This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qjHuUSwaViq56UEKgx9y_UMYiS4.cer File: qjHuUSwaViq56UEKgx9y_UMYiS4.cer (raw, json) Hash identifier: JMxLZwq1MNQBJpmxSHwoMlNdShDoA0oARW8X2jKtHzw= Subject key identifier: AA:31:EE:51:2C:1A:56:2A:B9:E9:41:0A:83:1F:72:FD:43:18:89:2E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A2C81D23FBA6152CD003EE165EFDC9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d2/e7ef54-bdb0-450a-8646-ee08146e3713/1/qjHuUSwaViq56UEKgx9y_UMYiS4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d2/e7ef54-bdb0-450a-8646-ee08146e3713/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:12 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 35677 IP: 185.92.76.0/22 IP: 2a03:8ae0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:c8:1d:23:fb:a6:15:2c:d0:03:ee:16:5e:fd:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aa31ee512c1a562ab9e9410a831f72fd4318892e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:25:f2:1b:86:cd:78:86:85:8a:db:3f:86:b5: 55:49:90:cb:ec:b3:20:14:91:8b:43:11:c1:68:da: 79:07:50:14:1e:f1:a7:6c:a5:a5:87:5d:4e:77:e7: db:41:e2:6d:93:8c:61:00:2a:7b:0b:00:c1:0c:b8: a7:77:b2:74:eb:aa:e1:07:b0:bb:47:52:df:84:11: 1b:16:3e:74:94:2c:24:d8:b9:7d:c0:56:89:71:6b: ac:3d:3c:50:a5:eb:7b:58:f3:36:0f:19:60:eb:af: 66:f4:8f:f9:1b:8c:55:ac:18:71:15:59:f3:32:d8: 13:79:00:c7:9a:30:0f:12:27:f6:78:13:20:3c:bf: 8d:b7:44:98:b5:22:3c:53:e7:34:9c:1d:39:95:6a: 07:50:f0:7f:4c:93:ca:9b:a9:2e:19:31:91:fc:d0: 83:02:db:31:9d:a5:85:4d:11:b0:d5:a0:a1:2a:03: f2:f7:38:2d:75:af:f4:94:b7:2d:eb:7b:1c:f7:da: 61:b5:87:a6:59:37:7f:62:da:2f:96:dc:ca:c1:19: 7c:18:70:f3:49:59:12:7c:5c:90:a6:a9:e9:16:f2: e7:91:04:3e:2f:0a:d0:45:98:68:70:19:1c:03:25: 54:91:74:53:33:fc:c6:a7:ab:d7:66:5d:d6:b5:0b: 3b:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:31:EE:51:2C:1A:56:2A:B9:E9:41:0A:83:1F:72:FD:43:18:89:2E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e7ef54-bdb0-450a-8646-ee08146e3713/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e7ef54-bdb0-450a-8646-ee08146e3713/1/qjHuUSwaViq56UEKgx9y_UMYiS4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.92.76.0/22 IPv6: 2a03:8ae0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 35677 Signature Algorithm: sha256WithRSAEncryption 25:1b:a6:bd:13:4a:69:de:43:e0:df:d4:93:c2:63:27:da:fd: 8b:39:16:d8:4f:08:79:a3:09:ef:95:51:2c:ee:76:74:ec:e7: 11:58:07:37:64:ad:0c:b8:dc:a8:96:ab:f1:25:67:54:07:f7: 24:b6:b3:c0:58:fc:cc:fe:07:50:1d:d0:a9:b5:b4:0b:db:0c: 89:34:72:a7:34:fc:a9:08:c1:c0:61:4e:fd:9a:4e:b4:44:ad: 4e:e5:88:d2:e3:bb:bb:94:af:6e:0f:f6:4c:b5:00:84:b0:13: e5:6d:4b:e8:67:f0:bc:5f:2b:56:33:52:cf:2a:65:88:a2:f8: 49:5b:46:77:d5:ce:8d:48:81:53:4f:1f:f8:7b:fb:b2:e1:5a: 1b:8e:36:11:a8:15:bf:37:9b:14:30:36:6f:6d:1d:53:68:6c: 54:9f:1f:ab:2b:c7:b2:33:5c:86:ce:da:6b:42:56:f4:40:b4: 18:94:c1:7e:6d:84:3f:24:cb:e2:69:8e:89:e6:a5:61:69:d7: 40:bd:d2:9b:16:16:68:91:6b:49:52:01:35:17:6b:35:ae:6a: 2c:56:ff:7c:51:27:01:bf:84:63:b9:f3:a5:f5:f5:5d:03:9f: 0e:ef:fe:54:d1:0e:88:91:98:9b:96:9d:85:4d:27:47:3b:e7: 03:57:e7:ba -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt4osgdI/umFSzQA+4WXv3JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYTMxZWU1MTJjMWE1NjJhYjllOTQxMGE4MzFmNzJmZDQzMTg4OTJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1SXyG4bNeIaFits/hrVVSZDL7LMg FJGLQxHBaNp5B1AUHvGnbKWlh11Od+fbQeJtk4xhACp7CwDBDLind7J066rhB7C7 R1LfhBEbFj50lCwk2Ll9wFaJcWusPTxQpet7WPM2Dxlg669m9I/5G4xVrBhxFVnz MtgTeQDHmjAPEif2eBMgPL+Nt0SYtSI8U+c0nB05lWoHUPB/TJPKm6kuGTGR/NCD AtsxnaWFTRGw1aChKgPy9zgtda/0lLct63sc99phtYemWTd/YtovltzKwRl8GHDz SVkSfFyQpqnpFvLnkQQ+LwrQRZhocBkcAyVUkXRTM/zGp6vXZl3WtQs77QIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFKox7lEsGlYquelBCoMfcv1DGIkuMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2QyL2U3ZWY1 NC1iZGIwLTQ1MGEtODY0Ni1lZTA4MTQ2ZTM3MTMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDIvZTdlZjU0 LWJkYjAtNDUwYS04NjQ2LWVlMDgxNDZlMzcxMy8xL3FqSHVVU3dhVmlxNTZVRUtn eDl5X1VNWWlTNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuVxMMA0EAgACMAcDBQAqA4rgMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwCLXTANBgkqhkiG9w0BAQsFAAOCAQEAJRumvRNKad5D 4N/Uk8JjJ9r9izkW2E8IeaMJ75VRLO52dOznEVgHN2StDLjcqJar8SVnVAf3JLaz wFj8zP4HUB3QqbW0C9sMiTRypzT8qQjBwGFO/ZpOtEStTuWI0uO7u5Svbg/2TLUA hLAT5W1L6GfwvF8rVjNSzypliKL4SVtGd9XOjUiBU08f+Hv7suFaG442EagVvzeb FDA2b20dU2hsVJ8fqyvHsjNchs7aa0JW9EC0GJTBfm2EPyTL4mmOiealYWnXQL3S mxYWaJFrSVIBNRdrNa5qLFb/fFEnAb+EY7nzpfX1XQOfDu/+VNEOiJGYm5adhU0n RzvnA1fnug== -----END CERTIFICATE-----Generated at Mon Feb 9 15:14:35 2026 by rpki-client