This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rQt55LWcX82kk6IK0Y6UVYWdAxs.cer File: rQt55LWcX82kk6IK0Y6UVYWdAxs.cer (raw, json) Hash identifier: v2RAxIkK7GsAZ6gINpxS4elvOdtl+1xZx6RsgPmEkWo= Subject key identifier: AD:0B:79:E4:B5:9C:5F:CD:A4:93:A2:0A:D1:8E:94:55:85:9D:03:1B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7834CEC05CE92426F11A30841FE72E5B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/76/cd555b-f73e-48ad-b544-e3eb4e8a38db/1/rQt55LWcX82kk6IK0Y6UVYWdAxs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/76/cd555b-f73e-48ad-b544-e3eb4e8a38db/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:05 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 21119 AS: 198869 IP: 5.226.160.0/21 IP: 46.16.48.0/21 IP: 80.86.128.0/20 IP: 82.117.32.0/19 IP: 89.105.32.0/20 IP: 89.233.96.0/21 IP: 93.187.80.0/21 IP: 185.36.28.0/22 IP: 193.169.42.0/23 IP: 193.201.74.0/23 IP: 213.179.48.0/20 IP: 217.65.224.0/20 IP: 2001:a90::/32 IP: 2a01:b8c0::/32 IP: 2a03:6240::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:ce:c0:5c:e9:24:26:f1:1a:30:84:1f:e7:2e:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ad0b79e4b59c5fcda493a20ad18e9455859d031b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a2:4b:0e:16:00:d1:9d:16:c1:b4:82:66:e3: 94:6b:c2:e2:e3:11:bd:5c:10:d4:a2:74:81:bf:f4: 3d:d1:8f:4e:52:30:45:c3:92:29:75:15:79:0a:a9: 19:7b:0c:f9:34:cb:84:a0:85:91:5c:79:bd:36:a5: ca:46:b7:a8:75:bf:ed:ec:73:62:7f:3b:19:d1:d4: 55:0f:9e:e2:37:cf:7f:a8:11:98:2f:80:e1:f7:30: 55:5a:e2:4e:b3:8f:e1:f5:50:31:24:0e:c3:8e:22: 27:92:43:9e:45:52:e5:4c:78:b0:f4:59:9e:1a:7e: 0c:e2:6b:6d:07:80:7d:f1:1c:06:22:35:15:de:5d: 0d:e4:f0:3f:05:62:1c:15:1b:46:b6:9d:20:9c:3d: 17:a5:8e:3f:88:a1:51:e4:03:19:69:7e:d0:e1:00: 9a:29:03:9c:d8:b1:6d:60:01:13:03:32:e2:12:ea: 2a:fe:4a:eb:0c:35:68:a0:71:56:d7:72:67:88:e6: 1d:c6:af:24:95:78:4b:f2:0f:5a:ba:3d:2e:4f:ad: e0:b9:e2:3a:fc:28:2d:51:ac:36:44:67:69:4d:2e: 16:81:3b:9b:d2:17:24:85:65:c8:28:95:86:bd:fe: 75:24:39:01:07:ee:8b:b3:c5:4f:96:24:6b:1f:45: f7:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:0B:79:E4:B5:9C:5F:CD:A4:93:A2:0A:D1:8E:94:55:85:9D:03:1B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/cd555b-f73e-48ad-b544-e3eb4e8a38db/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/cd555b-f73e-48ad-b544-e3eb4e8a38db/1/rQt55LWcX82kk6IK0Y6UVYWdAxs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.226.160.0/21 46.16.48.0/21 80.86.128.0/20 82.117.32.0/19 89.105.32.0/20 89.233.96.0/21 93.187.80.0/21 185.36.28.0/22 193.169.42.0/23 193.201.74.0/23 213.179.48.0/20 217.65.224.0/20 IPv6: 2001:a90::/32 2a01:b8c0::/32 2a03:6240::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 21119 198869 Signature Algorithm: sha256WithRSAEncryption 39:47:1f:15:f7:05:1a:54:10:a9:5b:5c:5e:50:77:74:78:f4: 97:be:48:49:b3:b5:9a:aa:2c:30:ef:94:d6:af:3b:db:c0:9c: ce:f3:7d:d1:c5:fc:9b:0b:f3:61:b4:1b:dc:ea:15:11:82:60: 6e:93:52:99:ca:c6:20:ea:1d:05:ae:97:37:d9:1f:6b:36:67: 95:77:2e:30:43:b6:54:c7:69:ff:fd:63:00:6b:a7:ef:44:e4: d5:ba:1f:48:c0:d7:de:87:05:ee:72:ca:bd:21:43:6f:4a:10: ca:82:7b:09:41:d7:9f:1a:ad:54:4a:24:a8:47:12:05:28:57: da:55:15:f6:12:05:e0:c6:37:51:7f:47:12:ff:7f:eb:48:22: 38:34:d1:f9:bf:97:17:74:4a:79:c8:95:46:48:a6:dd:9e:97: 78:ed:ee:85:8e:a0:8d:66:f0:f0:bc:57:4a:7a:be:ec:dc:c8: fe:c2:d7:68:00:0d:75:8c:35:0c:6d:8d:9e:8f:0c:83:d1:ad: 55:a5:1d:94:e0:93:ba:62:1b:f6:b1:d7:4e:06:1d:10:a8:d4: 74:f2:80:08:6f:fb:22:0d:6b:fe:39:b3:26:21:47:c1:b2:6c: a5:cb:9e:00:a6:89:af:c5:94:b1:67:c6:54:4e:2e:fe:8b:cb: ad:81:9e:d5 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgISAZt4NM7AXOkkJvEaMIQf5y5bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZDBiNzllNGI1OWM1ZmNkYTQ5M2EyMGFkMThlOTQ1NTg1OWQwMzFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6JLDhYA0Z0WwbSCZuOUa8Li4xG9 XBDUonSBv/Q90Y9OUjBFw5IpdRV5CqkZewz5NMuEoIWRXHm9NqXKRreodb/t7HNi fzsZ0dRVD57iN89/qBGYL4Dh9zBVWuJOs4/h9VAxJA7DjiInkkOeRVLlTHiw9Fme Gn4M4mttB4B98RwGIjUV3l0N5PA/BWIcFRtGtp0gnD0XpY4/iKFR5AMZaX7Q4QCa KQOc2LFtYAETAzLiEuoq/krrDDVooHFW13JniOYdxq8klXhL8g9auj0uT63gueI6 /CgtUaw2RGdpTS4WgTub0hckhWXIKJWGvf51JDkBB+6Ls8VPliRrH0X3XQIDAQAB o4IDAzCCAv8wHQYDVR0OBBYEFK0LeeS1nF/NpJOiCtGOlFWFnQMbMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc2L2NkNTU1 Yi1mNzNlLTQ4YWQtYjU0NC1lM2ViNGU4YTM4ZGIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzYvY2Q1NTVi LWY3M2UtNDhhZC1iNTQ0LWUzZWI0ZThhMzhkYi8xL3JRdDU1TFdjWDgya2s2SUsw WTZVVllXZEF4cy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMH4GCCsGAQUF BwEHAQH/BG8wbTBOBAIAATBIAwQDBeKgAwQDLhAwAwQEUFaAAwQFUnUgAwQEWWkg AwQDWelgAwQDXbtQAwQCuSQcAwQBwakqAwQBwclKAwQE1bMwAwQE2UHgMBsEAgAC MBUDBQAgAQqQAwUAKgG4wAMFACoDYkAwHgYIKwYBBQUHAQgBAf8EDzANoAswCQIC Un8CAwMI1TANBgkqhkiG9w0BAQsFAAOCAQEAOUcfFfcFGlQQqVtcXlB3dHj0l75I SbO1mqosMO+U1q8728CczvN90cX8mwvzYbQb3OoVEYJgbpNSmcrGIOodBa6XN9kf azZnlXcuMEO2VMdp//1jAGun70Tk1bofSMDX3ocF7nLKvSFDb0oQyoJ7CUHXnxqt VEokqEcSBShX2lUV9hIF4MY3UX9HEv9/60giODTR+b+XF3RKeciVRkim3Z6XeO3u hY6gjWbw8LxXSnq+7NzI/sLXaAANdYw1DG2Nno8Mg9GtVaUdlOCTumIb9rHXTgYd EKjUdPKACG/7Ig1r/jmzJiFHwbJspcueAKaJr8WUsWfGVE4u/ovLrYGe1Q== -----END CERTIFICATE-----Generated at Mon Feb 9 15:10:06 2026 by rpki-client