This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QA4H15n7NVyVICXz0nsA6bTuNO0.cer File: QA4H15n7NVyVICXz0nsA6bTuNO0.cer (raw, json) Hash identifier: LzZuurEthvtqEKIEyZ2UWqq/Hdx1rbCZzfboNrQ7gLY= Subject key identifier: 40:0E:07:D7:99:FB:35:5C:95:20:25:F3:D2:7B:00:E9:B4:EE:34:ED Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F15BF69168BD2E8A53E9702D6775274 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b4/2f36b6-d701-4335-af30-48fe633b1b3f/1/QA4H15n7NVyVICXz0nsA6bTuNO0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b4/2f36b6-d701-4335-af30-48fe633b1b3f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:30 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 61102 AS: 213391 IP: 89.33.28.0/23 IP: 107.150.178.0/23 IP: 176.223.65.0/24 IP: 185.18.204.0/22 IP: 185.37.148.0/22 IP: 185.217.96.0/22 IP: 188.210.255.0/24 IP: 193.201.147.0/26 IP: 2001:7f8:62::/48 IP: 2a03:ff40::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:bf:69:16:8b:d2:e8:a5:3e:97:02:d6:77:52:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=400e07d799fb355c952025f3d27b00e9b4ee34ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:21:c1:91:bb:58:a1:48:4e:05:04:cf:d5:07: 1f:cf:c1:14:59:15:9c:ae:88:77:ee:03:8c:83:e6: 13:ff:37:bc:e2:e5:f5:a2:7e:3c:93:31:11:36:2e: 22:54:6a:08:28:17:ee:7e:de:71:6c:07:87:c2:1a: a0:77:45:35:c8:cf:8c:e8:61:0a:02:fc:e7:ae:b4: 89:4e:2f:64:72:fc:0a:a8:7b:67:d0:2b:59:1c:7e: bf:11:f1:07:fd:20:86:4f:7f:c4:b9:99:5b:df:ee: 42:00:a2:2e:1c:6b:0f:7d:98:ad:c1:a9:b0:37:9d: cc:48:76:a6:c0:82:7f:8b:b2:61:09:2d:14:34:7c: c2:1c:5f:22:3c:2a:b3:7e:19:3a:60:16:a7:ad:3e: 6b:f1:35:03:be:69:e8:94:38:ee:58:16:32:63:18: 17:b8:c7:98:68:17:40:66:01:76:41:58:a5:5e:1c: 7f:4c:6c:d5:c9:0d:71:70:f5:fd:60:ac:af:2b:75: 97:58:01:c4:95:e8:54:b5:1e:14:62:c1:fb:30:e7: 6f:4c:67:c2:df:c1:c2:d0:94:e6:41:77:64:af:a2: f9:fc:ff:e4:a9:20:8c:67:93:68:cd:d8:b3:a0:d4: bd:c4:79:55:41:10:dd:bb:3c:c0:5b:99:b4:89:84: b8:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:0E:07:D7:99:FB:35:5C:95:20:25:F3:D2:7B:00:E9:B4:EE:34:ED X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2f36b6-d701-4335-af30-48fe633b1b3f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2f36b6-d701-4335-af30-48fe633b1b3f/1/QA4H15n7NVyVICXz0nsA6bTuNO0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.33.28.0/23 107.150.178.0/23 176.223.65.0/24 185.18.204.0/22 185.37.148.0/22 185.217.96.0/22 188.210.255.0/24 193.201.147.0/26 IPv6: 2001:7f8:62::/48 2a03:ff40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 61102 213391 Signature Algorithm: sha256WithRSAEncryption 9b:a5:3c:59:54:84:01:e2:f8:4d:33:45:f0:f6:5d:d8:b9:7a: c6:b4:91:ff:f5:fb:2b:85:aa:57:a7:33:8a:22:92:f3:62:19: 4b:07:50:a3:24:c1:18:30:e1:ef:ea:4c:b7:4a:c7:40:70:b0: 03:5d:e9:f5:22:ec:d9:ce:5c:83:73:7b:65:01:85:b7:cd:a3: f5:f5:8a:7b:f3:a5:5d:93:09:a7:4e:a1:26:a7:41:53:bb:7c: 7d:c8:31:64:19:2b:f1:f2:38:32:84:32:19:49:ee:9b:82:da: 42:a2:90:f7:0d:80:04:c5:65:26:28:46:fa:6d:46:61:46:95: ec:14:b0:2c:0a:16:48:ee:95:f5:7c:df:c0:5c:ec:52:2e:db: 9d:f3:87:b5:bc:12:a9:10:87:80:83:44:e9:88:2f:aa:a6:19: f9:80:98:46:d8:81:2b:f9:b7:0d:d4:f5:6c:8d:e9:76:5c:5e: 14:23:72:f5:a2:4f:95:55:7e:64:82:ac:cb:62:43:fa:63:13: 37:56:09:5b:44:61:ae:f1:7c:43:0a:a8:b7:9e:a7:15:da:de: 32:21:4c:f4:76:93:d8:96:47:ac:7e:95:86:dc:e2:fb:91:0d: 80:97:e4:07:8c:b6:82:9b:c3:13:07:41:b1:ff:99:29:24:6e: 05:e4:09:f1 -----BEGIN CERTIFICATE----- MIIF3DCCBMSgAwIBAgISAZt/Fb9pFovS6KU+lwLWd1J0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MDBlMDdkNzk5ZmIzNTVjOTUyMDI1ZjNkMjdiMDBlOWI0ZWUzNGVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSHBkbtYoUhOBQTP1Qcfz8EUWRWc roh37gOMg+YT/ze84uX1on48kzERNi4iVGoIKBfuft5xbAeHwhqgd0U1yM+M6GEK AvznrrSJTi9kcvwKqHtn0CtZHH6/EfEH/SCGT3/EuZlb3+5CAKIuHGsPfZitwamw N53MSHamwIJ/i7JhCS0UNHzCHF8iPCqzfhk6YBanrT5r8TUDvmnolDjuWBYyYxgX uMeYaBdAZgF2QVilXhx/TGzVyQ1xcPX9YKyvK3WXWAHElehUtR4UYsH7MOdvTGfC 38HC0JTmQXdkr6L5/P/kqSCMZ5NozdizoNS9xHlVQRDduzzAW5m0iYS4HwIDAQAB o4IC6DCCAuQwHQYDVR0OBBYEFEAOB9eZ+zVclSAl89J7AOm07jTtMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I0LzJmMzZi Ni1kNzAxLTQzMzUtYWYzMC00OGZlNjMzYjFiM2YvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjQvMmYzNmI2 LWQ3MDEtNDMzNS1hZjMwLTQ4ZmU2MzNiMWIzZi8xL1FBNEgxNW43TlZ5VklDWHow bnNBNmJUdU5PMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGIGCCsGAQUF BwEHAQH/BFMwUTA3BAIAATAxAwQBWSEcAwQBa5ayAwQAsN9BAwQCuRLMAwQCuSWU AwQCudlgAwQAvNL/AwUGwcmTADAWBAIAAjAQAwcAIAEH+ABiAwUAKgP/QDAfBggr BgEFBQcBCAEB/wQQMA6gDDAKAgMA7q4CAwNBjzANBgkqhkiG9w0BAQsFAAOCAQEA m6U8WVSEAeL4TTNF8PZd2Ll6xrSR//X7K4WqV6cziiKS82IZSwdQoyTBGDDh7+pM t0rHQHCwA13p9SLs2c5cg3N7ZQGFt82j9fWKe/OlXZMJp06hJqdBU7t8fcgxZBkr 8fI4MoQyGUnum4LaQqKQ9w2ABMVlJihG+m1GYUaV7BSwLAoWSO6V9XzfwFzsUi7b nfOHtbwSqRCHgINE6YgvqqYZ+YCYRtiBK/m3DdT1bI3pdlxeFCNy9aJPlVV+ZIKs y2JD+mMTN1YJW0RhrvF8Qwqot56nFdreMiFM9HaT2JZHrH6Vhtzi+5ENgJfkB4y2 gpvDEwdBsf+ZKSRuBeQJ8Q== -----END CERTIFICATE-----Generated at Sun Jan 25 14:42:29 2026 by rpki-client