This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QCyplx1qX35ZZL1aNMsFhXPBJjc.cer File: QCyplx1qX35ZZL1aNMsFhXPBJjc.cer (raw, json) Hash identifier: QxF118XUabL4EO1uV2BVITgbw/JDFkfAE2Z0KFtHIlc= Subject key identifier: 40:2C:A9:97:1D:6A:5F:7E:59:64:BD:5A:34:CB:05:85:73:C1:26:37 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CED8A832EE8A4ADAC413360E9AD410E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6f/78c5f6-0e43-4245-9c70-42385820f8b3/1/QCyplx1qX35ZZL1aNMsFhXPBJjc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6f/78c5f6-0e43-4245-9c70-42385820f8b3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:20 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 48862 IP: 31.15.96.0/21 IP: 217.174.128.0/20 IP: 2a0a:bfc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:8a:83:2e:e8:a4:ad:ac:41:33:60:e9:ad:41:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=402ca9971d6a5f7e5964bd5a34cb058573c12637 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:7c:bd:b5:39:12:6f:e7:95:5d:10:d4:d6:69: b4:3f:86:85:f0:13:06:c1:9e:8d:7f:4e:0d:f3:75: ed:b4:bf:54:30:39:23:5a:ed:42:a7:cf:dc:60:e9: d5:9f:d3:74:e7:e9:8f:61:53:45:1d:95:20:b1:e4: 51:d7:35:97:88:35:52:f9:91:c9:52:b1:c5:46:2a: 95:9e:5f:3e:1b:e0:7c:08:2a:b4:93:e9:62:c5:24: f7:1e:b7:76:3a:f3:6d:86:ca:55:b7:08:1f:85:ec: fd:6d:72:91:2f:cf:cf:94:42:f8:84:d5:07:2c:f5: 3b:65:e2:b1:92:23:b0:99:e2:58:83:16:06:41:3b: e1:4d:18:ec:0f:2b:78:36:53:f5:24:ad:bc:1e:73: 4d:22:e7:cb:58:66:8a:ce:66:32:f6:de:83:e3:e1: 6e:76:41:b7:71:e8:9f:e8:e2:37:71:54:69:7f:c1: e6:d8:71:f2:2b:21:de:51:02:ed:56:55:9e:e1:83: e4:bc:60:a2:bb:43:e7:04:8c:b1:a3:47:05:d5:13: 32:2c:3b:bb:62:e5:34:08:66:fd:8f:8e:ee:60:67: 64:a9:08:5a:c1:2c:02:b9:05:b4:e6:e7:6c:7f:a3: f1:eb:0d:57:6b:26:32:25:af:1d:27:19:2e:8b:20: 42:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:2C:A9:97:1D:6A:5F:7E:59:64:BD:5A:34:CB:05:85:73:C1:26:37 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/78c5f6-0e43-4245-9c70-42385820f8b3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/78c5f6-0e43-4245-9c70-42385820f8b3/1/QCyplx1qX35ZZL1aNMsFhXPBJjc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.15.96.0/21 217.174.128.0/20 IPv6: 2a0a:bfc0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 48862 Signature Algorithm: sha256WithRSAEncryption 11:84:c1:8a:ee:a0:4c:c0:78:29:d2:fa:3f:c3:6c:f6:8d:83: a1:3c:fe:49:1a:12:d5:83:5c:47:86:b7:ab:f2:34:24:c0:f7: 99:3a:9b:8a:55:65:73:45:e2:78:63:99:d6:f0:dc:bb:02:f1: 8c:cb:1b:7f:10:20:87:18:84:01:61:06:c6:01:78:28:52:f8: f5:07:b6:2b:3d:a7:41:81:f1:a6:7a:7e:95:bc:9f:16:70:ad: bf:e3:ab:80:65:30:48:5f:30:94:b2:cf:94:00:a9:9e:4b:35: 1c:66:08:a2:26:02:c3:1d:64:67:40:35:3d:6f:db:b1:d9:af: f6:50:48:b9:cf:f6:b8:f1:16:cd:36:d9:69:3e:14:8b:71:02: a1:0c:8a:cb:58:83:f4:94:3b:37:e5:75:3d:86:92:9d:7c:41: 3e:5b:24:63:61:c7:c1:27:79:0f:09:8e:b7:1b:48:99:a0:96: 6b:53:48:dd:6e:f2:00:00:f3:04:3e:5f:3d:cb:2b:06:c5:60: 5e:9e:95:29:40:de:a8:24:d5:ab:34:1a:f5:3f:08:da:f0:50: cc:ad:05:28:46:20:a9:ec:85:9c:40:2e:9b:d4:40:12:ad:81: 7e:07:b3:3e:11:5b:68:d8:37:f8:f1:44:cf:90:45:bb:8b:4c: ea:a9:c8:13 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt87YqDLuikraxBM2DprUEOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MDJjYTk5NzFkNmE1ZjdlNTk2NGJkNWEzNGNiMDU4NTczYzEyNjM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyny9tTkSb+eVXRDU1mm0P4aF8BMG wZ6Nf04N83XttL9UMDkjWu1Cp8/cYOnVn9N05+mPYVNFHZUgseRR1zWXiDVS+ZHJ UrHFRiqVnl8+G+B8CCq0k+lixST3Hrd2OvNthspVtwgfhez9bXKRL8/PlEL4hNUH LPU7ZeKxkiOwmeJYgxYGQTvhTRjsDyt4NlP1JK28HnNNIufLWGaKzmYy9t6D4+Fu dkG3ceif6OI3cVRpf8Hm2HHyKyHeUQLtVlWe4YPkvGCiu0PnBIyxo0cF1RMyLDu7 YuU0CGb9j47uYGdkqQhawSwCuQW05udsf6Px6w1XayYyJa8dJxkuiyBC3wIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFEAsqZcdal9+WWS9WjTLBYVzwSY3MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZmLzc4YzVm Ni0wZTQzLTQyNDUtOWM3MC00MjM4NTgyMGY4YjMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmYvNzhjNWY2 LTBlNDMtNDI0NS05YzcwLTQyMzg1ODIwZjhiMy8xL1FDeXBseDFxWDM1WlpMMWFO TXNGaFhQQkpqYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQDHw9gAwQE2a6AMA0EAgACMAcDBQMqCr/AMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwC+3jANBgkqhkiG9w0BAQsFAAOCAQEAEYTB iu6gTMB4KdL6P8Ns9o2DoTz+SRoS1YNcR4a3q/I0JMD3mTqbilVlc0XieGOZ1vDc uwLxjMsbfxAghxiEAWEGxgF4KFL49Qe2Kz2nQYHxpnp+lbyfFnCtv+OrgGUwSF8w lLLPlACpnks1HGYIoiYCwx1kZ0A1PW/bsdmv9lBIuc/2uPEWzTbZaT4Ui3ECoQyK y1iD9JQ7N+V1PYaSnXxBPlskY2HHwSd5DwmOtxtImaCWa1NI3W7yAADzBD5fPcsr BsVgXp6VKUDeqCTVqzQa9T8I2vBQzK0FKEYgqeyFnEAum9RAEq2BfgezPhFbaNg3 +PFEz5BFu4tM6qnIEw== -----END CERTIFICATE-----Generated at Mon Jan 26 16:01:24 2026 by rpki-client