This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QYJu6QJw_dFCOvgJByYAZxjfxs8.cer File: QYJu6QJw_dFCOvgJByYAZxjfxs8.cer (raw, json) Hash identifier: mDwCoFBl5cUvSvVQVauq5acyHOrB8By+q3JVlNf9+iI= Subject key identifier: 41:82:6E:E9:02:70:FD:D1:42:3A:F8:09:07:26:00:67:18:DF:C6:CF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA71A17B6C15BFCECF1CB315980B7DA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7b/7b7c36-698e-483a-b941-ee586d375a58/1/QYJu6QJw_dFCOvgJByYAZxjfxs8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7b/7b7c36-698e-483a-b941-ee586d375a58/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:20:39 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 194.180.160.0 -- 194.180.168.255 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:1a:17:b6:c1:5b:fc:ec:f1:cb:31:59:80:b7:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:20:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=41826ee90270fdd1423af8090726006718dfc6cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:64:a4:a1:df:fb:7c:7c:01:5c:48:f8:2a:c2: a3:8b:8c:28:16:2d:f5:83:91:45:01:08:0c:f0:8b: d9:6a:23:44:92:88:8b:79:70:c5:f9:a4:43:94:51: d9:85:d0:5a:83:e4:17:56:6e:3e:4e:1e:3c:8e:8a: b0:81:38:54:13:53:11:58:e5:9b:44:15:a8:c9:a6: 87:0b:f0:da:b7:6d:f9:0b:f1:32:f9:6c:76:07:dc: 3d:4f:49:12:07:1f:7e:89:e6:b3:3c:69:2c:3b:17: 54:e7:a2:52:1b:c6:6b:6a:37:fd:4b:17:0c:d8:72: f1:6a:cf:3f:1d:10:bf:47:10:7d:a7:94:83:b5:03: 8f:03:8c:e0:fe:21:d3:a3:1e:8b:28:e7:cb:e5:74: 15:13:82:7c:85:03:35:09:7e:c9:74:23:78:f4:bc: e0:ed:54:b6:ab:aa:74:3a:51:61:db:eb:83:39:13: e0:ba:a5:8f:3d:b6:48:4a:2d:55:ff:81:61:f4:d1: 0f:4b:68:b7:c6:79:1d:d9:37:cb:6c:59:67:5b:1a: eb:de:9f:cc:13:5e:39:f8:4b:54:f5:14:9d:fd:9c: 75:34:a9:02:15:67:6a:f6:62:ce:06:4c:fc:d6:8f: 66:a8:42:8b:55:9f:0d:20:a2:d4:cb:9d:a5:96:c8: d7:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:82:6E:E9:02:70:FD:D1:42:3A:F8:09:07:26:00:67:18:DF:C6:CF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/7b7c36-698e-483a-b941-ee586d375a58/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/7b7c36-698e-483a-b941-ee586d375a58/1/QYJu6QJw_dFCOvgJByYAZxjfxs8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.180.160.0-194.180.168.255 Signature Algorithm: sha256WithRSAEncryption 9a:58:47:fc:85:f7:73:c5:8d:12:75:7e:bf:f5:13:6a:e3:a5: 22:56:7f:8c:6a:58:af:93:ac:0c:5e:82:77:00:81:1f:82:54: 4c:fe:5d:c6:37:2e:17:e9:11:73:fd:fb:bd:5c:eb:36:75:06: 47:9f:7f:59:31:5f:38:bb:2d:98:99:ee:f2:0c:17:89:e9:1d: fc:e2:ee:51:aa:ab:af:e6:af:81:4d:99:30:61:99:88:c9:9c: 2a:65:46:c6:f8:c8:74:7c:cb:1c:f5:36:0b:2a:be:f4:b7:8b: f1:0f:5c:5b:24:5c:b7:8e:97:29:59:96:a8:c6:c8:a1:81:48: 9b:b4:df:18:27:60:b7:17:ef:fc:08:61:eb:34:84:44:74:13: 61:c9:a7:aa:53:6f:bf:ee:55:e5:96:30:d4:83:aa:21:cf:8d: 4f:7e:9d:8f:00:f0:4d:59:0d:86:0c:70:71:b5:86:d7:c3:b4: 90:05:71:e5:18:46:6c:58:e7:66:4c:29:1a:2b:d2:f9:54:3b: b5:3e:a5:17:b1:9f:77:53:75:3d:1f:f6:7d:45:a9:1f:f2:e3: a8:9a:fa:6c:8f:ea:a8:61:b4:56:1b:1d:2b:50:ce:e0:e5:94: ff:c1:b6:80:60:c4:df:f9:03:59:11:3c:a7:2c:b1:c0:b7:2e: 82:16:5b:76 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgISAZt+pxoXtsFb/OzxyzFZgLfaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIyMDM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MTgyNmVlOTAyNzBmZGQxNDIzYWY4MDkwNzI2MDA2NzE4ZGZjNmNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmSkod/7fHwBXEj4KsKji4woFi31 g5FFAQgM8IvZaiNEkoiLeXDF+aRDlFHZhdBag+QXVm4+Th48joqwgThUE1MRWOWb RBWoyaaHC/Dat235C/Ey+Wx2B9w9T0kSBx9+ieazPGksOxdU56JSG8Zrajf9SxcM 2HLxas8/HRC/RxB9p5SDtQOPA4zg/iHTox6LKOfL5XQVE4J8hQM1CX7JdCN49Lzg 7VS2q6p0OlFh2+uDORPguqWPPbZISi1V/4Fh9NEPS2i3xnkd2TfLbFlnWxrr3p/M E145+EtU9RSd/Zx1NKkCFWdq9mLOBkz81o9mqEKLVZ8NIKLUy52llsjXJwIDAQAB o4ICjDCCAogwHQYDVR0OBBYEFEGCbukCcP3RQjr4CQcmAGcY38bPMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdiLzdiN2Mz Ni02OThlLTQ4M2EtYjk0MS1lZTU4NmQzNzVhNTgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2IvN2I3YzM2 LTY5OGUtNDgzYS1iOTQxLWVlNTg2ZDM3NWE1OC8xL1FZSnU2UUp3X2RGQ092Z0pC eVlBWnhqZnhzOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCcGCCsGAQUF BwEHAQH/BBgwFjAUBAIAATAOMAwDBAXCtKADBADCtKgwDQYJKoZIhvcNAQELBQAD ggEBAJpYR/yF93PFjRJ1fr/1E2rjpSJWf4xqWK+TrAxegncAgR+CVEz+XcY3Lhfp EXP9+71c6zZ1Bkeff1kxXzi7LZiZ7vIMF4npHfzi7lGqq6/mr4FNmTBhmYjJnCpl Rsb4yHR8yxz1NgsqvvS3i/EPXFskXLeOlylZlqjGyKGBSJu03xgnYLcX7/wIYes0 hER0E2HJp6pTb7/uVeWWMNSDqiHPjU9+nY8A8E1ZDYYMcHG1htfDtJAFceUYRmxY 52ZMKRor0vlUO7U+pRexn3dTdT0f9n1FqR/y46ia+myP6qhhtFYbHStQzuDllP/B toBgxN/5A1kRPKcsscC3LoIWW3Y= -----END CERTIFICATE-----Generated at Sun Jan 25 22:53:16 2026 by rpki-client