This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qjX5B-x9v5xluBWqPXICtt-uMUg.cer File: qjX5B-x9v5xluBWqPXICtt-uMUg.cer (raw, json) Hash identifier: bJozLAq/GhrlguMtroCCFN2nIBZ+49ds49aGYEBUYRc= Subject key identifier: AA:35:F9:07:EC:7D:BF:9C:65:B8:15:AA:3D:72:02:B6:DF:AE:31:48 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7910712C526D2041B2C4115410B444B8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:17:59 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 20647 AS: 208559 IP: 91.102.8.0/21 IP: 185.27.156.0/22 IP: 194.29.224.0/19 IP: 2a02:f28::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:71:2c:52:6d:20:41:b2:c4:11:54:10:b4:44:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aa35f907ec7dbf9c65b815aa3d7202b6dfae3148 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e2:60:ed:b9:d5:cc:46:f8:0a:bc:a2:de:96: dc:4f:01:22:ef:88:37:8d:06:66:91:30:1f:ab:45: cb:3e:ee:4d:11:23:40:ac:8f:02:cf:7e:00:f6:e3: 4f:db:4d:56:4e:c9:4c:79:b4:07:9b:a6:53:e1:d1: de:8c:a9:cd:77:f1:32:82:a2:46:e2:66:26:4a:d7: c9:c3:fd:20:cc:31:e2:64:02:03:f1:57:e2:fd:2d: 94:c2:97:0d:21:31:0e:24:29:f0:78:0e:88:cb:4c: 19:c3:69:54:0d:ae:a4:e2:dd:75:55:48:b7:1e:68: 06:f5:b3:b1:8e:8c:71:c6:0a:0f:0c:e7:4d:63:d8: 3f:af:4c:ad:4a:cf:14:8a:22:26:16:57:fb:ce:09: 81:33:eb:ab:f6:5d:55:60:2a:01:6b:3c:fc:77:d0: ea:90:d0:d2:62:50:4b:91:9e:51:44:18:63:f6:14: b7:ca:52:33:4e:ed:ed:a0:6f:1f:6d:7e:96:5a:87: 29:ba:08:3d:35:97:4a:f9:d1:75:97:06:de:8d:55: d5:61:bb:57:d5:ae:cf:47:ac:4f:28:9e:4a:e3:4e: 18:b8:d8:32:60:2b:8f:a0:2f:cd:17:21:f0:21:ec: 91:0c:3f:2e:28:59:f8:82:e8:ad:91:30:1b:40:55: ae:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:35:F9:07:EC:7D:BF:9C:65:B8:15:AA:3D:72:02:B6:DF:AE:31:48 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.102.8.0/21 185.27.156.0/22 194.29.224.0/19 IPv6: 2a02:f28::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 20647 208559 Signature Algorithm: sha256WithRSAEncryption 8e:1a:ce:a5:ac:cd:76:f1:04:e6:de:9c:d6:f9:1f:38:78:1c: ad:48:e7:28:f8:97:e5:c5:f4:1f:1e:38:64:fc:e0:57:c9:a1: 01:f2:04:aa:0e:f2:9b:b5:5c:54:9c:4c:40:a0:c3:59:00:7a: 96:8f:6d:eb:4a:00:d5:52:fd:c0:fd:e4:e3:95:84:e6:16:68: 6b:b1:44:81:df:ce:13:ce:3b:51:b1:71:07:da:a2:4c:90:45: 7e:17:4d:57:7b:0c:11:c0:7b:c8:c1:24:b0:68:a6:1b:3b:01: ea:9e:4c:51:56:ae:2c:9c:4e:54:c5:74:46:24:62:0d:1e:39: ff:f6:a7:87:be:37:29:ea:a1:08:dc:74:d9:e0:6d:27:ef:5e: f8:09:c6:43:5d:75:6c:29:e6:3e:10:46:20:9a:c7:d6:89:ea: f0:15:e5:68:98:1c:5e:03:0c:21:48:25:97:8a:a6:5e:9a:5e: 2b:78:8c:49:35:9b:db:a8:4a:4f:76:e2:6a:50:93:26:95:62: bd:f6:3e:fe:35:3d:41:83:27:95:59:fe:84:86:e8:dc:28:b7: c9:4b:03:fd:57:a4:79:ff:bb:98:9d:63:54:31:6d:a5:32:7d: 63:92:1c:b3:5e:07:e9:2f:1e:8c:55:80:05:18:9c:78:b8:4d: e4:0d:56:1d -----BEGIN CERTIFICATE----- MIIFszCCBJugAwIBAgISAZt5EHEsUm0gQbLEEVQQtES4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYTM1ZjkwN2VjN2RiZjljNjViODE1YWEzZDcyMDJiNmRmYWUzMTQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApeJg7bnVzEb4Cryi3pbcTwEi74g3 jQZmkTAfq0XLPu5NESNArI8Cz34A9uNP201WTslMebQHm6ZT4dHejKnNd/EygqJG 4mYmStfJw/0gzDHiZAID8Vfi/S2UwpcNITEOJCnweA6Iy0wZw2lUDa6k4t11VUi3 HmgG9bOxjoxxxgoPDOdNY9g/r0ytSs8UiiImFlf7zgmBM+ur9l1VYCoBazz8d9Dq kNDSYlBLkZ5RRBhj9hS3ylIzTu3toG8fbX6WWocpugg9NZdK+dF1lwbejVXVYbtX 1a7PR6xPKJ5K404YuNgyYCuPoC/NFyHwIeyRDD8uKFn4guitkTAbQFWuYQIDAQAB o4ICvzCCArswHQYDVR0OBBYEFKo1+Qfsfb+cZbgVqj1yArbfrjFIMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZlL2IxYzUw ZS1hZjI3LTRhNjItYWUyMy1iNmYxY2ZhYTY5ODUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmUvYjFjNTBl LWFmMjctNGE2Mi1hZTIzLWI2ZjFjZmFhNjk4NS8xL3FqWDVCLXg5djV4bHVCV3FQ WElDdHQtdU1VZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQDW2YIAwQCuRucAwQFwh3gMA0EAgACMAcDBQAq Ag8oMB4GCCsGAQUFBwEIAQH/BA8wDaALMAkCAlCnAgMDLq8wDQYJKoZIhvcNAQEL BQADggEBAI4azqWszXbxBObenNb5Hzh4HK1I5yj4l+XF9B8eOGT84FfJoQHyBKoO 8pu1XFScTECgw1kAepaPbetKANVS/cD95OOVhOYWaGuxRIHfzhPOO1GxcQfaokyQ RX4XTVd7DBHAe8jBJLBophs7AeqeTFFWriycTlTFdEYkYg0eOf/2p4e+NynqoQjc dNngbSfvXvgJxkNddWwp5j4QRiCax9aJ6vAV5WiYHF4DDCFIJZeKpl6aXit4jEk1 m9uoSk924mpQkyaVYr32Pv41PUGDJ5VZ/oSG6Nwot8lLA/1XpHn/u5idY1QxbaUy fWOSHLNeB+kvHoxVgAUYnHi4TeQNVh0= -----END CERTIFICATE-----Generated at Mon Feb 9 16:53:15 2026 by rpki-client