This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qsV1yvoAvEHVfElKwfXbz-54My4.cer File: qsV1yvoAvEHVfElKwfXbz-54My4.cer (raw, json) Hash identifier: g2uWReCm7reCPfD/wrJEaA7a9lnBRjcM9Yqb22jaoGU= Subject key identifier: AA:C5:75:CA:FA:00:BC:41:D5:7C:49:4A:C1:F5:DB:CF:EE:78:33:2E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C8041DCC486378C640CD7A2728AF603 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f2/35d598-c32c-49a7-b1f6-8f913e2696e5/1/qsV1yvoAvEHVfElKwfXbz-54My4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f2/35d598-c32c-49a7-b1f6-8f913e2696e5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:18:58 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 206478 IP: 185.174.32.0/22 IP: 195.225.200.0/22 IP: 2a10:4140::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:41:dc:c4:86:37:8c:64:0c:d7:a2:72:8a:f6:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aac575cafa00bc41d57c494ac1f5dbcfee78332e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:fc:f9:e6:e0:de:86:25:36:77:5f:e1:0e:30: d5:3e:7e:e0:04:b3:92:25:a6:09:71:f8:b6:1e:d9: b2:3f:c1:18:72:c6:19:00:db:71:72:a3:52:88:19: 8d:f3:81:45:0f:3c:5c:d4:48:fa:4b:d9:33:f9:b1: 11:d5:a5:a6:2e:1d:7c:f8:70:63:34:d8:24:ba:d8: 85:93:5f:63:fa:ad:92:a6:02:ae:6b:6e:30:bd:f4: 68:b1:01:2f:88:7e:6f:26:ad:2a:2e:c1:d8:b7:1d: 6b:52:e7:db:9a:4d:f4:ca:fa:83:cf:eb:0c:54:cf: 01:c1:5a:5e:a6:89:a9:d2:f1:5a:39:c3:a3:01:57: d8:5e:69:07:08:1a:a5:e0:cc:0c:f5:cd:83:bf:d0: 36:f6:74:d5:16:69:7b:84:03:2e:c6:0b:78:c1:41: 50:f9:40:6a:74:ff:a9:c1:17:2c:e0:74:54:3d:0d: 1a:98:14:b4:42:f7:ab:0d:ff:9f:00:8d:4c:83:7b: 24:10:0b:0e:40:49:44:4d:82:e4:8b:61:23:5a:b4: e7:7b:5a:31:f3:72:bc:b3:54:dd:b8:5e:43:5c:6d: 6a:be:5b:29:b9:60:44:9b:ed:dc:3b:fd:e8:49:cf: 46:d6:3d:e8:96:4b:27:95:0b:2d:33:80:67:bc:65: c8:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:C5:75:CA:FA:00:BC:41:D5:7C:49:4A:C1:F5:DB:CF:EE:78:33:2E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/35d598-c32c-49a7-b1f6-8f913e2696e5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/35d598-c32c-49a7-b1f6-8f913e2696e5/1/qsV1yvoAvEHVfElKwfXbz-54My4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.174.32.0/22 195.225.200.0/22 IPv6: 2a10:4140::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 206478 Signature Algorithm: sha256WithRSAEncryption 5c:ad:02:42:8b:fe:b5:65:4d:27:21:c8:be:c4:73:b8:a4:15: 79:9b:bc:af:f6:a6:6a:21:82:77:ac:a5:6f:a9:da:09:91:7e: 6a:2a:b5:48:30:63:f6:eb:8a:4f:18:97:7c:2d:3b:4f:74:1e: b6:b5:bf:cb:b4:43:fa:aa:c6:ac:98:90:94:ad:28:4c:2a:51: 99:52:c0:ed:d6:01:8b:c9:b2:f6:a7:42:c0:6c:5a:2c:7a:52: cd:16:31:88:c2:67:0a:9e:00:4a:97:59:89:9b:ec:6a:37:82: e8:c6:31:b5:a3:7e:85:3b:c1:a3:2c:40:0f:30:41:7d:cf:d3: a1:9a:4d:10:c3:16:69:8b:bd:fd:dd:1c:e0:93:8f:76:28:c1: 25:53:25:2c:52:0e:11:8f:95:ce:d0:bd:00:fe:e1:d0:18:39: 36:52:54:6a:f1:01:80:01:9e:5e:79:e8:19:44:c5:ce:6a:ac: cb:2e:6b:5b:de:67:c2:f7:ce:ad:c5:e5:3c:68:38:8b:18:11: 5a:11:f3:47:00:5b:e6:d9:5b:5e:70:28:36:7f:87:9b:90:db: dc:3a:35:2c:60:0f:c7:86:ce:af:ab:0b:9d:4d:e9:b7:03:d8: 25:ee:c0:a6:47:16:85:42:3b:a4:9b:b6:24:48:8b:31:a1:f9: 5d:9f:8d:e2 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt8gEHcxIY3jGQM16JyivYDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYWM1NzVjYWZhMDBiYzQxZDU3YzQ5NGFjMWY1ZGJjZmVlNzgzMzJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/z55uDehiU2d1/hDjDVPn7gBLOS JaYJcfi2HtmyP8EYcsYZANtxcqNSiBmN84FFDzxc1Ej6S9kz+bER1aWmLh18+HBj NNgkutiFk19j+q2SpgKua24wvfRosQEviH5vJq0qLsHYtx1rUufbmk30yvqDz+sM VM8BwVpepomp0vFaOcOjAVfYXmkHCBql4MwM9c2Dv9A29nTVFml7hAMuxgt4wUFQ +UBqdP+pwRcs4HRUPQ0amBS0QverDf+fAI1Mg3skEAsOQElETYLki2EjWrTne1ox 83K8s1TduF5DXG1qvlspuWBEm+3cO/3oSc9G1j3olksnlQstM4BnvGXIDwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFKrFdcr6ALxB1XxJSsH128/ueDMuMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YyLzM1ZDU5 OC1jMzJjLTQ5YTctYjFmNi04ZjkxM2UyNjk2ZTUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjIvMzVkNTk4 LWMzMmMtNDlhNy1iMWY2LThmOTEzZTI2OTZlNS8xL3FzVjF5dm9BdkVIVmZFbEt3 Zlhiei01NE15NC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCua4gAwQCw+HIMA0EAgACMAcDBQMqEEFAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMmjjANBgkqhkiG9w0BAQsFAAOCAQEAXK0C Qov+tWVNJyHIvsRzuKQVeZu8r/amaiGCd6ylb6naCZF+aiq1SDBj9uuKTxiXfC07 T3QetrW/y7RD+qrGrJiQlK0oTCpRmVLA7dYBi8my9qdCwGxaLHpSzRYxiMJnCp4A SpdZiZvsajeC6MYxtaN+hTvBoyxADzBBfc/ToZpNEMMWaYu9/d0c4JOPdijBJVMl LFIOEY+VztC9AP7h0Bg5NlJUavEBgAGeXnnoGUTFzmqsyy5rW95nwvfOrcXlPGg4 ixgRWhHzRwBb5tlbXnAoNn+Hm5Db3Do1LGAPx4bOr6sLnU3ptwPYJe7ApkcWhUI7 pJu2JEiLMaH5XZ+N4g== -----END CERTIFICATE-----Generated at Mon Feb 9 19:43:58 2026 by rpki-client