This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qiEQS093IiTRGFaiTt-UZqhE0mw.cer File: qiEQS093IiTRGFaiTt-UZqhE0mw.cer (raw, json) Hash identifier: N/NwpJ/1yHWNBBL+O9W3FCP44HwbjIPEjtX9J+CuJKc= Subject key identifier: AA:21:10:4B:4F:77:22:24:D1:18:56:A2:4E:DF:94:66:A8:44:D2:6C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5C7DBB572429E5666815A585188630 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8a/dabacb-e6f5-4065-86b6-8e0d83c5edfe/1/qiEQS093IiTRGFaiTt-UZqhE0mw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8a/dabacb-e6f5-4065-86b6-8e0d83c5edfe/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:19:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 194.62.108.0/22 IP: 2a0c:fd40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:7d:bb:57:24:29:e5:66:68:15:a5:85:18:86:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:19:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aa21104b4f772224d11856a24edf9466a844d26c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:62:b5:b6:9e:54:72:c4:38:a8:97:18:9f:2b: b7:ec:70:25:c5:9b:95:be:7b:05:4e:7c:ec:1e:40: 5f:54:d9:66:05:91:06:c9:02:37:02:b0:ab:75:b3: 17:ee:90:e2:89:a1:0d:cc:07:1c:45:c3:7e:d6:0b: 99:d6:90:48:f5:c8:2b:08:0d:d7:2c:2b:ef:81:e4: 4d:6a:eb:08:b8:02:4b:4a:6c:8a:64:fd:08:ac:61: dc:a0:45:fa:d2:36:3c:ad:d2:f9:4f:96:c0:4f:9e: 54:10:45:6a:77:3c:1b:d3:a7:53:a3:24:ad:61:da: 0a:1d:5e:83:32:09:32:40:9e:2b:95:85:39:16:52: 1b:cf:09:2e:d4:f6:83:3c:91:8b:33:8d:fd:cc:8b: 71:1d:9d:ce:ad:09:6b:98:09:c1:3c:86:be:7b:ae: ac:b7:3b:f0:9e:14:db:73:81:93:54:08:b1:b6:5d: c7:58:bf:14:b0:4e:48:ef:3a:36:3d:e3:f0:61:ea: 43:60:0c:f6:ed:d0:74:cf:2e:15:8a:d5:8a:ee:52: 49:d5:45:18:18:7c:c8:d6:e2:9a:51:59:7f:11:49: 2a:b6:d0:67:c5:e2:03:7f:9b:c2:42:3c:55:66:4c: dc:83:79:a7:29:18:63:9d:d1:6d:b7:77:68:6b:82: b0:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:21:10:4B:4F:77:22:24:D1:18:56:A2:4E:DF:94:66:A8:44:D2:6C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/dabacb-e6f5-4065-86b6-8e0d83c5edfe/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/dabacb-e6f5-4065-86b6-8e0d83c5edfe/1/qiEQS093IiTRGFaiTt-UZqhE0mw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.62.108.0/22 IPv6: 2a0c:fd40::/29 Signature Algorithm: sha256WithRSAEncryption 30:d4:a8:25:1f:80:78:85:a7:38:1d:24:29:52:3d:3a:79:d9: ab:f3:ed:3f:cc:ad:cb:4f:ae:8b:f2:1a:78:92:aa:5a:5f:55: e2:69:61:fc:51:09:75:3e:81:6f:91:be:8d:b3:3d:9c:0a:72: 53:1e:4d:44:dc:ad:d2:dd:87:fd:d8:cc:e8:f1:58:48:57:d0: c8:e5:5d:dc:69:39:1c:6f:18:27:34:be:33:57:ce:ca:da:42: 6a:f7:e2:2e:53:be:2f:48:7e:40:bd:05:04:73:37:02:5a:82: ad:2c:29:13:a6:ea:a0:d1:6c:c3:62:28:91:35:1f:69:55:33: 9b:93:82:a2:23:b2:8a:0c:21:9b:7a:40:64:4a:d8:20:19:35: a3:29:07:cc:46:2d:6b:ec:7e:53:04:54:de:0a:eb:df:50:9d: eb:34:fa:27:2e:e4:58:6a:79:2e:1f:b5:ab:0d:d5:9b:39:a8: e7:27:75:28:8c:0a:01:21:05:80:eb:c2:2a:62:59:4b:2d:75: 83:4e:85:47:3f:48:7d:62:bc:f4:12:bd:63:31:e5:bd:3f:63: 8b:fd:2b:d1:46:af:a2:c7:98:45:d3:48:1a:e0:4d:20:26:c7: 5c:11:47:68:33:79:37:ba:97:e5:32:a2:a0:79:d8:b6:a0:b1: 48:51:fe:8d -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt9XH27VyQp5WZoFaWFGIYwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxOTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYTIxMTA0YjRmNzcyMjI0ZDExODU2YTI0ZWRmOTQ2NmE4NDRkMjZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmK1tp5UcsQ4qJcYnyu37HAlxZuV vnsFTnzsHkBfVNlmBZEGyQI3ArCrdbMX7pDiiaENzAccRcN+1guZ1pBI9cgrCA3X LCvvgeRNausIuAJLSmyKZP0IrGHcoEX60jY8rdL5T5bAT55UEEVqdzwb06dToySt YdoKHV6DMgkyQJ4rlYU5FlIbzwku1PaDPJGLM439zItxHZ3OrQlrmAnBPIa+e66s tzvwnhTbc4GTVAixtl3HWL8UsE5I7zo2PePwYepDYAz27dB0zy4VitWK7lJJ1UUY GHzI1uKaUVl/EUkqttBnxeIDf5vCQjxVZkzcg3mnKRhjndFtt3doa4KwRwIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFKohEEtPdyIk0RhWok7flGaoRNJsMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhhL2RhYmFj Yi1lNmY1LTQwNjUtODZiNi04ZTBkODNjNWVkZmUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGEvZGFiYWNi LWU2ZjUtNDA2NS04NmI2LThlMGQ4M2M1ZWRmZS8xL3FpRVFTMDkzSWlUUkdGYWlU dC1VWnFoRTBtdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCwj5sMA0EAgACMAcDBQMqDP1AMA0GCSqGSIb3 DQEBCwUAA4IBAQAw1KglH4B4hac4HSQpUj06edmr8+0/zK3LT66L8hp4kqpaX1Xi aWH8UQl1PoFvkb6Nsz2cCnJTHk1E3K3S3Yf92Mzo8VhIV9DI5V3caTkcbxgnNL4z V87K2kJq9+IuU74vSH5AvQUEczcCWoKtLCkTpuqg0WzDYiiRNR9pVTObk4KiI7KK DCGbekBkStggGTWjKQfMRi1r7H5TBFTeCuvfUJ3rNPonLuRYankuH7WrDdWbOajn J3UojAoBIQWA68IqYllLLXWDToVHP0h9Yrz0Er1jMeW9P2OL/SvRRq+ix5hF00ga 4E0gJsdcEUdoM3k3upflMqKgedi2oLFIUf6N -----END CERTIFICATE-----Generated at Mon Feb 9 15:13:25 2026 by rpki-client