This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zqfM0q7Au-_GNQhWUSqV_gIlmVk.cer File: zqfM0q7Au-_GNQhWUSqV_gIlmVk.cer (raw, json) Hash identifier: qoDLbloTtCyDxVdOxSy6Ix9Ows1X6mEN0HQ7hHme2B4= Subject key identifier: CE:A7:CC:D2:AE:C0:BB:EF:C6:35:08:56:51:2A:95:FE:02:25:99:59 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A28A6F7EDD18EF7FFA3DE997B7CB38 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e0/a79a3d-7f29-497b-ae2c-37f54476a9d7/1/zqfM0q7Au-_GNQhWUSqV_gIlmVk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e0/a79a3d-7f29-497b-ae2c-37f54476a9d7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:17:56 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 213599 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:8a:6f:7e:dd:18:ef:7f:fa:3d:e9:97:b7:cb:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cea7ccd2aec0bbefc6350856512a95fe02259959 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:4e:6d:6a:18:7c:9f:1e:72:49:da:ba:26:d8: 4e:2a:70:c3:9f:50:e6:67:d7:85:2f:f2:f9:f3:29: 25:65:ae:02:2e:cf:53:92:64:12:d8:13:db:2e:18: 4d:a6:6b:a6:62:ae:64:f4:93:d8:80:38:9d:ac:24: d3:ff:d8:f6:6f:41:a0:9e:62:7e:ff:2a:64:21:d1: be:3a:78:f1:36:10:7e:f9:5f:84:06:ec:3c:e8:2e: a2:44:3f:9c:f9:85:fb:f9:b8:81:80:e8:b0:ae:06: 24:b3:a6:ff:77:83:26:19:62:d0:5f:76:b6:2d:14: e1:b0:1d:f0:6a:91:4d:ed:d2:ca:e2:43:3d:ab:25: b0:09:dc:ca:83:f0:36:e9:dd:f8:91:b2:72:67:81: 4c:15:a4:9e:23:5c:f0:94:86:f4:49:28:bd:34:cc: c6:63:53:9d:16:14:2c:1e:80:76:ce:15:ca:67:ff: 71:02:a5:52:98:67:b4:cf:cf:36:4f:07:94:c6:83: 03:69:ad:e6:e1:06:fd:b3:72:ac:46:ec:aa:bb:e5: 6b:91:d3:b6:79:c0:f6:75:b2:23:e0:8f:56:d4:ce: 35:24:4b:87:8f:54:a5:29:1e:d8:a8:e2:2c:e3:b1: 96:a0:ec:54:6e:3d:28:31:ba:52:92:3c:c3:a7:90: 5c:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:A7:CC:D2:AE:C0:BB:EF:C6:35:08:56:51:2A:95:FE:02:25:99:59 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a79a3d-7f29-497b-ae2c-37f54476a9d7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a79a3d-7f29-497b-ae2c-37f54476a9d7/1/zqfM0q7Au-_GNQhWUSqV_gIlmVk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 213599 Signature Algorithm: sha256WithRSAEncryption 1e:41:4a:25:93:8b:a4:11:bb:81:9c:74:e5:69:75:8b:8b:da: 8a:f1:46:9e:a1:61:d8:95:f2:70:0a:25:ec:15:b3:12:8c:07: 9c:a2:ea:dd:e6:9f:2d:31:24:b6:68:32:3b:cb:68:68:60:49: 56:b6:1c:69:62:91:e7:87:72:b8:6f:72:c6:4e:57:c1:04:81: ac:74:27:1f:16:57:6c:2c:f1:95:79:96:5a:07:98:2c:f5:14: 40:b8:c3:cc:58:07:bb:19:01:3d:57:e4:c1:85:b9:30:b7:9d: c0:00:b6:8b:df:37:e2:bd:47:9f:ef:61:d3:b9:f0:9c:85:ff: 30:8e:6a:4e:65:ee:96:0f:11:e2:02:63:60:8f:8d:ef:59:4e: ac:c2:25:d2:11:ce:4f:09:a4:79:53:85:60:45:f2:65:3e:9f: 14:3b:3e:ab:bf:cf:5c:56:23:6d:2b:08:12:c9:4c:15:50:c2: fc:f2:09:b3:79:c1:49:75:63:e0:99:25:80:a6:ee:57:98:2d: 80:45:7e:c4:e9:2c:46:5e:fa:d3:0e:13:9c:ad:13:ed:15:24: 1b:81:ff:58:0c:cd:b1:27:b8:26:23:16:f8:f8:71:1c:8a:91: 04:9f:af:3a:5b:cf:d2:de:0a:c5:b2:e3:87:50:40:ce:ed:c6: f9:52:ec:53 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt4oopvft0Y73/6PemXt8s4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZWE3Y2NkMmFlYzBiYmVmYzYzNTA4NTY1MTJhOTVmZTAyMjU5OTU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5E5tahh8nx5ySdq6JthOKnDDn1Dm Z9eFL/L58yklZa4CLs9TkmQS2BPbLhhNpmumYq5k9JPYgDidrCTT/9j2b0GgnmJ+ /ypkIdG+OnjxNhB++V+EBuw86C6iRD+c+YX7+biBgOiwrgYks6b/d4MmGWLQX3a2 LRThsB3wapFN7dLK4kM9qyWwCdzKg/A26d34kbJyZ4FMFaSeI1zwlIb0SSi9NMzG Y1OdFhQsHoB2zhXKZ/9xAqVSmGe0z882TweUxoMDaa3m4Qb9s3KsRuyqu+VrkdO2 ecD2dbIj4I9W1M41JEuHj1SlKR7YqOIs47GWoOxUbj0oMbpSkjzDp5BccQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFM6nzNKuwLvvxjUIVlEqlf4CJZlZMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2UwL2E3OWEz ZC03ZjI5LTQ5N2ItYWUyYy0zN2Y1NDQ3NmE5ZDcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTAvYTc5YTNk LTdmMjktNDk3Yi1hZTJjLTM3ZjU0NDc2YTlkNy8xL3pxZk0wcTdBdS1fR05RaFdV U3FWX2dJbG1Way5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNCXzANBgkqhkiG9w0BAQsFAAOCAQEAHkFKJZOLpBG7 gZx05Wl1i4vaivFGnqFh2JXycAol7BWzEowHnKLq3eafLTEktmgyO8toaGBJVrYc aWKR54dyuG9yxk5XwQSBrHQnHxZXbCzxlXmWWgeYLPUUQLjDzFgHuxkBPVfkwYW5 MLedwAC2i9834r1Hn+9h07nwnIX/MI5qTmXulg8R4gJjYI+N71lOrMIl0hHOTwmk eVOFYEXyZT6fFDs+q7/PXFYjbSsIEslMFVDC/PIJs3nBSXVj4JklgKbuV5gtgEV+ xOksRl760w4TnK0T7RUkG4H/WAzNsSe4JiMW+PhxHIqRBJ+vOlvP0t4KxbLjh1BA zu3G+VLsUw== -----END CERTIFICATE-----Generated at Mon Feb 9 15:14:38 2026 by rpki-client