This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qqxhl3mf1otuW74LV-ZS_YDdNiE.cer File: qqxhl3mf1otuW74LV-ZS_YDdNiE.cer (raw, json) Hash identifier: Ri1Sy1viENCS11Urs/ynQenVyl4sY6DDmYs+YuhZwzM= Subject key identifier: AA:AC:61:97:79:9F:D6:8B:6E:5B:BE:0B:57:E6:52:FD:80:DD:36:21 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78352D84E33D386B79265866E8A91243 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/70/88301c-ac79-4083-928f-5b49db65c545/1/qqxhl3mf1otuW74LV-ZS_YDdNiE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/70/88301c-ac79-4083-928f-5b49db65c545/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:29 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 213601 IP: 203.8.165.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:2d:84:e3:3d:38:6b:79:26:58:66:e8:a9:12:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aaac6197799fd68b6e5bbe0b57e652fd80dd3621 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:aa:8f:96:1e:f3:f1:6a:78:21:b7:bd:09:ab: 12:f4:1b:de:18:17:3b:c4:12:4b:c8:e5:c7:70:7f: 80:53:db:49:41:56:b2:bb:7e:3f:38:07:3c:b8:1a: b5:69:65:d4:96:e9:04:62:26:b4:14:de:c2:37:8a: b9:c9:cf:bd:6f:76:8d:32:75:b0:a5:d7:a3:10:5d: 13:a0:b3:65:76:f4:32:e3:47:96:d3:27:b3:73:3b: 83:28:7a:5f:71:b9:b6:cb:1b:51:d1:44:03:4b:73: db:f7:5a:b3:57:a7:c6:a2:3c:b6:7b:06:13:0e:af: 7b:76:ed:c8:cd:6f:a5:21:22:17:80:64:a6:12:11: 52:fe:bd:59:b4:e0:97:ef:12:1c:26:04:fc:53:ed: cc:78:1a:fc:28:99:99:98:72:13:0c:00:c3:0e:a9: 7b:7b:9b:1a:34:9c:a6:b4:5f:25:ea:1d:c5:0d:f7: 7f:d7:29:c9:00:4e:c9:b9:39:9d:a2:3c:34:52:ec: 2a:04:58:65:3e:de:05:5f:e6:af:1b:c2:11:99:cd: 01:f6:3c:60:78:4a:ba:e7:8b:56:94:8a:64:3a:d6: 42:97:44:52:26:a6:24:56:4b:51:34:63:72:1c:d8: 81:d1:01:f4:a3:8c:df:2b:55:3c:1e:47:c7:24:93: 03:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:AC:61:97:79:9F:D6:8B:6E:5B:BE:0B:57:E6:52:FD:80:DD:36:21 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/88301c-ac79-4083-928f-5b49db65c545/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/88301c-ac79-4083-928f-5b49db65c545/1/qqxhl3mf1otuW74LV-ZS_YDdNiE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.8.165.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 213601 Signature Algorithm: sha256WithRSAEncryption 4b:37:7b:39:f9:9d:8c:7e:ea:73:f6:78:28:15:e3:fb:85:86: 9a:76:13:8b:a8:37:da:f8:63:cd:a0:30:81:26:cc:3d:f2:8f: ca:33:45:68:5b:6f:fc:14:15:0e:ca:da:30:58:97:29:e0:d6: e6:d7:f2:66:5f:e0:a5:e0:3b:3d:8a:a2:bf:be:db:34:40:31: a3:79:4b:b7:db:58:ff:44:e6:99:d9:6f:2a:e6:45:92:3d:5d: 64:de:ae:6f:24:c2:0d:9d:7b:9d:94:8b:0e:49:f0:1c:ad:3c: df:0f:8d:a0:1e:d8:84:e6:89:a4:c9:c7:a3:ae:89:4b:94:ef: 95:95:d8:03:a5:6f:27:f5:f3:b0:b7:09:ce:5b:f1:94:01:07: 0c:62:d7:b8:56:90:85:c0:e2:e1:c3:9f:e2:63:d7:1c:61:2f: 80:16:79:06:db:1a:d2:e7:5d:ed:96:2f:77:d6:02:35:ba:56: ea:a4:cf:62:8c:32:6b:74:03:69:39:5a:f6:f7:c9:79:47:5b: 7c:d0:7c:49:24:0e:62:4c:d0:6b:11:cb:db:87:b9:a3:4d:bb: ce:9e:93:86:cd:7f:93:a4:f7:d2:60:59:e5:76:de:57:1a:90: fd:d8:a2:ed:8c:8a:53:41:ab:cb:4b:eb:27:d9:56:d2:dc:d1: 35:0e:1b:78 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt4NS2E4z04a3kmWGboqRJDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYWFjNjE5Nzc5OWZkNjhiNmU1YmJlMGI1N2U2NTJmZDgwZGQzNjIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqqPlh7z8Wp4Ibe9CasS9BveGBc7 xBJLyOXHcH+AU9tJQVayu34/OAc8uBq1aWXUlukEYia0FN7CN4q5yc+9b3aNMnWw pdejEF0ToLNldvQy40eW0yezczuDKHpfcbm2yxtR0UQDS3Pb91qzV6fGojy2ewYT Dq97du3IzW+lISIXgGSmEhFS/r1ZtOCX7xIcJgT8U+3MeBr8KJmZmHITDADDDql7 e5saNJymtF8l6h3FDfd/1ynJAE7JuTmdojw0UuwqBFhlPt4FX+avG8IRmc0B9jxg eEq654tWlIpkOtZCl0RSJqYkVktRNGNyHNiB0QH0o4zfK1U8HkfHJJMD8QIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFKqsYZd5n9aLblu+C1fmUv2A3TYhMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzcwLzg4MzAx Yy1hYzc5LTQwODMtOTI4Zi01YjQ5ZGI2NWM1NDUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzAvODgzMDFj LWFjNzktNDA4My05MjhmLTViNDlkYjY1YzU0NS8xL3FxeGhsM21mMW90dVc3NExW LVpTX1lEZE5pRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAywilMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwNCYTANBgkqhkiG9w0BAQsFAAOCAQEASzd7OfmdjH7qc/Z4KBXj+4WGmnYTi6g3 2vhjzaAwgSbMPfKPyjNFaFtv/BQVDsraMFiXKeDW5tfyZl/gpeA7PYqiv77bNEAx o3lLt9tY/0TmmdlvKuZFkj1dZN6ubyTCDZ17nZSLDknwHK083w+NoB7YhOaJpMnH o66JS5TvlZXYA6VvJ/XzsLcJzlvxlAEHDGLXuFaQhcDi4cOf4mPXHGEvgBZ5Btsa 0udd7ZYvd9YCNbpW6qTPYowya3QDaTla9vfJeUdbfNB8SSQOYkzQaxHL24e5o027 zp6Ths1/k6T30mBZ5XbeVxqQ/dii7YyKU0Gry0vrJ9lW0tzRNQ4beA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:29:13 2026 by rpki-client