This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer File: QN3nG0G_-xtRbgewxhORvfTTvxE.cer (raw, json) Hash identifier: 0OX8qCT0ueDVG8C5ovKg/ToLrVvfPlxVG1ADPDjd4lc= Subject key identifier: 40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C6B7A7DD757B9D15BE19BE85C80586 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:17:50 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.213.197.0/24 IP: 92.60.64.0/20 IP: 2a01:658::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:b7:a7:dd:75:7b:9d:15:be:19:be:85:c8:05:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:b7:3d:3e:d5:0f:b9:5f:df:d4:ad:de:03:42: c7:ff:83:de:88:81:e6:2e:d3:36:53:b7:1b:a8:47: b3:8a:37:c1:61:ff:1e:4d:f1:75:22:87:51:93:73: d6:1b:a4:08:c5:22:da:bb:2f:67:b1:6d:c9:00:e1: d4:59:87:56:d4:b1:53:c6:d9:2d:92:ac:2a:a5:56: 2d:a7:4c:e1:3f:58:77:de:a2:26:0e:c3:70:66:ea: 46:ec:48:f7:bd:aa:92:80:4a:55:02:69:51:93:f6: b8:6d:37:52:01:f7:21:6c:f0:0b:ba:b8:16:76:f4: b5:9f:ee:66:0c:8f:e4:10:44:31:16:69:dd:2e:d6: 8e:cb:30:04:8b:f9:1c:a0:d6:26:1c:0f:40:a9:ce: be:a5:8d:e7:08:a2:8d:ed:b7:1b:1d:37:07:b0:8f: 4b:77:0b:60:db:79:49:57:d7:4e:34:8e:3c:73:ff: b1:cc:8f:08:76:7a:d8:78:28:72:fb:24:8d:c9:85: 31:31:4f:39:00:7e:ec:9c:4f:9f:5d:72:2f:84:72: 78:4b:ee:36:26:ea:1b:09:7b:d5:c2:cd:c0:61:37: bc:85:88:91:e9:97:64:2f:be:a2:c4:b5:e6:a1:04: 5b:89:8b:6e:62:60:4f:8e:75:9a:83:09:2d:ec:c6: a7:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.213.197.0/24 92.60.64.0/20 IPv6: 2a01:658::/32 Signature Algorithm: sha256WithRSAEncryption 6b:71:73:9b:26:ef:61:01:67:33:81:69:9e:b9:71:66:c4:50: e2:7b:1a:fa:a1:aa:d6:e7:8f:a5:94:a8:45:ae:8f:07:74:f5: b3:66:1f:e4:e6:5e:63:7e:17:9a:4f:f2:48:c5:68:29:db:de: d8:ba:14:b7:30:9d:21:91:85:4f:ca:5d:25:4f:15:6c:e9:2f: 2c:2f:2f:53:47:9d:3a:bd:1a:c7:6e:74:e8:45:17:2f:79:cc: 7b:2d:c9:b9:ed:a5:2a:8b:18:24:22:e3:34:b2:bb:27:e5:b6: 13:6b:0c:be:ac:09:ef:9f:45:0a:ff:11:9e:34:22:25:4e:89: 31:71:1f:a9:24:7d:e7:b3:26:f3:79:0c:88:eb:5b:72:4f:27: d4:1f:b8:bd:c2:eb:1f:71:8e:0e:f9:df:21:ec:6d:1e:a0:4b: 5d:d5:5a:73:7c:de:56:a9:f5:4c:4b:0c:08:6c:ef:d3:e4:da: 9f:1b:58:ea:2e:c7:39:b7:cf:40:05:48:f5:09:71:26:35:9c: c8:14:3c:db:c1:ea:ac:f9:84:89:30:b4:59:2a:c0:d3:4a:66: 55:a6:4e:78:86:94:d5:21:3b:86:73:64:66:23:38:96:d2:2c: 11:03:75:02:ad:1e:16:ea:9a:26:b8:fa:7e:21:1f:0d:14:41: f5:27:5b:54 -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgISAZt3xren3XV7nRW+Gb6FyAWGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MGRkZTcxYjQxYmZmYjFiNTE2ZTA3YjBjNjEzOTFiZGY0ZDNiZjExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrc9PtUPuV/f1K3eA0LH/4PeiIHm LtM2U7cbqEezijfBYf8eTfF1IodRk3PWG6QIxSLauy9nsW3JAOHUWYdW1LFTxtkt kqwqpVYtp0zhP1h33qImDsNwZupG7Ej3vaqSgEpVAmlRk/a4bTdSAfchbPALurgW dvS1n+5mDI/kEEQxFmndLtaOyzAEi/kcoNYmHA9Aqc6+pY3nCKKN7bcbHTcHsI9L dwtg23lJV9dONI48c/+xzI8IdnrYeChy+ySNyYUxMU85AH7snE+fXXIvhHJ4S+42 JuobCXvVws3AYTe8hYiR6ZdkL76ixLXmoQRbiYtuYmBPjnWagwkt7Man+QIDAQAB o4ICmTCCApUwHQYDVR0OBBYEFEDd5xtBv/sbUW4HsMYTkb30078RMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2UzLzk1NjJi Zi05MmJjLTQ2ZWItOWQxNi0yYmFkY2U0NjY4NTMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTMvOTU2MmJm LTkyYmMtNDZlYi05ZDE2LTJiYWRjZTQ2Njg1My8xL1FOM25HMEdfLXh0UmJnZXd4 aE9SdmZUVHZ4RS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQAW9XFAwQEXDxAMA0EAgACMAcDBQAqAQZYMA0G CSqGSIb3DQEBCwUAA4IBAQBrcXObJu9hAWczgWmeuXFmxFDiexr6oarW54+llKhF ro8HdPWzZh/k5l5jfheaT/JIxWgp297YuhS3MJ0hkYVPyl0lTxVs6S8sLy9TR506 vRrHbnToRRcvecx7Lcm57aUqixgkIuM0srsn5bYTawy+rAnvn0UK/xGeNCIlTokx cR+pJH3nsybzeQyI61tyTyfUH7i9wusfcY4O+d8h7G0eoEtd1VpzfN5WqfVMSwwI bO/T5NqfG1jqLsc5t89ABUj1CXEmNZzIFDzbweqs+YSJMLRZKsDTSmZVpk54hpTV ITuGc2RmIziW0iwRA3UCrR4W6pomuPp+IR8NFEH1J1tU -----END CERTIFICATE-----Generated at Sun Jan 25 08:02:49 2026 by rpki-client