This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qm2IkEHLKa7R_hrDgMeUr3pCx9E.cer File: qm2IkEHLKa7R_hrDgMeUr3pCx9E.cer (raw, json) Hash identifier: W5g65PCuv/cj6wXz9M75SaiGOA4Ao0Rc6AGs5LaXMuQ= Subject key identifier: AA:6D:88:90:41:CB:29:AE:D1:FE:1A:C3:80:C7:94:AF:7A:42:C7:D1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BD620F1A9C7909C62DBFEEB59C97E7709 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Mon 19 Jan 2026 12:00:41 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 212418 IP: 89.34.218.0/24 IP: 89.38.56.0/24 IP: 89.40.68.0/24 IP: 185.209.13.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d6:20:f1:a9:c7:90:9c:62:db:fe:eb:59:c9:7e:77:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 19 12:00:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aa6d889041cb29aed1fe1ac380c794af7a42c7d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:1d:8d:74:bc:69:c6:d9:8b:77:65:57:53:99: 24:fe:93:f7:22:66:74:86:49:a0:d7:26:9e:d7:3a: 25:df:9b:ce:24:fa:58:f7:db:d8:5d:da:85:6d:9f: 00:88:66:82:0b:52:78:f6:ca:34:a3:41:a1:ba:8f: 05:ba:91:7e:6f:0b:6f:1a:f3:a3:47:6b:48:03:05: e3:89:25:e4:05:2e:39:e2:47:f8:f3:41:fe:5d:98: e5:99:cb:7e:bb:d7:26:81:56:b5:0e:53:d3:65:72: e2:13:35:d2:8b:d7:d8:a5:fb:29:c8:7f:43:25:02: 3a:0f:e2:84:23:8b:f8:c6:c1:70:1a:22:89:c0:08: 71:a7:85:78:13:85:0a:b4:76:fe:46:73:80:78:b3: ba:fa:c8:d5:11:c6:5d:e4:74:53:0a:34:81:2e:68: 23:ec:39:75:8d:0c:7e:f9:c6:a2:4c:b3:8e:35:4b: c2:0d:52:ca:2d:04:b5:1d:46:9b:cb:e8:7e:cc:a9: 56:8a:3d:7e:a8:7d:c3:e2:35:75:78:08:dc:a0:1b: 6c:64:5f:58:92:da:db:42:76:1f:bb:18:8a:a2:79: 7a:49:89:b2:d3:7b:32:23:59:e6:17:9b:66:bc:7d: 74:be:67:08:87:c7:4e:24:da:0c:44:09:1d:1f:a4: 67:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:6D:88:90:41:CB:29:AE:D1:FE:1A:C3:80:C7:94:AF:7A:42:C7:D1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.34.218.0/24 89.38.56.0/24 89.40.68.0/24 185.209.13.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 212418 Signature Algorithm: sha256WithRSAEncryption 5e:22:11:77:41:e5:4e:f7:ea:d8:13:fb:bb:6e:b1:08:7e:1d: 99:22:99:9f:c8:49:76:9c:14:d6:cd:c0:1c:32:3f:72:c0:4e: 34:60:1a:28:1f:54:69:b4:2e:54:72:23:ae:6e:01:1a:4a:5f: 0e:07:80:1a:2b:f0:a8:f2:41:56:6b:f6:82:0a:74:0c:bf:97: c1:15:38:f6:c0:13:1f:d9:c9:1f:11:8a:01:87:a8:9c:1d:b0: 2a:6c:04:30:20:61:0a:61:ed:8c:c7:50:e3:41:8e:da:e5:d7: 79:cd:82:08:3d:6e:63:6b:71:11:26:41:14:7a:c0:02:86:88: 38:38:8d:6b:46:64:a7:04:0d:5a:cb:b0:58:88:36:92:31:fa: bf:f6:18:79:22:ea:91:18:c6:6a:a2:62:e9:e3:20:93:0f:03: 54:09:aa:f2:21:e8:b2:f7:d2:01:92:dd:1c:0e:f8:07:57:ef: db:6b:8b:46:e8:79:3b:97:da:78:66:ef:1b:14:59:9d:88:7c: 94:86:08:d9:6d:03:d6:5b:29:0e:da:df:5c:49:0d:08:be:ab: 99:47:a8:a0:82:1b:6f:e9:65:93:59:02:8e:99:0e:ba:9e:13: 84:29:e5:51:05:55:7e:71:33:22:eb:92:61:6d:79:31:cb:b6: a3:13:5c:1e -----BEGIN CERTIFICATE----- MIIFpjCCBI6gAwIBAgISAZvWIPGpx5CcYtv+61nJfncJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTE5MTIwMDQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYTZkODg5MDQxY2IyOWFlZDFmZTFhYzM4MGM3OTRhZjdhNDJjN2QxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqx2NdLxpxtmLd2VXU5kk/pP3ImZ0 hkmg1yae1zol35vOJPpY99vYXdqFbZ8AiGaCC1J49so0o0Ghuo8FupF+bwtvGvOj R2tIAwXjiSXkBS454kf480H+XZjlmct+u9cmgVa1DlPTZXLiEzXSi9fYpfspyH9D JQI6D+KEI4v4xsFwGiKJwAhxp4V4E4UKtHb+RnOAeLO6+sjVEcZd5HRTCjSBLmgj 7Dl1jQx++caiTLOONUvCDVLKLQS1HUaby+h+zKlWij1+qH3D4jV1eAjcoBtsZF9Y ktrbQnYfuxiKonl6SYmy03syI1nmF5tmvH10vmcIh8dOJNoMRAkdH6RnkwIDAQAB o4ICsjCCAq4wHQYDVR0OBBYEFKptiJBByymu0f4aw4DHlK96QsfRMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZmLzkwNTA3 OS05ZDdmLTQ4YzgtYTMwNi1lMTNkNjlhMDA0NWUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmYvOTA1MDc5 LTlkN2YtNDhjOC1hMzA2LWUxM2Q2OWEwMDQ1ZS8xL3FtMklrRUhMS2E3Ul9ockRn TWVVcjNwQ3g5RS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDEGCCsGAQUF BwEHAQH/BCIwIDAeBAIAATAYAwQAWSLaAwQAWSY4AwQAWShEAwQAudENMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwM9wjANBgkqhkiG9w0BAQsFAAOCAQEAXiIRd0Hl Tvfq2BP7u26xCH4dmSKZn8hJdpwU1s3AHDI/csBONGAaKB9UabQuVHIjrm4BGkpf DgeAGivwqPJBVmv2ggp0DL+XwRU49sATH9nJHxGKAYeonB2wKmwEMCBhCmHtjMdQ 40GO2uXXec2CCD1uY2txESZBFHrAAoaIODiNa0ZkpwQNWsuwWIg2kjH6v/YYeSLq kRjGaqJi6eMgkw8DVAmq8iHosvfSAZLdHA74B1fv22uLRuh5O5faeGbvGxRZnYh8 lIYI2W0D1lspDtrfXEkNCL6rmUeooIIbb+llk1kCjpkOup4ThCnlUQVVfnEzIuuS YW15Mcu2oxNcHg== -----END CERTIFICATE-----Generated at Wed Jan 21 15:56:30 2026 by rpki-client