This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.cer File: QgCYIoSgUNlB2-u9BLXQyRT2Nbc.cer (raw, json) Hash identifier: vpWFN0/sdAnjqtxuy/Shbu9+l2hCMDecPZEAY9z0ofk= Subject key identifier: 42:00:98:22:84:A0:50:D9:41:DB:EB:BD:04:B5:D0:C9:14:F6:35:B7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E38257218BEA0FD2AF764883C90F8D0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:27 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 200651 IP: 37.156.68.0/24 IP: 37.228.128.0/23 IP: 185.10.68.0/24 IP: 185.100.84.0/22 IP: 185.146.232.0/22 IP: 185.165.168.0/22 IP: 185.246.188.0/22 IP: 185.247.224.0/22 IP: 188.240.231.0/24 IP: 2a06:1700::/29 IP: 2a07:5380::/29 IP: 2a0a:2600::/29 IP: 2a0d:cf80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:25:72:18:be:a0:fd:2a:f7:64:88:3c:90:f8:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4200982284a050d941dbebbd04b5d0c914f635b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:75:7e:1b:1a:6e:0b:16:77:e4:ae:c0:62:89: b3:21:38:a1:8b:ca:42:bb:b0:b2:f1:2f:47:53:bd: cc:58:cf:9c:57:cb:ea:9f:c7:b4:79:6a:32:af:95: 33:e0:42:0a:ae:ca:14:f5:c1:9e:2e:10:24:82:d9: b2:4e:08:3e:2f:60:89:13:bc:7c:30:07:a4:dd:77: 92:7d:bd:1d:31:a3:2b:28:52:85:41:7c:6f:4e:c5: f1:86:37:f7:bb:fa:50:3c:ff:af:11:3f:7a:0f:99: 4a:48:24:74:19:7f:f6:52:d1:f7:50:6f:0d:39:d0: a5:ce:20:79:79:bb:c3:50:5b:67:a0:0b:63:c5:98: 36:03:77:e0:d0:31:0e:be:9a:24:50:0b:5f:e2:ea: c8:45:41:57:c7:a2:81:70:4d:6c:2d:d3:0d:4d:a4: 0a:c9:52:77:e1:8a:f8:53:f5:38:b3:a0:03:37:48: 5b:b3:82:0b:bf:7b:08:fe:9c:2a:60:a2:b9:44:e9: c4:85:8a:e7:f1:8d:4d:99:7e:0b:26:8d:79:3c:27: cf:63:e4:08:3e:7d:fa:a2:44:55:19:3e:18:99:47: e0:c5:15:81:34:c1:1a:d6:50:3f:e0:7a:e1:b1:65: 45:95:90:86:e3:28:0e:d2:3d:26:29:74:f9:71:66: fe:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:00:98:22:84:A0:50:D9:41:DB:EB:BD:04:B5:D0:C9:14:F6:35:B7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.156.68.0/24 37.228.128.0/23 185.10.68.0/24 185.100.84.0/22 185.146.232.0/22 185.165.168.0/22 185.246.188.0/22 185.247.224.0/22 188.240.231.0/24 IPv6: 2a06:1700::/29 2a07:5380::/29 2a0a:2600::/29 2a0d:cf80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 200651 Signature Algorithm: sha256WithRSAEncryption 2d:56:9d:f3:e6:d1:15:54:e4:c0:ef:43:ff:6e:dd:b8:36:b1: b3:72:43:22:49:d5:67:f0:d0:cd:db:53:a8:6a:2b:7d:0b:3e: 5c:ac:c6:39:40:08:eb:ca:e5:87:91:8c:e8:3e:39:29:29:d3: b8:d9:d1:78:05:61:04:56:a3:d2:73:9c:03:86:42:f7:b7:8f: 78:e2:05:95:73:58:5d:c6:06:6a:59:7e:af:71:1a:30:96:e9: ac:c6:b6:f0:8e:c2:d3:cc:a8:f7:da:36:18:69:79:ef:0c:26: 26:b3:b0:15:fd:81:43:4f:cc:57:76:93:97:8f:e0:4f:ad:f5: b1:d6:ff:8a:2e:9e:ee:34:57:b0:37:83:8a:2c:9a:a1:ae:f2: cb:17:8a:cd:3d:2e:a9:42:d2:ad:43:3d:44:9f:f6:3c:3c:9d: 8f:a8:38:33:53:4b:d0:d9:d2:0c:ec:07:87:89:b8:e8:72:6a: d6:26:ec:c3:8e:52:2e:62:d4:4e:77:90:f4:43:a8:c0:4d:f4: 3a:77:5c:11:51:21:ae:71:50:f7:3e:1e:2d:f2:f3:d1:d0:67: f1:73:bb:e9:58:67:d3:24:7c:9a:81:86:18:a3:1b:0d:30:aa: 47:1f:54:6a:60:ce:62:ae:f3:fc:63:81:18:f0:1f:88:b2:7a: cb:5a:2a:e7 -----BEGIN CERTIFICATE----- MIIF6DCCBNCgAwIBAgISAZt+OCVyGL6g/Sr3ZIg8kPjQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MjAwOTgyMjg0YTA1MGQ5NDFkYmViYmQwNGI1ZDBjOTE0ZjYzNWI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA33V+GxpuCxZ35K7AYomzITihi8pC u7Cy8S9HU73MWM+cV8vqn8e0eWoyr5Uz4EIKrsoU9cGeLhAkgtmyTgg+L2CJE7x8 MAek3XeSfb0dMaMrKFKFQXxvTsXxhjf3u/pQPP+vET96D5lKSCR0GX/2UtH3UG8N OdClziB5ebvDUFtnoAtjxZg2A3fg0DEOvpokUAtf4urIRUFXx6KBcE1sLdMNTaQK yVJ34Yr4U/U4s6ADN0hbs4ILv3sI/pwqYKK5ROnEhYrn8Y1NmX4LJo15PCfPY+QI Pn36okRVGT4YmUfgxRWBNMEa1lA/4HrhsWVFlZCG4ygO0j0mKXT5cWb+dQIDAQAB o4IC9DCCAvAwHQYDVR0OBBYEFEIAmCKEoFDZQdvrvQS10MkU9jW3MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2UxL2M2ODgx OS0yZjllLTQ0Y2UtODgxMC01MWRjMmIwOTZkZWYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTEvYzY4ODE5 LTJmOWUtNDRjZS04ODEwLTUxZGMyYjA5NmRlZi8xL1FnQ1lJb1NnVU5sQjItdTlC TFhReVJUMk5iYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMHMGCCsGAQUF BwEHAQH/BGQwYjA8BAIAATA2AwQAJZxEAwQBJeSAAwQAuQpEAwQCuWRUAwQCuZLo AwQCuaWoAwQCufa8AwQCuffgAwQAvPDnMCIEAgACMBwDBQMqBhcAAwUDKgdTgAMF AyoKJgADBQMqDc+AMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMPyzANBgkqhkiG 9w0BAQsFAAOCAQEALVad8+bRFVTkwO9D/27duDaxs3JDIknVZ/DQzdtTqGorfQs+ XKzGOUAI68rlh5GM6D45KSnTuNnReAVhBFaj0nOcA4ZC97ePeOIFlXNYXcYGall+ r3EaMJbprMa28I7C08yo99o2GGl57wwmJrOwFf2BQ0/MV3aTl4/gT631sdb/ii6e 7jRXsDeDiiyaoa7yyxeKzT0uqULSrUM9RJ/2PDydj6g4M1NL0NnSDOwHh4m46HJq 1ibsw45SLmLUTneQ9EOowE30OndcEVEhrnFQ9z4eLfLz0dBn8XO76Vhn0yR8moGG GKMbDTCqRx9UamDOYq7z/GOBGPAfiLJ6y1oq5w== -----END CERTIFICATE-----Generated at Sun Jan 25 18:24:03 2026 by rpki-client