This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.cer File: QY34aPfZ6Y1P1B5tpZeig8kUG0Q.cer (raw, json) Hash identifier: EJSD92IZ2zVRSy3y6RNVWVwDZmnjc/0cCdxGjc8PwYs= Subject key identifier: 41:8D:F8:68:F7:D9:E9:8D:4F:D4:1E:6D:A5:97:A2:83:C9:14:1B:44 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA44FA028CD2CFDB72ED132AA40A6A7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/89/c6f86d-f795-419f-ad31-ee9c3452cbaf/1/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/89/c6f86d-f795-419f-ad31-ee9c3452cbaf/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:17:36 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 202409 IP: 185.1.166.0/23 IP: 2001:7f8:f2::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:4f:a0:28:cd:2c:fd:b7:2e:d1:32:aa:40:a6:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=418df868f7d9e98d4fd41e6da597a283c9141b44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:78:5d:e7:08:fb:fd:1d:20:a7:1c:c7:8d:e7: dc:38:fe:f2:dd:1d:5a:02:e7:c9:bf:5f:f1:16:85: 5b:63:bf:49:24:50:95:72:2b:b1:bb:7f:b7:f1:c2: cc:16:58:c1:db:4a:19:9a:20:b7:3c:80:d5:78:74: 1a:a0:39:1b:d6:38:f6:1f:80:82:39:36:ea:99:3a: 50:2a:26:83:c8:af:85:d3:72:f7:8c:97:68:0f:9b: 67:df:d7:d8:55:44:ad:36:02:80:87:33:6c:41:5d: 2c:96:6e:76:92:a6:17:f3:5e:b3:40:7e:7e:ed:f4: eb:59:2d:e3:65:ca:b9:c9:5c:af:59:44:d8:76:b0: db:40:d2:a5:0e:42:d8:3c:a3:8a:e9:81:b0:3a:a2: 67:86:82:49:11:71:66:20:81:9f:0e:ba:87:7b:04: 38:c5:19:6f:4d:a3:86:2b:e4:5e:38:31:fd:d8:cb: 36:57:4a:de:59:db:9d:1e:94:2c:fc:b5:e6:29:dc: 45:7a:be:43:bd:70:b3:4e:e2:5d:c1:f5:e5:81:08: 76:99:a4:2c:c3:88:4b:ec:4e:8d:6c:2e:d2:96:24: d1:d5:a4:d7:ed:9c:21:83:2e:ed:6f:66:aa:ea:49: bb:5c:16:b0:3b:0a:4b:cc:df:9d:cc:44:9f:a3:cc: 83:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:8D:F8:68:F7:D9:E9:8D:4F:D4:1E:6D:A5:97:A2:83:C9:14:1B:44 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c6f86d-f795-419f-ad31-ee9c3452cbaf/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c6f86d-f795-419f-ad31-ee9c3452cbaf/1/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.1.166.0/23 IPv6: 2001:7f8:f2::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 202409 Signature Algorithm: sha256WithRSAEncryption 62:8a:41:05:5e:99:75:fa:0d:58:68:0f:84:78:3e:61:44:49: 7b:dc:03:73:67:01:b5:2a:0d:0b:e1:7c:17:8b:14:39:36:5f: 30:25:83:01:f3:73:e7:dd:9d:26:52:dd:51:f6:b6:1a:6c:ff: 2e:90:21:95:17:67:31:be:04:aa:d3:a4:5b:6d:1b:3f:72:83: fe:ec:38:6b:ff:e5:5c:3a:94:29:fb:14:f2:e7:75:25:7b:fd: bc:14:b3:4c:3b:c5:4e:56:0d:d1:42:32:58:50:9f:62:bf:c6: 02:89:3e:c3:2e:48:48:12:c8:00:e2:16:37:3e:35:21:14:ca: 70:b6:85:12:53:1f:2c:ee:19:6b:9d:a9:dd:78:7a:f8:b4:2a: 58:57:b1:65:c3:96:26:25:bf:e4:05:85:31:a1:45:08:f7:10: 96:61:10:b1:2e:76:fe:1c:55:86:1c:a3:ac:c0:c8:7f:f2:bd: 6c:99:15:d9:01:fb:d4:0e:1b:54:3c:dd:86:2a:2b:2c:db:e6: 8f:f3:0d:54:6c:7f:de:20:a3:18:a1:ca:03:d3:4e:f6:61:0b: 5b:6f:6d:b7:2d:95:0c:2d:a4:62:8b:ae:27:14:b4:f7:61:21: 18:26:60:f4:b9:ff:22:3d:96:9b:2b:69:da:e4:e9:4b:d2:3a: f0:b2:af:0b -----BEGIN CERTIFICATE----- MIIFpTCCBI2gAwIBAgISAZt+pE+gKM0s/bcu0TKqQKanMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MThkZjg2OGY3ZDllOThkNGZkNDFlNmRhNTk3YTI4M2M5MTQxYjQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHhd5wj7/R0gpxzHjefcOP7y3R1a AufJv1/xFoVbY79JJFCVciuxu3+38cLMFljB20oZmiC3PIDVeHQaoDkb1jj2H4CC OTbqmTpQKiaDyK+F03L3jJdoD5tn39fYVUStNgKAhzNsQV0slm52kqYX816zQH5+ 7fTrWS3jZcq5yVyvWUTYdrDbQNKlDkLYPKOK6YGwOqJnhoJJEXFmIIGfDrqHewQ4 xRlvTaOGK+ReODH92Ms2V0reWdudHpQs/LXmKdxFer5DvXCzTuJdwfXlgQh2maQs w4hL7E6NbC7SliTR1aTX7Zwhgy7tb2aq6km7XBawOwpLzN+dzESfo8yDXwIDAQAB o4ICsTCCAq0wHQYDVR0OBBYEFEGN+Gj32emNT9QebaWXooPJFBtEMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg5L2M2Zjg2 ZC1mNzk1LTQxOWYtYWQzMS1lZTljMzQ1MmNiYWYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODkvYzZmODZk LWY3OTUtNDE5Zi1hZDMxLWVlOWMzNDUyY2JhZi8xL1FZMzRhUGZaNlkxUDFCNXRw WmVpZzhrVUcwUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQBuQGmMA8EAgACMAkDBwAgAQf4APIwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDAxapMA0GCSqGSIb3DQEBCwUAA4IBAQBiikEFXpl1 +g1YaA+EeD5hREl73ANzZwG1Kg0L4XwXixQ5Nl8wJYMB83Pn3Z0mUt1R9rYabP8u kCGVF2cxvgSq06RbbRs/coP+7Dhr/+VcOpQp+xTy53Ule/28FLNMO8VOVg3RQjJY UJ9iv8YCiT7DLkhIEsgA4hY3PjUhFMpwtoUSUx8s7hlrnandeHr4tCpYV7Flw5Ym Jb/kBYUxoUUI9xCWYRCxLnb+HFWGHKOswMh/8r1smRXZAfvUDhtUPN2GKiss2+aP 8w1UbH/eIKMYocoD0072YQtbb223LZUMLaRii64nFLT3YSEYJmD0uf8iPZabK2na 5OlL0jrwsq8L -----END CERTIFICATE-----Generated at Mon Jan 26 03:30:28 2026 by rpki-client