This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rsqu_IRN7K6xKV2CalKOhFurG-A.cer File: rsqu_IRN7K6xKV2CalKOhFurG-A.cer (raw, json) Hash identifier: zVolBMWi0eAxybEaDjd3CGoyAJFOdcQVgxpft9qVaXI= Subject key identifier: AE:CA:AE:FC:84:4D:EC:AE:B1:29:5D:82:6A:52:8E:84:5B:AB:1B:E0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEE161F2C3FAF021329EABE0FECFBFC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2b/a73905-31dd-4401-9d1b-6d8d91c7faa0/1/rsqu_IRN7K6xKV2CalKOhFurG-A.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2b/a73905-31dd-4401-9d1b-6d8d91c7faa0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:56 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 208914 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:16:1f:2c:3f:af:02:13:29:ea:be:0f:ec:fb:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aecaaefc844decaeb1295d826a528e845bab1be0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e8:a3:fe:71:b1:20:48:ff:e8:09:06:a2:2c: 5c:9a:c8:00:9f:bb:e5:4a:ca:14:03:0d:ab:bf:62: f7:ed:91:e3:74:5f:d5:42:1f:e4:e4:44:97:21:68: 17:67:70:66:d6:5b:e8:0a:2a:8a:0e:e7:81:d3:c7: a7:72:ac:48:81:da:8d:03:7a:ed:81:ac:99:da:56: fb:c8:12:2b:1f:b2:55:96:f6:3c:d5:c7:96:1c:b7: 07:dd:05:85:79:e6:8b:70:3c:91:e1:a2:81:46:b9: d0:ba:18:34:78:c2:fb:e2:5e:87:d6:de:34:38:1f: f6:79:94:b7:d2:c3:c2:ac:c0:af:dd:1e:55:2f:49: e3:04:65:5f:c9:a5:f0:64:36:e4:59:63:3f:82:90: c8:df:db:c4:f5:41:ae:cb:ee:a9:02:09:80:77:90: a4:c7:a5:e9:f8:32:ff:78:61:9d:15:b4:64:4a:cd: e5:8e:5e:35:43:5d:08:e5:03:3e:e9:49:6c:08:a0: 4b:7a:41:e4:94:f6:2a:1d:0a:fd:61:64:a4:ca:6d: ac:e4:02:89:d5:64:d9:44:27:4c:52:66:cd:18:67: 25:84:89:8e:f6:68:0e:ae:17:8f:de:06:18:3f:ff: 69:e0:c8:6b:8f:4a:71:6b:82:a0:a0:b4:8c:53:4e: 7d:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:CA:AE:FC:84:4D:EC:AE:B1:29:5D:82:6A:52:8E:84:5B:AB:1B:E0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a73905-31dd-4401-9d1b-6d8d91c7faa0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a73905-31dd-4401-9d1b-6d8d91c7faa0/1/rsqu_IRN7K6xKV2CalKOhFurG-A.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 208914 Signature Algorithm: sha256WithRSAEncryption aa:3f:f1:4c:d9:d1:79:97:4a:88:15:67:71:9e:fb:64:ba:a6: c0:f3:bd:e8:4a:2f:8b:71:8a:f7:48:07:e9:65:8f:8a:bc:1c: fd:de:5b:04:76:f6:da:ae:a0:67:58:ff:70:39:cb:07:a5:50: 0d:11:b8:6b:9c:dc:bf:0b:7d:73:95:e2:02:a7:f0:49:d4:13: 31:48:eb:a7:0f:e4:fb:e2:37:bf:e1:3a:2e:7d:e4:34:eb:b5: b2:bd:21:03:ce:72:a4:05:b2:1e:0f:27:1c:67:69:87:4a:30: 26:81:13:bc:fb:dd:04:c1:55:00:39:49:11:f9:1d:2e:2f:a6: d7:81:23:cc:6a:70:94:b3:5d:68:1f:ab:4c:38:41:ee:91:74: c4:9b:03:69:2a:ea:99:14:3f:4e:0a:ea:ba:da:73:39:94:8f: 91:b5:cc:cb:23:84:aa:7a:3f:e0:58:a3:8a:3f:3b:63:49:c5: 60:d7:fa:b4:99:0b:f8:e0:68:88:3c:19:43:95:2a:b1:25:bb: ec:2e:c3:b9:e1:6c:23:b8:c2:4c:c1:f2:51:a6:41:54:6b:b8: 2c:f0:0d:3f:ce:60:6c:a4:b3:06:97:a4:39:2d:a6:74:7c:1b: 8e:c1:c8:08:42:3d:74:74:38:e7:15:bc:fe:4d:e8:12:cb:cd: 6a:98:8c:05 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt87hYfLD+vAhMp6r4P7Pv8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZWNhYWVmYzg0NGRlY2FlYjEyOTVkODI2YTUyOGU4NDViYWIxYmUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+ij/nGxIEj/6AkGoixcmsgAn7vl SsoUAw2rv2L37ZHjdF/VQh/k5ESXIWgXZ3Bm1lvoCiqKDueB08encqxIgdqNA3rt gayZ2lb7yBIrH7JVlvY81ceWHLcH3QWFeeaLcDyR4aKBRrnQuhg0eML74l6H1t40 OB/2eZS30sPCrMCv3R5VL0njBGVfyaXwZDbkWWM/gpDI39vE9UGuy+6pAgmAd5Ck x6Xp+DL/eGGdFbRkSs3ljl41Q10I5QM+6UlsCKBLekHklPYqHQr9YWSkym2s5AKJ 1WTZRCdMUmbNGGclhImO9mgOrheP3gYYP/9p4Mhrj0pxa4KgoLSMU059PwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFK7KrvyETeyusSldgmpSjoRbqxvgMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJiL2E3Mzkw NS0zMWRkLTQ0MDEtOWQxYi02ZDhkOTFjN2ZhYTAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmIvYTczOTA1 LTMxZGQtNDQwMS05ZDFiLTZkOGQ5MWM3ZmFhMC8xL3JzcXVfSVJON0s2eEtWMkNh bEtPaEZ1ckctQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMwEjANBgkqhkiG9w0BAQsFAAOCAQEAqj/xTNnReZdK iBVncZ77ZLqmwPO96Eovi3GK90gH6WWPirwc/d5bBHb22q6gZ1j/cDnLB6VQDRG4 a5zcvwt9c5XiAqfwSdQTMUjrpw/k++I3v+E6Ln3kNOu1sr0hA85ypAWyHg8nHGdp h0owJoETvPvdBMFVADlJEfkdLi+m14EjzGpwlLNdaB+rTDhB7pF0xJsDaSrqmRQ/ TgrqutpzOZSPkbXMyyOEqno/4Fijij87Y0nFYNf6tJkL+OBoiDwZQ5UqsSW77C7D ueFsI7jCTMHyUaZBVGu4LPANP85gbKSzBpekOS2mdHwbjsHICEI9dHQ45xW8/k3o EsvNapiMBQ== -----END CERTIFICATE-----Generated at Mon Feb 9 15:07:08 2026 by rpki-client