This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qnARDTDVLoppaViLP2IUFrzfZEs.cer File: qnARDTDVLoppaViLP2IUFrzfZEs.cer (raw, json) Hash identifier: H9IbnnFugPGj2xfCd0MRQqgYC5GReNqc5ysUZrrRMcs= Subject key identifier: AA:70:11:0D:30:D5:2E:8A:69:69:58:8B:3F:62:14:16:BC:DF:64:4B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB4FF46AE61024B807FB9564348B42 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/99/fb7e67-5425-4c4f-b46a-8243aef6fe5a/1/qnARDTDVLoppaViLP2IUFrzfZEs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/99/fb7e67-5425-4c4f-b46a-8243aef6fe5a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:11 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 39434 AS: 57227 IP: 81.24.80.0/20 IP: 81.163.32.0/19 IP: 176.120.192.0/19 IP: 185.59.244.0/22 IP: 185.110.44.0/22 IP: 2a04:e500::/29 IP: 2a06:5440::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:4f:f4:6a:e6:10:24:b8:07:fb:95:64:34:8b:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aa70110d30d52e8a6969588b3f621416bcdf644b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b7:dc:5d:0f:6e:29:0c:29:91:7e:13:f3:bb: b4:22:e9:b8:35:80:04:e8:ee:9f:4e:45:61:bb:d7: 62:bd:1f:2a:30:0c:14:cc:60:65:0c:dc:01:df:d4: 62:2f:d3:72:bc:1a:dc:ae:15:d8:d7:d6:89:4a:4e: da:97:11:b8:51:18:11:9c:c0:86:c0:11:44:f9:1e: c5:5a:3a:f8:02:4e:87:80:67:bf:b1:c2:9e:56:89: a7:9b:8b:d6:4a:d6:a7:fc:64:99:46:b0:fe:f1:45: 33:bc:30:f2:16:ff:3f:76:28:59:8c:6e:cb:90:ec: 04:96:65:fa:f1:62:7c:d3:d9:a9:87:c0:9e:0b:70: 1e:17:07:b8:20:ee:ec:b7:2b:7b:a9:5f:c8:6e:7e: 3f:8d:49:b3:fc:cc:14:bb:ca:cb:42:87:dd:e1:c3: 3f:c4:2e:19:ec:86:3f:8d:3f:80:9c:2e:66:35:9a: 32:84:b2:1e:74:1a:9e:78:70:28:09:89:d8:19:06: 4e:f4:38:78:65:28:bb:de:9d:74:f2:be:8d:08:80: 75:99:5c:6e:7c:eb:f7:cc:bb:58:90:fd:b5:e9:bf: a0:db:d6:ef:da:2d:9b:54:ec:02:ad:fd:b2:b6:bb: 81:a9:0a:3f:e4:ea:ca:6b:3f:89:16:bb:26:5a:37: 72:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:70:11:0D:30:D5:2E:8A:69:69:58:8B:3F:62:14:16:BC:DF:64:4B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/fb7e67-5425-4c4f-b46a-8243aef6fe5a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/fb7e67-5425-4c4f-b46a-8243aef6fe5a/1/qnARDTDVLoppaViLP2IUFrzfZEs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.24.80.0/20 81.163.32.0/19 176.120.192.0/19 185.59.244.0/22 185.110.44.0/22 IPv6: 2a04:e500::/29 2a06:5440::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 39434 57227 Signature Algorithm: sha256WithRSAEncryption 92:1a:cb:45:f4:4b:c1:66:b5:c7:ee:bf:4a:63:88:a1:26:b3: 02:84:2f:a1:88:53:6c:d8:a6:49:a9:94:0f:14:06:70:35:4f: 91:30:89:e1:5a:a7:2a:78:88:a4:f2:35:ee:5c:7f:4c:91:21: 17:7d:e4:1f:cc:92:0f:98:1b:a2:8c:54:fb:9a:91:cd:16:d9: cf:90:06:61:70:60:41:a9:b3:50:19:62:9d:81:de:42:2c:89: ca:b7:b6:98:18:fc:29:ee:7b:67:c8:39:91:22:f1:5c:58:4d: dc:87:db:9a:30:8d:ef:c3:95:2c:59:fc:98:78:a9:81:e9:e7: 7d:67:53:25:8f:14:91:71:6d:b3:16:13:cd:36:3e:db:38:73: a3:0f:a9:ae:93:58:6c:47:be:b4:a2:99:42:11:58:3a:b9:d7: df:ab:27:ae:76:47:e2:e1:c7:05:b8:4b:4e:79:d9:a1:e1:e6: c1:64:3a:3e:ac:6c:66:95:41:20:26:9a:12:57:b4:bc:aa:3f: 27:f9:73:96:92:e8:37:b1:13:32:03:29:f8:14:0b:0a:d5:ac: 4f:50:ef:8a:30:7a:70:80:59:40:4f:47:95:5e:9d:5c:da:c8: 94:b2:70:f8:78:f3:d0:1b:1b:a8:a2:20:b1:49:71:4d:44:6b: c5:ea:95:54 -----BEGIN CERTIFICATE----- MIIFxzCCBK+gAwIBAgISAZt260/0auYQJLgH+5VkNItCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYTcwMTEwZDMwZDUyZThhNjk2OTU4OGIzZjYyMTQxNmJjZGY2NDRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7fcXQ9uKQwpkX4T87u0Ium4NYAE 6O6fTkVhu9divR8qMAwUzGBlDNwB39RiL9NyvBrcrhXY19aJSk7alxG4URgRnMCG wBFE+R7FWjr4Ak6HgGe/scKeVomnm4vWStan/GSZRrD+8UUzvDDyFv8/dihZjG7L kOwElmX68WJ809mph8CeC3AeFwe4IO7styt7qV/Ibn4/jUmz/MwUu8rLQofd4cM/ xC4Z7IY/jT+AnC5mNZoyhLIedBqeeHAoCYnYGQZO9Dh4ZSi73p108r6NCIB1mVxu fOv3zLtYkP216b+g29bv2i2bVOwCrf2ytruBqQo/5OrKaz+JFrsmWjdydwIDAQAB o4IC0zCCAs8wHQYDVR0OBBYEFKpwEQ0w1S6KaWlYiz9iFBa832RLMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk5L2ZiN2U2 Ny01NDI1LTRjNGYtYjQ2YS04MjQzYWVmNmZlNWEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTkvZmI3ZTY3 LTU0MjUtNGM0Zi1iNDZhLTgyNDNhZWY2ZmU1YS8xL3FuQVJEVERWTG9wcGFWaUxQ MklVRnJ6ZlpFcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CME0GCCsGAQUF BwEHAQH/BD4wPDAkBAIAATAeAwQEURhQAwQFUaMgAwQFsHjAAwQCuTv0AwQCuW4s MBQEAgACMA4DBQMqBOUAAwUDKgZUQDAfBggrBgEFBQcBCAEB/wQQMA6gDDAKAgMA mgoCAwDfizANBgkqhkiG9w0BAQsFAAOCAQEAkhrLRfRLwWa1x+6/SmOIoSazAoQv oYhTbNimSamUDxQGcDVPkTCJ4VqnKniIpPI17lx/TJEhF33kH8ySD5gbooxU+5qR zRbZz5AGYXBgQamzUBlinYHeQiyJyre2mBj8Ke57Z8g5kSLxXFhN3IfbmjCN78OV LFn8mHipgennfWdTJY8UkXFtsxYTzTY+2zhzow+prpNYbEe+tKKZQhFYOrnX36sn rnZH4uHHBbhLTnnZoeHmwWQ6PqxsZpVBICaaEle0vKo/J/lzlpLoN7ETMgMp+BQL CtWsT1DvijB6cIBZQE9HlV6dXNrIlLJw+Hjz0BsbqKIgsUlxTURrxeqVVA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:48:57 2026 by rpki-client