This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qkTrCRs6M6h7644ASrFe8Xj7qgA.cer File: qkTrCRs6M6h7644ASrFe8Xj7qgA.cer (raw, json) Hash identifier: LFmmzh2b3wk0JKPfJzKZevTZEVBNUIlAUaWbZO2PoOo= Subject key identifier: AA:44:EB:09:1B:3A:33:A8:7B:EB:8E:00:4A:B1:5E:F1:78:FB:AA:00 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B36B686DC2E43A4797BA8B9DE0E5059 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:19:01 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 208456 AS: 209974 AS: 212675 AS: 214856 IP: 45.95.56.0/22 IP: 46.243.180.0 -- 46.243.187.255 IP: 77.105.148.0 -- 77.105.155.255 IP: 78.140.240.0/21 IP: 89.169.20.0/22 IP: 93.183.72.0/21 IP: 178.170.224.0/24 IP: 185.5.204.0/23 IP: 188.227.32.0/22 IP: 195.88.192.0/23 IP: 2a0e:33c0::/29 IP: 2a0e:aac0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:b6:86:dc:2e:43:a4:79:7b:a8:b9:de:0e:50:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aa44eb091b3a33a87beb8e004ab15ef178fbaa00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:33:6c:15:06:58:e4:7b:27:2a:3d:5c:a1:c0: 15:ee:80:79:bb:68:b3:69:83:63:12:33:4b:59:73: 17:69:89:7f:8e:3f:33:7f:a4:81:59:64:fc:98:ef: 5a:d4:74:50:e9:18:c7:86:41:fd:aa:35:d9:c7:01: ad:75:29:68:f8:92:95:7b:0e:a6:89:18:97:1f:0e: d6:91:da:b7:b5:bf:ab:03:25:74:40:da:a8:72:34: f9:c8:bb:d6:af:c6:72:7c:09:6c:b1:d0:f2:61:cd: 41:1e:f4:17:1c:d3:45:5e:4d:0b:a9:29:f1:55:9f: 70:a3:4c:a8:c3:b4:2c:f1:1e:79:73:5e:ee:41:e4: eb:88:90:69:c7:eb:3b:c8:09:33:f8:d5:a4:01:ab: 94:8d:a9:ba:6d:1c:3e:ca:7d:fa:d5:6b:85:a1:d0: 67:b2:83:cc:e0:a8:3a:96:ca:96:04:13:f1:89:3f: 1b:5f:f5:8a:aa:cd:55:a5:bd:a0:67:25:e2:b0:5f: eb:a3:33:f3:e3:27:ae:f0:97:20:bc:37:46:29:9c: d1:2c:34:5d:72:1b:ee:f2:ac:d8:21:d6:4c:b3:84: 07:41:40:ea:38:32:70:4d:7b:2f:9b:9f:22:c7:87: ca:d8:26:7f:43:65:c2:db:cb:ae:0a:de:90:4e:18: fe:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:44:EB:09:1B:3A:33:A8:7B:EB:8E:00:4A:B1:5E:F1:78:FB:AA:00 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.95.56.0/22 46.243.180.0-46.243.187.255 77.105.148.0-77.105.155.255 78.140.240.0/21 89.169.20.0/22 93.183.72.0/21 178.170.224.0/24 185.5.204.0/23 188.227.32.0/22 195.88.192.0/23 IPv6: 2a0e:33c0::/29 2a0e:aac0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 208456 209974 212675 214856 Signature Algorithm: sha256WithRSAEncryption 7c:12:63:4d:d6:6e:aa:ae:27:0d:38:fd:38:5e:c0:72:d6:5b: 91:2a:91:29:a7:e5:4f:71:3f:89:82:bb:47:f0:91:83:cc:9b: d0:40:07:ee:45:26:54:85:81:a3:0d:e6:34:cc:39:27:eb:b0: ab:40:41:12:4d:34:d9:a0:8a:4c:7a:54:ff:9b:6b:ef:86:ca: 58:8b:2d:13:2a:c6:5b:4b:09:1b:d0:3a:47:04:6c:25:29:f0: f8:f2:5c:fa:82:a1:d7:28:82:61:46:6e:aa:2d:1f:ce:19:c7: 12:e3:f1:56:43:ce:f6:7f:fe:a2:94:1f:e7:86:c3:6f:13:34: 20:c9:7c:2d:5c:d9:2d:e4:6b:45:d7:38:5a:96:a0:86:9f:3b: 9e:68:ca:c6:4d:6e:b4:18:db:56:cb:01:3c:99:bd:23:e0:98: 60:9f:5c:d9:7f:e4:d3:4e:44:ff:c3:03:58:ef:67:ea:04:4e: 22:4d:e8:b2:59:5e:2c:b0:37:75:14:35:76:30:58:fb:e3:c8: 24:a2:28:e7:03:cd:83:ac:7f:42:c8:a0:ea:18:fc:51:2f:0e: 97:23:57:05:6d:92:dd:54:a6:09:b6:8d:69:af:20:c9:f6:51: 79:59:dd:98:4d:d9:89:8b:64:ea:fc:3f:28:1a:e1:eb:7e:83: ff:7a:f6:45 -----BEGIN CERTIFICATE----- MIIF/zCCBOegAwIBAgISAZt7NraG3C5DpHl7qLneDlBZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYTQ0ZWIwOTFiM2EzM2E4N2JlYjhlMDA0YWIxNWVmMTc4ZmJhYTAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTNsFQZY5HsnKj1cocAV7oB5u2iz aYNjEjNLWXMXaYl/jj8zf6SBWWT8mO9a1HRQ6RjHhkH9qjXZxwGtdSlo+JKVew6m iRiXHw7Wkdq3tb+rAyV0QNqocjT5yLvWr8ZyfAlssdDyYc1BHvQXHNNFXk0LqSnx VZ9wo0yow7Qs8R55c17uQeTriJBpx+s7yAkz+NWkAauUjam6bRw+yn361WuFodBn soPM4Kg6lsqWBBPxiT8bX/WKqs1Vpb2gZyXisF/rozPz4yeu8JcgvDdGKZzRLDRd chvu8qzYIdZMs4QHQUDqODJwTXsvm58ix4fK2CZ/Q2XC28uuCt6QThj+3QIDAQAB o4IDCzCCAwcwHQYDVR0OBBYEFKpE6wkbOjOoe+uOAEqxXvF4+6oAMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk3L2ZiN2E3 ZC0wNjU1LTQ1ODctOGFmOS03NzAwZTI1ZmY3NjkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTcvZmI3YTdk LTA2NTUtNDU4Ny04YWY5LTc3MDBlMjVmZjc2OS8xL3FrVHJDUnM2TTZoNzY0NEFT ckZlOFhqN3FnQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMHsGCCsGAQUF BwEHAQH/BGwwajBSBAIAATBMAwQCLV84MAwDBAIu87QDBAIu87gwDAMEAk1plAME Ak1pmAMEA06M8AMEAlmpFAMEA123SAMEALKq4AMEAbkFzAMEArzjIAMEAcNYwDAU BAIAAjAOAwUDKg4zwAMFAyoOqsAwKQYIKwYBBQUHAQgBAf8EGjAYoBYwFAIDAy5I AgMDNDYCAwM+wwIDA0dIMA0GCSqGSIb3DQEBCwUAA4IBAQB8EmNN1m6qricNOP04 XsBy1luRKpEpp+VPcT+JgrtH8JGDzJvQQAfuRSZUhYGjDeY0zDkn67CrQEESTTTZ oIpMelT/m2vvhspYiy0TKsZbSwkb0DpHBGwlKfD48lz6gqHXKIJhRm6qLR/OGccS 4/FWQ872f/6ilB/nhsNvEzQgyXwtXNkt5GtF1zhalqCGnzueaMrGTW60GNtWywE8 mb0j4Jhgn1zZf+TTTkT/wwNY72fqBE4iTeiyWV4ssDd1FDV2MFj748gkoijnA82D rH9CyKDqGPxRLw6XI1cFbZLdVKYJto1pryDJ9lF5Wd2YTdmJi2Tq/D8oGuHrfoP/ evZF -----END CERTIFICATE-----Generated at Mon Feb 9 15:08:59 2026 by rpki-client