This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QXY9se0zSnxSgKuYVHQpFK4MTFI.cer File: QXY9se0zSnxSgKuYVHQpFK4MTFI.cer (raw, json) Hash identifier: OKZLlFOQXmwpe9BiJJuwYmRkVbmSCkH0/bw4i6ruHcg= Subject key identifier: 41:76:3D:B1:ED:33:4A:7C:52:80:AB:98:54:74:29:14:AE:0C:4C:52 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CECD0CF811B6B193C161B82F34C9029 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7b/efd094-4bc0-4ad0-aba3-49c95eeac812/1/QXY9se0zSnxSgKuYVHQpFK4MTFI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7b/efd094-4bc0-4ad0-aba3-49c95eeac812/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:17:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 39095 IP: 185.80.136.0/22 IP: 195.142.200.0/22 IP: 195.142.244.0/22 IP: 2a05:7d40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:d0:cf:81:1b:6b:19:3c:16:1b:82:f3:4c:90:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=41763db1ed334a7c5280ab9854742914ae0c4c52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e8:ec:68:3f:40:4c:e3:0c:7c:45:45:2d:8d: d0:5b:09:9e:e4:ab:02:c0:ef:8b:c2:86:a4:48:8e: 75:8f:02:3b:67:80:bb:f7:5b:88:7f:03:5a:7e:92: 05:42:01:56:b3:82:a8:cf:d5:9a:d0:dc:99:71:84: 19:bc:f1:e6:b8:ec:d2:4e:9f:a4:5e:0c:e8:76:52: ac:48:92:83:03:ec:66:f5:2d:eb:75:ff:92:50:c7: 64:20:9b:e9:2d:18:7f:26:d9:de:89:56:19:cb:19: 50:a1:e1:ac:6a:b5:eb:78:b2:47:06:e8:53:a5:a4: 19:be:20:bb:46:92:e4:41:ec:d5:44:95:78:27:5c: 4f:c6:13:53:a6:cf:57:1f:ed:33:af:7a:8e:1e:f7: 0e:d1:a9:cb:7c:d9:fd:0c:3b:f4:98:1d:a5:c4:69: 2b:11:c0:fc:37:63:4c:17:0a:2e:47:ce:cf:ea:95: a8:a5:71:f1:2e:59:2e:28:10:58:5a:15:c3:90:13: 0e:20:2d:8a:ab:c0:03:6a:51:2b:2c:41:f9:bd:45: df:74:d4:44:c1:68:b1:be:3d:3b:05:6e:d6:a3:66: 11:89:b9:b7:b8:77:72:ee:63:58:10:2d:19:4b:a0: 0d:22:0a:b8:7e:8e:44:a0:06:4a:83:16:2b:67:1c: 23:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:76:3D:B1:ED:33:4A:7C:52:80:AB:98:54:74:29:14:AE:0C:4C:52 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/efd094-4bc0-4ad0-aba3-49c95eeac812/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/efd094-4bc0-4ad0-aba3-49c95eeac812/1/QXY9se0zSnxSgKuYVHQpFK4MTFI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.80.136.0/22 195.142.200.0/22 195.142.244.0/22 IPv6: 2a05:7d40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 39095 Signature Algorithm: sha256WithRSAEncryption 99:93:02:d9:ab:a7:ed:ea:0e:70:40:64:a0:1f:95:fc:2c:a7: dc:eb:a7:cb:25:12:cd:17:84:fd:45:87:35:f9:cc:1b:12:8e: 0b:98:5a:67:40:b2:08:ce:cd:d4:ca:7d:5e:9e:b6:b5:89:98: a4:d6:ac:2d:7f:18:ac:ba:4e:da:8c:78:7c:48:00:88:48:73: 55:73:b7:23:8d:f9:0e:02:a8:5a:d5:6e:b4:84:75:a5:d2:34: b0:c3:79:cf:60:9d:5a:42:09:75:41:b5:8c:5e:03:d1:4c:a5: dc:61:83:67:8d:26:ea:b5:b6:2a:ce:f6:31:b0:7d:1b:78:e2: b8:00:47:41:fe:d1:5e:93:0e:42:db:84:a6:86:ce:37:f0:74: d1:33:c9:a8:2e:ec:ed:e2:20:77:01:31:00:04:c5:93:ab:4a: 4a:df:c0:41:08:bd:28:24:07:ec:e4:99:ff:9b:b4:bc:d7:a2: 5d:0f:52:67:8a:4e:c2:d5:d9:14:6c:fd:a6:ba:74:e1:79:f7: 04:21:66:2c:19:cd:19:5e:8a:3a:1b:78:fc:6f:c8:62:dd:32: 57:ea:33:a6:95:d2:b5:10:d1:06:e7:80:d3:1c:d0:0e:1a:e1: 7d:4c:b9:e0:54:86:2a:2f:5c:c0:e9:21:8a:91:9f:98:f3:eb: 24:8d:be:89 -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISAZt87NDPgRtrGTwWG4LzTJApMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MTc2M2RiMWVkMzM0YTdjNTI4MGFiOTg1NDc0MjkxNGFlMGM0YzUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+jsaD9ATOMMfEVFLY3QWwme5KsC wO+LwoakSI51jwI7Z4C791uIfwNafpIFQgFWs4Koz9Wa0NyZcYQZvPHmuOzSTp+k XgzodlKsSJKDA+xm9S3rdf+SUMdkIJvpLRh/JtneiVYZyxlQoeGsarXreLJHBuhT paQZviC7RpLkQezVRJV4J1xPxhNTps9XH+0zr3qOHvcO0anLfNn9DDv0mB2lxGkr EcD8N2NMFwouR87P6pWopXHxLlkuKBBYWhXDkBMOIC2Kq8ADalErLEH5vUXfdNRE wWixvj07BW7Wo2YRibm3uHdy7mNYEC0ZS6ANIgq4fo5EoAZKgxYrZxwjEwIDAQAB o4ICuzCCArcwHQYDVR0OBBYEFEF2PbHtM0p8UoCrmFR0KRSuDExSMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdiL2VmZDA5 NC00YmMwLTRhZDAtYWJhMy00OWM5NWVlYWM4MTIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2IvZWZkMDk0 LTRiYzAtNGFkMC1hYmEzLTQ5Yzk1ZWVhYzgxMi8xL1FYWTlzZTB6U254U2dLdVlW SFFwRks0TVRGSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQCuVCIAwQCw47IAwQCw470MA0EAgACMAcDBQMq BX1AMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCYtzANBgkqhkiG9w0BAQsFAAOC AQEAmZMC2aun7eoOcEBkoB+V/Cyn3OunyyUSzReE/UWHNfnMGxKOC5haZ0CyCM7N 1Mp9Xp62tYmYpNasLX8YrLpO2ox4fEgAiEhzVXO3I435DgKoWtVutIR1pdI0sMN5 z2CdWkIJdUG1jF4D0Uyl3GGDZ40m6rW2Ks72MbB9G3jiuABHQf7RXpMOQtuEpobO N/B00TPJqC7s7eIgdwExAATFk6tKSt/AQQi9KCQH7OSZ/5u0vNeiXQ9SZ4pOwtXZ FGz9prp04Xn3BCFmLBnNGV6KOht4/G/IYt0yV+ozppXStRDRBueA0xzQDhrhfUy5 4FSGKi9cwOkhipGfmPPrJI2+iQ== -----END CERTIFICATE-----Generated at Sun Jan 25 20:06:48 2026 by rpki-client