This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qf86c4aNwRzY2_Xhw4C7txBgL7Q.cer File: qf86c4aNwRzY2_Xhw4C7txBgL7Q.cer (raw, json) Hash identifier: 1MBs/3QJUut2Eq7n+1C/wvgpcAgziayKtuNEu1UFGPk= Subject key identifier: A9:FF:3A:73:86:8D:C1:1C:D8:DB:F5:E1:C3:80:BB:B7:10:60:2F:B4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B36B8879BACE306AA021A3E2AEF60A6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f2/91585a-a38f-4749-9f48-47974f5c704a/1/qf86c4aNwRzY2_Xhw4C7txBgL7Q.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f2/91585a-a38f-4749-9f48-47974f5c704a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:19:02 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 206790 IP: 193.223.254.0/23 IP: 2001:678:e04::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:b8:87:9b:ac:e3:06:aa:02:1a:3e:2a:ef:60:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a9ff3a73868dc11cd8dbf5e1c380bbb710602fb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:3d:67:0b:24:12:c9:d3:32:84:74:9c:11:45: af:ec:83:f8:91:e3:95:1e:fe:dd:6c:81:ad:8f:c8: 2a:cc:88:97:bc:3c:45:16:33:cb:1c:af:9e:f5:c3: 0c:e7:25:d6:dc:12:a6:42:84:58:50:e4:c2:2f:b0: 7a:34:10:fb:00:4b:7e:41:24:13:57:75:ac:92:0c: c0:60:4d:d8:18:ee:5a:3d:f9:87:44:99:8d:21:49: 27:7f:29:4f:77:e7:25:37:7f:aa:08:78:a5:de:e6: a0:3c:57:e7:77:5b:0a:88:b5:40:4c:73:3f:6f:9e: 21:e4:18:56:81:88:d5:0b:e8:93:ab:88:2a:8a:10: 7b:f8:6a:7f:ca:01:08:52:9e:b6:53:f5:5c:9b:6e: 25:22:3a:79:b5:cf:77:34:f0:c4:c9:5a:cc:dc:0d: ae:b4:0d:b5:0f:c7:c9:1c:5b:e5:42:02:e8:10:15: 4d:a6:58:28:f5:89:f5:db:70:3c:ad:e0:3f:82:6b: a3:c3:07:9a:79:a8:84:23:e2:83:e9:db:fc:9d:5e: ea:a4:36:58:c8:6a:24:92:24:17:16:00:8b:32:b1: ec:c6:72:f3:a6:ae:c6:da:42:19:3f:3c:7c:b4:e3: a3:2f:67:7b:0e:ef:ed:1a:18:1e:9a:a7:70:9a:f9: 3c:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:FF:3A:73:86:8D:C1:1C:D8:DB:F5:E1:C3:80:BB:B7:10:60:2F:B4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/91585a-a38f-4749-9f48-47974f5c704a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/91585a-a38f-4749-9f48-47974f5c704a/1/qf86c4aNwRzY2_Xhw4C7txBgL7Q.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.223.254.0/23 IPv6: 2001:678:e04::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 206790 Signature Algorithm: sha256WithRSAEncryption 2b:0e:4c:ca:38:75:c3:fd:a6:5b:35:e9:34:d0:05:50:aa:a9: e2:74:b1:e7:79:f1:b0:63:97:4d:ca:81:d5:25:8e:40:0c:7b: ae:54:2b:d1:0a:13:39:33:90:dd:5a:5a:f8:ec:5d:1c:28:b6: 7f:76:91:12:70:d1:3a:95:95:a2:b6:92:d7:3d:32:46:2b:d3: f3:e9:d0:2b:bc:f0:13:09:aa:60:85:90:16:f7:e5:d8:90:18: bf:f4:c1:78:56:8c:c9:64:19:1d:a8:1b:5e:f6:14:06:ab:12: 0f:e4:ef:0b:aa:d1:8c:13:7a:cc:d6:2f:ec:2c:a5:fc:4a:a8: 3b:c9:3c:ef:36:3d:3f:44:e5:53:47:aa:14:8d:22:15:db:63: 26:d7:43:4c:61:e6:32:3d:93:e2:cc:af:af:12:f6:96:e5:55: ce:1a:69:54:b3:a4:47:77:36:80:ca:41:91:d3:83:7d:c3:af: 42:84:a8:ea:56:ea:cc:3c:a3:77:f7:37:08:5d:92:49:0d:06: e6:fe:2a:bf:09:4e:c0:13:b7:7b:6f:07:f3:40:4f:4a:4e:a3: d1:f8:c6:30:b0:8e:e1:14:3a:8c:cd:cd:f8:7f:c8:f1:92:98: f1:bd:58:21:54:0d:80:30:28:b8:99:1d:bf:60:fb:65:3a:14: b8:93:2e:84 -----BEGIN CERTIFICATE----- MIIFpTCCBI2gAwIBAgISAZt7NriHm6zjBqoCGj4q72CmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOWZmM2E3Mzg2OGRjMTFjZDhkYmY1ZTFjMzgwYmJiNzEwNjAyZmI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtj1nCyQSydMyhHScEUWv7IP4keOV Hv7dbIGtj8gqzIiXvDxFFjPLHK+e9cMM5yXW3BKmQoRYUOTCL7B6NBD7AEt+QSQT V3WskgzAYE3YGO5aPfmHRJmNIUknfylPd+clN3+qCHil3uagPFfnd1sKiLVATHM/ b54h5BhWgYjVC+iTq4gqihB7+Gp/ygEIUp62U/Vcm24lIjp5tc93NPDEyVrM3A2u tA21D8fJHFvlQgLoEBVNplgo9Yn123A8reA/gmujwweaeaiEI+KD6dv8nV7qpDZY yGokkiQXFgCLMrHsxnLzpq7G2kIZPzx8tOOjL2d7Du/tGhgemqdwmvk8zwIDAQAB o4ICsTCCAq0wHQYDVR0OBBYEFKn/OnOGjcEc2Nv14cOAu7cQYC+0MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YyLzkxNTg1 YS1hMzhmLTQ3NDktOWY0OC00Nzk3NGY1YzcwNGEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjIvOTE1ODVh LWEzOGYtNDc0OS05ZjQ4LTQ3OTc0ZjVjNzA0YS8xL3FmODZjNGFOd1J6WTJfWGh3 NEM3dHhCZ0w3US5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQBwd/+MA8EAgACMAkDBwAgAQZ4DgQwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDAyfGMA0GCSqGSIb3DQEBCwUAA4IBAQArDkzKOHXD /aZbNek00AVQqqnidLHnefGwY5dNyoHVJY5ADHuuVCvRChM5M5DdWlr47F0cKLZ/ dpEScNE6lZWitpLXPTJGK9Pz6dArvPATCapghZAW9+XYkBi/9MF4VozJZBkdqBte 9hQGqxIP5O8LqtGME3rM1i/sLKX8Sqg7yTzvNj0/ROVTR6oUjSIV22Mm10NMYeYy PZPizK+vEvaW5VXOGmlUs6RHdzaAykGR04N9w69ChKjqVurMPKN39zcIXZJJDQbm /iq/CU7AE7d7bwfzQE9KTqPR+MYwsI7hFDqMzc34f8jxkpjxvVghVA2AMCi4mR2/ YPtlOhS4ky6E -----END CERTIFICATE-----Generated at Tue Feb 10 00:11:42 2026 by rpki-client