This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zQkyvbYQhcdt1kXB5263ERdUe5M.cer File: zQkyvbYQhcdt1kXB5263ERdUe5M.cer (raw, json) Hash identifier: 9tbac1TeQl4vsoBcy3XSL4WaQs4FbExirtxI4emqIP4= Subject key identifier: CD:09:32:BD:B6:10:85:C7:6D:D6:45:C1:E7:6E:B7:11:17:54:7B:93 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7758C7C95CE0F1CBFAA3CA264E7948AB Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/91/0a8b1f-ca72-4eda-a717-482c86db2040/1/zQkyvbYQhcdt1kXB5263ERdUe5M.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/91/0a8b1f-ca72-4eda-a717-482c86db2040/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:17:45 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 30779 IP: 88.135.224.0/19 IP: 91.200.72.0/24 IP: 193.19.74.0/23 IP: 193.34.20.0/22 IP: 2001:67c:203c::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:c7:c9:5c:e0:f1:cb:fa:a3:ca:26:4e:79:48:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cd0932bdb61085c76dd645c1e76eb71117547b93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:7d:96:99:7b:b5:7a:9c:e3:06:cb:4e:a5:5b: 52:bb:a0:4e:c9:85:f9:40:90:fb:cf:de:ff:fd:a5: b1:b7:be:62:f7:11:e6:a0:b0:87:bf:47:f5:9c:02: 13:fa:9b:03:88:c0:f3:83:c7:4a:fb:db:75:b7:54: f9:6f:72:d1:1c:2c:d4:2e:e6:06:8c:a0:50:68:17: 7e:82:87:20:5d:9a:4d:78:7b:30:71:d4:8d:35:04: 2c:49:80:ad:4a:b3:78:9c:d8:07:6d:14:46:bd:34: 6b:fb:51:73:3a:23:12:bd:ea:46:6c:c7:88:db:0e: 0c:3d:fe:e3:b8:d3:b7:8c:72:e5:fb:fc:85:df:ec: 98:a2:c6:8d:e5:54:ea:7b:a6:9e:fa:d3:83:a7:40: bd:99:99:d1:9c:bc:08:cc:b6:9b:b9:4c:9e:d8:3b: 8f:4b:c2:63:a6:b3:b9:3d:05:2e:6c:45:01:44:d2: db:ca:38:b9:b5:92:bc:81:dd:31:19:44:bf:97:c8: 44:bb:0d:f4:eb:f3:41:98:72:10:7c:72:f3:bb:c7: 2a:37:ff:8d:38:33:7d:69:00:51:bf:9d:82:c5:f1: 53:35:64:24:44:14:16:d7:5b:68:7c:91:16:75:68: bb:4f:d5:b8:73:84:4d:69:da:ad:bf:dd:d6:55:71: 34:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:09:32:BD:B6:10:85:C7:6D:D6:45:C1:E7:6E:B7:11:17:54:7B:93 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0a8b1f-ca72-4eda-a717-482c86db2040/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0a8b1f-ca72-4eda-a717-482c86db2040/1/zQkyvbYQhcdt1kXB5263ERdUe5M.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.135.224.0/19 91.200.72.0/24 193.19.74.0/23 193.34.20.0/22 IPv6: 2001:67c:203c::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 30779 Signature Algorithm: sha256WithRSAEncryption 15:4f:ea:f5:84:c2:b3:4c:ce:e2:64:1f:0d:74:2a:48:15:b0: d9:2c:ce:a0:fb:c8:27:ef:bb:79:73:fd:9f:5a:ab:76:2f:41: 5c:68:e4:8a:ba:97:a2:b2:f7:c6:b3:93:0d:32:dd:af:b3:a4: cf:e7:12:5b:7c:20:51:47:4a:a8:5b:a7:d4:68:f4:0a:a5:90: c4:03:48:da:ea:bd:87:02:3a:0b:ce:fb:f0:51:85:63:a5:eb: 9b:98:07:cc:7a:66:98:b5:ee:c0:cd:4b:07:cf:d8:5c:13:58: 73:a9:2b:93:e5:9f:73:4f:21:3b:7d:7f:b9:02:44:6d:46:04: 6a:4b:35:c4:7b:27:df:b9:16:df:e0:df:7b:77:fd:22:a2:19: f0:4e:ca:ce:a7:c9:63:ed:a0:55:5e:64:46:b6:6f:32:83:07: 82:34:37:4c:99:44:2f:06:15:2c:ea:6b:f6:00:d3:d9:11:06: 9e:d9:71:61:f8:d1:2e:e1:2c:1c:60:d1:f5:c1:1a:36:b8:47: ff:78:fc:1d:7c:cc:88:56:50:47:f2:cf:20:29:85:33:f1:8b: be:01:66:27:7b:03:29:0d:43:0b:fd:98:f6:f4:cb:91:3a:fc: 9f:ba:bb:6a:5c:40:1f:6f:6f:9d:de:e5:23:82:c7:19:cc:34: c5:09:0d:23 -----BEGIN CERTIFICATE----- MIIFtjCCBJ6gAwIBAgISAZt3WMfJXODxy/qjyiZOeUirMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZDA5MzJiZGI2MTA4NWM3NmRkNjQ1YzFlNzZlYjcxMTE3NTQ3YjkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv32WmXu1epzjBstOpVtSu6BOyYX5 QJD7z97//aWxt75i9xHmoLCHv0f1nAIT+psDiMDzg8dK+9t1t1T5b3LRHCzULuYG jKBQaBd+gocgXZpNeHswcdSNNQQsSYCtSrN4nNgHbRRGvTRr+1FzOiMSvepGbMeI 2w4MPf7juNO3jHLl+/yF3+yYosaN5VTqe6ae+tODp0C9mZnRnLwIzLabuUye2DuP S8JjprO5PQUubEUBRNLbyji5tZK8gd0xGUS/l8hEuw306/NBmHIQfHLzu8cqN/+N ODN9aQBRv52CxfFTNWQkRBQW11tofJEWdWi7T9W4c4RNadqtv93WVXE0BQIDAQAB o4ICwjCCAr4wHQYDVR0OBBYEFM0JMr22EIXHbdZFwedutxEXVHuTMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkxLzBhOGIx Zi1jYTcyLTRlZGEtYTcxNy00ODJjODZkYjIwNDAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTEvMGE4YjFm LWNhNzItNGVkYS1hNzE3LTQ4MmM4NmRiMjA0MC8xL3pRa3l2YllRaGNkdDFrWEI1 MjYzRVJkVWU1TS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEIGCCsGAQUF BwEHAQH/BDMwMTAeBAIAATAYAwQFWIfgAwQAW8hIAwQBwRNKAwQCwSIUMA8EAgAC MAkDBwAgAQZ8IDwwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICeDswDQYJKoZIhvcN AQELBQADggEBABVP6vWEwrNMzuJkHw10KkgVsNkszqD7yCfvu3lz/Z9aq3YvQVxo 5Iq6l6Ky98azkw0y3a+zpM/nElt8IFFHSqhbp9Ro9AqlkMQDSNrqvYcCOgvO+/BR hWOl65uYB8x6Zpi17sDNSwfP2FwTWHOpK5Pln3NPITt9f7kCRG1GBGpLNcR7J9+5 Ft/g33t3/SKiGfBOys6nyWPtoFVeZEa2bzKDB4I0N0yZRC8GFSzqa/YA09kRBp7Z cWH40S7hLBxg0fXBGja4R/94/B18zIhWUEfyzyAphTPxi74BZid7AykNQwv9mPb0 y5E6/J+6u2pcQB9vb53e5SOCxxnMNMUJDSM= -----END CERTIFICATE-----Generated at Mon Feb 9 15:05:43 2026 by rpki-client