This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zqF55PNT6p3K8C83pyt1Ds-hw1Q.cer File: zqF55PNT6p3K8C83pyt1Ds-hw1Q.cer (raw, json) Hash identifier: Bc2rxkD/1nddulFZL4woUeBEhJe5t4QzVnlm9z3E5Yk= Subject key identifier: CE:A1:79:E4:F3:53:EA:9D:CA:F0:2F:37:A7:2B:75:0E:CF:A1:C3:54 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5C83A3EE1E23790178F459A24599B8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3c/4a05f0-7abb-4e1f-8c27-215cd570e409/1/zqF55PNT6p3K8C83pyt1Ds-hw1Q.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3c/4a05f0-7abb-4e1f-8c27-215cd570e409/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:19:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 48666 IP: 91.223.144.0/24 IP: 2001:678:7dc::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:83:a3:ee:1e:23:79:01:78:f4:59:a2:45:99:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:19:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cea179e4f353ea9dcaf02f37a72b750ecfa1c354 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:08:bf:23:58:11:23:35:f7:68:c0:82:58:c4: 16:f4:e1:1f:8e:f1:9a:d0:e9:d8:f6:d5:33:07:f3: 8b:24:51:8b:f4:63:77:7a:08:1e:29:6d:c5:96:f4: 7a:c7:c6:38:50:87:36:9b:6e:4f:1d:89:e2:5e:fd: 8a:15:07:42:4b:b5:8a:d9:a8:a5:08:b8:48:ee:f9: 6a:7a:d1:13:cd:d4:b9:5d:5e:51:fc:a3:14:bd:04: 9f:d0:69:7b:22:46:02:c8:95:8b:6e:88:f1:42:05: ee:11:54:74:ae:7d:f4:4b:4c:f9:a1:ff:97:8f:3d: a7:d6:33:5a:13:7d:f7:8b:88:09:56:31:93:90:01: cb:68:ef:41:17:d9:8c:70:09:23:5a:f2:88:46:f9: c4:fb:83:d2:e7:5a:34:ff:e8:fe:ca:a5:64:45:b3: 8f:9a:78:b8:30:42:4b:e8:d8:2a:6d:ac:6b:d6:34: dd:e9:c2:91:eb:13:f4:9a:57:d4:c2:2e:18:3b:45: 5b:ac:65:06:f7:76:75:b4:6a:9b:a1:93:2d:fd:41: 54:64:63:cc:67:06:9c:69:9b:e7:6b:ea:38:a9:56: 2c:e6:75:2a:44:29:56:5d:1b:0b:68:ce:e0:cf:dc: 27:32:c5:0f:db:f5:36:d5:e6:08:e5:8a:4b:81:46: 5e:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:A1:79:E4:F3:53:EA:9D:CA:F0:2F:37:A7:2B:75:0E:CF:A1:C3:54 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/4a05f0-7abb-4e1f-8c27-215cd570e409/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/4a05f0-7abb-4e1f-8c27-215cd570e409/1/zqF55PNT6p3K8C83pyt1Ds-hw1Q.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.223.144.0/24 IPv6: 2001:678:7dc::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 48666 Signature Algorithm: sha256WithRSAEncryption 80:e8:ea:7f:6b:5f:bb:09:38:8a:94:54:cc:8a:b2:71:61:f7: c0:5b:c7:82:60:f5:4b:cf:d0:9d:9f:8d:c0:b2:23:77:05:48: c6:b6:70:4d:b8:14:f4:2b:97:a9:b9:96:9a:c1:f3:71:51:5c: 5f:d1:14:5d:46:36:5d:c1:c3:80:3d:6c:a4:33:9e:0e:5d:cb: 73:59:cc:7a:a1:49:04:f9:07:e7:21:1c:d6:37:a9:6b:6b:5f: 4a:4c:f8:90:26:44:94:a0:d5:73:4a:b7:d8:89:90:04:60:36: 8c:82:de:9a:a4:69:04:bb:8f:58:13:1a:a3:e1:81:c3:09:85: 91:50:da:cb:b8:cc:fa:56:34:53:f7:98:ab:40:71:ff:44:66: cc:65:9b:82:89:aa:d0:16:fe:3f:7c:ac:74:fb:6a:85:5d:ba: 25:a1:93:28:1c:4b:b1:3f:a7:e6:eb:11:8e:bd:94:86:b3:d8: 82:09:35:48:d6:62:89:0e:4f:34:df:f0:51:80:4d:ba:26:3c: b6:45:54:65:43:82:f2:ff:a8:64:c2:d3:de:cb:97:a4:9e:01: 7e:2d:ef:ee:83:d3:af:8a:21:36:eb:2d:2b:a9:8b:a1:08:f8: ed:f9:a6:aa:3a:7b:e0:25:d4:ab:fa:8a:87:ee:8c:85:8f:ff: 6c:d6:90:ac -----BEGIN CERTIFICATE----- MIIFpTCCBI2gAwIBAgISAZt9XIOj7h4jeQF49FmiRZm4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxOTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZWExNzllNGYzNTNlYTlkY2FmMDJmMzdhNzJiNzUwZWNmYTFjMzU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Qi/I1gRIzX3aMCCWMQW9OEfjvGa 0OnY9tUzB/OLJFGL9GN3eggeKW3FlvR6x8Y4UIc2m25PHYniXv2KFQdCS7WK2ail CLhI7vlqetETzdS5XV5R/KMUvQSf0Gl7IkYCyJWLbojxQgXuEVR0rn30S0z5of+X jz2n1jNaE333i4gJVjGTkAHLaO9BF9mMcAkjWvKIRvnE+4PS51o0/+j+yqVkRbOP mni4MEJL6Ngqbaxr1jTd6cKR6xP0mlfUwi4YO0VbrGUG93Z1tGqboZMt/UFUZGPM ZwacaZvna+o4qVYs5nUqRClWXRsLaM7gz9wnMsUP2/U21eYI5YpLgUZeSQIDAQAB o4ICsTCCAq0wHQYDVR0OBBYEFM6heeTzU+qdyvAvN6crdQ7PocNUMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNjLzRhMDVm MC03YWJiLTRlMWYtOGMyNy0yMTVjZDU3MGU0MDkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2MvNGEwNWYw LTdhYmItNGUxZi04YzI3LTIxNWNkNTcwZTQwOS8xL3pxRjU1UE5UNnAzSzhDODNw eXQxRHMtaHcxUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQAW9+QMA8EAgACMAkDBwAgAQZ4B9wwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDAL4aMA0GCSqGSIb3DQEBCwUAA4IBAQCA6Op/a1+7 CTiKlFTMirJxYffAW8eCYPVLz9Cdn43AsiN3BUjGtnBNuBT0K5epuZaawfNxUVxf 0RRdRjZdwcOAPWykM54OXctzWcx6oUkE+QfnIRzWN6lra19KTPiQJkSUoNVzSrfY iZAEYDaMgt6apGkEu49YExqj4YHDCYWRUNrLuMz6VjRT95irQHH/RGbMZZuCiarQ Fv4/fKx0+2qFXboloZMoHEuxP6fm6xGOvZSGs9iCCTVI1mKJDk803/BRgE26Jjy2 RVRlQ4Ly/6hkwtPey5ekngF+Le/ug9OviiE26y0rqYuhCPjt+aaqOnvgJdSr+oqH 7oyFj/9s1pCs -----END CERTIFICATE-----Generated at Mon Feb 9 16:51:45 2026 by rpki-client