This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QaHs1T08kyiV6pxQmSxxGHKO1rk.cer File: QaHs1T08kyiV6pxQmSxxGHKO1rk.cer (raw, json) Hash identifier: IDi+VP8+1Xt94zq46V8oT/XUKezpqohLZuyyfAv8Ywg= Subject key identifier: 41:A1:EC:D5:3D:3C:93:28:95:EA:9C:50:99:2C:71:18:72:8E:D6:B9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019ADA4B50B1C14DB5BA04171A7D3D7DD2B4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/03/5954e7-3e0c-4c3a-92d0-49c89ce28882/1/QaHs1T08kyiV6pxQmSxxGHKO1rk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/03/5954e7-3e0c-4c3a-92d0-49c89ce28882/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Mon 01 Dec 2025 14:22:40 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 209627 IP: 139.28.248.0/22 IP: 2a07:b540::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:da:4b:50:b1:c1:4d:b5:ba:04:17:1a:7d:3d:7d:d2:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 1 14:22:40 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=41a1ecd53d3c932895ea9c50992c7118728ed6b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:80:20:e5:cb:86:31:c3:06:f4:00:5e:ac:56: 3c:99:ea:dc:df:65:06:cb:bc:e3:6d:0d:36:fb:41: f0:de:85:8e:bb:53:76:25:d3:d5:29:02:a2:bc:63: 58:b1:f7:0d:14:cf:6b:20:a2:74:c4:cd:cc:a7:a9: ad:95:0d:a4:35:54:c4:d5:d1:76:e2:2c:41:49:af: 53:c9:38:2b:8e:fc:9b:87:d3:65:0e:a4:48:2e:9f: 3e:67:d6:fa:1a:db:d6:2c:7d:0b:9c:d5:00:ac:2e: 8f:94:0b:ad:0b:33:99:52:36:8a:06:70:83:d3:97: 8c:69:70:be:af:4b:67:c8:2e:6a:9f:28:4f:18:66: d6:6a:bb:6c:a6:7f:a8:38:f4:0d:54:61:5a:fc:52: 26:6d:7c:bf:b7:e2:5a:87:9e:0d:ff:9f:bb:2c:2d: a8:26:0f:36:6a:f8:69:80:c8:63:a5:51:60:52:41: e0:68:8f:b9:29:9a:01:4f:f8:2d:d0:76:77:11:95: d2:f1:d5:90:0a:b2:59:cc:0a:c1:c1:0d:5d:27:c6: 20:d9:15:05:69:f2:bc:dd:4c:e5:01:40:5b:5a:04: a3:18:65:8c:db:37:cf:69:67:ce:c0:89:ef:04:9d: 2a:e2:f2:a6:67:12:08:40:01:9b:36:31:8b:ad:89: a4:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:A1:EC:D5:3D:3C:93:28:95:EA:9C:50:99:2C:71:18:72:8E:D6:B9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5954e7-3e0c-4c3a-92d0-49c89ce28882/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5954e7-3e0c-4c3a-92d0-49c89ce28882/1/QaHs1T08kyiV6pxQmSxxGHKO1rk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.28.248.0/22 IPv6: 2a07:b540::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 209627 Signature Algorithm: sha256WithRSAEncryption a1:02:d6:26:b3:eb:4f:a3:46:90:30:b9:b4:b5:51:e5:78:bd: b9:5a:3f:b6:d9:cd:9a:5d:26:34:6e:6d:af:e7:60:a6:26:ec: 6d:5b:a6:05:25:07:48:cd:99:82:e8:91:af:53:6a:a7:28:91: 24:2a:e3:cb:63:d6:a7:d6:f5:1b:69:33:6e:22:64:9d:b2:8d: 9c:2d:97:dd:d9:32:f7:18:72:6b:05:85:01:3a:80:3b:a2:45: 5c:c0:b8:bf:3e:d9:ad:80:52:eb:a5:5a:3c:24:22:e0:41:7e: 57:da:44:07:fc:f4:4e:e9:08:cd:40:1a:0f:52:75:fb:b4:ff: 7a:b1:53:fa:b7:41:f7:da:46:2b:e4:05:8e:7b:05:5e:7a:54: e6:a9:ae:41:1c:d2:58:e9:8f:de:18:73:6d:e5:b5:a3:a1:62: 62:b7:f7:9a:ea:0c:11:79:9a:be:6d:76:3b:e9:a5:27:89:b4: 7a:f1:08:cc:94:ef:55:1f:bd:25:cb:01:1b:98:1d:b3:45:0c: 28:d8:b1:7a:2e:9b:1a:e3:98:7c:69:32:4c:b7:41:d2:d8:d2: 4a:39:e4:0c:f8:1a:0a:86:eb:c0:14:45:73:6c:d8:2e:75:70: f8:bd:21:09:f5:3a:e6:5f:6b:5a:6e:98:b8:27:55:f6:60:19: 7e:fd:ea:09 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZraS1CxwU21ugQXGn09fdK0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjAxMTQyMjQwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MWExZWNkNTNkM2M5MzI4OTVlYTljNTA5OTJjNzExODcyOGVkNmI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA64Ag5cuGMcMG9ABerFY8merc32UG y7zjbQ02+0Hw3oWOu1N2JdPVKQKivGNYsfcNFM9rIKJ0xM3Mp6mtlQ2kNVTE1dF2 4ixBSa9TyTgrjvybh9NlDqRILp8+Z9b6GtvWLH0LnNUArC6PlAutCzOZUjaKBnCD 05eMaXC+r0tnyC5qnyhPGGbWartspn+oOPQNVGFa/FImbXy/t+Jah54N/5+7LC2o Jg82avhpgMhjpVFgUkHgaI+5KZoBT/gt0HZ3EZXS8dWQCrJZzArBwQ1dJ8Yg2RUF afK83UzlAUBbWgSjGGWM2zfPaWfOwInvBJ0q4vKmZxIIQAGbNjGLrYmkTQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFEGh7NU9PJMoleqcUJkscRhyjta5MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzAzLzU5NTRl Ny0zZTBjLTRjM2EtOTJkMC00OWM4OWNlMjg4ODIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDMvNTk1NGU3 LTNlMGMtNGMzYS05MmQwLTQ5Yzg5Y2UyODg4Mi8xL1FhSHMxVDA4a3lpVjZweFFt U3h4R0hLTzFyay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCixz4MA0EAgACMAcDBQMqB7VAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMy2zANBgkqhkiG9w0BAQsFAAOCAQEAoQLWJrPrT6NG kDC5tLVR5Xi9uVo/ttnNml0mNG5tr+dgpibsbVumBSUHSM2ZguiRr1NqpyiRJCrj y2PWp9b1G2kzbiJknbKNnC2X3dky9xhyawWFATqAO6JFXMC4vz7ZrYBS66VaPCQi 4EF+V9pEB/z0TukIzUAaD1J1+7T/erFT+rdB99pGK+QFjnsFXnpU5qmuQRzSWOmP 3hhzbeW1o6FiYrf3muoMEXmavm12O+mlJ4m0evEIzJTvVR+9JcsBG5gds0UMKNix ei6bGuOYfGkyTLdB0tjSSjnkDPgaCobrwBRFc2zYLnVw+L0hCfU65l9rWm6YuCdV 9mAZfv3qCQ== -----END CERTIFICATE-----Generated at Sat Dec 6 05:54:23 2025 by rpki-client