This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QTe22qILXgYYYrb7meI2rCwuNPg.cer File: QTe22qILXgYYYrb7meI2rCwuNPg.cer (raw, json) Hash identifier: IRI4oAlLvrqMcpuvAgPYc/Ai/p+6mX9v4Vg38OAjads= Subject key identifier: 41:37:B6:DA:A2:0B:5E:06:18:62:B6:FB:99:E2:36:AC:2C:2E:34:F8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ED5BCE72FF5E86BC546D93DF97166D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/85/03fd42-6589-46ba-a673-0b02a4732479/1/QTe22qILXgYYYrb7meI2rCwuNPg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/85/03fd42-6589-46ba-a673-0b02a4732479/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:19:17 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 62.68.84.0/24 IP: 92.249.7.0/24 IP: 2a14:12c0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:5b:ce:72:ff:5e:86:bc:54:6d:93:df:97:16:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:19:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4137b6daa20b5e061862b6fb99e236ac2c2e34f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:96:2d:46:87:aa:aa:0f:ee:3f:84:a4:8f:b4: fa:53:58:26:61:54:1f:dd:ce:e7:b5:8d:0f:17:63: ce:7e:3b:af:28:d7:a9:13:94:44:90:15:66:53:68: 4e:74:5b:16:ef:de:88:51:ea:77:9e:d3:2c:db:0f: 38:57:60:83:a8:ec:05:e9:ef:9c:ee:36:51:aa:33: 40:a6:c8:0d:a1:53:ee:59:e6:17:dd:d6:34:84:ad: 18:4b:86:68:d4:8e:e3:41:41:bb:89:dc:2d:c7:42: ca:10:77:28:fb:9e:a7:87:5b:f7:be:5f:2e:1e:da: 8a:75:e5:a2:63:bf:64:7d:4d:e9:be:bd:91:37:40: 4a:1d:a3:07:3b:5f:c5:27:0a:c6:c0:71:f3:34:c3: d1:01:40:60:04:ed:83:1f:72:6b:ff:70:f3:c0:8b: 6c:08:e9:2d:cb:ba:be:bd:39:73:cc:32:5f:69:63: f2:f6:0f:b9:81:6b:17:6e:91:ac:84:aa:ee:dc:6c: 36:8c:44:9d:f5:02:0b:f0:06:96:c1:ad:82:35:49: ac:f8:c3:c7:ec:70:8a:88:69:91:68:c0:91:68:2f: 98:7f:ce:8d:4a:92:4d:03:4d:c2:c7:af:d4:25:e6: 04:1e:b4:c2:5a:85:62:80:eb:aa:5e:c2:6c:4c:7b: b9:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:37:B6:DA:A2:0B:5E:06:18:62:B6:FB:99:E2:36:AC:2C:2E:34:F8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/03fd42-6589-46ba-a673-0b02a4732479/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/03fd42-6589-46ba-a673-0b02a4732479/1/QTe22qILXgYYYrb7meI2rCwuNPg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.68.84.0/24 92.249.7.0/24 IPv6: 2a14:12c0::/32 Signature Algorithm: sha256WithRSAEncryption 41:66:b5:eb:13:b7:53:37:9f:31:bc:54:ae:46:26:88:f1:fb: 67:8f:19:17:52:6f:c3:02:3f:9c:b6:5b:7b:bb:32:43:09:30: 92:87:b7:b1:2e:e1:ce:a2:d8:31:a2:87:3a:e9:c3:c2:f7:35: d3:37:bb:4a:28:30:c7:8d:37:12:3f:1a:f5:28:7e:48:42:1b: 84:15:b6:ba:21:53:b3:29:54:50:b5:31:ac:86:1f:78:c5:b9: 42:74:30:ce:a6:93:89:f5:18:9f:4d:c3:0a:82:21:30:ad:a9: 10:68:ad:03:42:40:88:cd:c4:62:49:e4:db:a4:07:51:dd:52: 31:9c:68:30:8c:87:67:37:00:c4:33:4d:e9:af:27:9d:0f:bf: 36:9b:79:7c:e0:9c:65:bb:ef:bd:9d:8a:6e:fe:42:2a:cd:2a: 8a:6a:b0:f8:d1:3a:8c:64:36:8f:10:a7:4e:7a:ba:ba:ba:fb: 6b:e6:e6:a8:3b:af:98:ad:b9:a1:cf:e7:20:d9:17:2c:e5:92: c0:e2:da:9b:cd:68:fc:5c:c6:fd:5e:0b:14:e6:2d:44:0d:6b: c3:63:e4:78:94:c0:e0:7f:d0:08:f4:a3:9b:f2:18:7e:99:9c: 9d:f6:b5:a0:31:c7:98:ca:dc:e2:8f:b1:69:45:d6:40:5e:b6: 41:26:57:48 -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgISAZt57VvOcv9ehrxUbZPflxZtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MTM3YjZkYWEyMGI1ZTA2MTg2MmI2ZmI5OWUyMzZhYzJjMmUzNGY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJYtRoeqqg/uP4Skj7T6U1gmYVQf 3c7ntY0PF2POfjuvKNepE5REkBVmU2hOdFsW796IUep3ntMs2w84V2CDqOwF6e+c 7jZRqjNApsgNoVPuWeYX3dY0hK0YS4Zo1I7jQUG7idwtx0LKEHco+56nh1v3vl8u HtqKdeWiY79kfU3pvr2RN0BKHaMHO1/FJwrGwHHzNMPRAUBgBO2DH3Jr/3DzwIts COkty7q+vTlzzDJfaWPy9g+5gWsXbpGshKru3Gw2jESd9QIL8AaWwa2CNUms+MPH 7HCKiGmRaMCRaC+Yf86NSpJNA03Cx6/UJeYEHrTCWoVigOuqXsJsTHu5xwIDAQAB o4ICmTCCApUwHQYDVR0OBBYEFEE3ttqiC14GGGK2+5niNqwsLjT4MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg1LzAzZmQ0 Mi02NTg5LTQ2YmEtYTY3My0wYjAyYTQ3MzI0NzkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODUvMDNmZDQy LTY1ODktNDZiYS1hNjczLTBiMDJhNDczMjQ3OS8xL1FUZTIycUlMWGdZWVlyYjdt ZUkyckN3dU5QZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQAPkRUAwQAXPkHMA0EAgACMAcDBQAqFBLAMA0G CSqGSIb3DQEBCwUAA4IBAQBBZrXrE7dTN58xvFSuRiaI8ftnjxkXUm/DAj+ctlt7 uzJDCTCSh7exLuHOotgxooc66cPC9zXTN7tKKDDHjTcSPxr1KH5IQhuEFba6IVOz KVRQtTGshh94xblCdDDOppOJ9RifTcMKgiEwrakQaK0DQkCIzcRiSeTbpAdR3VIx nGgwjIdnNwDEM03pryedD782m3l84Jxlu++9nYpu/kIqzSqKarD40TqMZDaPEKdO erq6uvtr5uaoO6+Yrbmhz+cg2Rcs5ZLA4tqbzWj8XMb9XgsU5i1EDWvDY+R4lMDg f9AI9KOb8hh+mZyd9rWgMceYytzij7FpRdZAXrZBJldI -----END CERTIFICATE-----Generated at Mon Jan 26 00:17:34 2026 by rpki-client