This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rQVANtrTLReoyRbcLfuzzoo2RSw.cer File: rQVANtrTLReoyRbcLfuzzoo2RSw.cer (raw, json) Hash identifier: oVeA264gVzgrIsrTDePKVyY1Gikng+er6CS1TsP5FGQ= Subject key identifier: AD:05:40:36:DA:D3:2D:17:A8:C9:16:DC:2D:FB:B3:CE:8A:36:45:2C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EAF0EC4AE3943ACD3A0A38D88D5A25 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/20/a3fbf8-45a7-49c2-a4b8-8e1514ccaa4a/1/rQVANtrTLReoyRbcLfuzzoo2RSw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/20/a3fbf8-45a7-49c2-a4b8-8e1514ccaa4a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:17:47 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 13278 IP: 195.234.165.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:f0:ec:4a:e3:94:3a:cd:3a:0a:38:d8:8d:5a:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ad054036dad32d17a8c916dc2dfbb3ce8a36452c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:55:59:21:42:e7:84:26:c1:da:87:ba:0f:18: ef:98:cb:32:35:81:f0:a6:11:b8:82:67:ef:4f:1d: 2c:a7:6f:e5:63:55:96:ab:d9:d6:ea:ef:9e:d0:b2: 6d:df:05:0c:f3:da:e7:40:e4:bc:a5:d3:d4:d7:91: b7:2d:1f:c2:45:3a:7c:60:25:73:a3:6b:f3:c9:c0: 4d:66:2d:f0:32:da:e0:c8:33:84:6f:d4:27:1e:cb: 6d:d2:56:3d:dc:7d:72:c8:ae:25:b8:0d:61:60:28: dd:02:0c:19:35:87:90:8e:16:8b:b4:e4:29:bc:5a: da:90:b2:46:82:c8:90:31:ae:3b:00:c1:7a:8e:45: 90:8f:76:ee:3a:80:1f:1f:45:3e:1f:5a:2a:0d:fd: ba:fc:36:8b:3d:4b:4f:01:1a:5f:d3:33:54:c8:88: 2c:cc:3f:75:2b:42:a8:a3:66:26:ef:86:e4:da:f0: 20:63:b1:cd:ac:c2:40:c7:bc:67:83:f6:ab:bd:3d: 3f:ee:47:8b:ec:f4:a3:82:41:0d:d9:32:18:8a:a4: d1:c0:35:d4:03:7c:2c:4a:ab:88:54:df:a9:9b:b2: c4:b4:19:a5:f3:65:12:fd:61:ad:ab:6f:69:ec:c6: 2c:16:b1:bf:bf:9c:9f:3c:4f:1d:0f:5d:02:18:61: ba:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:05:40:36:DA:D3:2D:17:A8:C9:16:DC:2D:FB:B3:CE:8A:36:45:2C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a3fbf8-45a7-49c2-a4b8-8e1514ccaa4a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a3fbf8-45a7-49c2-a4b8-8e1514ccaa4a/1/rQVANtrTLReoyRbcLfuzzoo2RSw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.234.165.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 13278 Signature Algorithm: sha256WithRSAEncryption 1e:5d:97:4a:08:1d:d4:34:ae:fa:94:18:21:58:6b:fe:23:4f: 9f:50:7f:69:9c:e0:78:0f:e2:e6:83:ea:ef:88:f7:a7:2a:62: 8f:01:30:55:56:9e:ca:6c:5d:d0:3f:af:27:4e:87:01:53:d4: 92:00:c8:96:d9:3b:c6:db:fd:d3:1a:22:fb:0e:ce:e5:86:99: 43:2d:8a:12:12:8c:fb:d1:2a:6c:95:56:2b:fe:69:12:11:01: e2:a4:d4:69:5b:8f:f3:ad:0e:15:47:b6:eb:8a:b4:d3:dd:56: 3e:b5:37:74:a5:50:fb:43:27:92:26:52:e6:5a:88:48:3f:a9: 38:ad:14:e6:11:75:8d:1e:ae:c4:38:bb:eb:fc:21:6d:c9:ab: af:ed:33:90:cf:b0:9c:21:a8:98:2f:8b:d9:ad:1c:ce:88:75: 5f:52:7c:11:32:da:1a:27:b6:cd:2f:8c:44:3c:c5:97:da:79: b6:88:fe:11:6e:67:c2:c5:1c:34:96:c5:e3:9e:35:bb:bd:65: f7:0a:02:e5:85:87:57:3f:bd:9f:40:16:08:06:5a:b3:07:99: 26:5d:5c:53:9c:72:fb:6f:6a:a9:ab:4a:84:0c:70:ae:94:a8: 61:15:43:3e:2a:33:a7:de:1f:7d:a6:c7:ef:b4:ec:c9:ff:db: 3a:06:a8:03 -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISAZt26vDsSuOUOs06CjjYjVolMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZDA1NDAzNmRhZDMyZDE3YThjOTE2ZGMyZGZiYjNjZThhMzY0NTJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA21VZIULnhCbB2oe6DxjvmMsyNYHw phG4gmfvTx0sp2/lY1WWq9nW6u+e0LJt3wUM89rnQOS8pdPU15G3LR/CRTp8YCVz o2vzycBNZi3wMtrgyDOEb9QnHstt0lY93H1yyK4luA1hYCjdAgwZNYeQjhaLtOQp vFrakLJGgsiQMa47AMF6jkWQj3buOoAfH0U+H1oqDf26/DaLPUtPARpf0zNUyIgs zD91K0Koo2Ym74bk2vAgY7HNrMJAx7xng/arvT0/7keL7PSjgkEN2TIYiqTRwDXU A3wsSquIVN+pm7LEtBml82US/WGtq29p7MYsFrG/v5yfPE8dD10CGGG63QIDAQAB o4ICnzCCApswHQYDVR0OBBYEFK0FQDba0y0XqMkW3C37s86KNkUsMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzIwL2EzZmJm OC00NWE3LTQ5YzItYTRiOC04ZTE1MTRjY2FhNGEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjAvYTNmYmY4 LTQ1YTctNDljMi1hNGI4LThlMTUxNGNjYWE0YS8xL3JRVkFOdHJUTFJlb3lSYmNM ZnV6em9vMlJTdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAw+qlMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQC AjPeMA0GCSqGSIb3DQEBCwUAA4IBAQAeXZdKCB3UNK76lBghWGv+I0+fUH9pnOB4 D+Lmg+rviPenKmKPATBVVp7KbF3QP68nTocBU9SSAMiW2TvG2/3TGiL7Ds7lhplD LYoSEoz70SpslVYr/mkSEQHipNRpW4/zrQ4VR7brirTT3VY+tTd0pVD7QyeSJlLm WohIP6k4rRTmEXWNHq7EOLvr/CFtyauv7TOQz7CcIaiYL4vZrRzOiHVfUnwRMtoa J7bNL4xEPMWX2nm2iP4RbmfCxRw0lsXjnjW7vWX3CgLlhYdXP72fQBYIBlqzB5km XVxTnHL7b2qpq0qEDHCulKhhFUM+KjOn3h99psfvtOzJ/9s6BqgD -----END CERTIFICATE-----Generated at Mon Feb 9 19:41:05 2026 by rpki-client