This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Q3pcfnx-qyOSNy_DjUjHqXeySr0.cer File: Q3pcfnx-qyOSNy_DjUjHqXeySr0.cer (raw, json) Hash identifier: OY6KEs4V/PKFdReODmz+Ud7mDeFVlLWBhY0JqhYKu6w= Subject key identifier: 43:7A:5C:7E:7C:7E:AB:23:92:37:2F:C3:8D:48:C7:A9:77:B2:4A:BD Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC80FE6A60D16B00F3703AC0B91F2EA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:18:10 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 194.76.62.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:0f:e6:a6:0d:16:b0:0f:37:03:ac:0b:91:f2:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=437a5c7e7c7eab2392372fc38d48c7a977b24abd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:03:37:39:5c:c5:6a:62:76:10:16:ff:1a:bf: 96:2f:70:0f:bd:0c:2d:0b:d6:f0:7e:fb:97:c3:4d: 2a:9c:04:1b:66:c1:a4:d4:69:e8:2c:ca:a2:a2:ee: 9e:d2:da:f7:2d:f1:00:e2:ea:91:b5:70:b5:f9:e2: a4:b1:0d:cc:60:5d:94:cc:50:f7:6f:9e:5c:a2:6c: 91:85:fb:00:29:a4:c3:5f:28:85:7e:bb:f7:ad:61: 73:85:64:15:2f:cd:c4:15:aa:31:55:e3:6a:a8:42: 50:49:5a:fd:7b:fe:e9:ec:7c:73:2f:cc:ed:0b:9b: f2:a4:e5:d0:1c:02:46:02:72:3c:89:e2:8e:e3:f3: c6:d4:27:54:92:dd:17:5d:c1:f4:f1:40:13:e8:ff: 31:f8:df:5f:11:3d:2e:79:53:52:64:72:dc:96:42: 02:c9:b8:5e:ea:eb:41:18:df:d3:5c:b0:14:af:c4: b9:7e:fc:f6:b9:3b:d2:99:d6:04:63:fe:7f:c3:2f: 72:f1:ed:b6:bf:b1:eb:96:0c:ab:7e:90:84:2a:95: c8:94:f2:ec:10:67:64:bb:fa:0b:b0:7b:a8:0c:22: 1d:27:55:41:45:6f:75:03:28:43:7c:f7:9f:f0:ea: b7:6d:7e:d8:c2:80:95:39:d6:ca:54:b9:1f:eb:9d: 05:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:7A:5C:7E:7C:7E:AB:23:92:37:2F:C3:8D:48:C7:A9:77:B2:4A:BD X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.76.62.0/23 Signature Algorithm: sha256WithRSAEncryption 6d:81:64:5e:f5:67:03:4d:84:84:2a:37:af:2a:ed:40:53:ea: f0:c6:d5:51:8b:dc:7f:98:2a:a9:0b:a9:6c:60:27:27:46:10: d5:7f:44:c7:8e:e3:b6:84:82:d5:a1:ec:92:37:17:3f:9d:c0: f7:8f:6a:03:d6:05:26:64:91:06:67:45:f6:b6:d6:e7:07:49: cb:c0:ad:f8:5c:79:cb:c7:32:d4:7b:c9:3f:f6:d0:31:d5:85: bd:29:e6:08:62:cb:bd:8a:d6:b4:8b:17:b5:9e:0a:e9:a5:56: c1:a3:55:5d:ec:83:48:a9:15:16:29:e1:9e:d3:d6:65:22:ba: 4b:dc:7a:78:66:33:c9:86:ac:5b:f0:11:c7:48:0f:84:7e:d8: f1:18:11:cf:b8:a4:6f:02:70:00:17:03:8e:ae:ab:ca:a9:9d: 92:9c:17:0c:d2:8c:5b:c4:35:26:14:30:2f:a9:a4:bc:c5:2b: db:c1:55:ed:20:cc:aa:0b:8d:f3:66:0f:66:fd:3a:3b:d8:64: 0d:13:1b:26:f0:e5:34:55:29:74:7f:73:78:c7:c5:80:7f:99: b2:9b:5a:40:18:4d:c3:82:96:38:8f:0b:5d:65:28:6a:85:53: 7f:50:7d:e7:0b:cb:58:0e:68:5a:c4:75:fa:fb:4e:2c:15:62: 0c:fe:76:08 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt6yA/mpg0WsA83A6wLkfLqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MzdhNWM3ZTdjN2VhYjIzOTIzNzJmYzM4ZDQ4YzdhOTc3YjI0YWJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQM3OVzFamJ2EBb/Gr+WL3APvQwt C9bwfvuXw00qnAQbZsGk1GnoLMqiou6e0tr3LfEA4uqRtXC1+eKksQ3MYF2UzFD3 b55comyRhfsAKaTDXyiFfrv3rWFzhWQVL83EFaoxVeNqqEJQSVr9e/7p7HxzL8zt C5vypOXQHAJGAnI8ieKO4/PG1CdUkt0XXcH08UAT6P8x+N9fET0ueVNSZHLclkIC ybhe6utBGN/TXLAUr8S5fvz2uTvSmdYEY/5/wy9y8e22v7HrlgyrfpCEKpXIlPLs EGdku/oLsHuoDCIdJ1VBRW91AyhDfPef8Oq3bX7YwoCVOdbKVLkf650F3wIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFEN6XH58fqsjkjcvw41Ix6l3skq9MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEzLzdmYWFl Ni05ZjMwLTQyZWQtYjM3NS01NWE0M2FhYjhmNzMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTMvN2ZhYWU2 LTlmMzAtNDJlZC1iMzc1LTU1YTQzYWFiOGY3My8xL1EzcGNmbngtcXlPU055X0Rq VWpIcVhleVNyMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQBwkw+MA0GCSqGSIb3DQEBCwUAA4IBAQBtgWRe 9WcDTYSEKjevKu1AU+rwxtVRi9x/mCqpC6lsYCcnRhDVf0THjuO2hILVoeySNxc/ ncD3j2oD1gUmZJEGZ0X2ttbnB0nLwK34XHnLxzLUe8k/9tAx1YW9KeYIYsu9ita0 ixe1ngrppVbBo1Vd7INIqRUWKeGe09ZlIrpL3Hp4ZjPJhqxb8BHHSA+EftjxGBHP uKRvAnAAFwOOrqvKqZ2SnBcM0oxbxDUmFDAvqaS8xSvbwVXtIMyqC43zZg9m/To7 2GQNExsm8OU0VSl0f3N4x8WAf5mym1pAGE3DgpY4jwtdZShqhVN/UH3nC8tYDmha xHX6+04sFWIM/nYI -----END CERTIFICATE-----Generated at Mon Jan 26 06:35:24 2026 by rpki-client