This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QgzD80v9Q6xc32EDez0WyWfXMjc.cer File: QgzD80v9Q6xc32EDez0WyWfXMjc.cer (raw, json) Hash identifier: nhGP3oZFyjgga8dtFue+V6FxjTXEnlv453oOeXSsHKw= Subject key identifier: 42:0C:C3:F3:4B:FD:43:AC:5C:DF:61:03:7B:3D:16:C9:67:D7:32:37 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BEB05714FB1D3A684E526FEDA5D63639D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 23 Jan 2026 13:22:41 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 213981 IP: 185.38.175.0/24 IP: 212.104.142.0/24 IP: 2001:3a40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:eb:05:71:4f:b1:d3:a6:84:e5:26:fe:da:5d:63:63:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 23 13:22:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=420cc3f34bfd43ac5cdf61037b3d16c967d73237 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:27:22:0b:54:26:20:33:b3:bf:ba:7e:c9:0e: 97:fd:5a:d7:ed:62:80:ff:1b:49:f5:6a:cc:5d:13: c1:6b:8a:f9:82:ac:1a:16:10:8b:85:cc:a6:96:dc: 2b:ea:30:cf:3a:9f:1a:66:a3:cd:82:90:ca:4d:6f: 42:b6:39:68:4e:0e:b6:72:21:dd:dc:e8:c6:8c:b9: be:37:90:23:60:c2:d1:99:d4:9e:00:19:bd:5f:30: bf:b5:fc:f3:bd:bb:dc:4b:e7:2b:bd:8b:9a:70:c2: 28:7c:35:82:a5:e3:59:a1:a0:74:c0:db:b2:bd:39: cd:17:30:96:72:e8:92:e4:4c:3b:0a:ba:5b:b7:2e: a1:67:ef:25:6e:2f:21:77:53:44:df:c8:8f:1c:26: 28:6e:f1:2e:e9:36:2d:06:62:46:d7:fa:e2:15:57: 13:69:ac:cd:f5:13:24:9b:5f:50:16:dc:41:85:91: e5:83:e7:af:b1:4d:fb:a6:1f:e2:21:65:53:89:e0: 1b:8d:75:1d:3d:44:d8:fe:57:dd:e2:ef:d0:ae:53: b9:77:ed:a1:b6:92:bd:c1:18:b8:93:19:da:6c:07: 9e:38:9b:04:3e:c3:f2:69:de:df:f6:b6:70:13:da: 75:92:9b:73:a1:98:f9:23:63:3e:98:67:b5:6c:94: 02:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:0C:C3:F3:4B:FD:43:AC:5C:DF:61:03:7B:3D:16:C9:67:D7:32:37 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.38.175.0/24 212.104.142.0/24 IPv6: 2001:3a40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 213981 Signature Algorithm: sha256WithRSAEncryption 03:bf:ad:a5:93:9b:25:1f:ff:e1:bf:48:ba:cb:bd:7c:d5:d2: 53:1c:a1:77:80:56:ed:1c:41:c7:c6:bd:cf:7c:ca:f4:90:b1: cf:d4:4f:2f:82:df:06:ca:cb:b5:17:e0:a0:29:e2:d6:ef:fa: 48:5f:b9:93:7b:3e:d1:36:8d:21:2b:d0:23:0b:a0:39:f2:54: 98:2a:49:e2:12:e1:59:37:35:8f:01:39:10:f5:34:45:d9:7e: cb:c6:5d:69:c7:a7:e4:0e:9c:35:c8:2a:17:87:c6:ca:c7:a5: 61:64:61:5c:4e:8e:41:43:98:22:96:e5:ff:42:60:b6:e6:91: cb:30:1e:05:9c:e5:6a:54:18:e9:e0:6f:5c:cf:75:c1:8f:72: 75:24:e5:79:72:eb:0a:40:75:af:37:ed:04:75:d1:c9:12:a4: b1:d1:cf:79:1c:90:62:a2:69:d7:4e:44:ed:b8:71:de:2f:74: d6:5a:c2:b8:18:2e:82:ae:3e:5c:57:f0:b1:74:53:3c:f3:30: 30:4d:af:15:34:96:0e:1d:28:6f:e6:58:be:0e:b4:9f:cc:05: fd:0d:a2:79:a6:7c:dd:de:31:da:e5:84:da:9e:03:b6:e1:0b: f1:26:3f:6d:af:bc:8e:ad:14:71:ac:f5:c4:f2:fb:3b:c6:21: 33:1f:fa:77 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZvrBXFPsdOmhOUm/tpdY2OdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTIzMTMyMjQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MjBjYzNmMzRiZmQ0M2FjNWNkZjYxMDM3YjNkMTZjOTY3ZDczMjM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSciC1QmIDOzv7p+yQ6X/VrX7WKA /xtJ9WrMXRPBa4r5gqwaFhCLhcymltwr6jDPOp8aZqPNgpDKTW9CtjloTg62ciHd 3OjGjLm+N5AjYMLRmdSeABm9XzC/tfzzvbvcS+crvYuacMIofDWCpeNZoaB0wNuy vTnNFzCWcuiS5Ew7Crpbty6hZ+8lbi8hd1NE38iPHCYobvEu6TYtBmJG1/riFVcT aazN9RMkm19QFtxBhZHlg+evsU37ph/iIWVTieAbjXUdPUTY/lfd4u/QrlO5d+2h tpK9wRi4kxnabAeeOJsEPsPyad7f9rZwE9p1kptzoZj5I2M+mGe1bJQCeQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFEIMw/NL/UOsXN9hA3s9Fsln1zI3MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU0LzU2YzEx Ni05YjdjLTRhM2EtOTFmNi01OTNkMGJiNzhiZTYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTQvNTZjMTE2 LTliN2MtNGEzYS05MWY2LTU5M2QwYmI3OGJlNi8xL1FnekQ4MHY5UTZ4YzMyRURl ejBXeVdmWE1qYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQAuSavAwQA1GiOMA0EAgACMAcDBQMgATpAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwND3TANBgkqhkiG9w0BAQsFAAOCAQEAA7+t pZObJR//4b9Iusu9fNXSUxyhd4BW7RxBx8a9z3zK9JCxz9RPL4LfBsrLtRfgoCni 1u/6SF+5k3s+0TaNISvQIwugOfJUmCpJ4hLhWTc1jwE5EPU0Rdl+y8Zdacen5A6c NcgqF4fGyselYWRhXE6OQUOYIpbl/0JgtuaRyzAeBZzlalQY6eBvXM91wY9ydSTl eXLrCkB1rzftBHXRyRKksdHPeRyQYqJp105E7bhx3i901lrCuBgugq4+XFfwsXRT PPMwME2vFTSWDh0ob+ZYvg60n8wF/Q2ieaZ83d4x2uWE2p4DtuEL8SY/ba+8jq0U caz1xPL7O8YhMx/6dw== -----END CERTIFICATE-----Generated at Sun Jan 25 23:35:23 2026 by rpki-client