This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qmVRVhfXd7VhHdDgs9ACU-oymgc.cer File: qmVRVhfXd7VhHdDgs9ACU-oymgc.cer (raw, json) Hash identifier: NKHxTveqbxeRgv0ApmnmNX1uBoJJkMDLcuAqnm123Go= Subject key identifier: AA:65:51:56:17:D7:77:B5:61:1D:D0:E0:B3:D0:02:53:EA:32:9A:07 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ECBACA63D5AC02316B5BA1E8E48887 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/09/cd9b89-7568-47b1-8e51-e592c7d35ff2/1/qmVRVhfXd7VhHdDgs9ACU-oymgc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/09/cd9b89-7568-47b1-8e51-e592c7d35ff2/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:36 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 205941 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:ba:ca:63:d5:ac:02:31:6b:5b:a1:e8:e4:88:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aa65515617d777b5611dd0e0b3d00253ea329a07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c1:41:cf:ca:fd:bd:f3:98:84:cf:e4:b9:e2: e2:4d:aa:85:df:72:2b:c4:2e:c9:c3:67:f2:20:57: 25:85:9d:03:a6:c0:25:b2:ba:71:80:d0:a3:83:6f: 0c:a0:61:11:b5:6a:64:0b:59:92:a4:7c:fd:3a:8a: 3a:e1:d2:4e:30:33:ad:68:73:f8:02:ae:58:cb:d3: 6c:1a:01:06:ab:8d:89:d3:60:cb:26:41:30:e1:81: 6a:82:35:d3:e4:52:2e:f1:b2:a3:0d:01:6f:bf:a7: aa:aa:38:87:a2:47:d4:32:fa:ff:a1:4d:68:e3:f9: 8a:c5:c0:a4:b7:e7:23:6a:ed:87:e4:2f:60:c0:2a: 69:95:17:11:3a:cd:b3:70:7c:8c:17:f7:31:9a:b1: 30:3c:c0:a3:f3:6a:fc:83:73:5d:d3:68:a0:e9:dd: 04:28:0f:35:94:34:cb:4c:0b:87:bf:4b:1b:b5:a1: 00:26:14:b8:54:80:4a:11:57:29:4c:16:ef:11:48: e2:40:f8:ce:97:30:e2:bc:20:83:fd:d9:d2:4a:f5: aa:99:d4:a6:f5:db:db:d8:d7:c0:77:9b:70:fe:36: 98:d2:09:d9:f0:7d:75:73:30:29:d6:d0:e9:11:c6: 47:79:80:20:49:fd:e3:ac:ed:d3:fb:df:8d:2c:fd: 5a:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:65:51:56:17:D7:77:B5:61:1D:D0:E0:B3:D0:02:53:EA:32:9A:07 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/cd9b89-7568-47b1-8e51-e592c7d35ff2/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/cd9b89-7568-47b1-8e51-e592c7d35ff2/1/qmVRVhfXd7VhHdDgs9ACU-oymgc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 205941 Signature Algorithm: sha256WithRSAEncryption 8c:40:57:c2:14:74:6f:c9:e5:9d:a6:bd:26:fa:31:6c:ad:38: 0d:20:d5:ab:92:32:f0:db:13:d3:4b:e8:0b:87:54:2e:1c:17: d7:27:c0:26:96:9c:27:61:18:08:af:2f:2a:28:71:c8:10:4c: 87:36:df:14:f5:cb:41:de:7b:89:62:11:f0:7d:ff:33:7b:6d: e6:1b:d5:dd:14:d7:6e:a1:6b:4a:8a:44:98:0a:3a:ad:2d:a3: da:82:0f:69:bd:7c:40:fb:66:71:9a:f8:21:f6:8d:35:f1:11: 43:df:af:ff:bd:d1:dd:5c:5e:05:66:37:b9:c0:72:c1:51:2d: f0:14:9e:14:29:d5:7e:ef:41:59:99:30:bc:ec:25:09:38:40: 14:39:0f:ab:ce:0e:7e:ca:04:2f:b4:78:20:7d:3d:7f:fb:67: 59:ea:10:20:ec:27:f3:e2:51:7d:5b:61:83:9b:bf:25:98:87: 73:36:40:ac:79:1a:eb:59:23:4f:46:69:56:5a:b9:8d:7d:ca: f3:bf:e5:b9:c4:f7:e9:47:b3:87:05:17:f4:bb:f9:ca:09:cc: 39:4e:95:e2:e4:95:29:7b:e0:b5:a3:27:16:82:30:6f:04:9d: a3:40:6e:49:22:4e:15:44:6d:fd:95:55:a7:ed:6c:60:84:ee: d4:fc:df:ad -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt57LrKY9WsAjFrW6Ho5IiHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYTY1NTE1NjE3ZDc3N2I1NjExZGQwZTBiM2QwMDI1M2VhMzI5YTA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8FBz8r9vfOYhM/kueLiTaqF33Ir xC7Jw2fyIFclhZ0DpsAlsrpxgNCjg28MoGERtWpkC1mSpHz9Ooo64dJOMDOtaHP4 Aq5Yy9NsGgEGq42J02DLJkEw4YFqgjXT5FIu8bKjDQFvv6eqqjiHokfUMvr/oU1o 4/mKxcCkt+cjau2H5C9gwCpplRcROs2zcHyMF/cxmrEwPMCj82r8g3Nd02ig6d0E KA81lDTLTAuHv0sbtaEAJhS4VIBKEVcpTBbvEUjiQPjOlzDivCCD/dnSSvWqmdSm 9dvb2NfAd5tw/jaY0gnZ8H11czAp1tDpEcZHeYAgSf3jrO3T+9+NLP1aEwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFKplUVYX13e1YR3Q4LPQAlPqMpoHMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA5L2NkOWI4 OS03NTY4LTQ3YjEtOGU1MS1lNTkyYzdkMzVmZjIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDkvY2Q5Yjg5 LTc1NjgtNDdiMS04ZTUxLWU1OTJjN2QzNWZmMi8xL3FtVlJWaGZYZDdWaEhkRGdz OUFDVS1veW1nYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMkdTANBgkqhkiG9w0BAQsFAAOCAQEAjEBXwhR0b8nl naa9JvoxbK04DSDVq5Iy8NsT00voC4dULhwX1yfAJpacJ2EYCK8vKihxyBBMhzbf FPXLQd57iWIR8H3/M3tt5hvV3RTXbqFrSopEmAo6rS2j2oIPab18QPtmcZr4IfaN NfERQ9+v/73R3VxeBWY3ucBywVEt8BSeFCnVfu9BWZkwvOwlCThAFDkPq84OfsoE L7R4IH09f/tnWeoQIOwn8+JRfVthg5u/JZiHczZArHka61kjT0ZpVlq5jX3K87/l ucT36UezhwUX9Lv5ygnMOU6V4uSVKXvgtaMnFoIwbwSdo0BuSSJOFURt/ZVVp+1s YITu1PzfrQ== -----END CERTIFICATE-----Generated at Sun Jan 18 11:52:32 2026 by rpki-client