This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qnp9oeIjsYMKC5G11hyDrSYMERs.cer File: qnp9oeIjsYMKC5G11hyDrSYMERs.cer (raw, json) Hash identifier: wVwaNaFTHp7s3ivAuny594HV0xrewE9kVEaRptuO9R0= Subject key identifier: AA:7A:7D:A1:E2:23:B1:83:0A:0B:91:B5:D6:1C:83:AD:26:0C:11:1B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DC9F60A388C55ED0623370E49752262 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4c/e57fb1-2d5a-4661-801d-0eb8f37a0179/1/qnp9oeIjsYMKC5G11hyDrSYMERs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4c/e57fb1-2d5a-4661-801d-0eb8f37a0179/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:19:06 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 41485 IP: 193.227.96.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:f6:0a:38:8c:55:ed:06:23:37:0e:49:75:22:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aa7a7da1e223b1830a0b91b5d61c83ad260c111b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ca:4b:8e:05:4b:95:96:ab:5c:a4:21:5a:e8: 5c:12:75:b6:bf:b2:7c:2e:00:34:23:01:e4:cb:95: c3:f7:8f:0a:32:e9:e2:67:60:9b:20:f7:fa:1e:05: 89:df:c5:e6:f5:3d:87:a2:c9:e2:a1:5e:80:6e:dd: df:8e:8f:0c:b9:af:42:40:9b:2f:ef:cd:5b:32:96: eb:03:e5:40:b8:23:a0:47:67:a4:97:78:d5:41:f8: fc:cd:86:21:45:51:df:26:a9:91:1f:9d:f4:15:f0: 71:bb:32:07:02:d3:ef:79:03:b4:2f:82:f7:ac:80: 96:18:66:89:0b:9c:f6:bf:02:07:d9:02:7e:5b:fc: 5d:dd:1b:52:54:69:51:cb:2c:55:98:5a:01:89:69: 0c:85:94:3a:8f:b8:fc:37:24:18:16:46:4b:05:e9: 7c:1c:0f:9e:84:89:a3:e9:0e:1d:f4:6f:a4:91:73: 39:24:6d:29:29:a7:af:63:b1:65:bc:76:e7:6e:a4: 05:d0:83:c8:62:29:3e:17:3a:90:cd:44:e6:94:c8: 83:a5:61:1a:5d:d1:6e:aa:38:a1:6e:19:82:b7:0d: ec:c9:0d:cf:cd:e1:5b:fb:0e:df:65:3a:ac:e5:19: e1:e5:9f:a0:b0:2d:9b:a3:52:81:c1:f1:b0:68:70: cf:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:7A:7D:A1:E2:23:B1:83:0A:0B:91:B5:D6:1C:83:AD:26:0C:11:1B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/e57fb1-2d5a-4661-801d-0eb8f37a0179/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/e57fb1-2d5a-4661-801d-0eb8f37a0179/1/qnp9oeIjsYMKC5G11hyDrSYMERs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.227.96.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 41485 Signature Algorithm: sha256WithRSAEncryption 3d:17:fa:f0:f8:ab:a5:a7:bb:2e:67:8f:85:69:a1:2c:67:09: fc:2f:e2:6c:f7:6a:1c:eb:87:21:b5:29:a7:2f:95:02:3b:a3: 64:ef:99:d0:1a:e6:b0:c7:b8:18:72:ac:f7:1a:af:50:40:86: 6e:79:08:10:b6:9e:b7:ac:82:0d:bd:b2:b8:c9:eb:25:c5:91: 25:73:c7:66:1d:f6:47:ad:c8:0f:74:80:5c:48:b6:02:db:07: 5a:35:07:41:c2:4f:cd:cc:84:6f:5b:46:d4:81:4d:5c:7a:bc: 09:4c:44:c3:4d:f8:5b:ab:56:80:e7:7a:7d:b8:3b:27:9f:67: e7:ea:a7:a4:1e:f7:e0:95:c3:b2:63:78:92:77:3d:4e:e8:81: 00:53:78:3e:7b:b3:bf:00:b4:74:9a:47:62:38:f4:3e:36:69: 74:52:d6:bc:9c:87:ff:34:ed:cb:30:a3:69:ef:77:33:1a:fd: ad:13:56:2f:69:08:90:be:1f:4c:fc:14:f8:a3:3f:e6:15:92: 1e:79:c8:c8:06:63:71:f1:7a:57:1b:bc:af:f7:b8:88:7d:43: 16:8e:5e:8a:bd:06:5b:9b:f2:43:20:78:f8:9f:be:b7:85:e7: ed:9b:29:ea:ba:4a:63:17:0a:a6:c1:5a:b5:f8:1b:fd:6e:fb: 08:f6:a1:ff -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt9yfYKOIxV7QYjNw5JdSJiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYTdhN2RhMWUyMjNiMTgzMGEwYjkxYjVkNjFjODNhZDI2MGMxMTFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1spLjgVLlZarXKQhWuhcEnW2v7J8 LgA0IwHky5XD948KMuniZ2CbIPf6HgWJ38Xm9T2HosnioV6Abt3fjo8Mua9CQJsv 781bMpbrA+VAuCOgR2ekl3jVQfj8zYYhRVHfJqmRH530FfBxuzIHAtPveQO0L4L3 rICWGGaJC5z2vwIH2QJ+W/xd3RtSVGlRyyxVmFoBiWkMhZQ6j7j8NyQYFkZLBel8 HA+ehImj6Q4d9G+kkXM5JG0pKaevY7FlvHbnbqQF0IPIYik+FzqQzUTmlMiDpWEa XdFuqjihbhmCtw3syQ3PzeFb+w7fZTqs5Rnh5Z+gsC2bo1KBwfGwaHDPLQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFKp6faHiI7GDCguRtdYcg60mDBEbMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRjL2U1N2Zi MS0yZDVhLTQ2NjEtODAxZC0wZWI4ZjM3YTAxNzkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGMvZTU3ZmIx LTJkNWEtNDY2MS04MDFkLTBlYjhmMzdhMDE3OS8xL3FucDlvZUlqc1lNS0M1RzEx aHlEclNZTUVScy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAweNgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwCiDTANBgkqhkiG9w0BAQsFAAOCAQEAPRf68Pirpae7LmePhWmhLGcJ/C/ibPdq HOuHIbUppy+VAjujZO+Z0BrmsMe4GHKs9xqvUECGbnkIELaet6yCDb2yuMnrJcWR JXPHZh32R63ID3SAXEi2AtsHWjUHQcJPzcyEb1tG1IFNXHq8CUxEw034W6tWgOd6 fbg7J59n5+qnpB734JXDsmN4knc9TuiBAFN4PnuzvwC0dJpHYjj0PjZpdFLWvJyH /zTtyzCjae93Mxr9rRNWL2kIkL4fTPwU+KM/5hWSHnnIyAZjcfF6Vxu8r/e4iH1D Fo5eir0GW5vyQyB4+J++t4Xn7Zsp6rpKYxcKpsFatfgb/W77CPah/w== -----END CERTIFICATE-----Generated at Mon Feb 9 18:27:40 2026 by rpki-client