This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qy5bZ_JcvYgspNAj0h75jUg3Nds.cer File: qy5bZ_JcvYgspNAj0h75jUg3Nds.cer (raw, json) Hash identifier: Dr5fUGseeM8KtYFx7FHKI9lMmOLjDrwltgk7YkEFOAA= Subject key identifier: AB:2E:5B:67:F2:5C:BD:88:2C:A4:D0:23:D2:1E:F9:8D:48:37:35:DB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC9365913DB46C9DA9ED979CC1C0D50 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/qy5bZ_JcvYgspNAj0h75jUg3Nds.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:19:25 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.244.236.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 23:33:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:36:59:13:db:46:c9:da:9e:d9:79:cc:1c:0d:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:19:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ab2e5b67f25cbd882ca4d023d21ef98d483735db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d5:db:a9:e5:e3:d9:62:f5:31:66:24:b2:35: b9:ed:ac:c6:31:57:86:5c:3e:ca:ed:81:7a:34:e0: 1a:20:fa:d1:6b:e3:63:ea:1a:85:c9:59:72:ff:0b: b2:ce:bb:c0:f1:e0:b1:6f:22:f5:8f:4f:a1:cc:89: 52:a5:bf:89:57:14:cc:5d:e7:fd:46:0f:ec:61:6c: 03:51:05:e6:9d:b0:2b:4d:34:5d:73:3a:44:fc:f7: 87:55:97:3d:c9:be:ce:eb:62:8d:de:b9:84:87:ea: 96:8c:6b:26:b4:52:e9:65:23:be:96:5a:d0:23:a5: 99:ad:9d:85:bf:53:fa:3e:5b:9b:27:ce:7b:9b:75: aa:ff:32:68:b6:8f:70:d7:ec:33:26:2b:59:e5:ed: 9f:f1:62:70:f6:8b:5b:69:af:83:41:69:6c:3d:29: 06:73:bf:56:6f:43:5f:53:6c:af:97:e8:ae:be:13: 91:b6:7b:15:77:2c:1a:a4:93:60:1a:57:ad:14:58: 9e:2a:28:3e:01:c7:1d:0c:8e:a0:73:88:35:89:94: 3c:fb:0a:37:9c:4e:5a:c9:14:c3:52:90:0d:a1:16: f3:f2:f2:f5:ba:91:9b:a7:74:58:a9:77:29:b9:de: ad:fd:82:a4:23:60:df:b7:af:55:52:9d:82:86:4a: 44:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:2E:5B:67:F2:5C:BD:88:2C:A4:D0:23:D2:1E:F9:8D:48:37:35:DB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/qy5bZ_JcvYgspNAj0h75jUg3Nds.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.244.236.0/23 Signature Algorithm: sha256WithRSAEncryption 27:9a:09:ef:85:75:90:cc:f2:40:b9:a2:1e:db:61:0c:1f:69: 17:fb:bd:d5:52:d1:ae:d8:16:6c:eb:2b:bb:32:95:8b:28:7f: 5c:49:fd:bf:af:53:96:3b:29:4e:18:cb:41:13:55:85:fa:12: 0d:a1:fe:75:a2:a7:7a:32:32:0a:fc:6e:32:af:c2:f2:83:f8: de:53:68:2c:01:f7:0e:28:53:86:b2:15:0f:dd:b3:58:fa:74: e8:ef:a7:fc:a2:b1:33:78:0f:68:35:e0:9f:99:0c:13:ca:85: e5:1f:50:7b:91:6f:d7:7d:1e:fc:9b:36:b3:91:48:7e:7a:53: e3:7e:70:71:66:f4:ad:99:17:58:32:4e:45:3d:ae:4e:cb:99: f3:cd:d7:79:13:19:94:f8:df:a4:ca:e0:1a:a9:6a:45:e0:e2: a9:30:e1:53:61:ec:1d:8a:65:a1:cb:a2:84:61:0d:ba:b0:fa: 40:2a:9c:bf:bc:f2:1b:8d:51:6b:7c:9c:a4:c1:d6:5d:c9:d8: ee:bd:e5:8f:4d:99:f4:4c:de:b7:6a:33:41:76:e0:93:20:8a: b6:8f:c8:76:bc:4a:30:7c:e7:b6:12:27:d1:44:7d:d0:e7:db: ea:49:c0:34:f7:f1:3f:28:7f:27:61:d6:b1:e3:72:8e:0f:39: 0c:15:18:19 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt6yTZZE9tGydqe2XnMHA1QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxOTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYjJlNWI2N2YyNWNiZDg4MmNhNGQwMjNkMjFlZjk4ZDQ4MzczNWRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0tXbqeXj2WL1MWYksjW57azGMVeG XD7K7YF6NOAaIPrRa+Nj6hqFyVly/wuyzrvA8eCxbyL1j0+hzIlSpb+JVxTMXef9 Rg/sYWwDUQXmnbArTTRdczpE/PeHVZc9yb7O62KN3rmEh+qWjGsmtFLpZSO+llrQ I6WZrZ2Fv1P6PlubJ857m3Wq/zJoto9w1+wzJitZ5e2f8WJw9otbaa+DQWlsPSkG c79Wb0NfU2yvl+iuvhORtnsVdywapJNgGletFFieKig+AccdDI6gc4g1iZQ8+wo3 nE5ayRTDUpANoRbz8vL1upGbp3RYqXcpud6t/YKkI2Dft69VUp2ChkpEcwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFKsuW2fyXL2ILKTQI9Ie+Y1INzXbMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFkLzY3ZmZl OS04ZDk4LTRjNmQtYmUyYS0zZjZlYzI0OTcxN2MvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWQvNjdmZmU5 LThkOTgtNGM2ZC1iZTJhLTNmNmVjMjQ5NzE3Yy8xL3F5NWJaX0pjdllnc3BOQWow aDc1alVnM05kcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQBW/TsMA0GCSqGSIb3DQEBCwUAA4IBAQAnmgnv hXWQzPJAuaIe22EMH2kX+73VUtGu2BZs6yu7MpWLKH9cSf2/r1OWOylOGMtBE1WF +hINof51oqd6MjIK/G4yr8Lyg/jeU2gsAfcOKFOGshUP3bNY+nTo76f8orEzeA9o NeCfmQwTyoXlH1B7kW/XfR78mzazkUh+elPjfnBxZvStmRdYMk5FPa5Oy5nzzdd5 ExmU+N+kyuAaqWpF4OKpMOFTYewdimWhy6KEYQ26sPpAKpy/vPIbjVFrfJykwdZd ydjuveWPTZn0TN63ajNBduCTIIq2j8h2vEowfOe2EifRRH3Q59vqScA09/E/KH8n Ydax43KODzkMFRgZ -----END CERTIFICATE-----Generated at Sat Jan 3 08:21:04 2026 by rpki-client