This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qw8tGCnW-40kf6TpZY6hfwbACwU.cer File: qw8tGCnW-40kf6TpZY6hfwbACwU.cer (raw, json) Hash identifier: xdNbwLU8+4kG0e89qnKR4YB8HNMCI65zLM68hAJXqnI= Subject key identifier: AB:0F:2D:18:29:D6:FB:8D:24:7F:A4:E9:65:8E:A1:7F:06:C0:0B:05 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C6773087C32BDAC1E0B3C139A7C2C8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/01/726123-bfc2-47ea-9b05-570fec29d139/1/qw8tGCnW-40kf6TpZY6hfwbACwU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/01/726123-bfc2-47ea-9b05-570fec29d139/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:17:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.27.104.0/22 IP: 185.46.76.0/22 IP: 185.125.12.0/22 IP: 2a10:2c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:77:30:87:c3:2b:da:c1:e0:b3:c1:39:a7:c2:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ab0f2d1829d6fb8d247fa4e9658ea17f06c00b05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:2a:11:0d:a7:25:67:e3:72:b2:a1:af:d8:7e: eb:07:d6:7f:9f:8f:a5:42:d4:44:2a:26:6e:94:3d: 28:98:26:d3:1b:44:a3:39:7d:f4:80:17:f0:5b:7d: 72:15:31:40:77:ad:2e:22:91:e9:ac:6a:f9:7a:da: da:1b:e9:0d:46:42:e6:ff:56:85:e2:90:c8:5c:06: c3:b4:01:34:ab:b1:4b:95:94:4b:be:b1:d7:cf:f9: b2:f0:d3:2c:6a:48:22:f6:35:28:a7:3a:3d:89:dd: bd:d2:2e:49:66:68:3c:3b:4e:a9:a0:0a:f6:0b:c3: e4:3b:f3:a7:04:59:97:ec:d7:0f:6e:72:f1:ab:bc: 78:df:6d:16:87:f6:5e:4a:b4:63:5b:4b:97:4f:af: 0a:d6:90:b7:a4:f4:46:9c:80:01:8d:11:0c:4b:93: e3:f9:45:9e:18:6b:e9:b8:d0:56:db:30:c5:20:40: 87:95:4d:c4:6a:b2:06:78:7e:29:55:4f:68:dc:b6: 69:8a:3e:fc:4e:8d:b9:13:da:da:b6:c6:47:b6:b2: 88:52:bf:05:75:c5:bf:43:bd:b7:fa:a4:52:ba:f3: 83:bd:4a:dd:0a:76:71:c6:dd:c7:da:81:0f:5b:54: 39:ad:76:d5:4e:b1:a1:a1:25:5d:29:5d:44:48:37: a2:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:0F:2D:18:29:D6:FB:8D:24:7F:A4:E9:65:8E:A1:7F:06:C0:0B:05 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/726123-bfc2-47ea-9b05-570fec29d139/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/726123-bfc2-47ea-9b05-570fec29d139/1/qw8tGCnW-40kf6TpZY6hfwbACwU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.27.104.0/22 185.46.76.0/22 185.125.12.0/22 IPv6: 2a10:2c0::/29 Signature Algorithm: sha256WithRSAEncryption 30:07:42:45:d2:99:88:b4:ba:a3:ff:00:af:fd:7a:03:19:1a: ac:30:e8:de:b6:34:6d:a8:60:16:2a:2d:0d:1f:6e:68:6e:b7: cf:0e:22:76:0c:46:89:3f:72:9a:e9:41:35:2b:69:37:2f:af: d3:45:01:c1:07:34:59:be:21:89:be:50:75:6c:b9:85:85:08: ed:fb:72:c0:21:48:6d:e1:ea:0d:7e:f6:38:81:70:7a:f2:dd: 23:4c:d4:47:b4:9f:a5:83:30:a7:19:3f:23:af:9d:42:bd:97: 8e:83:2e:83:90:ce:9a:ce:9b:db:0a:a1:4a:0e:8c:89:64:1d: 4e:f1:0d:29:32:27:ee:e3:f4:03:e1:9a:9a:16:69:a1:29:1f: 12:56:20:6b:da:12:a7:30:30:a8:15:e9:72:f6:a7:4a:5b:ac: f3:5f:16:07:f1:7c:86:2f:47:52:47:fc:2a:15:6c:cb:be:c0: 4d:48:59:3e:71:ac:db:d8:aa:4c:f1:42:e1:0a:05:61:ad:d6: ac:02:8b:0b:61:80:e7:f7:9a:92:73:f2:11:8e:b8:f9:d8:fb: c0:bd:e2:8c:23:fc:fa:8a:19:18:9c:cc:83:fc:a6:86:17:c0: 3e:b3:11:dd:25:22:29:73:9d:b2:83:30:c3:51:43:55:98:0a: d5:c0:6f:3d -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISAZt3xncwh8Mr2sHgs8E5p8LIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYjBmMmQxODI5ZDZmYjhkMjQ3ZmE0ZTk2NThlYTE3ZjA2YzAwYjA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSoRDaclZ+NysqGv2H7rB9Z/n4+l QtREKiZulD0omCbTG0SjOX30gBfwW31yFTFAd60uIpHprGr5etraG+kNRkLm/1aF 4pDIXAbDtAE0q7FLlZRLvrHXz/my8NMsakgi9jUopzo9id290i5JZmg8O06poAr2 C8PkO/OnBFmX7NcPbnLxq7x4320Wh/ZeSrRjW0uXT68K1pC3pPRGnIABjREMS5Pj +UWeGGvpuNBW2zDFIECHlU3EarIGeH4pVU9o3LZpij78To25E9ratsZHtrKIUr8F dcW/Q723+qRSuvODvUrdCnZxxt3H2oEPW1Q5rXbVTrGhoSVdKV1ESDeiWwIDAQAB o4ICnzCCApswHQYDVR0OBBYEFKsPLRgp1vuNJH+k6WWOoX8GwAsFMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzAxLzcyNjEy My1iZmMyLTQ3ZWEtOWIwNS01NzBmZWMyOWQxMzkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDEvNzI2MTIz LWJmYzItNDdlYS05YjA1LTU3MGZlYzI5ZDEzOS8xL3F3OHRHQ25XLTQwa2Y2VHBa WTZoZndiQUN3VS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQCuRtoAwQCuS5MAwQCuX0MMA0EAgACMAcDBQMq EALAMA0GCSqGSIb3DQEBCwUAA4IBAQAwB0JF0pmItLqj/wCv/XoDGRqsMOjetjRt qGAWKi0NH25obrfPDiJ2DEaJP3Ka6UE1K2k3L6/TRQHBBzRZviGJvlB1bLmFhQjt +3LAIUht4eoNfvY4gXB68t0jTNRHtJ+lgzCnGT8jr51CvZeOgy6DkM6azpvbCqFK DoyJZB1O8Q0pMifu4/QD4ZqaFmmhKR8SViBr2hKnMDCoFely9qdKW6zzXxYH8XyG L0dSR/wqFWzLvsBNSFk+cazb2KpM8ULhCgVhrdasAosLYYDn95qSc/IRjrj52PvA veKMI/z6ihkYnMyD/KaGF8A+sxHdJSIpc52ygzDDUUNVmArVwG89 -----END CERTIFICATE-----Generated at Mon Feb 9 15:09:25 2026 by rpki-client