This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qqzbVOF2f1uOzsxeM4LWYR5cjII.cer File: qqzbVOF2f1uOzsxeM4LWYR5cjII.cer (raw, json) Hash identifier: 0AUGMsFS+hM9imwKlh3PT2oPBZWvIR7hohIunuKj5PQ= Subject key identifier: AA:AC:DB:54:E1:76:7F:5B:8E:CE:CC:5E:33:82:D6:61:1E:5C:8C:82 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B926309FAEABED15C33AF22263F2E2F39 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b0/170483-f5bc-41e6-8c86-39ca843b9c11/1/qqzbVOF2f1uOzsxeM4LWYR5cjII.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b0/170483-f5bc-41e6-8c86-39ca843b9c11/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Tue 06 Jan 2026 08:18:42 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 211367 IP: 64.239.23.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:92:63:09:fa:ea:be:d1:5c:33:af:22:26:3f:2e:2f:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 6 08:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aaacdb54e1767f5b8ececc5e3382d6611e5c8c82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f2:75:1f:07:a5:bf:90:a5:5c:2f:45:01:a9: 35:9e:34:c5:99:3c:72:01:85:3e:29:07:b9:3b:b3: 93:9a:75:d1:6f:68:a6:0d:a4:5e:d3:4c:af:ba:60: ca:5b:f6:ae:62:ae:0a:4c:b9:b3:18:a4:07:00:7a: 3a:37:eb:e8:cc:b4:8f:73:18:c7:93:59:c0:fe:40: 0d:02:18:2c:86:53:b8:a2:f5:16:86:b2:58:56:24: d3:1b:a1:a4:c0:89:ab:e0:43:07:f0:0e:2d:34:1e: b5:b0:03:61:9a:aa:88:03:84:60:0d:0a:2b:86:11: c3:22:a2:ca:93:7c:b0:d0:dd:42:81:8c:98:c9:df: 60:92:74:2f:d9:a0:14:4f:a3:40:ec:f2:1a:11:c5: 3e:af:f9:fd:ee:f0:10:87:d7:03:7e:95:9b:97:3b: 93:34:e6:bd:bb:71:34:4b:1a:be:e9:2c:5b:cd:e0: e6:9e:59:cd:70:62:37:e9:8f:2a:42:7b:78:ee:88: 96:46:2e:96:af:3a:bb:2d:3f:ea:66:b0:97:e8:29: cf:8b:09:d7:3d:2c:df:29:37:9a:8a:db:6a:f4:44: 26:ce:fe:ab:63:ae:78:f7:37:12:5d:b5:a9:1a:17: 81:bd:1a:a4:35:3c:65:5d:05:9f:c6:0a:03:02:c3: 0e:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:AC:DB:54:E1:76:7F:5B:8E:CE:CC:5E:33:82:D6:61:1E:5C:8C:82 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/170483-f5bc-41e6-8c86-39ca843b9c11/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/170483-f5bc-41e6-8c86-39ca843b9c11/1/qqzbVOF2f1uOzsxeM4LWYR5cjII.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.239.23.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 211367 Signature Algorithm: sha256WithRSAEncryption 06:ba:02:32:16:cc:45:79:10:3c:cd:2b:d9:79:c3:62:08:b0: 93:ee:02:af:ea:df:dc:78:a9:41:40:67:79:2e:4a:81:25:09: f1:79:2f:72:cb:c8:61:b9:f6:94:60:46:66:14:be:33:dd:dc: e7:9b:3b:b6:e3:73:c4:86:7e:c9:6e:9d:71:f0:a4:34:00:8a: d3:d0:69:54:55:47:d5:a3:e1:06:1d:bd:cc:8c:b4:5e:3e:87: ea:81:4b:94:ce:4e:e4:93:7f:02:0b:00:05:c1:47:33:85:cc: 85:1b:3b:04:61:a8:81:a5:50:8c:e1:0b:93:82:90:3d:86:e0: ce:d5:f7:a5:93:2c:55:68:29:6f:4f:63:b3:8a:15:9d:64:bd: a9:86:90:9c:c8:9e:f8:a9:44:7c:70:0e:a2:12:2a:af:48:ed: 62:c3:87:d1:3e:8e:1c:ec:de:01:9a:0e:b0:cb:0b:f5:ce:44: d6:f1:65:f7:aa:15:29:fe:79:e8:e3:1b:26:8f:8f:ed:e5:6f: dd:a4:7e:8d:5a:b4:4a:6c:d4:69:ef:67:29:61:e1:2e:54:1a: ab:d8:27:b2:48:1f:71:92:ac:98:fb:57:92:7b:b6:ff:20:8a: 1d:df:1c:22:c9:dd:a5:6a:76:53:a2:c1:09:52:b9:24:b5:32: a1:d1:69:2c -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZuSYwn66r7RXDOvIiY/Li85MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTA2MDgxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYWFjZGI1NGUxNzY3ZjViOGVjZWNjNWUzMzgyZDY2MTFlNWM4YzgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvJ1Hwelv5ClXC9FAak1njTFmTxy AYU+KQe5O7OTmnXRb2imDaRe00yvumDKW/auYq4KTLmzGKQHAHo6N+vozLSPcxjH k1nA/kANAhgshlO4ovUWhrJYViTTG6GkwImr4EMH8A4tNB61sANhmqqIA4RgDQor hhHDIqLKk3yw0N1CgYyYyd9gknQv2aAUT6NA7PIaEcU+r/n97vAQh9cDfpWblzuT NOa9u3E0Sxq+6SxbzeDmnlnNcGI36Y8qQnt47oiWRi6Wrzq7LT/qZrCX6CnPiwnX PSzfKTeaittq9EQmzv6rY6549zcSXbWpGheBvRqkNTxlXQWfxgoDAsMOmQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFKqs21Thdn9bjs7MXjOC1mEeXIyCMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2IwLzE3MDQ4 My1mNWJjLTQxZTYtOGM4Ni0zOWNhODQzYjljMTEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjAvMTcwNDgz LWY1YmMtNDFlNi04Yzg2LTM5Y2E4NDNiOWMxMS8xL3FxemJWT0YyZjF1T3pzeGVN NExXWVI1Y2pJSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAQO8XMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwM5pzANBgkqhkiG9w0BAQsFAAOCAQEABroCMhbMRXkQPM0r2XnDYgiwk+4Cr+rf 3HipQUBneS5KgSUJ8XkvcsvIYbn2lGBGZhS+M93c55s7tuNzxIZ+yW6dcfCkNACK 09BpVFVH1aPhBh29zIy0Xj6H6oFLlM5O5JN/AgsABcFHM4XMhRs7BGGogaVQjOEL k4KQPYbgztX3pZMsVWgpb09js4oVnWS9qYaQnMie+KlEfHAOohIqr0jtYsOH0T6O HOzeAZoOsMsL9c5E1vFl96oVKf556OMbJo+P7eVv3aR+jVq0SmzUae9nKWHhLlQa q9gnskgfcZKsmPtXknu2/yCKHd8cIsndpWp2U6LBCVK5JLUyodFpLA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:49:23 2026 by rpki-client