This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Q1QWsigrRTPDUJwY6VfODINryDc.cer File: Q1QWsigrRTPDUJwY6VfODINryDc.cer (raw, json) Hash identifier: e/3OCEhUuFWNRjKEsevLc+epogizJqmWmSurxn81fhU= Subject key identifier: 43:54:16:B2:28:2B:45:33:C3:50:9C:18:E9:57:CE:0C:83:6B:C8:37 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797DE7FCEDCA2189F5E3849B99CFB572 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/Q1QWsigrRTPDUJwY6VfODINryDc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:17:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 45.133.136.0/24 IP: 88.218.144.0/22 IP: 91.193.100.0/22 IP: 95.175.64.0/19 IP: 95.214.84.0/22 IP: 178.239.22.0/23 IP: 185.23.200.0/23 IP: 185.247.228.0/22 IP: 185.251.44.0/22 IP: 185.251.248.0/22 IP: 193.8.80.0/22 IP: 194.156.112.0/22 IP: 195.66.216.0/21 IP: 195.158.208.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7d:e7:fc:ed:ca:21:89:f5:e3:84:9b:99:cf:b5:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=435416b2282b4533c3509c18e957ce0c836bc837 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:8b:9f:46:3d:71:95:6b:6c:77:8d:6e:95:bd: b4:88:2e:a5:56:c1:b2:53:7e:0d:8a:4b:62:31:a6: 68:3d:cc:4c:7d:11:18:00:a3:14:26:43:aa:bf:ac: 92:7a:06:1f:29:3c:db:e1:31:b9:9a:01:ea:e2:5d: f6:4a:ef:35:d4:75:83:2d:41:60:22:cd:f5:24:45: 3c:21:cf:5a:18:a0:3f:c1:2a:a3:ac:e0:5f:02:ac: 33:1a:32:e0:8f:ba:db:bd:6d:21:be:d9:d1:ba:90: 49:39:c7:ff:89:68:75:cd:42:82:86:39:56:55:0e: b3:1c:c0:8e:9c:1e:52:11:c0:f1:9d:e8:bd:43:6a: e3:fa:ad:3b:e1:b3:e4:96:7e:76:da:0f:09:53:66: 25:b4:d6:24:dc:dd:75:ef:03:db:11:b9:79:90:3e: 4b:68:a5:86:25:b7:1e:f5:b2:62:98:ee:83:b3:0b: f5:65:d5:73:39:52:10:2d:de:2e:9c:67:80:79:b5: ab:08:03:ef:c6:b2:b5:3f:ac:e8:0e:69:45:e3:d1: 51:7a:fe:2a:07:05:5a:8a:dd:7b:74:ce:cb:d8:09: dd:25:99:56:da:1a:72:a8:dc:62:33:a6:6a:b7:7b: 7f:a6:81:59:bd:3d:19:40:de:6c:17:af:77:2c:5f: 59:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:54:16:B2:28:2B:45:33:C3:50:9C:18:E9:57:CE:0C:83:6B:C8:37 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/Q1QWsigrRTPDUJwY6VfODINryDc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.133.136.0/24 88.218.144.0/22 91.193.100.0/22 95.175.64.0/19 95.214.84.0/22 178.239.22.0/23 185.23.200.0/23 185.247.228.0/22 185.251.44.0/22 185.251.248.0/22 193.8.80.0/22 194.156.112.0/22 195.66.216.0/21 195.158.208.0/22 Signature Algorithm: sha256WithRSAEncryption a0:08:58:a1:a8:f0:1f:7a:34:87:5d:1d:0a:35:af:55:88:a3: 9a:a5:b4:d1:ab:6e:24:b5:21:3a:6d:5a:6b:5c:d7:de:5d:ee: 31:eb:0b:aa:59:a4:89:3b:30:0a:b2:0f:04:40:5b:e2:a8:86: f5:ac:5d:74:ca:09:84:1f:69:5c:53:03:5a:c6:60:40:ae:b7: c4:c9:35:3f:a2:9d:ee:43:be:52:fb:9b:d3:c6:92:68:7b:a4: f4:7b:c2:8d:34:64:45:27:2f:07:eb:7d:2c:68:75:d0:cf:df: ae:7b:73:65:2f:4f:1e:4a:21:99:b2:62:11:8a:14:13:f7:5f: 4b:4b:c2:86:44:85:f4:17:df:cf:a5:5c:2f:97:08:6c:82:ac: 3a:50:15:7b:53:2c:82:f8:ea:4c:ee:94:ad:c7:70:bf:b5:0e: bb:3f:66:19:0c:3c:34:61:46:d2:7d:50:05:8e:da:57:1a:8f: c1:92:49:c0:83:f2:9c:ab:94:48:df:33:32:82:08:49:d0:78: 9d:62:a7:c3:3d:92:ed:fa:a6:40:c6:3a:1d:42:58:eb:2f:e2: 05:69:d6:a5:79:85:b5:99:58:f0:eb:e5:db:98:98:b6:06:07: f1:5c:c0:59:b5:5a:68:af:4c:fb:42:53:21:bd:ac:2d:65:2a: 1e:4b:73:3f -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgISAZt5fef87cohifXjhJuZz7VyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MzU0MTZiMjI4MmI0NTMzYzM1MDljMThlOTU3Y2UwYzgzNmJjODM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4ufRj1xlWtsd41ulb20iC6lVsGy U34NiktiMaZoPcxMfREYAKMUJkOqv6ySegYfKTzb4TG5mgHq4l32Su811HWDLUFg Is31JEU8Ic9aGKA/wSqjrOBfAqwzGjLgj7rbvW0hvtnRupBJOcf/iWh1zUKChjlW VQ6zHMCOnB5SEcDxnei9Q2rj+q074bPkln522g8JU2YltNYk3N117wPbEbl5kD5L aKWGJbce9bJimO6Dswv1ZdVzOVIQLd4unGeAebWrCAPvxrK1P6zoDmlF49FRev4q BwVait17dM7L2AndJZlW2hpyqNxiM6Zqt3t/poFZvT0ZQN5sF693LF9ZUQIDAQAB o4IC0jCCAs4wHQYDVR0OBBYEFENUFrIoK0Uzw1CcGOlXzgyDa8g3MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2IzLzYzZmY4 MS02NDYwLTRjMDUtODUyZC0yNjJlYjM5YmJlNzYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjMvNjNmZjgx LTY0NjAtNGMwNS04NTJkLTI2MmViMzliYmU3Ni8xL1ExUVdzaWdyUlRQRFVKd1k2 VmZPRElOcnlEYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMG0GCCsGAQUF BwEHAQH/BF4wXDBaBAIAATBUAwQALYWIAwQCWNqQAwQCW8FkAwQFX69AAwQCX9ZU AwQBsu8WAwQBuRfIAwQCuffkAwQCufssAwQCufv4AwQCwQhQAwQCwpxwAwQDw0LY AwQCw57QMA0GCSqGSIb3DQEBCwUAA4IBAQCgCFihqPAfejSHXR0KNa9ViKOapbTR q24ktSE6bVprXNfeXe4x6wuqWaSJOzAKsg8EQFviqIb1rF10ygmEH2lcUwNaxmBA rrfEyTU/op3uQ75S+5vTxpJoe6T0e8KNNGRFJy8H630saHXQz9+ue3NlL08eSiGZ smIRihQT919LS8KGRIX0F9/PpVwvlwhsgqw6UBV7UyyC+OpM7pStx3C/tQ67P2YZ DDw0YUbSfVAFjtpXGo/BkknAg/Kcq5RI3zMygghJ0HidYqfDPZLt+qZAxjodQljr L+IFadaleYW1mVjw6+XbmJi2BgfxXMBZtVpor0z7QlMhvawtZSoeS3M/ -----END CERTIFICATE-----Generated at Sun Jan 25 07:27:25 2026 by rpki-client