This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qsqNwMC5IbCJ8WAmGORVN5enR0I.cer File: qsqNwMC5IbCJ8WAmGORVN5enR0I.cer (raw, json) Hash identifier: q9E27XLB2MGZTQ5oeJLUhiTVncQPRT21FNcJXAc2/l0= Subject key identifier: AA:CA:8D:C0:C0:B9:21:B0:89:F1:60:26:18:E4:55:37:97:A7:47:42 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5A6F2BDE287D9536798EC61E86A6F0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:18:25 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 194.147.252.0/23 IP: 194.150.180.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:6f:2b:de:28:7d:95:36:79:8e:c6:1e:86:a6:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aaca8dc0c0b921b089f1602618e4553797a74742 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:9c:8a:24:f4:b1:ab:04:d0:75:6b:b9:c7:62: 33:60:55:5b:f5:fa:d8:98:17:3b:5e:df:87:48:03: 51:d7:95:73:d7:28:f1:db:e2:8b:97:e6:40:c8:4f: a3:89:f2:19:84:c1:0a:2b:8f:3d:dc:7b:bd:aa:7f: 85:53:1f:19:00:76:35:dc:1c:56:1b:cd:45:55:06: 03:c4:20:40:53:11:f4:6d:5c:e7:19:6a:05:96:bb: 9d:f0:33:c8:78:3f:b0:ab:59:c3:9e:1e:82:96:08: c4:be:d3:5e:6a:86:e2:5d:83:1a:86:be:e6:e4:0e: 74:45:af:c0:f7:d0:57:3d:93:f8:55:ea:a0:1c:f9: e6:94:d0:e1:f1:d6:4d:86:fa:70:5b:9b:75:e6:88: c5:0a:71:fb:d5:dd:4a:67:06:b7:ee:75:0c:d7:6d: b6:3e:70:e8:68:08:d3:c6:c5:e5:43:16:cc:65:6a: 78:6c:4d:4a:fa:28:90:86:52:e3:a6:4e:6d:d7:e1: e4:b7:85:b3:a9:a8:50:66:f7:bc:3f:27:8f:2f:b2: 56:61:41:c5:3c:0c:4b:74:8d:93:dd:3b:85:3d:44: 64:eb:e4:00:93:a6:9b:f6:2d:ac:89:b0:30:82:d2: 04:3e:69:da:3f:47:20:b7:a6:ee:ac:6d:ac:34:ea: cd:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:CA:8D:C0:C0:B9:21:B0:89:F1:60:26:18:E4:55:37:97:A7:47:42 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.147.252.0/23 194.150.180.0/23 Signature Algorithm: sha256WithRSAEncryption 6f:c2:81:01:50:34:f3:ce:c8:6f:b5:9a:8d:88:ec:57:18:79: 89:e1:64:64:af:09:a4:8d:c0:57:ea:a4:b9:82:e3:53:2f:c8: 70:a5:a7:d9:90:82:13:f4:ad:45:bc:fe:2d:74:de:6e:e2:e3: 33:c2:ca:2b:29:2e:54:8f:c9:97:b0:55:a0:1b:13:2f:31:85: ed:b2:1b:92:48:3e:f8:cf:cf:89:f9:69:57:ab:d4:56:7d:87: a3:39:fd:bd:b0:15:73:0b:9b:28:82:08:fd:63:09:49:56:6f: 91:29:67:5f:9d:d5:6c:55:93:cc:cb:8b:90:f7:d8:36:e4:d3: 62:72:7b:74:0b:a5:22:4c:fc:3d:9f:08:2f:b2:fc:89:d6:be: 98:1b:1e:6e:fe:e1:8c:93:07:93:98:63:2d:68:d7:40:66:60: 4f:ed:2e:75:3a:19:a2:78:96:81:f2:9d:38:3d:67:73:e8:b2: 4f:af:7a:45:26:56:2e:d6:89:8d:e7:1a:b2:b1:b7:f6:b2:1b: e0:c2:5b:67:04:88:a1:b9:ea:67:a5:41:70:a5:da:93:12:e0: ed:43:a9:cc:99:62:5d:49:ef:13:a9:39:63:56:29:d0:c2:ae: 99:ec:bb:1b:cd:38:f4:d8:92:bd:61:09:57:dc:a6:84:68:f6: 58:47:92:cb -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgISAZt6Wm8r3ih9lTZ5jsYehqbwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYWNhOGRjMGMwYjkyMWIwODlmMTYwMjYxOGU0NTUzNzk3YTc0NzQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5yKJPSxqwTQdWu5x2IzYFVb9frY mBc7Xt+HSANR15Vz1yjx2+KLl+ZAyE+jifIZhMEKK4893Hu9qn+FUx8ZAHY13BxW G81FVQYDxCBAUxH0bVznGWoFlrud8DPIeD+wq1nDnh6ClgjEvtNeaobiXYMahr7m 5A50Ra/A99BXPZP4VeqgHPnmlNDh8dZNhvpwW5t15ojFCnH71d1KZwa37nUM1222 PnDoaAjTxsXlQxbMZWp4bE1K+iiQhlLjpk5t1+Hkt4WzqahQZve8PyePL7JWYUHF PAxLdI2T3TuFPURk6+QAk6ab9i2sibAwgtIEPmnaP0cgt6burG2sNOrNbwIDAQAB o4ICijCCAoYwHQYDVR0OBBYEFKrKjcDAuSGwifFgJhjkVTeXp0dCMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQwL2ViMzFk Yi1lNjU0LTQ5MWUtYTE0MS05MWQ1MDczOGQxZTgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDAvZWIzMWRi LWU2NTQtNDkxZS1hMTQxLTkxZDUwNzM4ZDFlOC8xL3FzcU53TUM1SWJDSjhXQW1H T1JWTjVlblIwSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQBwpP8AwQBwpa0MA0GCSqGSIb3DQEBCwUAA4IB AQBvwoEBUDTzzshvtZqNiOxXGHmJ4WRkrwmkjcBX6qS5guNTL8hwpafZkIIT9K1F vP4tdN5u4uMzwsorKS5Uj8mXsFWgGxMvMYXtshuSSD74z8+J+WlXq9RWfYejOf29 sBVzC5soggj9YwlJVm+RKWdfndVsVZPMy4uQ99g25NNicnt0C6UiTPw9nwgvsvyJ 1r6YGx5u/uGMkweTmGMtaNdAZmBP7S51OhmieJaB8p04PWdz6LJPr3pFJlYu1omN 5xqysbf2shvgwltnBIihuepnpUFwpdqTEuDtQ6nMmWJdSe8TqTljVinQwq6Z7Lsb zTj02JK9YQlX3KaEaPZYR5LL -----END CERTIFICATE-----Generated at Tue Jan 27 03:09:17 2026 by rpki-client