This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer File: 1QTmQeVaSK7gFB4sDSYicQLKptQ.cer (raw, json) Hash identifier: lOLUDIp4jBp0+L2u+gY7bPi53f9jjz6xwsXrWq2lzck= Subject key identifier: D5:04:E6:41:E5:5A:48:AE:E0:14:1E:2C:0D:26:22:71:02:CA:A6:D4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C6969114CA24BC69C5BF530708A1F9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:17:42 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 5.182.84.0/22 IP: 46.254.92.0/22 IP: 77.232.128.0/19 IP: 80.251.112.0/20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:96:91:14:ca:24:bc:69:c5:bf:53:07:08:a1:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d504e641e55a48aee0141e2c0d26227102caa6d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:27:c2:66:17:df:b7:8e:18:1e:d0:24:0a:fe: 95:ad:87:65:57:c8:b3:9c:dc:38:fd:34:82:02:97: 63:70:71:5e:ff:7f:3b:51:ba:b6:01:9f:16:70:f7: 33:74:2d:ee:69:b9:64:ef:b8:d0:4c:7b:1f:6a:db: 48:3c:e1:39:dd:5f:92:92:07:19:85:a2:f2:c0:6f: 4c:fa:7f:2b:d1:9d:a4:d9:30:53:5b:a8:f4:17:c0: 10:a9:da:ef:4c:09:72:64:7e:7b:f6:5b:34:4f:49: 4c:58:80:37:f9:4f:d0:3a:5a:ac:dd:a3:c4:78:78: 03:ee:f0:89:84:b4:d4:f6:d8:f5:4d:17:b6:56:cb: 1a:6b:3a:22:e9:be:05:f7:fd:72:7f:e6:b7:5c:10: d4:4f:67:1e:2e:0b:44:f1:58:63:c9:ce:5f:ca:d5: a2:d1:c2:e1:6e:9a:c3:ee:1f:ad:89:92:fa:0a:23: 77:34:f5:29:de:4f:6f:ab:ed:27:01:2c:84:18:10: 61:a5:b1:d9:75:bd:da:de:54:53:40:34:91:b3:2f: 8c:16:c3:bf:76:5d:06:69:b4:63:9b:fe:21:02:02: 80:14:4f:17:58:e3:42:9d:68:8b:8f:4c:61:2e:95: 07:4b:8f:dc:a1:e8:04:a1:e7:fa:97:cb:e9:5e:cf: 44:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:04:E6:41:E5:5A:48:AE:E0:14:1E:2C:0D:26:22:71:02:CA:A6:D4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.182.84.0/22 46.254.92.0/22 77.232.128.0/19 80.251.112.0/20 Signature Algorithm: sha256WithRSAEncryption 68:31:8a:bd:03:dd:32:7c:56:f9:03:58:db:a3:c7:e7:11:5c: 85:a0:7d:54:19:a1:f6:e4:88:7a:09:fc:db:7f:08:44:40:f6: 76:e7:d5:f0:40:42:47:ee:c5:5e:e0:b6:96:60:d4:12:f4:d3: 5d:6e:ea:af:12:f5:05:eb:4f:41:3c:cc:71:71:1f:e7:37:f0: 26:b6:96:ae:e7:e8:41:3e:4d:af:36:82:f9:2d:19:41:99:9b: 0a:44:d7:ab:1b:7f:44:02:33:f5:ab:75:01:11:0e:b2:a1:b6: 36:65:a3:9a:35:b5:21:b7:6e:53:00:c3:e9:38:56:15:ed:89: ac:40:d7:04:ed:73:6a:da:25:17:9d:f2:13:d5:22:97:89:4f: ed:62:90:6d:d0:3b:25:25:02:b8:88:45:fb:b7:a6:eb:79:ec: 01:c7:9c:b0:cc:0e:b1:af:9e:14:75:fd:48:81:8c:ca:99:c3: bb:2c:f2:82:24:5e:28:c5:2c:de:7c:08:1a:58:08:f6:28:45: 15:6c:56:03:dc:81:f1:e6:b8:1d:82:48:f9:4d:ac:27:db:d5: aa:5a:4d:e6:74:20:a1:53:f1:fb:9b:04:7c:b9:92:9f:4b:69: 2b:ff:55:1a:a5:c4:2f:8b:1d:5c:bf:c9:3e:6e:f5:06:17:56: d4:89:ff:50 -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgISAZt3xpaRFMokvGnFv1MHCKH5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNTA0ZTY0MWU1NWE0OGFlZTAxNDFlMmMwZDI2MjI3MTAyY2FhNmQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5yfCZhfft44YHtAkCv6VrYdlV8iz nNw4/TSCApdjcHFe/387Ubq2AZ8WcPczdC3uablk77jQTHsfattIPOE53V+SkgcZ haLywG9M+n8r0Z2k2TBTW6j0F8AQqdrvTAlyZH579ls0T0lMWIA3+U/QOlqs3aPE eHgD7vCJhLTU9tj1TRe2Vssaazoi6b4F9/1yf+a3XBDUT2ceLgtE8Vhjyc5fytWi 0cLhbprD7h+tiZL6CiN3NPUp3k9vq+0nASyEGBBhpbHZdb3a3lRTQDSRsy+MFsO/ dl0GabRjm/4hAgKAFE8XWONCnWiLj0xhLpUHS4/coegEoef6l8vpXs9ETwIDAQAB o4ICljCCApIwHQYDVR0OBBYEFNUE5kHlWkiu4BQeLA0mInECyqbUMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFlL2YwMWYz NS0yY2NhLTRlNWEtODI4YS02YmZmY2I3YzBmMGEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWUvZjAxZjM1 LTJjY2EtNGU1YS04MjhhLTZiZmZjYjdjMGYwYS8xLzFRVG1RZVZhU0s3Z0ZCNHNE U1lpY1FMS3B0US5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDEGCCsGAQUF BwEHAQH/BCIwIDAeBAIAATAYAwQCBbZUAwQCLv5cAwQFTeiAAwQEUPtwMA0GCSqG SIb3DQEBCwUAA4IBAQBoMYq9A90yfFb5A1jbo8fnEVyFoH1UGaH25Ih6CfzbfwhE QPZ259XwQEJH7sVe4LaWYNQS9NNdbuqvEvUF609BPMxxcR/nN/Amtpau5+hBPk2v NoL5LRlBmZsKRNerG39EAjP1q3UBEQ6yobY2ZaOaNbUht25TAMPpOFYV7YmsQNcE 7XNq2iUXnfIT1SKXiU/tYpBt0DslJQK4iEX7t6breewBx5ywzA6xr54Udf1IgYzK mcO7LPKCJF4oxSzefAgaWAj2KEUVbFYD3IHx5rgdgkj5Tawn29WqWk3mdCChU/H7 mwR8uZKfS2kr/1UapcQvix1cv8k+bvUGF1bUif9Q -----END CERTIFICATE-----Generated at Sun Jan 25 12:11:17 2026 by rpki-client