This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qdvUwWus1i0mMqoeF7LozQEA1oQ.cer File: qdvUwWus1i0mMqoeF7LozQEA1oQ.cer (raw, json) Hash identifier: QVNsdmzmITqpXWyAXJO4u+SaA0z2h4GOcuur2oCqwjM= Subject key identifier: A9:DB:D4:C1:6B:AC:D6:2D:26:32:AA:1E:17:B2:E8:CD:01:00:D6:84 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEE1AED7EBE9036CB03D34E5530CCC3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c4/cd46d6-457a-4122-8a73-b6c283511d08/1/qdvUwWus1i0mMqoeF7LozQEA1oQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c4/cd46d6-457a-4122-8a73-b6c283511d08/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:57 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 51167 IP: 5.189.128.0/18 IP: 62.171.128.0/18 IP: 75.119.128.0/19 IP: 79.143.176.0/20 IP: 80.241.208.0/20 IP: 91.194.90.0/23 IP: 91.205.172.0/22 IP: 95.111.224.0/19 IP: 109.205.176.0/21 IP: 144.91.64.0/18 IP: 161.97.64.0 -- 161.97.189.255 IP: 164.68.96.0/19 IP: 167.86.66.0 -- 167.86.127.255 IP: 173.212.192.0/18 IP: 173.249.0.0/18 IP: 178.18.240.0/20 IP: 178.238.224.0/20 IP: 185.2.100.0/22 IP: 193.34.144.0/23 IP: 193.37.152.0/24 IP: 193.164.131.0 -- 193.164.133.255 IP: 193.200.241.0/24 IP: 194.163.128.0/18 IP: 207.180.192.0/18 IP: 213.136.64.0/19 IP: 2a02:c200::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:1a:ed:7e:be:90:36:cb:03:d3:4e:55:30:cc:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a9dbd4c16bacd62d2632aa1e17b2e8cd0100d684 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:5f:e1:c0:0f:b0:75:89:b2:9a:a5:3b:0b:46: 49:0d:2a:a8:a5:5a:7a:51:83:5a:d7:df:13:b5:c9: 1d:70:fd:15:96:f2:5e:be:c1:27:05:81:f4:d1:c6: 00:19:d8:73:0d:aa:20:66:fd:d2:45:4e:f4:26:dd: 4b:f7:35:8b:eb:b6:17:e3:13:16:0a:a0:82:eb:0d: 5b:32:ae:c7:63:68:9b:1a:dc:49:d8:3e:da:0f:95: 22:43:e1:b3:b6:e2:1d:40:65:d1:3b:6c:85:93:3c: 68:1c:5b:63:78:a0:be:bc:1f:2a:56:32:a9:32:f9: 49:bc:f2:a6:10:6c:9c:86:a3:44:d4:11:1b:98:a8: 26:be:2b:bf:df:91:20:e4:f7:e1:dc:c7:6b:6e:42: f6:1e:90:c5:7a:db:70:a2:a1:d5:0b:67:fe:16:f3: f4:7d:75:2d:19:9d:cf:1d:f8:c7:fa:47:82:d8:54: f5:c2:bc:e3:ea:70:27:d2:06:50:94:04:65:49:9c: 1d:58:1e:83:36:bd:6e:42:8c:3f:13:4a:43:07:c2: ee:81:dd:ed:81:7b:85:a1:33:7e:86:30:ef:54:4a: 06:70:a8:64:f7:96:8c:aa:45:03:d0:41:d9:dd:46: f0:28:d8:ec:8f:79:aa:91:3f:19:e1:63:74:8b:03: 2e:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:DB:D4:C1:6B:AC:D6:2D:26:32:AA:1E:17:B2:E8:CD:01:00:D6:84 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/cd46d6-457a-4122-8a73-b6c283511d08/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/cd46d6-457a-4122-8a73-b6c283511d08/1/qdvUwWus1i0mMqoeF7LozQEA1oQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.189.128.0/18 62.171.128.0/18 75.119.128.0/19 79.143.176.0/20 80.241.208.0/20 91.194.90.0/23 91.205.172.0/22 95.111.224.0/19 109.205.176.0/21 144.91.64.0/18 161.97.64.0-161.97.189.255 164.68.96.0/19 167.86.66.0-167.86.127.255 173.212.192.0/18 173.249.0.0/18 178.18.240.0/20 178.238.224.0/20 185.2.100.0/22 193.34.144.0/23 193.37.152.0/24 193.164.131.0-193.164.133.255 193.200.241.0/24 194.163.128.0/18 207.180.192.0/18 213.136.64.0/19 IPv6: 2a02:c200::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 51167 Signature Algorithm: sha256WithRSAEncryption 73:4f:c7:17:8f:e2:8a:08:33:7b:f4:18:38:9c:b5:5b:1c:68: 99:3b:c6:93:0f:13:12:a3:07:17:80:71:cc:8a:61:2f:8d:ed: 12:34:d8:41:78:2c:d9:2e:09:dd:e3:84:90:a7:0d:39:2b:5e: 45:ac:31:23:2d:4b:45:3f:32:fd:e6:e9:e7:64:70:ea:e0:f3: 92:3f:d3:33:e8:c7:9e:ac:20:48:e1:46:bd:73:84:f6:6a:1b: f7:bc:34:bb:01:a3:bd:2f:16:07:4f:b0:31:95:7d:fb:c9:87: 54:83:02:40:13:b1:0a:df:a3:fd:16:e5:55:4b:db:25:57:3e: f3:7c:11:24:32:2c:d1:ee:c9:cc:d8:5e:73:f9:11:72:11:bc: 6a:fb:69:a0:e6:03:b2:90:5c:f1:bb:97:9e:36:75:ef:38:21: 21:c5:29:06:a6:d0:93:59:25:cf:be:29:e4:8d:39:0d:3d:39: 59:b6:ec:f6:6c:4f:7c:ac:c3:68:67:ce:7e:7e:5c:6d:fd:b9: 80:3e:d6:0c:8a:e4:0c:81:77:d8:df:a2:51:75:b8:d1:82:89: 6b:1b:29:5d:cd:fe:d5:2a:b9:f2:cc:c7:ad:08:73:80:a5:e6: aa:8a:13:ee:a3:96:33:25:21:2f:10:a5:b1:df:91:d5:83:a5: d8:a5:04:e4 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgISAZt87hrtfr6QNssD005VMMzDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOWRiZDRjMTZiYWNkNjJkMjYzMmFhMWUxN2IyZThjZDAxMDBkNjg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1/hwA+wdYmymqU7C0ZJDSqopVp6 UYNa198TtckdcP0VlvJevsEnBYH00cYAGdhzDaogZv3SRU70Jt1L9zWL67YX4xMW CqCC6w1bMq7HY2ibGtxJ2D7aD5UiQ+GztuIdQGXRO2yFkzxoHFtjeKC+vB8qVjKp MvlJvPKmEGychqNE1BEbmKgmviu/35Eg5Pfh3MdrbkL2HpDFettwoqHVC2f+FvP0 fXUtGZ3PHfjH+keC2FT1wrzj6nAn0gZQlARlSZwdWB6DNr1uQow/E0pDB8Lugd3t gXuFoTN+hjDvVEoGcKhk95aMqkUD0EHZ3UbwKNjsj3mqkT8Z4WN0iwMu3wIDAQAB o4IDXDCCA1gwHQYDVR0OBBYEFKnb1MFrrNYtJjKqHhey6M0BANaEMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M0L2NkNDZk Ni00NTdhLTQxMjItOGE3My1iNmMyODM1MTFkMDgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzQvY2Q0NmQ2 LTQ1N2EtNDEyMi04YTczLWI2YzI4MzUxMWQwOC8xL3FkdlV3V3VzMWkwbU1xb2VG N0xvelFFQTFvUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIHaBggrBgEF BQcBBwEB/wSByjCBxzCBtQQCAAEwga4DBAYFvYADBAY+q4ADBAVLd4ADBARPj7AD BARQ8dADBAFbwloDBAJbzawDBAVfb+ADBANtzbADBAaQW0AwDAMEBqFhQAMEAaFh vAMEBaREYDAMAwQBp1ZCAwQHp1YAAwQGrdTAAwQGrfkAAwQEshLwAwQEsu7gAwQC uQJkAwQBwSKQAwQAwSWYMAwDBADBpIMDBAHBpIQDBADByPEDBAbCo4ADBAbPtMAD BAXViEAwDQQCAAIwBwMFAyoCwgAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAMff MA0GCSqGSIb3DQEBCwUAA4IBAQBzT8cXj+KKCDN79Bg4nLVbHGiZO8aTDxMSowcX gHHMimEvje0SNNhBeCzZLgnd44SQpw05K15FrDEjLUtFPzL95unnZHDq4POSP9Mz 6MeerCBI4Ua9c4T2ahv3vDS7AaO9LxYHT7AxlX37yYdUgwJAE7EK36P9FuVVS9sl Vz7zfBEkMizR7snM2F5z+RFyEbxq+2mg5gOykFzxu5eeNnXvOCEhxSkGptCTWSXP vinkjTkNPTlZtuz2bE98rMNoZ85+flxt/bmAPtYMiuQMgXfY36JRdbjRgolrGyld zf7VKrnyzMetCHOApeaqihPuo5YzJSEvEKWx35HVg6XYpQTk -----END CERTIFICATE-----Generated at Mon Feb 9 19:56:17 2026 by rpki-client