This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qzCSHSjHjt6BhC9xLmz3K95aYIA.cer File: qzCSHSjHjt6BhC9xLmz3K95aYIA.cer (raw, json) Hash identifier: 8FgcMGUQDFmdrvWm33p8TZtoUaZ6tRdvbm4fi47oH/U= Subject key identifier: AB:30:92:1D:28:C7:8E:DE:81:84:2F:71:2E:6C:F7:2B:DE:5A:60:80 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7758A0023D061A2CD55389C0000B4994 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/qzCSHSjHjt6BhC9xLmz3K95aYIA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:17:35 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 8982 AS: 34960 IP: 5.149.0.0/21 IP: 185.120.92.0/22 IP: 185.122.48.0/22 IP: 194.126.144.0/23 IP: 212.120.0.0/19 IP: 2a01:48c0::/32 IP: 2a03:2560::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:a0:02:3d:06:1a:2c:d5:53:89:c0:00:0b:49:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ab30921d28c78ede81842f712e6cf72bde5a6080 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:6d:d1:10:e5:6e:62:90:d9:48:af:e1:4a:24: f5:6b:be:da:c2:7a:f2:00:c3:d2:b4:16:45:02:c8: 2d:e7:36:7c:3a:10:bc:c3:73:47:a2:24:d5:39:c6: 49:ca:86:21:cd:28:ba:3d:e0:b0:cd:72:06:2f:d0: 68:cd:08:42:3a:f9:b4:dd:1f:0e:d3:bb:c5:bf:47: a6:a1:51:20:a6:92:96:42:40:60:96:d5:04:d3:2d: fb:e6:8e:35:d4:6f:f5:50:43:f5:46:7b:e2:b5:4b: 57:1c:f7:ca:a8:fe:53:5b:78:de:08:d6:9f:3b:06: c0:9c:e4:6d:9f:ee:3d:1c:fb:69:45:d1:b9:b8:94: 61:1c:e2:4e:50:ea:e3:30:e0:95:47:a2:bc:b3:69: 84:5d:7f:bd:e5:6c:c3:53:9c:d8:cf:25:dd:15:49: 42:4f:a6:62:af:4a:f6:84:43:ac:80:fe:53:f9:23: 39:6d:89:bd:31:c6:64:af:a8:8c:1f:65:2f:6a:18: e2:16:75:be:84:c5:21:05:b7:e4:e6:f9:2b:6e:76: d3:a4:90:e3:2a:04:95:f8:6a:36:ad:e5:62:ac:51: 4c:02:7f:ad:67:1b:a0:d2:c7:c2:95:e9:46:b1:a5: a9:d1:48:d1:5d:37:b3:0b:69:7f:4f:c1:95:fe:ea: f0:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:30:92:1D:28:C7:8E:DE:81:84:2F:71:2E:6C:F7:2B:DE:5A:60:80 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/qzCSHSjHjt6BhC9xLmz3K95aYIA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.149.0.0/21 185.120.92.0/22 185.122.48.0/22 194.126.144.0/23 212.120.0.0/19 IPv6: 2a01:48c0::/32 2a03:2560::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 8982 34960 Signature Algorithm: sha256WithRSAEncryption 9b:66:b6:90:6d:88:0e:f1:e5:ad:cf:3c:37:db:1f:71:c3:c5: ad:d2:f0:7d:81:3e:77:0c:e2:52:be:6b:2a:b7:e1:5b:af:40: 32:6a:cf:3a:14:87:6c:20:d9:75:63:06:89:d1:51:58:0d:45: 65:2f:c2:55:13:df:69:81:e0:94:86:33:83:32:bd:51:11:4f: 06:4b:05:47:11:43:06:4d:0c:26:7d:76:44:3a:81:59:ec:f6: fb:ca:d1:c9:39:20:20:48:66:b8:38:cd:30:86:09:1a:7a:05: ef:68:92:6d:a1:e8:dd:8b:0c:3d:25:a7:3d:5e:bb:bf:f9:1d: 78:ad:91:22:b1:bd:f0:16:7f:7e:6f:3a:6c:3e:83:b9:1e:44: d4:e7:a8:83:45:f8:ff:de:6f:ce:ce:fc:a6:76:1e:02:25:f9: 12:6e:d0:92:92:8f:fa:a0:2f:f6:bf:74:d9:c6:bd:d0:44:ce: 9d:b6:ef:61:d5:5f:dc:e4:b2:8f:b0:5b:9c:f9:a8:0f:40:ca: 67:43:7a:e5:9b:a1:74:70:a1:09:0f:25:94:3c:49:34:4a:93: 20:b0:a0:fd:83:be:d5:99:86:52:3e:5e:b3:70:f9:7d:d8:54: d6:76:16:d7:77:87:33:7f:84:5e:b9:58:ed:35:12:a5:cc:51: 24:94:81:ae -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgISAZt3WKACPQYaLNVTicAAC0mUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYjMwOTIxZDI4Yzc4ZWRlODE4NDJmNzEyZTZjZjcyYmRlNWE2MDgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7W3REOVuYpDZSK/hSiT1a77awnry AMPStBZFAsgt5zZ8OhC8w3NHoiTVOcZJyoYhzSi6PeCwzXIGL9BozQhCOvm03R8O 07vFv0emoVEgppKWQkBgltUE0y375o411G/1UEP1RnvitUtXHPfKqP5TW3jeCNaf OwbAnORtn+49HPtpRdG5uJRhHOJOUOrjMOCVR6K8s2mEXX+95WzDU5zYzyXdFUlC T6Zir0r2hEOsgP5T+SM5bYm9McZkr6iMH2UvahjiFnW+hMUhBbfk5vkrbnbTpJDj KgSV+Go2reVirFFMAn+tZxug0sfClelGsaWp0UjRXTezC2l/T8GV/urw8wIDAQAB o4IC0jCCAs4wHQYDVR0OBBYEFKswkh0ox47egYQvcS5s9yveWmCAMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM1LzNjZDdm Zi0yMGQyLTRjZWMtYWVjYS0zNTQzOTk3MjRiMWUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzUvM2NkN2Zm LTIwZDItNGNlYy1hZWNhLTM1NDM5OTcyNGIxZS8xL3F6Q1NIU2pIanQ2QmhDOXhM bXozSzk1YVlJQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CME0GCCsGAQUF BwEHAQH/BD4wPDAkBAIAATAeAwQDBZUAAwQCuXhcAwQCuXowAwQBwn6QAwQF1HgA MBQEAgACMA4DBQAqAUjAAwUAKgMlYDAeBggrBgEFBQcBCAEB/wQPMA2gCzAJAgIj FgIDAIiQMA0GCSqGSIb3DQEBCwUAA4IBAQCbZraQbYgO8eWtzzw32x9xw8Wt0vB9 gT53DOJSvmsqt+Fbr0Ayas86FIdsINl1YwaJ0VFYDUVlL8JVE99pgeCUhjODMr1R EU8GSwVHEUMGTQwmfXZEOoFZ7Pb7ytHJOSAgSGa4OM0whgkaegXvaJJtoejdiww9 Jac9Xru/+R14rZEisb3wFn9+bzpsPoO5HkTU56iDRfj/3m/Ozvymdh4CJfkSbtCS ko/6oC/2v3TZxr3QRM6dtu9h1V/c5LKPsFuc+agPQMpnQ3rlm6F0cKEJDyWUPEk0 SpMgsKD9g77VmYZSPl6zcPl92FTWdhbXd4czf4ReuVjtNRKlzFEklIGu -----END CERTIFICATE-----Generated at Mon Feb 9 19:51:02 2026 by rpki-client