This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QM9pzKLIbhlHVHiO3NiONS7U4Rw.cer File: QM9pzKLIbhlHVHiO3NiONS7U4Rw.cer (raw, json) Hash identifier: okPHoxqmIPjAAngwl2O/kKrWVu0jiQJXM8n0800Hpxc= Subject key identifier: 40:CF:69:CC:A2:C8:6E:19:47:54:78:8E:DC:D8:8E:35:2E:D4:E1:1C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C7FC827C9E111DE1C78E02FD87CD28C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0d/b8b606-c65a-409a-ba8d-cf1a5d8e5f6d/1/QM9pzKLIbhlHVHiO3NiONS7U4Rw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0d/b8b606-c65a-409a-ba8d-cf1a5d8e5f6d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:18:27 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 176.119.201.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:c8:27:c9:e1:11:de:1c:78:e0:2f:d8:7c:d2:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=40cf69cca2c86e194754788edcd88e352ed4e11c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d0:6f:14:78:74:0e:17:db:b8:f4:8f:f5:08: 42:63:7e:a2:b1:dd:9c:42:3e:99:64:2f:24:63:aa: 7b:fc:94:92:5e:a1:45:c7:e7:da:a8:2e:f4:c4:14: 8d:71:c9:73:d8:77:7c:bc:56:70:bc:a5:c0:44:3b: 63:37:02:51:f5:a2:b7:04:d6:02:5c:d3:25:5b:6e: b1:46:4f:65:a4:92:9f:f5:cd:17:32:91:fa:94:1e: 0f:75:9e:50:91:d6:af:73:01:9f:18:a8:aa:34:f5: 89:2c:eb:ca:ad:9e:32:e5:ed:81:20:9d:1c:fb:8b: 9b:45:c9:b7:16:8d:d9:39:bd:71:ef:f5:f1:d4:13: c0:85:09:d5:9e:c5:0d:ed:71:04:2c:f6:94:3f:87: 28:ca:8e:92:64:7d:eb:a5:ac:36:b6:6b:49:c0:6d: 8b:98:37:8e:2d:44:9a:92:cd:34:b1:24:b1:05:fc: de:35:55:ca:15:64:79:d1:f2:fc:e9:18:5f:ea:09: 73:60:89:61:05:f2:ef:b1:f2:ad:65:84:2c:41:25: 0a:90:f1:7e:d7:74:ea:e4:a7:4b:36:d0:1b:f7:a7: 47:5b:ed:05:71:e0:f9:6a:31:c2:29:93:ee:7c:37: 30:b7:10:46:79:7d:38:73:b3:49:c4:bd:4e:11:57: c7:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:CF:69:CC:A2:C8:6E:19:47:54:78:8E:DC:D8:8E:35:2E:D4:E1:1C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b8b606-c65a-409a-ba8d-cf1a5d8e5f6d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b8b606-c65a-409a-ba8d-cf1a5d8e5f6d/1/QM9pzKLIbhlHVHiO3NiONS7U4Rw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.119.201.0/24 Signature Algorithm: sha256WithRSAEncryption 39:21:b0:da:43:1f:aa:2e:35:23:72:3f:e7:78:18:05:60:90: 50:a5:fd:07:5c:b4:0b:86:5c:61:e0:b5:c0:3a:74:96:29:b3: 71:40:ea:fa:77:78:c0:7e:24:b5:43:78:c4:85:8f:11:ae:1f: b6:92:a9:4d:e2:dd:7a:e4:47:6c:9d:b6:82:2c:ab:dc:37:db: 7c:cb:fd:3e:a9:0f:9d:9f:6e:ea:b7:c5:48:ac:41:cc:2f:52: 8a:83:ba:a2:c3:6d:99:a5:64:d5:cb:f3:99:7a:1c:f1:00:9d: 2b:97:ff:fd:ba:d8:29:46:55:a1:d7:c2:82:eb:c2:3c:2c:4b: 6d:e5:0e:08:1f:40:68:b8:0e:b3:d7:7b:ca:e5:3d:08:4f:46: 92:a3:11:6c:cb:59:4c:81:19:c5:e0:52:9c:aa:27:a2:93:9d: 85:1f:18:c8:c1:06:1b:91:43:c5:f9:95:77:1e:6a:31:d8:20: 7c:9b:07:95:8f:3c:51:47:c1:1e:1f:35:e8:3f:3e:e5:29:b0: 56:2b:4b:4e:33:8f:7e:b2:fe:74:a8:29:8e:66:de:0e:1b:d9: 11:e2:23:a5:1c:2f:92:6b:ee:44:63:4a:f7:7e:c3:ff:98:3a: ee:3e:9b:15:7b:60:81:4b:2e:13:01:3b:d9:00:db:d1:93:cb: 22:fe:52:ce -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt8f8gnyeER3hx44C/YfNKMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MGNmNjljY2EyYzg2ZTE5NDc1NDc4OGVkY2Q4OGUzNTJlZDRlMTFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0tBvFHh0DhfbuPSP9QhCY36isd2c Qj6ZZC8kY6p7/JSSXqFFx+faqC70xBSNcclz2Hd8vFZwvKXARDtjNwJR9aK3BNYC XNMlW26xRk9lpJKf9c0XMpH6lB4PdZ5QkdavcwGfGKiqNPWJLOvKrZ4y5e2BIJ0c +4ubRcm3Fo3ZOb1x7/Xx1BPAhQnVnsUN7XEELPaUP4coyo6SZH3rpaw2tmtJwG2L mDeOLUSaks00sSSxBfzeNVXKFWR50fL86Rhf6glzYIlhBfLvsfKtZYQsQSUKkPF+ 13Tq5KdLNtAb96dHW+0FceD5ajHCKZPufDcwtxBGeX04c7NJxL1OEVfH5QIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFEDPacyiyG4ZR1R4jtzYjjUu1OEcMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBkL2I4YjYw Ni1jNjVhLTQwOWEtYmE4ZC1jZjFhNWQ4ZTVmNmQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGQvYjhiNjA2 LWM2NWEtNDA5YS1iYThkLWNmMWE1ZDhlNWY2ZC8xL1FNOXB6S0xJYmhsSFZIaU8z TmlPTlM3VTRSdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAsHfJMA0GCSqGSIb3DQEBCwUAA4IBAQA5IbDa Qx+qLjUjcj/neBgFYJBQpf0HXLQLhlxh4LXAOnSWKbNxQOr6d3jAfiS1Q3jEhY8R rh+2kqlN4t165EdsnbaCLKvcN9t8y/0+qQ+dn27qt8VIrEHML1KKg7qiw22ZpWTV y/OZehzxAJ0rl//9utgpRlWh18KC68I8LEtt5Q4IH0BouA6z13vK5T0IT0aSoxFs y1lMgRnF4FKcqieik52FHxjIwQYbkUPF+ZV3Hmox2CB8mweVjzxRR8EeHzXoPz7l KbBWK0tOM49+sv50qCmOZt4OG9kR4iOlHC+Sa+5EY0r3fsP/mDruPpsVe2CBSy4T ATvZANvRk8si/lLO -----END CERTIFICATE-----Generated at Sun Jan 25 21:08:42 2026 by rpki-client