This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KQbwJrH-Y2yaXaAR3H_WnFgdArg.cer File: KQbwJrH-Y2yaXaAR3H_WnFgdArg.cer (raw, json) Hash identifier: 8XI4xzlGgxeJH7aGC2eyJBnwq23HWnQ1Do4usATGKHU= Subject key identifier: 29:06:F0:26:B1:FE:63:6C:9A:5D:A0:11:DC:7F:D6:9C:58:1D:02:B8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78347F44C8E5823369C47251212DD1C0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/KQbwJrH-Y2yaXaAR3H_WnFgdArg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:17:45 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 37.17.184.0/21 IP: 82.115.252.0/24 IP: 185.152.48.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:7f:44:c8:e5:82:33:69:c4:72:51:21:2d:d1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2906f026b1fe636c9a5da011dc7fd69c581d02b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:28:0f:b1:e0:d2:cf:51:7b:66:98:8f:ef:ee: bd:8c:2f:8c:d3:ec:2d:45:af:44:f9:59:4e:98:96: 12:bb:6b:d4:d0:da:8b:bf:58:11:b2:21:ed:51:9e: fa:fb:74:d9:6e:7e:7a:b5:75:60:25:52:9b:2a:de: 62:af:69:05:6a:01:e0:e8:0b:a5:42:c6:3b:c0:dd: 22:8d:7b:16:68:74:72:b5:3f:50:f9:3c:bb:cf:93: 24:34:0a:90:a3:c5:92:36:69:5a:7b:af:cc:c2:b3: 08:15:00:16:86:e9:6a:12:f0:3a:0d:ae:28:95:53: 18:20:a3:dd:d8:2d:2c:0b:33:75:f2:a2:ba:12:e9: 23:f0:7d:f4:9b:10:a5:4c:d0:ba:e1:8e:eb:3c:28: d4:f4:dc:b1:65:28:43:ef:37:03:7c:15:ca:a9:4e: bd:2a:07:18:cb:5d:f6:60:24:ed:21:5c:34:5e:86: 52:2e:35:7d:27:9e:30:21:ff:7c:7a:cb:77:f8:63: 71:21:04:46:67:54:90:f5:80:d0:65:61:31:b7:3b: c3:4b:0e:67:3b:ee:e2:da:88:0d:c0:31:39:60:24: 8a:07:a1:6f:88:1b:89:b9:8f:3e:ba:02:a1:4f:fe: 90:82:0c:d2:e2:9a:33:cd:1d:1c:f4:b9:52:c2:95: c6:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:06:F0:26:B1:FE:63:6C:9A:5D:A0:11:DC:7F:D6:9C:58:1D:02:B8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/KQbwJrH-Y2yaXaAR3H_WnFgdArg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.17.184.0/21 82.115.252.0/24 185.152.48.0/22 Signature Algorithm: sha256WithRSAEncryption 44:8d:4f:aa:f5:73:e6:a0:ca:51:d2:85:03:23:18:69:1b:a6: f0:bb:1c:41:91:35:7d:a7:63:e5:4e:26:e6:f7:04:f4:3f:cb: 86:b2:8d:b1:85:c4:72:a2:69:d7:22:a4:48:0c:27:8f:a4:9b: 7d:18:ad:d5:d4:0e:8c:54:64:00:d4:44:35:a7:34:a6:c2:b1: ef:1f:9c:22:6f:4a:3b:72:1c:6e:aa:76:5a:39:ea:1e:82:04: 48:a3:e5:d2:a8:1a:8d:1f:fe:4b:0c:59:30:ba:09:35:8f:4a: df:94:78:c5:6f:ec:ef:08:84:03:c6:ec:10:58:67:df:2d:3f: ff:f8:6f:2c:85:e5:d7:9c:14:4f:94:7e:25:99:dc:c3:18:62: bd:ae:5b:37:0e:c0:2d:98:2f:8a:35:95:f9:e3:bb:4c:38:58: e8:b6:b0:c6:31:7a:8e:07:42:92:54:c7:f3:c8:0f:2f:02:d5: ef:b4:d9:04:0c:83:8b:ef:c4:59:62:ff:6a:bc:d0:c6:58:37: 42:ef:9c:33:1f:52:9b:c8:c1:a2:68:a4:37:17:b0:59:a0:b8: ea:cc:f2:cb:70:a1:6c:cc:40:6b:0d:b8:7f:58:8f:39:95:52: 98:34:c5:2d:4b:ce:20:67:b9:8f:56:37:3d:2f:ff:63:f7:e1: 1b:c8:71:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgISAZt4NH9EyOWCM2nEclEhLdHAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOTA2ZjAyNmIxZmU2MzZjOWE1ZGEwMTFkYzdmZDY5YzU4MWQwMmI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7CgPseDSz1F7ZpiP7+69jC+M0+wt Ra9E+VlOmJYSu2vU0NqLv1gRsiHtUZ76+3TZbn56tXVgJVKbKt5ir2kFagHg6Aul QsY7wN0ijXsWaHRytT9Q+Ty7z5MkNAqQo8WSNmlae6/MwrMIFQAWhulqEvA6Da4o lVMYIKPd2C0sCzN18qK6Eukj8H30mxClTNC64Y7rPCjU9NyxZShD7zcDfBXKqU69 KgcYy132YCTtIVw0XoZSLjV9J54wIf98est3+GNxIQRGZ1SQ9YDQZWExtzvDSw5n O+7i2ogNwDE5YCSKB6FviBuJuY8+ugKhT/6QggzS4pozzR0c9LlSwpXGVQIDAQAB o4ICkDCCAowwHQYDVR0OBBYEFCkG8Cax/mNsml2gEdx/1pxYHQK4MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNjLzY3YTMy ZC03YmY4LTRiMDQtYWEwNS04MGE5MWJlODNlNGIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2MvNjdhMzJk LTdiZjgtNGIwNC1hYTA1LTgwYTkxYmU4M2U0Yi8xL0tRYndKckgtWTJ5YVhhQVIz SF9XbkZnZEFyZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUF BwEHAQH/BBwwGjAYBAIAATASAwQDJRG4AwQAUnP8AwQCuZgwMA0GCSqGSIb3DQEB CwUAA4IBAQBEjU+q9XPmoMpR0oUDIxhpG6bwuxxBkTV9p2PlTibm9wT0P8uGso2x hcRyomnXIqRIDCePpJt9GK3V1A6MVGQA1EQ1pzSmwrHvH5wib0o7chxuqnZaOeoe ggRIo+XSqBqNH/5LDFkwugk1j0rflHjFb+zvCIQDxuwQWGffLT//+G8sheXXnBRP lH4lmdzDGGK9rls3DsAtmC+KNZX547tMOFjotrDGMXqOB0KSVMfzyA8vAtXvtNkE DIOL78RZYv9qvNDGWDdC75wzH1KbyMGiaKQ3F7BZoLjqzPLLcKFszEBrDbh/WI85 lVKYNMUtS84gZ7mPVjc9L/9j9+EbyHEX -----END CERTIFICATE-----Generated at Sun Jan 25 23:33:57 2026 by rpki-client