFkZDgxNGUyNGU0NzQ1M2E5ZTk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjri/niczNuPRkWrZzhQ9ITJJ3EPV VV/YM8xx6r0LmA4C/OjvaIXzXEVAUEV0MVkJVFytXEkPbAERRvc5yV2ORuB3nFCk GqpgOHQxwO2qO1sYIqPEw+3FQao7K4bhpb2RtREWuXRXA9VXhIqHXFL8ufW5+KdE S/vei+Ng/gVeLa5k4c69+vH9Bse1WZt/7XCAVkBPXAkwvBDlHfpZ3XmNMOg/kBeh z0WFDysQd8Rd2ODf68HJaACnWIn5YxNc2taZ8UVY+l6QFQuZ2qBCdfH7lK/TQhOi 8EOjI3xNBxouQ4jnOQHiJFnYMSoIKa6k47DLI3h4P/vq4Ux88cN2Fq2uqwIDAQAB o4ICfjCCAnowHQYDVR0OBBYEFKnTP+EbmUlRbB8d2BTiTkdFOp6WMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RhLzU2Y2Yz OC1kN2FiLTQwYzMtOWYwOS02ODAyMDgzZGUyMTEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGEvNTZjZjM4 LWQ3YWItNDBjMy05ZjA5LTY4MDIwODNkZTIxMS8xL3FkTV80UnVaU1ZGc0h4M1lG T0pPUjBVNm5wWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAnmAMA0GCSqGSIb3DQEBCwUAA4IBAQB1dkAaV90USv9g Z+dOfCcWKYPTXyIMvmmPCpiMZjSLoelTt5MYd7w+AQ9Iy43giHby0yIpvbrzJBnr ixC0l4KtN4zG2wcvntHfQHttTd1jnJNNWt6ZKiB5TuxfVlRp+g4GWdMSrZQ2F4nN ypfnxEUqvXMqunACNEuGa2N0fk3/xJZgHTR9adj2G6KVkTnWUNpNQ8td1FB4Vqwk 0uYQEqa5aB0ph0c4ofPEwH15TrAW5yMIbX6QNw7qwaCPg9VjTWRjDX9RpwwTC7cm iuE01kcZnHk6MTbZgzOShg/PuwGKhq+ZrHxL8Ze+Ve3hCx3opPwaQx7UP2iGJrVf mJEciLxL -----END CERTIFICATE-----Generated at Mon Feb 9 18:24:56 2026 by rpki-client