This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.cer File: Q89BYZOhwu0wVrZH5aRlAxSOOCQ.cer (raw, json) Hash identifier: d7VG5gtqWjEj1ERX48P5J0tHY0iv/63wgNjFQ7NQzAw= Subject key identifier: 43:CF:41:61:93:A1:C2:ED:30:56:B6:47:E5:A4:65:03:14:8E:38:24 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC914C25F83AAA8269C91BAFAEDDC0F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/71/aa31cf-bb31-497c-a577-09b969d160fe/1/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/71/aa31cf-bb31-497c-a577-09b969d160fe/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:19:17 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 216200 IP: 46.255.27.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:14:c2:5f:83:aa:a8:26:9c:91:ba:fa:ed:dc:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:19:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=43cf416193a1c2ed3056b647e5a46503148e3824 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:0d:14:e3:aa:6d:8d:7f:7c:92:a5:5d:8a:63: 70:3f:25:32:fb:8d:66:7a:0d:bc:65:a2:a5:66:88: b0:bf:03:5a:37:3f:ea:5e:f5:1d:87:22:63:5d:ed: 7d:27:76:39:cf:5b:fa:c0:65:cd:14:3d:de:eb:ff: 2c:75:b3:07:5e:fc:8c:66:77:cc:ca:5a:a3:68:26: bc:fb:cc:c6:0d:0c:e6:c8:46:af:af:ca:8f:fd:a9: 63:27:16:5e:29:00:22:8c:e6:dd:fd:80:d0:4a:b5: ee:4c:92:b6:40:95:d5:5b:0b:ab:7c:4b:90:9a:4f: 5c:e0:aa:18:91:61:e8:9d:80:97:47:04:fd:15:81: 88:85:29:63:5f:ae:9b:28:6d:b9:93:1e:49:f5:4c: 24:ab:f4:4b:3b:37:e3:1c:81:d0:71:ed:9a:90:f2: 1c:70:26:49:e5:3e:9d:00:23:77:7f:c0:9c:2c:9e: 31:99:99:da:94:56:bd:b6:b4:13:a4:8f:ae:18:99: 61:fe:02:4f:2b:1e:f3:ac:65:d3:dc:07:6c:53:a7: ed:4b:d1:79:e7:4c:53:3e:b4:43:29:e1:be:88:5d: 90:9b:7a:a0:de:52:af:d9:36:48:56:14:a1:3c:b9: 63:17:21:12:5f:23:67:14:4c:77:c8:50:46:64:f8: 9f:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:CF:41:61:93:A1:C2:ED:30:56:B6:47:E5:A4:65:03:14:8E:38:24 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/aa31cf-bb31-497c-a577-09b969d160fe/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/aa31cf-bb31-497c-a577-09b969d160fe/1/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.255.27.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 216200 Signature Algorithm: sha256WithRSAEncryption 42:0c:a1:00:ce:3b:e6:21:7a:b5:d1:47:a5:6b:e8:59:bf:e4: 92:67:01:9d:5e:55:c1:2b:96:ed:47:85:1e:62:cd:3a:76:a8: 2c:52:19:9c:d6:96:e8:fc:2a:03:cf:15:04:95:85:06:d3:29: 46:e3:71:89:f2:e0:6e:d0:9f:cc:0a:cc:f7:77:40:91:53:af: 6d:14:c5:04:35:2b:06:ab:a6:31:f6:bb:8e:7e:5a:79:aa:6e: 9d:73:6c:eb:b2:ff:98:3c:12:03:ae:41:df:86:05:1a:e3:50: 40:20:9a:ea:00:34:30:98:41:0b:dc:93:0d:60:09:ae:57:5f: ce:0e:89:79:a1:ca:02:27:aa:9e:86:59:0a:13:14:6d:59:2a: 32:c4:aa:84:9e:91:f1:c5:a8:c0:18:89:6a:25:e9:a5:65:7a: 72:56:9f:82:14:0c:f5:97:1a:22:e9:bb:41:72:57:37:d3:70: fa:9b:55:17:73:6d:0a:d8:2d:08:57:60:4c:d6:0f:c0:cc:b1: 2e:cc:16:e4:9d:0b:a0:ee:78:05:50:01:4d:3d:0a:14:7b:32: 8d:22:da:0e:a3:13:f2:a8:1a:92:ce:64:3a:d1:50:53:b7:01: cd:59:dd:bb:00:6b:13:ed:02:ae:1a:ce:17:66:14:95:a2:23: de:4e:82:0f -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt6yRTCX4OqqCackbr67dwPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0M2NmNDE2MTkzYTFjMmVkMzA1NmI2NDdlNWE0NjUwMzE0OGUzODI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQ0U46ptjX98kqVdimNwPyUy+41m eg28ZaKlZoiwvwNaNz/qXvUdhyJjXe19J3Y5z1v6wGXNFD3e6/8sdbMHXvyMZnfM ylqjaCa8+8zGDQzmyEavr8qP/aljJxZeKQAijObd/YDQSrXuTJK2QJXVWwurfEuQ mk9c4KoYkWHonYCXRwT9FYGIhSljX66bKG25kx5J9Uwkq/RLOzfjHIHQce2akPIc cCZJ5T6dACN3f8CcLJ4xmZnalFa9trQTpI+uGJlh/gJPKx7zrGXT3AdsU6ftS9F5 50xTPrRDKeG+iF2Qm3qg3lKv2TZIVhShPLljFyESXyNnFEx3yFBGZPif6QIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFEPPQWGTocLtMFa2R+WkZQMUjjgkMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzcxL2FhMzFj Zi1iYjMxLTQ5N2MtYTU3Ny0wOWI5NjlkMTYwZmUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzEvYWEzMWNm LWJiMzEtNDk3Yy1hNTc3LTA5Yjk2OWQxNjBmZS8xL1E4OUJZWk9od3Uwd1ZyWkg1 YVJsQXhTT09DUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQALv8bMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwNMiDANBgkqhkiG9w0BAQsFAAOCAQEAQgyhAM475iF6tdFHpWvoWb/kkmcBnV5V wSuW7UeFHmLNOnaoLFIZnNaW6PwqA88VBJWFBtMpRuNxifLgbtCfzArM93dAkVOv bRTFBDUrBqumMfa7jn5aeapunXNs67L/mDwSA65B34YFGuNQQCCa6gA0MJhBC9yT DWAJrldfzg6JeaHKAieqnoZZChMUbVkqMsSqhJ6R8cWowBiJaiXppWV6clafghQM 9ZcaIum7QXJXN9Nw+ptVF3NtCtgtCFdgTNYPwMyxLswW5J0LoO54BVABTT0KFHsy jSLaDqMT8qgaks5kOtFQU7cBzVnduwBrE+0CrhrOF2YUlaIj3k6CDw== -----END CERTIFICATE-----Generated at Sun Jan 25 22:20:05 2026 by rpki-client