This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Q9_AZs580-OCV0poZnlzsLRo3zw.cer File: Q9_AZs580-OCV0poZnlzsLRo3zw.cer (raw, json) Hash identifier: vstYRlssqHuz4wAd33c/BP8q1UesCLPKvw8Gy6eI1Tk= Subject key identifier: 43:DF:C0:66:CE:7C:D3:E3:82:57:4A:68:66:79:73:B0:B4:68:DF:3C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BC1BF0929CBBA8D1E0332CCCEDD05D1E1 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 15 Jan 2026 13:01:21 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 197564 AS: 202218 IP: 45.155.96.0/22 IP: 91.226.36.0/23 IP: 213.108.24.0/23 IP: 2001:67c:124c::/48 IP: 2a10:ba00::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c1:bf:09:29:cb:ba:8d:1e:03:32:cc:ce:dd:05:d1:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 15 13:01:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=43dfc066ce7cd3e382574a68667973b0b468df3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:5b:a2:72:0c:7e:48:7b:63:0f:a7:c4:ef:ed: 07:0e:08:a6:2c:63:0e:c9:e2:5d:61:83:58:97:19: 08:d2:1c:7f:64:31:b4:f2:dd:a7:de:87:b9:48:1c: 6b:07:c8:03:d6:40:c5:1c:ee:54:52:a9:35:bd:f3: f4:5c:30:b8:78:03:9d:10:bb:54:f8:0a:50:72:13: 33:f4:42:16:67:be:72:f8:4e:23:18:14:dc:e6:91: a5:f4:71:3d:ba:34:ae:1e:7b:0f:db:60:1a:23:78: 24:82:97:c3:21:48:55:1c:69:40:6e:d3:70:12:0b: e0:44:30:48:23:cb:8e:6f:44:f9:16:8c:aa:06:57: 09:d1:4f:1b:67:68:ca:f7:65:58:5e:f3:60:71:9b: b7:6c:28:f5:68:d2:b0:f5:c9:28:1d:91:8c:66:33: a3:6a:21:2b:13:86:ad:fd:e4:b3:9c:a0:c2:7c:c5: 73:5c:7e:b6:a9:94:bf:25:6e:7d:a5:3a:84:a0:24: 37:3c:80:46:34:3f:01:d8:13:3b:1e:06:7a:d3:7f: 6d:e5:b4:ea:36:c3:8e:73:48:c5:81:8d:b2:b3:4b: 22:1f:80:a6:5c:cf:54:d5:da:75:39:d8:c5:e9:1d: 1a:ba:aa:1d:94:73:ef:38:bd:03:d0:46:f7:66:ef: 26:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:DF:C0:66:CE:7C:D3:E3:82:57:4A:68:66:79:73:B0:B4:68:DF:3C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.155.96.0/22 91.226.36.0/23 213.108.24.0/23 IPv6: 2001:67c:124c::/48 2a10:ba00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 197564 202218 Signature Algorithm: sha256WithRSAEncryption 1d:e8:52:ae:dd:79:62:2a:ee:3d:ff:2f:63:10:30:86:c0:67: a1:9c:e2:59:58:ea:c2:9c:26:11:4d:d9:5a:17:37:5e:52:9f: 0c:5d:96:28:2f:cc:7c:19:63:0f:1b:78:21:6c:aa:c4:97:29: 4d:ce:08:4f:31:a3:8a:44:3d:6d:6f:58:98:da:e1:46:49:77: 5d:52:89:43:4f:ce:62:27:2d:0e:8a:ae:53:30:5c:fa:01:79: ba:fe:bd:ac:58:74:a3:da:e8:64:22:97:c4:3e:c6:cc:44:8f: 5d:37:82:60:87:3e:67:e6:79:75:a7:d3:c9:3c:6f:05:e9:7c: b1:a8:bf:e3:c6:5d:0b:7f:c7:87:e0:0f:68:a1:27:ec:e9:d6: 0a:57:ff:4d:4c:1f:9f:e7:3e:22:15:8c:33:e2:58:5e:dc:3f: c8:f2:2f:6b:c4:01:48:7d:32:41:46:6b:c1:67:6a:9f:ad:ab: 2c:b8:30:fc:2d:58:dd:79:00:58:e7:ce:66:5d:ed:1e:83:29: a6:91:1b:d7:67:ca:cc:23:8b:30:9b:f4:cd:c6:08:fb:b3:3b: 7c:53:d6:38:98:c5:83:fc:ce:c1:45:80:ce:6c:95:18:ec:fe: 8d:1f:63:92:8c:98:f9:3a:b8:db:c3:e3:75:5a:67:03:c3:7e: 81:c2:b7:a3 -----BEGIN CERTIFICATE----- MIIFvTCCBKWgAwIBAgISAZvBvwkpy7qNHgMyzM7dBdHhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTE1MTMwMTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0M2RmYzA2NmNlN2NkM2UzODI1NzRhNjg2Njc5NzNiMGI0NjhkZjNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1uicgx+SHtjD6fE7+0HDgimLGMO yeJdYYNYlxkI0hx/ZDG08t2n3oe5SBxrB8gD1kDFHO5UUqk1vfP0XDC4eAOdELtU +ApQchMz9EIWZ75y+E4jGBTc5pGl9HE9ujSuHnsP22AaI3gkgpfDIUhVHGlAbtNw EgvgRDBII8uOb0T5FoyqBlcJ0U8bZ2jK92VYXvNgcZu3bCj1aNKw9ckoHZGMZjOj aiErE4at/eSznKDCfMVzXH62qZS/JW59pTqEoCQ3PIBGND8B2BM7HgZ6039t5bTq NsOOc0jFgY2ys0siH4CmXM9U1dp1OdjF6R0auqodlHPvOL0D0Eb3Zu8mSwIDAQAB o4ICyTCCAsUwHQYDVR0OBBYEFEPfwGbOfNPjgldKaGZ5c7C0aN88MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY0LzE2MzZm OC01MDI2LTQwNGUtYTFhZS0yNTA5NzQzYWQyOWUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjQvMTYzNmY4 LTUwMjYtNDA0ZS1hMWFlLTI1MDk3NDNhZDI5ZS8xL1E5X0FaczU4MC1PQ1YwcG9a bmx6c0xSbzN6dy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEMGCCsGAQUF BwEHAQH/BDQwMjAYBAIAATASAwQCLZtgAwQBW+IkAwQB1WwYMBYEAgACMBADBwAg AQZ8EkwDBQAqELoAMB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwMDvAIDAxXqMA0G CSqGSIb3DQEBCwUAA4IBAQAd6FKu3XliKu49/y9jEDCGwGehnOJZWOrCnCYRTdla FzdeUp8MXZYoL8x8GWMPG3ghbKrElylNzghPMaOKRD1tb1iY2uFGSXddUolDT85i Jy0Oiq5TMFz6AXm6/r2sWHSj2uhkIpfEPsbMRI9dN4Jghz5n5nl1p9PJPG8F6Xyx qL/jxl0Lf8eH4A9ooSfs6dYKV/9NTB+f5z4iFYwz4lhe3D/I8i9rxAFIfTJBRmvB Z2qfrassuDD8LVjdeQBY585mXe0egymmkRvXZ8rMI4swm/TNxgj7szt8U9Y4mMWD /M7BRYDObJUY7P6NH2OSjJj5Orjbw+N1WmcDw36Bwrej -----END CERTIFICATE-----Generated at Sun Jan 25 07:37:56 2026 by rpki-client