This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/quRIJx2Froeamr8Vs7ypg0cKE0g.cer File: quRIJx2Froeamr8Vs7ypg0cKE0g.cer (raw, json) Hash identifier: t/0/Bym9kLZN5/58kVCHjXn5OhXkITTNDmcRrLDPIdE= Subject key identifier: AA:E4:48:27:1D:85:AE:87:9A:9A:BF:15:B3:BC:A9:83:47:0A:13:48 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B0581C0E0493892283F12E6E8E99A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/eb/9f285b-a00b-4222-9e55-799a18c9ac5a/1/quRIJx2Froeamr8Vs7ypg0cKE0g.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/eb/9f285b-a00b-4222-9e55-799a18c9ac5a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:04 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 29509 IP: 176.100.251.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:05:81:c0:e0:49:38:92:28:3f:12:e6:e8:e9:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aae448271d85ae879a9abf15b3bca983470a1348 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:50:f8:2d:09:9e:4f:9c:8c:97:bd:91:61:ac: 8c:25:35:63:84:83:cb:54:d5:9c:5f:b7:6b:01:af: 67:86:8a:a3:69:86:5e:a9:cb:61:a3:ea:2c:8b:fb: 83:b5:3f:b2:5b:d6:19:3e:c4:0e:d5:3c:96:1b:e4: 7d:8c:0b:5f:55:e7:44:ca:5d:31:26:fb:1e:af:0a: 72:46:1a:30:d6:a8:e1:48:b0:fb:89:ad:e1:fb:0a: b6:a4:be:aa:bb:a0:37:f8:26:c9:7e:a0:31:d0:f2: 4b:2d:51:ae:6a:98:32:bf:4c:17:c9:f6:f3:d6:44: fa:86:9b:8d:30:99:aa:81:57:58:81:bb:7d:6f:a4: 12:ec:51:50:88:7f:3f:f2:0f:70:28:15:06:ca:1a: a2:84:b8:2d:41:9a:2e:97:f1:57:f4:41:86:cd:21: 77:dd:da:84:af:86:78:26:ea:4f:d8:5c:de:b0:ae: de:fc:7d:de:85:61:eb:c2:03:32:b6:2c:da:b6:61: db:ed:f3:88:4c:e2:5c:17:13:ef:ed:d8:66:1f:1b: 9b:29:2c:4b:ee:d3:b3:44:b1:42:56:1f:e3:aa:a4: 7d:95:5b:ce:5b:cd:bb:00:d1:13:32:10:a6:bc:41: be:ae:7b:ab:3f:11:44:e1:a5:59:6d:9c:e0:3c:12: 5d:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:E4:48:27:1D:85:AE:87:9A:9A:BF:15:B3:BC:A9:83:47:0A:13:48 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/9f285b-a00b-4222-9e55-799a18c9ac5a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/9f285b-a00b-4222-9e55-799a18c9ac5a/1/quRIJx2Froeamr8Vs7ypg0cKE0g.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.100.251.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 29509 Signature Algorithm: sha256WithRSAEncryption 7a:87:df:91:41:59:06:f1:6e:37:79:f2:1f:d0:0a:4e:f5:6d: 66:e3:20:77:d7:e1:b9:bf:f7:ee:de:77:76:16:18:de:63:90: 5b:32:8d:cc:d0:f7:98:25:67:d9:5e:f3:cc:10:b2:48:4b:4d: e1:c4:fa:c0:ef:7e:d6:82:2e:6c:db:e2:b5:45:d0:fd:01:3e: b4:eb:4a:b7:c6:c5:7d:a1:b8:46:56:34:96:47:40:7d:22:0f: 45:1c:0f:29:d6:7a:8e:7f:c7:f1:30:ac:b8:22:90:8d:14:f3: 2a:67:2f:4a:9b:bf:3f:6f:21:d8:c3:3e:04:37:e1:d1:b2:c7: f1:67:61:46:63:e1:26:a9:78:05:d5:15:c1:b0:27:ff:d3:5e: 5d:9e:cf:58:8b:51:57:f5:b7:0c:8c:4c:c9:84:95:41:39:86: 6e:b5:a9:74:7a:14:68:1c:20:dc:f1:e6:dd:0e:45:84:82:14: 65:e5:5f:34:4a:c4:3b:a6:a2:ef:f3:4f:83:f6:c3:dc:77:b6: 09:9d:29:0c:11:2c:9d:c4:2c:f0:e4:15:dd:31:5d:88:04:bd: 76:74:40:34:ee:c4:36:98:db:1c:1c:89:ea:00:02:33:b9:77: 67:bd:8d:ba:5a:1c:4a:ed:e9:2e:6d:4b:bc:4d:df:72:d0:4c: 79:d0:5b:1a -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISAZt6WwWBwOBJOJIoPxLm6OmaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYWU0NDgyNzFkODVhZTg3OWE5YWJmMTViM2JjYTk4MzQ3MGExMzQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVD4LQmeT5yMl72RYayMJTVjhIPL VNWcX7drAa9nhoqjaYZeqctho+osi/uDtT+yW9YZPsQO1TyWG+R9jAtfVedEyl0x JvserwpyRhow1qjhSLD7ia3h+wq2pL6qu6A3+CbJfqAx0PJLLVGuapgyv0wXyfbz 1kT6hpuNMJmqgVdYgbt9b6QS7FFQiH8/8g9wKBUGyhqihLgtQZoul/FX9EGGzSF3 3dqEr4Z4JupP2FzesK7e/H3ehWHrwgMytizatmHb7fOITOJcFxPv7dhmHxubKSxL 7tOzRLFCVh/jqqR9lVvOW827ANETMhCmvEG+rnurPxFE4aVZbZzgPBJdswIDAQAB o4ICnzCCApswHQYDVR0OBBYEFKrkSCcdha6Hmpq/FbO8qYNHChNIMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ViLzlmMjg1 Yi1hMDBiLTQyMjItOWU1NS03OTlhMThjOWFjNWEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIvOWYyODVi LWEwMGItNDIyMi05ZTU1LTc5OWExOGM5YWM1YS8xL3F1UklKeDJGcm9lYW1yOFZz N3lwZzBjS0UwZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAsGT7MBkGCCsGAQUFBwEIAQH/BAowCKAGMAQC AnNFMA0GCSqGSIb3DQEBCwUAA4IBAQB6h9+RQVkG8W43efIf0ApO9W1m4yB31+G5 v/fu3nd2FhjeY5BbMo3M0PeYJWfZXvPMELJIS03hxPrA737Wgi5s2+K1RdD9AT60 60q3xsV9obhGVjSWR0B9Ig9FHA8p1nqOf8fxMKy4IpCNFPMqZy9Km78/byHYwz4E N+HRssfxZ2FGY+EmqXgF1RXBsCf/015dns9Yi1FX9bcMjEzJhJVBOYZutal0ehRo HCDc8ebdDkWEghRl5V80SsQ7pqLv80+D9sPcd7YJnSkMESydxCzw5BXdMV2IBL12 dEA07sQ2mNscHInqAAIzuXdnvY26WhxK7ekubUu8Td9y0Ex50Fsa -----END CERTIFICATE-----Generated at Mon Feb 9 22:35:05 2026 by rpki-client