This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qvHI3UCIS0nwiAZNPBANKhiahHQ.cer File: qvHI3UCIS0nwiAZNPBANKhiahHQ.cer (raw, json) Hash identifier: Q/vCykr/iv7t69LK8x0HR0/n5EoXqqAW0hIFYP6ikXc= Subject key identifier: AA:F1:C8:DD:40:88:4B:49:F0:88:06:4D:3C:10:0D:2A:18:9A:84:74 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BEAF5CBB41D16C4FBCE4E1BC1ADDB2F3D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9f/33900c-e6ce-444e-bc96-3b339d081f83/1/qvHI3UCIS0nwiAZNPBANKhiahHQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9f/33900c-e6ce-444e-bc96-3b339d081f83/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 23 Jan 2026 13:05:35 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 214213 IP: 185.38.173.0/24 IP: 2001:35c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ea:f5:cb:b4:1d:16:c4:fb:ce:4e:1b:c1:ad:db:2f:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 23 13:05:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aaf1c8dd40884b49f088064d3c100d2a189a8474 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:1d:95:bf:89:3b:04:92:8a:c0:cf:f1:6b:4d: 92:77:4d:36:41:48:a4:b7:04:2a:87:8f:9b:f5:d6: b1:f2:7a:aa:a4:0b:98:2c:4c:00:bf:e1:ba:b1:1b: 6b:33:a8:1a:27:fb:aa:76:3f:27:b9:b7:c9:8c:7a: ef:b8:07:f7:7c:1a:fe:23:c9:f7:ce:73:a1:11:a0: 85:04:3a:ea:7f:02:5a:bd:d8:38:a2:98:65:1a:b5: 67:91:5c:a5:57:82:9e:ba:c3:cf:79:96:5d:00:a0: e2:ca:7a:18:10:22:d6:1c:11:09:75:d4:72:3f:40: c4:d8:c7:e5:f3:e2:b0:a0:75:cd:f2:32:ad:8e:a0: dd:9e:88:e7:b0:bf:34:9c:a2:e7:a6:87:24:33:04: 3a:ca:8d:80:8f:2f:03:d8:03:07:b3:16:71:66:43: 6f:b7:ad:17:c5:9f:12:0a:2e:1a:78:f5:19:48:c8: 65:81:26:69:45:26:5e:ff:d7:bb:e2:01:94:fd:e5: 16:44:c2:94:87:57:30:ae:e2:19:49:58:e5:b7:1a: 49:8a:59:eb:bf:61:c9:a8:96:46:56:b5:d4:95:51: 6f:44:73:67:f6:47:69:1b:ba:63:8b:26:30:be:b8: d2:03:ec:61:ce:c4:5b:27:99:b1:a6:c1:29:09:4a: b4:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:F1:C8:DD:40:88:4B:49:F0:88:06:4D:3C:10:0D:2A:18:9A:84:74 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/33900c-e6ce-444e-bc96-3b339d081f83/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/33900c-e6ce-444e-bc96-3b339d081f83/1/qvHI3UCIS0nwiAZNPBANKhiahHQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.38.173.0/24 IPv6: 2001:35c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 214213 Signature Algorithm: sha256WithRSAEncryption 37:07:91:f4:42:04:ff:79:39:27:0f:15:45:5e:e0:a3:11:ca: 53:b0:bb:8a:e7:b2:6e:35:e6:a0:94:b7:13:fc:a2:4b:bd:7e: 33:f4:08:c9:93:cf:c6:a2:e2:ea:3e:44:d4:33:d7:ea:3c:54: 5f:35:1f:c4:b2:cb:ef:b1:d3:2e:8e:65:99:d4:69:cf:da:59: 04:30:2b:79:1d:65:06:22:ba:bf:5a:e5:fe:03:de:09:bb:3e: 3b:6e:d7:f7:60:f7:07:9f:54:ad:19:65:1b:a4:a4:83:7f:80: ef:d1:59:06:5d:8d:7e:83:55:0f:dd:1e:54:92:66:cd:1f:09: 22:38:ad:43:60:bd:d9:39:02:30:ae:a6:82:f5:e5:31:66:4a: 8a:33:19:df:b0:4f:d5:a1:cb:a1:80:a0:61:6e:05:92:5a:75: b2:93:59:26:cc:c4:7c:4f:2d:3a:91:d3:0f:ea:7b:92:8b:5c: 16:f2:03:db:09:c8:70:88:e6:c1:80:1e:03:48:d2:12:9a:6d: 07:dd:9e:37:c9:5c:d4:1b:e0:bf:de:1d:b9:2a:cc:e4:2b:54: 54:62:d6:ac:5c:73:32:13:5d:18:7e:d7:73:83:53:db:a9:dd: 3f:6e:99:be:de:bb:c4:08:bb:c9:7f:91:d4:4f:2d:3b:56:8e: 59:5e:71:a4 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZvq9cu0HRbE+85OG8Gt2y89MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTIzMTMwNTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYWYxYzhkZDQwODg0YjQ5ZjA4ODA2NGQzYzEwMGQyYTE4OWE4NDc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxh2Vv4k7BJKKwM/xa02Sd002QUik twQqh4+b9dax8nqqpAuYLEwAv+G6sRtrM6gaJ/uqdj8nubfJjHrvuAf3fBr+I8n3 znOhEaCFBDrqfwJavdg4ophlGrVnkVylV4KeusPPeZZdAKDiynoYECLWHBEJddRy P0DE2Mfl8+KwoHXN8jKtjqDdnojnsL80nKLnpockMwQ6yo2Ajy8D2AMHsxZxZkNv t60XxZ8SCi4aePUZSMhlgSZpRSZe/9e74gGU/eUWRMKUh1cwruIZSVjltxpJilnr v2HJqJZGVrXUlVFvRHNn9kdpG7pjiyYwvrjSA+xhzsRbJ5mxpsEpCUq0WQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFKrxyN1AiEtJ8IgGTTwQDSoYmoR0MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzlmLzMzOTAw Yy1lNmNlLTQ0NGUtYmM5Ni0zYjMzOWQwODFmODMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWYvMzM5MDBj LWU2Y2UtNDQ0ZS1iYzk2LTNiMzM5ZDA4MWY4My8xL3F2SEkzVUNJUzBud2lBWk5Q QkFOS2hpYWhIUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAuSatMA0EAgACMAcDBQMgATXAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNExTANBgkqhkiG9w0BAQsFAAOCAQEANweR9EIE/3k5 Jw8VRV7goxHKU7C7iueybjXmoJS3E/yiS71+M/QIyZPPxqLi6j5E1DPX6jxUXzUf xLLL77HTLo5lmdRpz9pZBDAreR1lBiK6v1rl/gPeCbs+O27X92D3B59UrRllG6Sk g3+A79FZBl2NfoNVD90eVJJmzR8JIjitQ2C92TkCMK6mgvXlMWZKijMZ37BP1aHL oYCgYW4Fklp1spNZJszEfE8tOpHTD+p7kotcFvID2wnIcIjmwYAeA0jSEpptB92e N8lc1Bvgv94duSrM5CtUVGLWrFxzMhNdGH7Xc4NT26ndP26Zvt67xAi7yX+R1E8t O1aOWV5xpA== -----END CERTIFICATE-----Generated at Mon Feb 9 22:40:15 2026 by rpki-client