This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer File: QQSkCCHEF2zELiVe9sFydHPD8Ao.cer (raw, json) Hash identifier: 1oQL3h7IzKpCvCApxwwBCFyF5MGYtuXX4Wysdadiy5g= Subject key identifier: 41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7FF26C9A59CC765208665DA17087C39D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 18:22:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 8262 IP: 82.119.64.0/19 IP: 85.14.0.0/18 IP: 89.252.192.0/18 IP: 176.67.232.0/21 IP: 185.92.132.0/22 IP: 194.12.224.0/19 IP: 2001:1ae0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:6c:9a:59:cc:76:52:08:66:5d:a1:70:87:c3:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 18:22:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4104a40821c4176cc42e255ef6c1727473c3f00a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:d9:02:c1:2e:34:68:1c:26:43:a3:31:29:78: 3e:63:0b:28:fa:d5:86:2d:c6:c1:63:03:ab:4d:98: 53:40:cc:b8:3e:4c:63:84:be:7f:4e:fc:1a:ae:81: 7e:7e:90:ac:c5:32:72:d7:42:11:d3:69:9d:a4:d3: 98:a0:e4:a6:03:d2:4b:dc:92:7b:be:2d:82:d0:f9: b9:84:3a:29:c6:8d:48:68:2b:77:a9:3b:a5:70:b9: 3f:6e:47:54:6a:8c:98:46:3a:40:6d:3f:0a:d3:ac: c0:7d:55:a3:1f:10:7e:35:d4:23:5d:4c:ea:7f:1b: a2:7b:05:15:2d:23:c8:c3:4e:db:00:9e:e1:48:34: ed:8f:1f:0b:f2:f8:fd:f9:1b:a7:14:ea:64:bb:f1: 80:8f:40:56:ee:78:85:4d:13:5b:b7:de:e8:3f:d3: 79:07:83:1f:9e:35:5d:a3:fc:ee:0b:e8:88:11:f1: ba:10:d5:7d:b9:90:a3:68:23:c6:bf:0b:92:00:38: d4:1b:ae:86:97:e7:51:b3:08:20:d1:57:8c:92:8a: b9:0d:49:d4:94:34:a2:09:6f:77:ca:6b:dc:c1:70: 35:15:4d:6c:8a:79:58:ee:4e:f9:bf:04:5d:2f:66: 7d:18:2b:14:4c:d3:87:f2:90:3a:80:a7:d0:d9:a2: 9a:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.119.64.0/19 85.14.0.0/18 89.252.192.0/18 176.67.232.0/21 185.92.132.0/22 194.12.224.0/19 IPv6: 2001:1ae0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 8262 Signature Algorithm: sha256WithRSAEncryption 9e:3b:f2:06:3e:95:4a:05:e1:2d:c3:be:94:2c:cf:78:42:96: 21:91:5d:45:b9:6a:9b:65:fb:1a:e0:76:92:d3:f7:47:13:e5: ce:53:6e:fe:f9:8d:99:43:74:26:18:10:93:62:2d:02:98:62: 19:c2:30:ab:8a:1c:75:e6:d0:44:7f:16:f1:48:51:fb:b2:f6: 52:65:92:cd:52:7d:26:b5:57:5a:06:8d:10:61:92:77:bd:20: 23:2e:7f:84:91:d5:fa:1d:e1:cd:0e:cc:37:2b:77:77:62:3d: 36:d1:f1:dc:35:ec:60:a1:b6:69:3d:62:17:db:1b:35:cf:e5: 30:d4:e1:04:49:a7:f3:ea:42:a3:14:79:7c:d9:f2:0d:44:c9: 51:f2:65:ad:79:c4:c3:a1:98:a1:81:95:a9:a6:f8:c6:a4:14: 55:8e:25:0a:42:80:2f:9f:5e:a5:9e:c5:1e:cb:4a:f6:95:f7: a0:db:c6:37:4b:0d:b5:59:dd:36:e6:d5:29:bf:1f:ad:62:c2: cf:6a:08:2b:86:f0:e8:e3:86:b6:df:95:d4:49:87:26:38:ac: 74:1b:e1:9c:2c:84:d0:40:f6:46:78:35:a6:15:7c:19:98:36: 73:07:63:f1:fe:07:08:a2:98:dd:f6:d3:0b:97:f5:d3:97:5b: 9e:25:af:17 -----BEGIN CERTIFICATE----- MIIFwDCCBKigAwIBAgISAZt/8myaWcx2UghmXaFwh8OdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTgyMjMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MTA0YTQwODIxYzQxNzZjYzQyZTI1NWVmNmMxNzI3NDczYzNmMDBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4NkCwS40aBwmQ6MxKXg+Ywso+tWG LcbBYwOrTZhTQMy4PkxjhL5/TvwaroF+fpCsxTJy10IR02mdpNOYoOSmA9JL3JJ7 vi2C0Pm5hDopxo1IaCt3qTulcLk/bkdUaoyYRjpAbT8K06zAfVWjHxB+NdQjXUzq fxuiewUVLSPIw07bAJ7hSDTtjx8L8vj9+RunFOpku/GAj0BW7niFTRNbt97oP9N5 B4MfnjVdo/zuC+iIEfG6ENV9uZCjaCPGvwuSADjUG66Gl+dRswgg0VeMkoq5DUnU lDSiCW93ymvcwXA1FU1sinlY7k75vwRdL2Z9GCsUTNOH8pA6gKfQ2aKaCwIDAQAB o4ICzDCCAsgwHQYDVR0OBBYEFEEEpAghxBdsxC4lXvbBcnRzw/AKMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NhLzk2OTk2 Mi0xMmQzLTQxYjItYWI0My1iMjdkNmUyNzhlMTgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2EvOTY5OTYy LTEyZDMtNDFiMi1hYjQzLWIyN2Q2ZTI3OGUxOC8xL1FRU2tDQ0hFRjJ6RUxpVmU5 c0Z5ZEhQRDhBby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEwGCCsGAQUF BwEHAQH/BD0wOzAqBAIAATAkAwQFUndAAwQGVQ4AAwQGWfzAAwQDsEPoAwQCuVyE AwQFwgzgMA0EAgACMAcDBQAgARrgMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAiBG MA0GCSqGSIb3DQEBCwUAA4IBAQCeO/IGPpVKBeEtw76ULM94QpYhkV1FuWqbZfsa 4HaS0/dHE+XOU27++Y2ZQ3QmGBCTYi0CmGIZwjCrihx15tBEfxbxSFH7svZSZZLN Un0mtVdaBo0QYZJ3vSAjLn+EkdX6HeHNDsw3K3d3Yj020fHcNexgobZpPWIX2xs1 z+Uw1OEESafz6kKjFHl82fINRMlR8mWtecTDoZihgZWppvjGpBRVjiUKQoAvn16l nsUey0r2lfeg28Y3Sw21Wd025tUpvx+tYsLPaggrhvDo44a235XUSYcmOKx0G+Gc LITQQPZGeDWmFXwZmDZzB2Px/gcIopjd9tMLl/XTl1ueJa8X -----END CERTIFICATE-----Generated at Sun Jan 25 20:05:31 2026 by rpki-client