This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.cer File: Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.cer (raw, json) Hash identifier: IDDqPNV6ZIPWu0rljG0lfwedtFuTchX/omPPtcoIl/M= Subject key identifier: 42:1C:BA:58:99:20:BE:EB:B1:9B:C5:72:AE:6D:50:1B:8C:F6:BB:F0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019A5424D04C25A7D487709B2BF3F322CB2D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Wed 05 Nov 2025 13:11:30 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 204023 AS: 214790 IP: 185.37.8.0/24 IP: 194.117.88.0/24 IP: 2a10:c940::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:54:24:d0:4c:25:a7:d4:87:70:9b:2b:f3:f3:22:cb:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Nov 5 13:11:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=421cba589920beebb19bc572ae6d501b8cf6bbf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:2c:02:21:c3:91:74:64:3e:d0:ca:64:3e:f0: 5b:6a:f3:5a:98:18:06:e5:58:22:14:ed:54:67:7e: c1:e8:b7:43:8e:dc:59:be:a6:d3:3a:1d:b2:6a:5f: a3:29:30:c6:28:d0:8c:6d:0e:8e:49:af:16:f5:27: 2a:3c:4b:af:13:68:e5:1f:0a:56:bd:73:0c:32:ef: b2:4d:fe:c1:b1:6c:5f:03:9a:66:2d:8d:c4:68:b6: b1:dd:13:57:bc:9a:fb:4b:31:96:b1:07:b2:b2:3f: 8f:f3:3f:e8:48:e1:7a:1b:d5:8a:12:e2:d3:21:55: 01:b6:98:49:01:24:9d:5f:68:96:92:cb:5c:14:4e: 0a:3d:5a:92:8b:00:fc:19:2e:0f:75:8c:11:bd:d6: cf:5d:d2:6c:68:7f:66:69:97:7a:d8:dd:80:73:f7: 33:17:6c:2a:d0:7d:58:ac:80:cb:d4:b8:1d:aa:e4: 4d:52:5d:b5:70:1a:bb:86:1b:b8:d0:26:94:60:21: 25:47:87:89:33:8d:83:f7:e5:d4:cc:cb:66:9e:5a: 98:e3:73:89:4c:a0:cb:6b:b3:bc:57:bb:52:85:a4: e1:18:e5:8a:08:75:1d:09:09:cf:7d:e4:f0:3e:0b: 9a:e5:d6:a5:b8:a4:fe:8f:45:f2:fc:9f:e7:eb:2a: 81:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:1C:BA:58:99:20:BE:EB:B1:9B:C5:72:AE:6D:50:1B:8C:F6:BB:F0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.37.8.0/24 194.117.88.0/24 IPv6: 2a10:c940::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 204023 214790 Signature Algorithm: sha256WithRSAEncryption 38:d5:39:a9:83:81:f0:6a:88:3f:df:f1:52:97:ae:62:d0:da: 88:63:3b:ff:de:43:50:d0:40:a3:a5:e3:ed:40:f2:8d:a3:dd: d1:68:2e:39:2e:3c:21:84:fb:9d:1c:3e:b5:ee:82:1d:d5:ac: 73:70:d8:e7:ea:f7:52:de:98:b6:7d:49:d8:ef:d0:a4:f2:b0: 3e:4b:cc:80:32:ba:d7:1d:00:50:5c:be:c8:70:11:33:f4:1c: 9e:ba:7d:dd:2f:d7:24:1e:01:68:8f:0a:4e:c3:74:63:b6:c8: 44:69:e4:c5:0d:39:f2:f0:bb:e0:27:c2:c6:03:1a:b5:a2:1a: 93:c6:48:46:c6:e0:8e:25:75:ef:6b:1e:64:32:78:4d:65:38: 06:cb:f9:15:e7:b8:38:26:b7:95:8a:2e:de:b7:a8:3e:b9:aa: 34:ba:d4:08:6a:45:a4:18:58:a3:54:48:7d:42:be:d4:fa:76: 4e:b1:57:2f:3c:58:e6:bb:fe:b1:64:4a:32:19:8e:45:48:0d: e2:b4:54:be:8d:a7:0f:cd:f5:74:8e:42:c1:f8:1b:11:f0:de: 5f:bd:23:0c:bd:02:c0:83:a3:2e:78:89:6b:a7:45:1c:67:96: 18:8c:8c:79:3e:9f:af:7b:09:e7:ed:0b:4a:7c:71:5f:e7:14: 97:53:f1:27 -----BEGIN CERTIFICATE----- MIIFrjCCBJagAwIBAgISAZpUJNBMJafUh3CbK/PzIsstMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMTA1MTMxMTMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MjFjYmE1ODk5MjBiZWViYjE5YmM1NzJhZTZkNTAxYjhjZjZiYmYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzywCIcORdGQ+0MpkPvBbavNamBgG 5VgiFO1UZ37B6LdDjtxZvqbTOh2yal+jKTDGKNCMbQ6OSa8W9ScqPEuvE2jlHwpW vXMMMu+yTf7BsWxfA5pmLY3EaLax3RNXvJr7SzGWsQeysj+P8z/oSOF6G9WKEuLT IVUBtphJASSdX2iWkstcFE4KPVqSiwD8GS4PdYwRvdbPXdJsaH9maZd62N2Ac/cz F2wq0H1YrIDL1LgdquRNUl21cBq7hhu40CaUYCElR4eJM42D9+XUzMtmnlqY43OJ TKDLa7O8V7tShaThGOWKCHUdCQnPfeTwPgua5daluKT+j0Xy/J/n6yqBIQIDAQAB o4ICujCCArYwHQYDVR0OBBYEFEIculiZIL7rsZvFcq5tUBuM9rvwMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBmLzFjNDll Yi00ZGRhLTQ0ZWYtYmYwNC1lYzAwZTFhMjdjYzgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGYvMWM0OWVi LTRkZGEtNDRlZi1iZjA0LWVjMDBlMWEyN2NjOC8xL1FoeTZXSmtndnV1eG04Vnly bTFRRzR6MnVfQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQAuSUIAwQAwnVYMA0EAgACMAcDBQMqEMlAMB8G CCsGAQUFBwEIAQH/BBAwDqAMMAoCAwMc9wIDA0cGMA0GCSqGSIb3DQEBCwUAA4IB AQA41Tmpg4Hwaog/3/FSl65i0NqIYzv/3kNQ0ECjpePtQPKNo93RaC45LjwhhPud HD617oId1axzcNjn6vdS3pi2fUnY79Ck8rA+S8yAMrrXHQBQXL7IcBEz9Byeun3d L9ckHgFojwpOw3RjtshEaeTFDTny8LvgJ8LGAxq1ohqTxkhGxuCOJXXvax5kMnhN ZTgGy/kV57g4JreVii7et6g+uao0utQIakWkGFijVEh9Qr7U+nZOsVcvPFjmu/6x ZEoyGY5FSA3itFS+jacPzfV0jkLB+BsR8N5fvSMMvQLAg6MueIlrp0UcZ5YYjIx5 Pp+vewnn7QtKfHFf5xSXU/En -----END CERTIFICATE-----Generated at Sat Dec 6 08:36:44 2025 by rpki-client