This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.cer File: Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.cer (raw, json) Hash identifier: wcuVemxrhsJpbdtKb1lgIbLOWOezR3tCNuYOT9hscKI= Subject key identifier: 43:91:37:BE:FE:8B:C5:59:03:69:0C:7C:46:AF:19:7C:C9:1A:70:3C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA4CE5AD22AD7CA59E3E46AB434BE58 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:19:16 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.99.40.0/22 IP: 2a0d:a280::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:ce:5a:d2:2a:d7:ca:59:e3:e4:6a:b4:34:be:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:19:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=439137befe8bc55903690c7c46af197cc91a703c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:0b:6c:c3:40:e2:78:03:63:b3:d2:8e:91:0f: 38:0d:5f:70:fd:c9:3d:5c:e1:47:67:b7:48:37:68: cc:7f:7c:a6:50:08:a6:ff:42:cf:ae:cf:49:31:26: cc:a6:14:d0:26:67:cd:b8:98:60:2b:fd:06:65:ea: 45:c8:76:01:d9:dc:c0:f3:66:bf:ef:66:d0:67:f2: 8b:9f:99:5e:64:d0:f8:be:17:72:70:61:3a:46:7d: 2a:ed:4b:72:e8:03:5e:9e:fa:2d:36:39:c4:79:89: 1a:eb:60:44:a0:c4:32:67:23:d4:b2:19:0e:29:ac: 85:97:11:fb:08:9f:78:44:18:95:e2:b0:ad:9b:08: 60:cd:89:67:86:ee:59:c6:8f:1f:22:99:fa:a3:c1: 29:45:85:2d:33:21:17:1c:f2:93:05:53:08:32:f7: 62:39:d4:5f:a9:58:9c:cd:f6:f1:a4:08:20:9a:1d: 04:58:6f:4c:2b:6c:f8:bc:6f:15:41:a4:82:c7:58: 1e:68:d4:79:d7:7b:cb:ba:e0:13:88:8b:34:f0:5b: 06:a3:07:7a:e1:a4:87:d5:af:0b:33:aa:3d:3f:85: ed:34:5a:d9:3d:05:79:de:45:d0:11:b2:3b:9f:97: e8:71:ee:10:8c:2c:87:fc:36:65:09:83:40:0c:62: b2:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:91:37:BE:FE:8B:C5:59:03:69:0C:7C:46:AF:19:7C:C9:1A:70:3C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.99.40.0/22 IPv6: 2a0d:a280::/29 Signature Algorithm: sha256WithRSAEncryption 95:d4:e0:2f:46:83:6b:3f:eb:d1:d2:06:d1:e6:1a:e5:db:e8: a6:6a:ac:39:fe:3f:5f:28:20:bf:15:0d:70:d8:d7:d5:3b:51: 00:7d:04:38:13:42:be:9f:3d:12:22:2c:be:bd:e7:5b:7d:0f: 58:57:55:fc:4c:60:d8:07:35:32:95:d9:f0:4a:0d:2f:12:49: 72:46:00:21:41:2b:58:c8:a3:1d:b6:18:75:2a:fd:1a:af:7f: b3:24:ba:a0:05:ff:06:64:95:47:8f:f7:a6:de:34:d0:b4:0a: d5:16:f3:f4:e6:8b:b2:ab:9c:b7:fa:e0:cb:fb:57:1c:7e:2c: 1d:bc:cd:f0:f8:75:64:8a:79:09:d4:3e:8e:0a:7c:de:05:33: ce:1d:67:b6:a0:ff:29:96:24:85:63:95:30:94:52:74:ac:31: 29:be:a6:e3:72:ef:35:23:e0:2e:f9:f9:32:23:c8:e7:75:5a: c9:6c:be:61:cf:37:43:66:d6:cc:f3:50:7d:e6:fd:49:c4:06: 94:4d:2e:c8:23:2d:f2:3e:ea:54:17:36:a3:21:f1:71:df:33: e8:4a:45:b6:86:79:31:32:d2:0b:4f:25:f2:b1:81:b9:d9:03: de:92:fe:0a:70:91:ba:84:30:57:2e:85:1a:0a:f4:3d:12:db: 0b:ec:51:be -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt7pM5a0irXylnj5Gq0NL5YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MzkxMzdiZWZlOGJjNTU5MDM2OTBjN2M0NmFmMTk3Y2M5MWE3MDNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwtsw0DieANjs9KOkQ84DV9w/ck9 XOFHZ7dIN2jMf3ymUAim/0LPrs9JMSbMphTQJmfNuJhgK/0GZepFyHYB2dzA82a/ 72bQZ/KLn5leZND4vhdycGE6Rn0q7Uty6ANenvotNjnEeYka62BEoMQyZyPUshkO KayFlxH7CJ94RBiV4rCtmwhgzYlnhu5Zxo8fIpn6o8EpRYUtMyEXHPKTBVMIMvdi OdRfqViczfbxpAggmh0EWG9MK2z4vG8VQaSCx1geaNR513vLuuATiIs08FsGowd6 4aSH1a8LM6o9P4XtNFrZPQV53kXQEbI7n5foce4QjCyH/DZlCYNADGKylQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFEORN77+i8VZA2kMfEavGXzJGnA8MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YzLzVhYzIy ZC05ZThmLTQ0OWQtODMwNC0wZjUyZDgyOGZkNGYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjMvNWFjMjJk LTllOGYtNDQ5ZC04MzA0LTBmNTJkODI4ZmQ0Zi8xL1E1RTN2djZMeFZrRGFReDhS cThaZk1rYWNEdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuWMoMA0EAgACMAcDBQMqDaKAMA0GCSqGSIb3 DQEBCwUAA4IBAQCV1OAvRoNrP+vR0gbR5hrl2+imaqw5/j9fKCC/FQ1w2NfVO1EA fQQ4E0K+nz0SIiy+vedbfQ9YV1X8TGDYBzUyldnwSg0vEklyRgAhQStYyKMdthh1 Kv0ar3+zJLqgBf8GZJVHj/em3jTQtArVFvP05ouyq5y3+uDL+1ccfiwdvM3w+HVk inkJ1D6OCnzeBTPOHWe2oP8pliSFY5UwlFJ0rDEpvqbjcu81I+Au+fkyI8jndVrJ bL5hzzdDZtbM81B95v1JxAaUTS7IIy3yPupUFzajIfFx3zPoSkW2hnkxMtILTyXy sYG52QPekv4KcJG6hDBXLoUaCvQ9EtsL7FG+ -----END CERTIFICATE-----Generated at Mon Jan 26 08:41:48 2026 by rpki-client