This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer File: QR3qU0Z7bHFD6yPShFaagYOy6C8.cer (raw, json) Hash identifier: rjvil8txVmW8pISwfF6/iYnV7OIHyL1rixUnUWLXRsQ= Subject key identifier: 41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B36487798D920ABC82145421E9C1120 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 5541 AS: 44679 AS: 60118 IP: 84.239.0.0/18 IP: 176.126.236.0/22 IP: 185.193.52.0/22 IP: 2a02:2160::/32 IP: 2a02:59e0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:48:77:98:d9:20:ab:c8:21:45:42:1e:9c:11:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=411dea53467b6c7143eb23d284569a8183b2e82f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:f0:44:8b:3d:93:d2:d6:8c:7b:3f:cd:d8:34: 90:47:30:9d:ea:4b:e7:3c:1a:28:31:3d:5b:69:50: a5:3a:e5:7d:55:c2:12:59:7b:d8:c8:c6:ab:06:63: 7e:88:aa:1c:4b:bd:d2:d7:c3:75:3e:cc:17:87:cc: ec:ab:84:67:ff:dc:74:ed:4c:ef:3a:e8:04:07:2c: 36:df:72:86:90:20:e3:ed:34:8c:29:52:0b:14:1d: e6:cb:e0:8e:d1:c7:4b:1b:82:13:44:28:0c:ec:85: 43:c6:60:03:79:72:f0:bb:60:f2:56:cd:d0:77:92: 86:a9:72:4d:c7:65:ca:00:91:84:07:9a:40:96:31: 22:1d:d4:fa:2a:bd:c6:7d:b4:72:73:15:30:e4:00: 8f:bd:65:92:ad:ab:0b:99:0d:fe:8d:e9:c1:e6:18: 92:f9:9b:98:3c:0d:ac:9f:d7:cb:a5:c6:37:54:24: 8f:0d:7b:1a:aa:c8:da:2b:d6:93:92:82:79:7a:1d: 9f:e7:3c:a9:10:7b:ad:40:32:51:9d:01:f2:5d:9f: 08:05:ac:2e:9e:d7:2e:b7:9c:b2:54:53:5f:e9:98: 0c:74:1a:d8:78:f3:d8:0b:f4:b6:c8:d2:71:18:66: 84:0f:5e:58:04:bc:06:10:af:9e:b4:81:fd:79:1c: e9:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.239.0.0/18 176.126.236.0/22 185.193.52.0/22 IPv6: 2a02:2160::/32 2a02:59e0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 5541 44679 60118 Signature Algorithm: sha256WithRSAEncryption 06:b7:58:4f:0e:93:06:74:a9:dc:f8:47:5b:3a:84:58:55:a2: 11:fb:b4:9c:cd:1a:eb:d7:c6:67:17:ed:6d:d5:5b:7f:8e:88: 1c:cd:4f:1d:b8:59:4a:99:9f:09:0b:91:da:27:81:05:61:29: 11:bb:16:ec:95:05:21:32:1f:2e:aa:c7:38:d5:fc:d5:72:e5: 8f:63:fe:19:5b:3c:f4:1b:12:83:44:4b:9c:78:24:66:65:96: db:da:95:0a:fb:ca:f2:d3:6d:f9:1f:87:a6:ee:29:ae:9c:10: b9:e1:ae:5d:93:f9:a2:80:10:3f:00:8e:4a:82:ad:53:f7:e0: ab:4b:65:49:27:bf:32:cd:f6:39:5e:e3:12:0a:c8:c0:a9:0b: 27:ff:e9:1b:65:cf:af:2a:73:9b:1f:42:88:56:c7:f0:3a:82: 49:30:f3:d7:af:00:28:11:8a:c1:59:2a:c1:88:2f:84:1d:55: 11:95:ab:39:65:aa:a5:04:90:1d:f1:28:9b:2f:74:5a:f6:1c: c9:cb:44:6a:3a:5e:29:67:2d:07:21:9c:0a:b2:5a:ef:75:22: a4:3d:5b:55:f9:a3:78:72:9a:a9:3d:0f:30:f2:df:87:c1:53: 72:1e:76:36:eb:3f:a8:00:1c:90:4a:16:ff:85:82:ae:2f:91: c4:c2:e7:6e -----BEGIN CERTIFICATE----- MIIFvzCCBKegAwIBAgISAZt7Nkh3mNkgq8ghRUIenBEgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MTFkZWE1MzQ2N2I2YzcxNDNlYjIzZDI4NDU2OWE4MTgzYjJlODJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/BEiz2T0taMez/N2DSQRzCd6kvn PBooMT1baVClOuV9VcISWXvYyMarBmN+iKocS73S18N1PswXh8zsq4Rn/9x07Uzv OugEByw233KGkCDj7TSMKVILFB3my+CO0cdLG4ITRCgM7IVDxmADeXLwu2DyVs3Q d5KGqXJNx2XKAJGEB5pAljEiHdT6Kr3GfbRycxUw5ACPvWWSrasLmQ3+jenB5hiS +ZuYPA2sn9fLpcY3VCSPDXsaqsjaK9aTkoJ5eh2f5zypEHutQDJRnQHyXZ8IBawu ntcut5yyVFNf6ZgMdBrYePPYC/S2yNJxGGaED15YBLwGEK+etIH9eRzpSQIDAQAB o4ICyzCCAscwHQYDVR0OBBYEFEEd6lNGe2xxQ+sj0oRWmoGDsugvMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2UxL2VhY2Nl NS1lNGRkLTRkOWYtOGVjMS00NzEyMGI5MDY5YjcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTEvZWFjY2U1 LWU0ZGQtNGQ5Zi04ZWMxLTQ3MTIwYjkwNjliNy8xL1FSM3FVMFo3YkhGRDZ5UFNo RmFhZ1lPeTZDOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEEGCCsGAQUF BwEHAQH/BDIwMDAYBAIAATASAwQGVO8AAwQCsH7sAwQCucE0MBQEAgACMA4DBQAq AiFgAwUDKgJZ4DAjBggrBgEFBQcBCAEB/wQUMBKgEDAOAgIVpQIDAK6HAgMA6tYw DQYJKoZIhvcNAQELBQADggEBAAa3WE8OkwZ0qdz4R1s6hFhVohH7tJzNGuvXxmcX 7W3VW3+OiBzNTx24WUqZnwkLkdongQVhKRG7FuyVBSEyHy6qxzjV/NVy5Y9j/hlb PPQbEoNES5x4JGZlltvalQr7yvLTbfkfh6buKa6cELnhrl2T+aKAED8AjkqCrVP3 4KtLZUknvzLN9jle4xIKyMCpCyf/6Rtlz68qc5sfQohWx/A6gkkw89evACgRisFZ KsGIL4QdVRGVqzllqqUEkB3xKJsvdFr2HMnLRGo6XilnLQchnAqyWu91IqQ9W1X5 o3hymqk9DzDy34fBU3IedjbrP6gAHJBKFv+Fgq4vkcTC524= -----END CERTIFICATE-----Generated at Sun Jan 25 10:33:51 2026 by rpki-client