This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QXQcBdStftaQ5XHvXtD4dSLaR9c.cer File: QXQcBdStftaQ5XHvXtD4dSLaR9c.cer (raw, json) Hash identifier: O8ydqO4l/UahNm9nkLDKXmuCDlXarTMOC7D6r/AC8SQ= Subject key identifier: 41:74:1C:05:D4:AD:7E:D6:90:E5:71:EF:5E:D0:F8:75:22:DA:47:D7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B783493E5ABE4D4B8DD0C4F17A731D931 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:17:50 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 48471 IP: 91.211.12.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:93:e5:ab:e4:d4:b8:dd:0c:4f:17:a7:31:d9:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=41741c05d4ad7ed690e571ef5ed0f87522da47d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:ae:af:1d:a9:e3:c7:da:04:e9:f3:a4:a8:51: 94:18:b3:ce:c3:29:3c:56:99:c6:0d:c5:38:db:af: 77:ab:2b:85:e3:2b:c4:2c:31:05:75:29:8f:66:fb: e8:48:86:61:e4:fb:53:91:17:d6:07:61:33:0f:f1: d9:59:8e:79:58:bb:f6:82:5c:8b:a3:c3:45:4a:6d: ed:bf:07:b4:33:3c:b9:45:a0:b6:f1:77:74:6f:c3: 00:be:6c:0b:3d:c1:25:bf:8e:f1:6c:53:2a:52:ea: c6:3c:79:73:70:ec:c2:c4:82:3c:c3:ca:21:e3:01: 96:fd:fd:83:77:60:27:a9:e3:bc:95:7a:f2:c8:73: 34:f6:6c:b5:38:f5:1c:71:c7:76:96:01:43:7e:f4: 14:f6:c8:c7:0e:29:42:fb:10:9e:ac:93:a0:35:bc: 55:af:42:63:45:35:8a:d5:46:7e:ef:22:17:5f:f4: 8c:e7:25:a9:30:9b:d1:8f:fb:75:1a:97:3e:a8:62: 95:e2:5c:01:11:b7:88:3e:e6:75:2d:7e:0a:13:52: a0:f0:ee:6c:5a:89:16:1c:02:6d:b9:bf:d1:6a:b4: 7b:5d:97:8d:ae:17:3f:9b:b6:33:37:95:05:5b:73: 1f:62:07:7a:5d:e4:73:b0:97:6e:86:7b:e8:8e:04: 33:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:74:1C:05:D4:AD:7E:D6:90:E5:71:EF:5E:D0:F8:75:22:DA:47:D7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.211.12.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 48471 Signature Algorithm: sha256WithRSAEncryption 2d:33:23:a8:d4:bc:5a:c2:f2:ad:21:ae:f8:d4:35:65:f2:54: e7:2c:71:f8:b5:50:e9:40:5b:82:e1:32:30:d9:e6:81:2d:88: 50:66:ec:e2:fe:ed:e2:44:a9:f2:c0:37:57:73:f2:da:9c:af: 29:3e:be:de:ef:ca:7c:50:2a:ab:a7:d8:cd:ce:a6:15:94:6b: 64:f3:18:e2:a2:62:42:e9:32:90:7e:60:89:d5:6c:1e:92:64: cd:04:0a:52:b4:97:4d:9b:a2:3a:fd:8b:0a:e5:fb:1e:99:53: b7:3f:f9:5c:d1:e7:ae:13:b9:e1:c9:1b:2d:b3:62:1b:45:7c: d4:de:9c:d0:a2:c5:47:18:df:f7:b9:fd:6d:36:4c:45:c8:d9: 52:80:f3:5d:16:5d:79:c6:e2:a6:cd:70:df:78:84:d8:02:15: d3:a7:fe:de:3f:11:89:c5:83:7d:d8:84:25:43:f0:2c:3f:15: 75:e9:e2:10:f5:e1:1a:53:df:ca:a7:07:9e:36:f8:67:f2:f4: 2e:3c:f0:d7:79:56:b4:01:af:09:bb:7a:d4:ba:77:aa:8b:6d: 80:1e:b8:12:f7:29:d9:1a:29:7a:f4:ce:31:d2:29:9c:cf:75: f1:d2:4a:99:75:af:25:a7:91:2b:f9:3d:08:e4:10:5e:55:8a: 50:d6:b2:70 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt4NJPlq+TUuN0MTxenMdkxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MTc0MWMwNWQ0YWQ3ZWQ2OTBlNTcxZWY1ZWQwZjg3NTIyZGE0N2Q3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkq6vHanjx9oE6fOkqFGUGLPOwyk8 VpnGDcU42693qyuF4yvELDEFdSmPZvvoSIZh5PtTkRfWB2EzD/HZWY55WLv2glyL o8NFSm3tvwe0Mzy5RaC28Xd0b8MAvmwLPcElv47xbFMqUurGPHlzcOzCxII8w8oh 4wGW/f2Dd2AnqeO8lXryyHM09my1OPUcccd2lgFDfvQU9sjHDilC+xCerJOgNbxV r0JjRTWK1UZ+7yIXX/SM5yWpMJvRj/t1Gpc+qGKV4lwBEbeIPuZ1LX4KE1Kg8O5s WokWHAJtub/RarR7XZeNrhc/m7YzN5UFW3MfYgd6XeRzsJduhnvojgQz9wIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFEF0HAXUrX7WkOVx717Q+HUi2kfXMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I5L2EzMTFl YS0zMWIzLTRiYTQtYjUzMy00MTAzMjJjNzAyZmYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjkvYTMxMWVh LTMxYjMtNGJhNC1iNTMzLTQxMDMyMmM3MDJmZi8xL1FYUWNCZFN0ZnRhUTVYSHZY dEQ0ZFNMYVI5Yy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCW9MMMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwC9VzANBgkqhkiG9w0BAQsFAAOCAQEALTMjqNS8WsLyrSGu+NQ1ZfJU5yxx+LVQ 6UBbguEyMNnmgS2IUGbs4v7t4kSp8sA3V3Py2pyvKT6+3u/KfFAqq6fYzc6mFZRr ZPMY4qJiQukykH5gidVsHpJkzQQKUrSXTZuiOv2LCuX7HplTtz/5XNHnrhO54ckb LbNiG0V81N6c0KLFRxjf97n9bTZMRcjZUoDzXRZdecbips1w33iE2AIV06f+3j8R icWDfdiEJUPwLD8VdeniEPXhGlPfyqcHnjb4Z/L0Ljzw13lWtAGvCbt61Lp3qott gB64Evcp2RopevTOMdIpnM918dJKmXWvJaeRK/k9COQQXlWKUNaycA== -----END CERTIFICATE-----Generated at Sun Jan 25 21:37:35 2026 by rpki-client