This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.cer File: Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.cer (raw, json) Hash identifier: tOYkwFyEXCxF3ONS1SyFj13Nr8Ah6clqCaBANbC1fqs= Subject key identifier: 42:1C:BA:58:99:20:BE:EB:B1:9B:C5:72:AE:6D:50:1B:8C:F6:BB:F0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C6707F01E092CC10719DCDBAD408AB Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:17:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 204023 AS: 214790 IP: 185.37.8.0/24 IP: 194.117.88.0/24 IP: 2a10:c940::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:70:7f:01:e0:92:cc:10:71:9d:cd:ba:d4:08:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=421cba589920beebb19bc572ae6d501b8cf6bbf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:2c:02:21:c3:91:74:64:3e:d0:ca:64:3e:f0: 5b:6a:f3:5a:98:18:06:e5:58:22:14:ed:54:67:7e: c1:e8:b7:43:8e:dc:59:be:a6:d3:3a:1d:b2:6a:5f: a3:29:30:c6:28:d0:8c:6d:0e:8e:49:af:16:f5:27: 2a:3c:4b:af:13:68:e5:1f:0a:56:bd:73:0c:32:ef: b2:4d:fe:c1:b1:6c:5f:03:9a:66:2d:8d:c4:68:b6: b1:dd:13:57:bc:9a:fb:4b:31:96:b1:07:b2:b2:3f: 8f:f3:3f:e8:48:e1:7a:1b:d5:8a:12:e2:d3:21:55: 01:b6:98:49:01:24:9d:5f:68:96:92:cb:5c:14:4e: 0a:3d:5a:92:8b:00:fc:19:2e:0f:75:8c:11:bd:d6: cf:5d:d2:6c:68:7f:66:69:97:7a:d8:dd:80:73:f7: 33:17:6c:2a:d0:7d:58:ac:80:cb:d4:b8:1d:aa:e4: 4d:52:5d:b5:70:1a:bb:86:1b:b8:d0:26:94:60:21: 25:47:87:89:33:8d:83:f7:e5:d4:cc:cb:66:9e:5a: 98:e3:73:89:4c:a0:cb:6b:b3:bc:57:bb:52:85:a4: e1:18:e5:8a:08:75:1d:09:09:cf:7d:e4:f0:3e:0b: 9a:e5:d6:a5:b8:a4:fe:8f:45:f2:fc:9f:e7:eb:2a: 81:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:1C:BA:58:99:20:BE:EB:B1:9B:C5:72:AE:6D:50:1B:8C:F6:BB:F0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.37.8.0/24 194.117.88.0/24 IPv6: 2a10:c940::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 204023 214790 Signature Algorithm: sha256WithRSAEncryption 2a:b0:57:e8:38:87:a8:81:2b:be:7c:81:ce:f3:2c:43:6f:38: de:28:e0:97:34:00:de:5b:31:55:ea:82:19:d7:8f:6f:de:1c: d4:92:ae:9a:e7:31:a8:1b:e0:05:3a:b5:05:31:8d:11:db:ee: e9:18:ef:e5:ba:fa:02:61:7b:50:b2:25:90:d4:96:88:0d:b7: 8b:fa:48:fa:c5:64:e3:cb:46:85:87:86:5c:92:81:31:eb:61: c0:82:2f:96:c7:53:98:51:c3:84:69:bb:40:2a:f4:7a:2b:59: 13:e9:ae:a0:c8:50:ee:f3:ba:98:af:13:35:d1:ea:aa:fe:3a: 46:7a:0f:14:10:d7:d8:8f:31:b3:75:5f:c0:18:2e:c3:58:e2: ec:c3:ed:88:92:16:af:f5:5c:d7:45:50:f8:dd:fc:02:28:53: 4f:ae:0f:93:c1:f7:c7:4e:d3:01:b6:44:4e:15:0d:0f:a6:2d: d7:5a:be:e4:d5:40:b2:1b:2a:24:5d:3c:72:d1:7a:f8:61:0f: 26:2f:c0:c1:e5:70:53:8d:6b:e4:74:18:5b:fc:77:c4:43:5d: c8:1b:c4:a8:5e:d2:30:56:a0:98:4f:a3:4d:da:3d:ee:75:72: 55:13:16:a1:da:e1:a0:b4:d4:5d:bf:95:f2:4a:d9:eb:02:a8: e5:9a:43:eb -----BEGIN CERTIFICATE----- MIIFrjCCBJagAwIBAgISAZt3xnB/AeCSzBBxnc261AirMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MjFjYmE1ODk5MjBiZWViYjE5YmM1NzJhZTZkNTAxYjhjZjZiYmYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzywCIcORdGQ+0MpkPvBbavNamBgG 5VgiFO1UZ37B6LdDjtxZvqbTOh2yal+jKTDGKNCMbQ6OSa8W9ScqPEuvE2jlHwpW vXMMMu+yTf7BsWxfA5pmLY3EaLax3RNXvJr7SzGWsQeysj+P8z/oSOF6G9WKEuLT IVUBtphJASSdX2iWkstcFE4KPVqSiwD8GS4PdYwRvdbPXdJsaH9maZd62N2Ac/cz F2wq0H1YrIDL1LgdquRNUl21cBq7hhu40CaUYCElR4eJM42D9+XUzMtmnlqY43OJ TKDLa7O8V7tShaThGOWKCHUdCQnPfeTwPgua5daluKT+j0Xy/J/n6yqBIQIDAQAB o4ICujCCArYwHQYDVR0OBBYEFEIculiZIL7rsZvFcq5tUBuM9rvwMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBmLzFjNDll Yi00ZGRhLTQ0ZWYtYmYwNC1lYzAwZTFhMjdjYzgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGYvMWM0OWVi LTRkZGEtNDRlZi1iZjA0LWVjMDBlMWEyN2NjOC8xL1FoeTZXSmtndnV1eG04Vnly bTFRRzR6MnVfQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQAuSUIAwQAwnVYMA0EAgACMAcDBQMqEMlAMB8G CCsGAQUFBwEIAQH/BBAwDqAMMAoCAwMc9wIDA0cGMA0GCSqGSIb3DQEBCwUAA4IB AQAqsFfoOIeogSu+fIHO8yxDbzjeKOCXNADeWzFV6oIZ149v3hzUkq6a5zGoG+AF OrUFMY0R2+7pGO/luvoCYXtQsiWQ1JaIDbeL+kj6xWTjy0aFh4ZckoEx62HAgi+W x1OYUcOEabtAKvR6K1kT6a6gyFDu87qYrxM10eqq/jpGeg8UENfYjzGzdV/AGC7D WOLsw+2Ikhav9VzXRVD43fwCKFNPrg+TwffHTtMBtkROFQ0Ppi3XWr7k1UCyGyok XTxy0Xr4YQ8mL8DB5XBTjWvkdBhb/HfEQ13IG8SoXtIwVqCYT6NN2j3udXJVExah 2uGgtNRdv5XyStnrAqjlmkPr -----END CERTIFICATE-----Generated at Mon Jan 26 00:18:20 2026 by rpki-client