This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QZYjDljezAy8-xX1aqZN7dHzifU.cer File: QZYjDljezAy8-xX1aqZN7dHzifU.cer (raw, json) Hash identifier: gZxRQvuclRvp3FMQp+D45jfDBJbFMa/PYuqbSEXd7Jo= Subject key identifier: 41:96:23:0E:58:DE:CC:0C:BC:FB:15:F5:6A:A6:4D:ED:D1:F3:89:F5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797F1845401DDB001896A39211F06761 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/QZYjDljezAy8-xX1aqZN7dHzifU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:51 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 45.132.3.0/24 IP: 89.106.204.0/24 IP: 146.19.193.0/24 IP: 195.128.162.0/23 IP: 195.128.178.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:18:45:40:1d:db:00:18:96:a3:92:11:f0:67:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4196230e58decc0cbcfb15f56aa64dedd1f389f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:6c:4b:3a:98:34:09:66:f7:68:a8:a0:58:55: be:0e:8b:0b:74:d0:7c:eb:dc:0d:1c:68:ef:c1:b6: b8:6f:d0:4c:5e:20:6c:3a:d1:57:34:c8:8a:9d:87: c3:85:1a:60:69:cb:a2:29:21:f4:07:4a:fc:94:36: ff:d2:14:e5:33:e0:f2:e4:ba:20:ba:58:3d:5a:d7: 8a:a6:28:74:ec:57:a1:27:c1:96:e5:34:9e:65:c1: d3:e4:b8:97:3c:c8:b3:00:1b:c6:28:87:e5:96:42: f4:6f:3e:45:24:95:18:5d:1f:52:02:2c:07:54:8a: 15:51:29:af:1c:75:22:1e:0c:39:43:de:7e:7d:c4: 67:fc:69:f3:15:44:80:8d:5b:ed:1a:81:a4:28:73: dc:5d:3d:cc:ce:c2:6b:97:a7:04:6e:0d:ef:3a:f1: 61:e6:ee:df:5a:a6:35:05:60:c4:8c:2b:a3:fa:68: 9b:9d:f0:18:7f:5e:a2:6f:10:54:bb:00:9d:4d:7d: 49:fc:3d:fd:22:9f:b6:61:90:95:54:11:33:17:2e: 6b:c5:58:6e:9f:a6:15:44:cc:12:a1:a4:c8:c6:6d: 04:09:1d:a3:9f:84:72:2d:c0:f4:0d:d8:41:94:65: f3:56:fb:30:6c:b7:e1:85:98:47:d5:ff:ff:82:5c: 17:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:96:23:0E:58:DE:CC:0C:BC:FB:15:F5:6A:A6:4D:ED:D1:F3:89:F5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/QZYjDljezAy8-xX1aqZN7dHzifU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.132.3.0/24 89.106.204.0/24 146.19.193.0/24 195.128.162.0/23 195.128.178.0/23 Signature Algorithm: sha256WithRSAEncryption 79:d8:01:e4:ee:05:a4:f3:7e:c0:bb:40:ec:9d:ed:f7:0b:93: 51:8c:25:83:bd:1f:e2:c1:26:86:8d:61:73:cc:a8:f7:1f:5b: ff:0d:71:d3:2b:56:af:19:82:c3:3e:ac:77:43:0c:8c:09:60: 5f:5c:c9:c2:24:f7:e0:18:08:b3:f5:11:6d:8a:30:3a:66:5e: fc:0f:78:5e:f9:c9:c3:c0:81:58:31:98:c3:3f:68:fc:06:69: 6e:2c:61:95:2e:2e:64:f6:2b:5e:e8:eb:91:02:2b:49:8f:c1: f4:b3:a6:f3:43:21:da:e0:f8:32:5e:ba:65:52:09:29:97:61: 6e:c4:86:a4:51:d7:c0:48:6c:2e:8a:d5:61:c2:cf:89:ae:28: 25:41:c0:de:29:93:b9:55:15:6e:8e:77:77:12:a5:be:c6:64: f6:b7:f8:ba:ac:d2:49:09:6d:de:2a:d7:4b:2a:a2:a0:51:81: 91:6d:58:fd:62:b2:f9:2c:59:c6:8e:b4:fc:11:86:03:15:13: ca:20:2d:c4:16:c9:1a:76:98:73:74:c8:b7:e1:b2:c7:ce:fe: fb:a5:ee:ca:3b:2d:c1:7d:fd:e0:90:00:67:3b:91:f6:dd:2a: db:00:63:b9:42:a8:ff:78:18:52:3a:ad:1a:5a:27:ca:64:2b: e0:ff:77:50 -----BEGIN CERTIFICATE----- MIIFkDCCBHigAwIBAgISAZt5fxhFQB3bABiWo5IR8GdhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MTk2MjMwZTU4ZGVjYzBjYmNmYjE1ZjU2YWE2NGRlZGQxZjM4OWY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2xLOpg0CWb3aKigWFW+DosLdNB8 69wNHGjvwba4b9BMXiBsOtFXNMiKnYfDhRpgacuiKSH0B0r8lDb/0hTlM+Dy5Log ulg9WteKpih07FehJ8GW5TSeZcHT5LiXPMizABvGKIfllkL0bz5FJJUYXR9SAiwH VIoVUSmvHHUiHgw5Q95+fcRn/GnzFUSAjVvtGoGkKHPcXT3MzsJrl6cEbg3vOvFh 5u7fWqY1BWDEjCuj+mibnfAYf16ibxBUuwCdTX1J/D39Ip+2YZCVVBEzFy5rxVhu n6YVRMwSoaTIxm0ECR2jn4RyLcD0DdhBlGXzVvswbLfhhZhH1f//glwXPQIDAQAB o4ICnDCCApgwHQYDVR0OBBYEFEGWIw5Y3swMvPsV9WqmTe3R84n1MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzcwL2RhOTZm NS0zZjMzLTQ2ZjktYTUxNC0yYmVmZmZkNTdmYjcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzAvZGE5NmY1 LTNmMzMtNDZmOS1hNTE0LTJiZWZmZmQ1N2ZiNy8xL1FaWWpEbGplekF5OC14WDFh cVpON2RIemlmVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDcGCCsGAQUF BwEHAQH/BCgwJjAkBAIAATAeAwQALYQDAwQAWWrMAwQAkhPBAwQBw4CiAwQBw4Cy MA0GCSqGSIb3DQEBCwUAA4IBAQB52AHk7gWk837Au0Dsne33C5NRjCWDvR/iwSaG jWFzzKj3H1v/DXHTK1avGYLDPqx3QwyMCWBfXMnCJPfgGAiz9RFtijA6Zl78D3he +cnDwIFYMZjDP2j8BmluLGGVLi5k9ite6OuRAitJj8H0s6bzQyHa4PgyXrplUgkp l2FuxIakUdfASGwuitVhws+JriglQcDeKZO5VRVujnd3EqW+xmT2t/i6rNJJCW3e KtdLKqKgUYGRbVj9YrL5LFnGjrT8EYYDFRPKIC3EFskadphzdMi34bLHzv77pe7K Oy3Bff3gkABnO5H23SrbAGO5Qqj/eBhSOq0aWifKZCvg/3dQ -----END CERTIFICATE-----Generated at Sun Jan 25 17:36:47 2026 by rpki-client