This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Q664_1W9RlALJ9uc8d7CVidrK2o.cer File: Q664_1W9RlALJ9uc8d7CVidrK2o.cer (raw, json) Hash identifier: acAEdFJw95lVrIeadBgvX6oyrtjcuZTWqhl0frFnk1g= Subject key identifier: 43:AE:B8:FF:55:BD:46:50:0B:27:DB:9C:F1:DE:C2:56:27:6B:2B:6A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7834757F54883BA45F9C86051F882A2B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:17:42 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 204589 IP: 185.246.30.0/23 IP: 2a01:f840::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:75:7f:54:88:3b:a4:5f:9c:86:05:1f:88:2a:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=43aeb8ff55bd46500b27db9cf1dec256276b2b6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d3:3c:3d:e3:6c:07:45:5b:00:0f:5e:57:59: d4:ae:ca:34:05:98:c1:3b:00:5c:25:b0:44:5e:b3: e0:a6:9b:82:9e:70:25:60:91:99:b1:91:b6:6b:5d: ad:54:84:34:a9:f1:20:02:58:73:32:93:09:95:5d: f8:3d:24:fe:c4:a4:65:80:6d:10:ea:a9:f1:71:a2: 2c:bd:6b:58:5b:15:d0:12:be:67:83:2b:9b:9c:c2: 97:c1:b4:f9:8e:c3:ad:6e:3b:4c:d5:fd:57:54:fc: ab:4f:d5:a3:df:99:65:27:6a:e7:61:75:d6:ae:a5: c1:74:90:1d:7b:08:99:82:72:30:18:66:90:ec:5c: ef:14:4d:ec:07:f6:0d:17:ff:11:bf:f5:c8:53:c6: 81:c2:bb:a6:9d:68:82:a4:b7:b8:37:58:64:3e:b1: 86:63:5a:2f:37:fc:97:65:d0:4a:9d:6f:b4:4f:f5: ca:5b:16:ee:9b:60:66:75:ab:5c:61:cb:f5:cb:f5: 90:eb:3a:f4:7d:28:04:f9:99:75:11:b2:a6:db:fd: eb:e8:2b:0b:cd:30:32:7e:00:f5:f4:1a:59:64:8a: 1e:76:34:00:a9:ca:92:14:27:1d:c4:85:c6:96:33: 10:06:5d:7b:cb:ad:be:b0:08:09:d0:eb:1b:0d:4a: 8a:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:AE:B8:FF:55:BD:46:50:0B:27:DB:9C:F1:DE:C2:56:27:6B:2B:6A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.246.30.0/23 IPv6: 2a01:f840::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 204589 Signature Algorithm: sha256WithRSAEncryption 0c:34:f0:a9:30:74:5d:9f:5a:d2:82:0b:49:73:b0:7f:b7:b3: 14:5d:1b:c9:44:47:8f:8a:df:da:05:49:4b:2f:53:3a:08:4a: e2:b6:f3:a7:40:cd:31:32:40:bc:ef:5b:65:c5:92:37:eb:8d: b4:3b:32:53:87:29:f4:9b:4f:8d:3c:69:cf:e1:65:49:74:d3: 67:df:b3:10:e7:57:52:a1:0a:e7:75:dc:23:7f:94:b8:d9:17: 66:00:42:8b:7e:fa:53:f0:74:5b:f6:e7:94:18:de:a4:2b:b3: 1c:ff:de:22:3d:f6:32:1c:b8:2f:ae:f7:0d:20:a9:d3:1f:f9: 5e:a1:99:c1:56:e2:4c:4f:5b:8f:a3:ea:7e:3e:30:b2:b0:2c: 27:6b:93:d6:cb:4b:70:df:f8:a4:6e:1b:04:9c:0d:4f:72:49: 99:55:82:51:27:27:71:6a:d0:a2:3e:e7:d6:de:61:ca:52:2c: 55:90:cf:20:d3:ae:82:10:8d:9b:88:c3:3c:cd:ce:34:6e:44: fa:3f:70:e9:22:ad:e6:1a:b2:bc:23:46:67:56:01:00:a5:05: 61:e3:38:3a:b7:d6:a4:e8:8e:31:cf:e6:0a:fc:46:f0:cd:a8: 91:7f:94:c7:08:a4:ce:b1:75:6f:96:8a:a9:3a:1e:74:cd:9f: a9:9e:32:c6 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt4NHV/VIg7pF+chgUfiCorMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0M2FlYjhmZjU1YmQ0NjUwMGIyN2RiOWNmMWRlYzI1NjI3NmIyYjZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudM8PeNsB0VbAA9eV1nUrso0BZjB OwBcJbBEXrPgppuCnnAlYJGZsZG2a12tVIQ0qfEgAlhzMpMJlV34PST+xKRlgG0Q 6qnxcaIsvWtYWxXQEr5ngyubnMKXwbT5jsOtbjtM1f1XVPyrT9Wj35llJ2rnYXXW rqXBdJAdewiZgnIwGGaQ7FzvFE3sB/YNF/8Rv/XIU8aBwrumnWiCpLe4N1hkPrGG Y1ovN/yXZdBKnW+0T/XKWxbum2BmdatcYcv1y/WQ6zr0fSgE+Zl1EbKm2/3r6CsL zTAyfgD19BpZZIoedjQAqcqSFCcdxIXGljMQBl17y62+sAgJ0OsbDUqK0wIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFEOuuP9VvUZQCyfbnPHewlYnaytqMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ExLzNiNmZi NC01MmU4LTQ0ZTItYWJlOC0yYzJmYmFkMmYwMTEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTEvM2I2ZmI0 LTUyZTgtNDRlMi1hYmU4LTJjMmZiYWQyZjAxMS8xL1E2NjRfMVc5UmxBTEo5dWM4 ZDdDVmlkcksyby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQBufYeMA0EAgACMAcDBQMqAfhAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMfLTANBgkqhkiG9w0BAQsFAAOCAQEADDTwqTB0XZ9a 0oILSXOwf7ezFF0byURHj4rf2gVJSy9TOghK4rbzp0DNMTJAvO9bZcWSN+uNtDsy U4cp9JtPjTxpz+FlSXTTZ9+zEOdXUqEK53XcI3+UuNkXZgBCi376U/B0W/bnlBje pCuzHP/eIj32Mhy4L673DSCp0x/5XqGZwVbiTE9bj6Pqfj4wsrAsJ2uT1stLcN/4 pG4bBJwNT3JJmVWCUScncWrQoj7n1t5hylIsVZDPINOughCNm4jDPM3ONG5E+j9w 6SKt5hqyvCNGZ1YBAKUFYeM4OrfWpOiOMc/mCvxG8M2okX+UxwikzrF1b5aKqToe dM2fqZ4yxg== -----END CERTIFICATE-----Generated at Mon Jan 26 07:44:16 2026 by rpki-client