This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Q-CjZBMYQQVtSLLXiOoAykuR21Y.cer File: Q-CjZBMYQQVtSLLXiOoAykuR21Y.cer (raw, json) Hash identifier: Wad1Y1MQd/7xzRlHQSoZMSkkshA9CmKJ6dZETNdIpkQ= Subject key identifier: 43:E0:A3:64:13:18:41:05:6D:48:B2:D7:88:EA:00:CA:4B:91:DB:56 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ECC019D002FA573623B332D3333391 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7f/9cbb06-b4da-4c94-b418-4b081cc2b39a/1/Q-CjZBMYQQVtSLLXiOoAykuR21Y.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7f/9cbb06-b4da-4c94-b418-4b081cc2b39a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:37 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 48254 IP: 45.8.224.0/22 IP: 46.247.88.0/21 IP: 185.146.164.0/22 IP: 185.151.28.0/22 IP: 193.176.16.0/22 IP: 194.38.52.0/22 IP: 2a07:7800::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:c0:19:d0:02:fa:57:36:23:b3:32:d3:33:33:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=43e0a364131841056d48b2d788ea00ca4b91db56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:da:a7:7e:d3:0c:d4:7a:80:63:d8:13:af:d1: 17:59:d7:dd:a6:9c:2b:4c:e7:c0:5f:a8:74:6b:ef: e0:69:08:7b:e9:06:31:d5:e7:9e:90:c3:99:d6:0a: 36:96:aa:ac:ba:e0:04:61:1f:96:e3:e4:8b:97:5e: 8c:e7:be:0e:9f:53:57:26:15:ee:4d:be:cf:69:2d: 37:44:bd:2a:1b:ec:05:76:b5:91:fe:46:04:3f:67: 87:56:89:a3:d6:f4:24:98:80:c9:f5:84:4e:0c:10: 2a:69:57:87:67:c7:86:63:7d:e1:1b:7f:a1:e4:b8: 26:48:9d:2d:a7:6d:c7:7e:e4:4d:56:b7:32:e4:6a: c7:22:fe:80:35:84:d7:04:f7:0c:cd:55:3a:e2:20: 0f:f1:7f:4a:19:47:66:a4:7a:b0:af:46:92:f9:32: 36:b9:56:bf:13:1c:2b:37:49:aa:ce:d7:a6:3f:e6: 96:d2:36:79:73:47:98:25:ec:5d:51:c9:dc:21:24: 23:90:34:4e:b2:0c:e2:13:5c:d6:97:87:a9:af:f8: 14:52:43:d2:90:aa:34:25:13:e9:fa:51:1a:f9:cd: f1:0a:b5:61:ca:e0:8f:7a:3d:fd:fb:8e:0e:d0:b8: 09:91:19:67:aa:b9:b0:f6:17:99:47:63:c9:cb:4b: 96:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:E0:A3:64:13:18:41:05:6D:48:B2:D7:88:EA:00:CA:4B:91:DB:56 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/9cbb06-b4da-4c94-b418-4b081cc2b39a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/9cbb06-b4da-4c94-b418-4b081cc2b39a/1/Q-CjZBMYQQVtSLLXiOoAykuR21Y.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.8.224.0/22 46.247.88.0/21 185.146.164.0/22 185.151.28.0/22 193.176.16.0/22 194.38.52.0/22 IPv6: 2a07:7800::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 48254 Signature Algorithm: sha256WithRSAEncryption 5b:56:53:94:24:d4:17:57:3b:de:2e:8d:49:bb:0b:25:c4:3e: 7b:80:f4:4e:93:41:bc:4b:8c:b8:7e:40:ce:d2:f0:a6:e6:0c: 9f:89:48:21:49:a8:38:74:03:6e:e9:1a:33:14:bb:d9:06:a6: 94:db:de:bb:ab:fe:4c:72:f6:bf:db:c3:04:8c:96:7e:64:c5: 79:27:c2:95:f4:78:c8:67:ea:4c:4f:3a:fb:3b:92:b5:64:39: a9:f4:9f:09:88:76:9b:0a:32:f5:35:d0:bf:17:1a:d8:a0:f4: d5:b4:bc:67:5f:f6:33:03:7a:97:c9:ce:88:20:e8:fd:87:00: 2c:6c:d6:73:df:67:25:4f:23:7c:1b:34:80:5a:59:f3:38:13: 68:d7:2c:46:1d:5c:a7:de:61:78:0a:62:5d:3d:34:47:4e:bd: 7f:cd:23:15:cf:e9:e1:8e:43:ae:96:bc:a3:4f:20:fa:9a:67: 69:f6:dc:da:f9:c8:c7:25:87:9f:02:49:f8:38:ad:b2:10:0e: 0d:f5:b7:38:0a:28:10:9f:07:34:57:1d:86:71:90:04:ad:f7: db:d8:05:7a:b8:70:9f:16:bf:c7:6d:98:ab:02:b5:33:29:52: 04:65:75:13:28:9b:8d:fd:79:b3:b6:f7:3b:6d:60:ea:35:d9: 9e:3c:b4:e3 -----BEGIN CERTIFICATE----- MIIFwTCCBKmgAwIBAgISAZt57MAZ0AL6VzYjszLTMzORMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0M2UwYTM2NDEzMTg0MTA1NmQ0OGIyZDc4OGVhMDBjYTRiOTFkYjU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9qnftMM1HqAY9gTr9EXWdfdppwr TOfAX6h0a+/gaQh76QYx1eeekMOZ1go2lqqsuuAEYR+W4+SLl16M574On1NXJhXu Tb7PaS03RL0qG+wFdrWR/kYEP2eHVomj1vQkmIDJ9YRODBAqaVeHZ8eGY33hG3+h 5LgmSJ0tp23HfuRNVrcy5GrHIv6ANYTXBPcMzVU64iAP8X9KGUdmpHqwr0aS+TI2 uVa/ExwrN0mqztemP+aW0jZ5c0eYJexdUcncISQjkDROsgziE1zWl4epr/gUUkPS kKo0JRPp+lEa+c3xCrVhyuCPej39+44O0LgJkRlnqrmw9heZR2PJy0uWkwIDAQAB o4ICzTCCAskwHQYDVR0OBBYEFEPgo2QTGEEFbUiy14jqAMpLkdtWMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdmLzljYmIw Ni1iNGRhLTRjOTQtYjQxOC00YjA4MWNjMmIzOWEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2YvOWNiYjA2 LWI0ZGEtNGM5NC1iNDE4LTRiMDgxY2MyYjM5YS8xL1EtQ2paQk1ZUVFWdFNMTFhp T29BeWt1UjIxWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEwGCCsGAQUF BwEHAQH/BD0wOzAqBAIAATAkAwQCLQjgAwQDLvdYAwQCuZKkAwQCuZccAwQCwbAQ AwQCwiY0MA0EAgACMAcDBQMqB3gAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwC8 fjANBgkqhkiG9w0BAQsFAAOCAQEAW1ZTlCTUF1c73i6NSbsLJcQ+e4D0TpNBvEuM uH5AztLwpuYMn4lIIUmoOHQDbukaMxS72QamlNveu6v+THL2v9vDBIyWfmTFeSfC lfR4yGfqTE86+zuStWQ5qfSfCYh2mwoy9TXQvxca2KD01bS8Z1/2MwN6l8nOiCDo /YcALGzWc99nJU8jfBs0gFpZ8zgTaNcsRh1cp95heApiXT00R069f80jFc/p4Y5D rpa8o08g+ppnafbc2vnIxyWHnwJJ+DitshAODfW3OAooEJ8HNFcdhnGQBK3329gF erhwnxa/x22YqwK1MylSBGV1Eyibjf15s7b3O21g6jXZnjy04w== -----END CERTIFICATE-----Generated at Sun Jan 25 21:35:54 2026 by rpki-client